Privacy Policy

We are delighted that you are interested in our company and products. Protecting your personal data is an important concern to us. We would therefore like to use this privacy policy to inform you about the nature of personal data and how and for which purpose it is used by Culinario Mortale – Kauffmann, Bischoff & Otani GbR in accordance with the requirements of the General Data Protection Regulation (GDPR) when running the online shop located at “www.culinario-mortale.com” (hereafter referred to as “website” or “service”).

Personal data is always processed in accordance with the General Data Protection Regulation and in accordance with the national data protection regulations applicable to us. If using a product or service on our online shop should require personal data to be processed, this will be done either on a legal basis or by asking for your consent.

We have taken appropriate technical and organisational measures to protect your data and its confidentiality, availability and integrity. Furthermore, we have reviewed the service providers commissioned by us and contractually obliged them to ensure a comparably appropriate level of protection.

1. Definition of Terms

Our Privacy Policy uses the terms as defined in the General Data Protection Regulation (Article 4 GDPR).

2. Name and Address of the Controller

The body responsible for collecting, processing and using your personal dataThe body responsible for collecting, processing and using your personal data as defined by the General Data Protection Regulation is:

Bischoff, Kauffmann & Otani GbR
Hohenzollerndamm 152
14199 Berlin
Germany

Represented by the managing directors:
Florian Bischoff, Jens Kauffmann, Takeshi Otani

Tel.: +49 (0) 30 25 29 21 51 Email: support@culinario-mortale.comWebsite: www.culinario-mortale.com

3. Data protection officer

Bischoff, Kauffmann & Otani GbR has not appointed a data protection officer and is not legally obliged to do so. Since data protection is an important concern for us, you are welcome to contact the managing directors in matters of data protection, who will handle your request with priority and competence.

4. Category and Purpose of Data Processing

We process your personal data to inform you about our murder mystery games, to enable you to purchase our products, to provide you with assistance and support and, if requested, to contact you for other purposes. We also process your personal data to make our website available in the first place and to operate our services securely and efficiently. We process your personal data exclusively for these purposes.

Our website uses cookies and tracking technologies. Cookies are small text files that are stored on your device and that are used to reconstruct settings and other changes you have already made during your next visit.

We distinguish between essential and non-essential cookies. You have the possibility to block the setting of cookies in your browser and to delete already set cookies. In this case, it is possible that certain features on the site will no longer function or will only function to a limited extent.

Upon visiting our site, we give you the opportunity to set your privacy preferences and to consent to or decline the use of non-essential cookies, tracking technologies and data processing. Your preferences and consent are stored in a technically necessary cookie. If you wish to revoke your consent, you can simply delete the said cookie in your browser. When you reload the website, you will be asked again for your consent.

Alternatively, you can also manage your consent and privacy settings by clicking on the button below:

We store your personal data only until the purpose of storing them has been fulfilled or if this is required due to legal obligations. If the purpose of the storage is fulfilled or has ceased to exist and all legal retention periods have expired, we will delete the stored data.

4.1 Security and availability of our service

In order to make our website available and to enable basic functionality, it is technically necessary to process personal data. For example, upon connection of your device to the servers where our website is hosted, the IP address of your device, its device id, operating system and browser version are automatically processed to ensure a secure connection.

This data may also be sent to servers in third countries, depending on the location from which you access our website. Your data will only be sent to third countries that have been confirmed by the European Commission as having an adequate level of data protection and whose national legislation guarantees a level of protection of personal data comparable to that provided by EU law.

Essential cookies are set on the device you use to access our website to ensure the basic functionality of our services. The processed data is device-related, but it is possible that it can be used to establish a connection to you. The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

In order to guarantee the security and availability of our services we store IP address, device id, operating system and browser version used by your device, as well as the date and time of your visit, the website from which you access our services (so-called referrer), your internet service provider (ISP) and the pages you view on our website.

In order to ensure safe and uninterrupted operation of our services we use a Content Delivery Network (CDN). This is a network of servers that cache content and media in multiple locations around the world. When using our services, a connection is established between your device and the servers of our CDN.

The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

4.2 Google Analytics

If you have given your consent as described above, our website uses Google Analytics. This service enables us to track the use of our website by creating reports and thus to adapt our offer to the needs of our users.

Google Analytics sets its own cookies, which usually transfer the collected data to a server in the USA and process it there.

Data generated and processed by Google Analytics include the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access our website (referrer), your Internet Service Provider (ISP) and the pages you view, including the time spent on the pages.

We use the suffix _gat._anonymizeIp, which shortens your IP address by Google and makes it anonymous if the call to our website comes from an EU member state or from a state that is a signatory to the Agreement on the European Economic Area.

If you do not wish your data to be collected by Google Analytics, you will find a corresponding browser plug-in under the following link, with the help of which you can object to processing by Google: https://tools.google.com/dlpage/gaoptout Furthermore, you can decline your consent and block the setting of a cookie by Google Analytics as described above or withdraw your consent to tracking by Google Analytics at any time.

The legal basis for the processing is Art. 6 para. 1 a) GDPR (prior consent).

Google Analytics is a service operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

You can find more information about Google’s privacy policy athttps://policies.google.com/privacy?hl=en

4.3 Hosting (Vercel)

On our website we use Vercel, a cloud deployment platform. The service provider is the American company Vercel Inc, 340 S Lemon Ave #4133, Walnut, CA 91789.

Vercel processes your data in the United States, among other places. Please note that according to the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the United States. This may entail various risks for the legality and security of data processing.

As a basis for data processing with recipients based in third countries (outside the European Union) or for a data transfer to these countries, Vercel uses so-called Standard Contractual Clauses (Art. 46. para. 2 and 3 of the GDPR). Standard Contractual Clauses (SCC) are templates made available by the European Commission and aim to ensure that your data complies with European data protection standards, even if it is transferred to and stored in third countries. Through these clauses, Vercel commits to respect the European level of data protection when processing your relevant data, even if that data is stored, processed and managed in the United States. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

The Data Processing Addendum, which corresponds to the standard contractual clauses, is available at https://vercel.com/legal/Vercel_Inc_-_Data_Processing_Addendum.pdf.

For more information on the data processed by the use of Vercel, see the Privacy Policy at https://vercel.com/legal/privacy-policy.

4.4 Customer Support

You can contact us by e-mail for customer support. We will display a corresponding e-mail address in appropriate places on the pages of our online shop for this purpose. The personal data you send us when making an e-mail enquiry (e.g. name, e-mail address, telephone number) is used exclusively for the purpose of corresponding with you and will only be processed for the purpose for which you contacted us.

We also offer additional material for the products we sell. You have the option to download this material from our website. In order to make use of this option you will need a support code. This code is included with each of our products and is intended to ensure that only owners of our products can make use of this option. Deducing personal data about you based on the support code is neither possible nor intended.

The legal basis for the processing is Art. 6 para. 1 f) GDPR (legitimate interests of the controller).

5. Data Subject Rights

You can assert the following rights. Please send an e-mail to support@culinario-mortale.com for this purpose. Please note that we must establish and verify your identity in order for you to assert your rights.

5.1 Right to Object

You have the right to object to your data being processed at any time. This right applies prospectively. The data collected up to the point the right was asserted remains unaffected.

5.2 Right to Data Portability

You have the right to request for your data to be transferred from us to another location.

5.3 Right of Access

You have the right to request information about your data.

5.4 Right to Rectification, Erasure or Blocking

You have the right to have your data corrected, deleted or blocked. The latter applies in the event that the legal situation does not permit your data to be deleted.

5.5 Right of Restriction of Processing

You have the right to request that we restrict the processing of your data.

5.6 Right to Complain

You have the right to lodge a complaint with a supervisory authority about the processing of your data.

6. Changes to the Privacy Policy

As the data controller, we reserve the right to modify the privacy policy at any time with regard to applicable data protection regulations. The policy was last modified in January 2023.