PRIVACY POLICY

1. Controller

The controller responsible for data processing on this website is:

SOKRATIV GmbH
Rüsbergstraße 50a
58456 Witten, Germany

Phone: +49 (0)2302 282850
Email: info@sokrativ.de

2. Scope and International Applicability

This competition is open to participants residing in multiple Member States of the European Union as well as Switzerland.

Personal data is processed in accordance with the General Data Protection Regulation

(EU) 2016/679 (GDPR).

Where participants reside outside Germany, the GDPR applies pursuant to Art. 3 GDPR (territorial scope).

Switzerland is recognized by the European Commission as providing an adequate level of data protection within the meaning of Art. 45 GDPR.

3. General Information

Personal data means any information relating to an identified or identifiable natural person.

We process personal data exclusively for the purposes described in this Privacy Policy and only to the extent necessary.

4. Hosting

This website is hosted by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

A data processing agreement pursuant to Art. 28 GDPR has been concluded.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).

5. Server Log Files

When accessing this website, the following data is automatically collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Host name

Purpose:

• Ensuring system security
• Fraud and abuse prevention
• Technical analysis

Legal basis: Art. 6(1)(f) GDPR.

Retention period: Maximum 30 days unless required for security investigations.

6. Competition – Processing of Personal Data

6.1 Categories of Data

The following personal data may be processed:

• First and last name
• Postal address
• Email address
• Telephone number (if provided)
• Date of participation
• IP address (fraud prevention)

6.2 Purpose of Processing

Data is processed exclusively for:

• Conducting and administering the competition
• Verifying eligibility
• Selecting winners
• Notifying winners
• Delivering prizes
• Preventing multiple or fraudulent entries
• Fulfilling legal documentation obligations

No marketing processing takes place unless separate consent has been given.

6.3 Legal Basis

Art. 6(1)(b) GDPR (performance of a contractual relationship arising from participation in the competition).

If separate consent is given (e.g., newsletter subscription), processing is based on Art. 6(1)(a) GDPR.

6.4 Cross-Border Processing Within the EU

Personal data may be processed within the European Union.

Where participants reside in other EU Member States, their data may be transferred to and processed in Germany.

Such transfers take place within the EU and are permitted under the GDPR without additional safeguards.

6.5 Retention Period

Participant data will be deleted no later than 3 months after completion of the competition.

Winner data may be retained for longer periods if required by statutory retention obligations.

IP addresses used for fraud prevention will be deleted after a maximum of 30 days.

7. Google Analytics

This website uses Google Analytics.

Provider in the EU:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland

Google Analytics uses cookies to analyze website usage.

IP anonymization is enabled.

Legal basis: Art. 6(1)(a) GDPR (consent via consent management tool).

Google Analytics will not be activated without user consent.

7.1 International Data Transfers (USA)

Data may be transferred to Google LLC, United States.

Google LLC is certified under the EU–US Data Privacy Framework pursuant to Art. 45 GDPR.

Additionally, transfers are based on Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

Despite these safeguards, access by US authorities cannot be entirely excluded.

Further information:
https://policies.google.com/privacy

8. Google reCAPTCHA

To prevent automated misuse, this website uses Google reCAPTCHA.

Provider: Google Ireland Limited.

Data processed may include:

• IP address
• Mouse movements
• Keyboard inputs
• Time spent on site
• Browser information

Legal basis: Art. 6(1)(a) GDPR (consent).

Without consent, the form will not be loaded.

Further information:
https://policies.google.com/privacy

9. Consent Management

A consent management tool is used to:

• Obtain user consent
• Document consent
• Allow withdrawal of consent

Consent may be withdrawn at any time with future effect.

10. No Automated Decision-Making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

11. Rights of Data Subjects

Participants residing in the European Union have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

Participants also have the right to lodge a complaint with a supervisory authority in their country of residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

12. Data Security

This website uses SSL/TLS encryption.

Appropriate technical and organizational measures are implemented to protect personal data against:

• Loss
• Destruction
• Unauthorized access
• Manipulation