Privacy

This privacy policy applies only to the QR-PONG website at qr-pong.com, operated by Tipsy-Tech Games GmbH. The site has no accounts, no forms, no payments and no analytics or advertising cookies.

The web app at app.qr-pong.com and the shop at shop.qr-pong.com each have their own privacy notices. Purchases on the shop are processed by Shopify; see also https://www.shopify.com/legal/privacy.

1. Data controller

The controller under the GDPR is:

Tipsy-Tech Games GmbH
Walter-Höfer-Weg 20
46242 Bottrop, Germany
Phone: +49 176 21757343
Email: [email protected]

We have not appointed a data protection officer. For requests, write to [email protected].

2. What we process on this website

Processing follows the GDPR, the German Federal Data Protection Act and the TDDDG. Pages are served over HTTPS (TLS).

a) Visiting a page
Our hosting provider records typical access data: date and time, IP address, browser and operating system, requested URL, referrer and user agent. Purpose: delivery, security, abuse prevention and diagnosing faults. Legal basis: Art. 6(1)(f) GDPR. Logs are kept only as long as needed for those purposes, then deleted or anonymised.

Instruction videos are loaded from Amazon S3 in Frankfurt (eu-central-1). Your browser contacts AWS to fetch the file. Fonts are bundled with the site at build time; the browser does not fetch them from Google when you visit.

b) Language
German and English are selected by the URL (/de, /en). A language switch may set a technically necessary cookie named NEXT_LOCALE (TDDDG § 25(2)). You can use the site without it by opening those paths directly.

c) Contact
If you email [email protected] or call us, we process the content and your contact details to reply. Legal basis: Art. 6(1)(b) GDPR where the message concerns a contract, otherwise Art. 6(1)(f) GDPR. We keep correspondence as long as the exchange and statutory duties require.

WhatsApp is optional. If you write to us there, Meta Platforms Ireland Limited processes the message under WhatsApp’s terms. Email is enough. Further information: https://www.whatsapp.com/legal/privacy-policy-eea.

d) Outbound links
Links to the app, the shop, Discord, Instagram and TikTok are ordinary links. We do not embed their trackers. Once you leave this site, the other operator’s privacy policy applies.

3. Legal basis, recipients, third countries

• Art. 6(1)(b) GDPR – answering contract-related contact
• Art. 6(1)(f) GDPR – operating a secure website, logs, abuse prevention
• Art. 6(1)(c) GDPR – statutory retention where it applies
• TDDDG § 25(2) – strictly necessary language cookie

Recipients are our hosting provider, AWS for the videos, and Meta if you contact us via WhatsApp. We do not sell data or disclose it for advertising.

Video files are stored in the EU (AWS eu-central-1). Some providers are based in, or may access data from, the United States (including AWS’s parent and, if you use it, WhatsApp/Meta). Where required we rely on an adequacy decision (EU–US Data Privacy Framework) and/or EU standard contractual clauses.

4. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). Where we rely on legitimate interests, you may object on grounds relating to your particular situation.

You may lodge a complaint with a supervisory authority, in particular the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), https://www.ldi.nrw.de.

5. Cookies

Under TDDDG § 25 we access your device only where it is strictly necessary. This website does not use third-party marketing, analytics or advertising cookies, so there is no consent banner. The only cookie we may set is NEXT_LOCALE. Cookies on shop.qr-pong.com and in the app are outside this policy.

6. Security and changes

We implement appropriate technical and organisational measures to protect personal data. We may update this policy when the law or this website changes. The current version is always the one on this page.