Privacy policy
Last updated: 20 October 2026
1. Controller
GainPlay · Owner Manuel Ballo
Am Rahmer Bach 58
47269 Duisburg, Germany
Email: mail@gainplay.de
Phone: +49 160 5554845
This policy explains how personal data is processed when you visit www.gainplay.de or contact GainPlay.
2. Hosting and technical delivery
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Your IP address is technically processed when you access the website so that the requested content can be delivered to your device. IONOS also processes technical access information, including the requested pages or files, time of access, browser type and version, operating system, device type and, where applicable, the previously visited page (referrer).
According to IONOS, IP addresses used for visitor analysis are anonymised immediately. IONOS states that webhosting visitor data is retained for eight weeks. This processing supports secure and stable delivery and fault analysis. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the reliable operation of our website. IONOS processes hosting data on our behalf. Provider information: IONOS webhosting privacy information.
3. Visitor statistics with IONOS WebAnalytics
We use IONOS WebAnalytics server-side visitor analysis to understand how our pages are used and improve their technology and content. IONOS access information is analysed statistically, including page views, access times, referrers, browsers, operating systems, device types and approximate origin derived from anonymised IP addresses. We do not identify individual people or create cross-website user profiles.
This website does not embed an additional analytics pixel. IONOS states that WebAnalytics does not use cookies and that IP addresses are anonymised immediately after transmission. According to the provider, data for the last twelve months is available in the analytics interface. The legal basis for processing before anonymisation is Article 6(1)(f) GDPR. Our legitimate interest is improving our website to meet visitors’ needs. Further information: Data processing by WebAnalytics.
4. Contact form, email and telephone
When you contact us, we process the information you provide and the content of your enquiry. Name, email address and message are required in the contact form. The information is transmitted to the web server over an encrypted HTTPS connection and then forwarded to our inbox by email. The form system does not create a separate message database; enquiries are handled in our email inbox.
Processing concerning an order or pre-contractual enquiry is based on Article 6(1)(b) GDPR. For other enquiries, we rely on Article 6(1)(f) GDPR; our legitimate interest is responding to your message. Data is shared only where necessary to handle your enquiry, in particular with our hosting and email provider IONOS.
We delete general contact enquiries once they have been dealt with and retention is no longer necessary. Where statutory retention obligations apply, or retention is necessary to establish, exercise or defend legal claims, the relevant data is retained for the applicable period and then deleted.
5. Protecting the contact form against abuse
To protect against automated or repeated messages, we check a hidden form field and a time-limited security token. To limit repeated requests, we generate a time-dependent checksum from the technically transmitted IP address and a secret server-side key. Only this checksum, a timestamp and a checksum of the token used are stored, rather than the IP address in plain text or the message content.
Entries are no longer considered for rate limiting after one hour and are cleared when the next form submission is processed. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting our inbox and keeping the form available. No external CAPTCHA provider is used.
6. Cookies and local resources
The website we provide does not set cookies or store identifiers in your browser’s local storage. Images, fonts and scripts are loaded from our own webspace. No external font services, embedded videos or social media plug-ins are loaded.
7. Links to Amazon
Product and store links lead to Amazon. These links do not establish a connection to Amazon merely when you visit our website. You leave our website only when you follow a link. Data processing on Amazon is governed by its privacy notices. Purchases, orders and payments are handled there; our website does not have its own checkout.
8. Your rights
Subject to the applicable legal conditions, you have the right to access your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
Right to object: Where we process data under Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. To do so, contact mail@gainplay.de.
You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for our location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.
9. Provision of data and automated decisions
Providing your contact details is voluntary. Without a reachable email address and the content of your enquiry, we cannot meaningfully process a message sent through the form. We do not carry out automated decisions producing legal or similarly significant effects, or profiling.