Responsible for the processing of personal data on fln.gg and in the associated frontline services is:<\/p>\n
Frontline Network For data protection requests, you can zentralen Kontaktweg<\/a> use. Please enter there only the data that is necessary to process your request.<\/p>\n Depending on usage, we process technical access data, account and profile data, order and payment information, game or Discord identifiers, support and form data, comments and data required for game servers, server management, moderation and community functions.<\/p>\n The processing takes place in particular for the provision of the website, the game servers and the ordered services, for the processing of contracts, for the security of our systems, for the processing of inquiries and on the basis of consent, as far as such is necessary.<\/p>\n fln.gg is operated with a self-hosted installation of the open source software WordPress. WordPress manages pages, posts, media, user accounts, roles, permissions and comments in the site environment operated by Frontline Network. Depending on the function used, in particular user name, e-mail address, encrypted access data, roles, profile details, comment content, IP address, time, browser information, uploaded files and technical metadata can be stored.<\/p>\n For shop, customer account, shopping cart, checkout, orders and product-related accesses, we use WooCommerce as an extension of WordPress. The data processed is described in more detail in the sections on customer account and orders. Content and account data are stored only as long as this is necessary for the respective function, security or legal storage.<\/p>\n The mere use of the self-hosted WordPress software does not result in the automatic transmission of visitor information to WordPress.org. To the extent that extensions such as payment, statistical, security or convenience services establish connections with external providers, these are separate processing operations. They are based on the following sections and \u2013 where necessary \u2013 on your selection in Consent Management.<\/p>\n When the website is accessed, technically necessary data are processed. This can include IP address, date and time, accessed address, transmitted data volume, referrer, browser and operating system information as well as status and error messages.<\/p>\n This data is needed to deliver the website, analyze disruptions and ward off attacks or abuse. The legal basis is Art. 6 par. 1 lit. f GDPR. Our legitimate interest lies in safe and stable operation. Log data will only be retained for as long as is necessary for operation, error analysis and security; longer retention will only take place in the event of a specific security incident or due to legal obligations.<\/p>\n We use technically necessary cookies or similar storage mechanisms if they are necessary for registration, shopping cart, checkout, security, language settings or other expressly desired functions. For non-necessary services, consent is obtained via the consent management before activation.<\/p>\n The legal basis for accessing information in your device is \u00a7 25 TDDDG. The subsequent processing of personal data is based on the GDPR. You can change your selection at any time via \"Manage consent\" in the lower page area.<\/p>\n You can see which categories and services are currently released in Consent Management. A supplementary overview of cookies, storage periods and providers can also be found in our Cookie policy<\/a>. This overview is reviewed after technical changes; it does not replace the description of the processing operations in this data protection declaration.<\/p>\n The central user account is maintained via WordPress and WooCommerce. When registering and registering, we process in particular username, e-mail address, encrypted access information, technical login data as well as the information voluntarily or for an order in the account.<\/p>\n You can also register via Discord OAuth. Discord authenticates you on its platform and, depending on the released scope, sends us in particular your Discord ID, your username, your profile picture and, if applicable, your email address. The Discord login is connected to the same WooCommerce customer account; no second frontline account is created.<\/p>\n In addition, an Discord live widget is available on the website. Our web server retrieves the server widget API publicly provided by Discord at short intervals. The number of members visible online as well as publicly visible, currently occupied voice channels and the user names and presence states issued there by Discord are displayed. Discord technically limits the public membership list to 100 profiles. When simply viewing or opening our widget, your browser does not connect directly to the Discord widget or to Discord image servers; the live data is delivered via our own web server. Only the Voluntary Accession Link Opens The legal basis is Art. 6 par. 1 lit. b GDPR, as far as the data for the account or contract function are necessary, as well as art. 6 par. 1 lit. f GDPR for secure authentication. The use of Discord is voluntary. Discord may process data outside the EU or the EEA, for which the data protection information and transmission mechanisms of Discord apply.<\/p>\n When placing an order, we process the data required for the contract, billing and provision. This includes contact data, billing data, ordered products, price, payment status, transaction references and communication data. The complete payment data is generally processed by the payment service selected in the checkout; we receive the information required for assignment and status.<\/p>\n Depending on the payment method selected in the checkout, the required order, invoice and payment data are transmitted to the respective payment service. On fln.gg in particular PayPal<\/strong> sowie WooPayments<\/strong> are used. WooPayments is provided by WooCommerce in cooperation with Stripe<\/strong> provided and can \u2013 depending on availability, device and selection \u2013 offer card payments, Klarna, Apple Pay, Google Pay or Amazon Pay. The specific payment methods available are displayed in the checkout.<\/p>\n Some of the payment providers process data under their own data protection responsibility, in particular for payment processing, fraud prevention, identity and risk verification and for fulfilling their own legal obligations. PayPal can use protection mechanisms such as Google reCAPTCHA in the payment process. For these processings, the data protection information of the selected provider applies in addition. We only transmit the data required for the selected payment method and the status of the order.<\/p>\n Legal bases are kind. 6 par. 1 lit. b GDPR for contract and pre-contractual measures as well as art. 6 par. 1 lit. c GDPR for legal commercial and tax obligations. Payment and order data are stored in accordance with the statutory retention periods.<\/p>\n For parts of our gameserver infrastructure, we use the gameserver provider QONZER LTD<\/strong>, Brook House, Moss Grove, Kingswinford, England, DY6 9HS, United Kingdom. QONZER provides the technical server and network infrastructure on which selected frontline game servers are operated.<\/p>\n When connecting to or playing on such a server, in particular IP address, platform or game account ID, player name, server and connection data, times, technical events, game and administration protocols and moderation-relevant entries can be processed. The processing serves the connection setup, the game operation, the error analysis, the defense against attacks and abuse as well as the enforcement of the server rules. Legal bases are kind. 6 par. 1 lit. b GDPR, insofar as the processing is necessary for an agreed service, and art. 6 par. 1 lit. f GDPR for secure, stable and fair server operation.<\/p>\n In order to provide VIP access, we also process the order, the assigned game account ID, the selected game area, activation and expiration times as well as the technical provision status. This data is transmitted to the RCON systems activated for the product and the affected game servers, so that access can be set up, checked and removed after expiration. For Hell Let Loose and Hell Let Loose: Vietnam, separate RCON endpoints can be used.<\/p>\n QONZER is based in the United Kingdom. For transfers to the United Kingdom there is an adequacy decision of the European Commission. Insofar as another server location or a subcontractor outside the EU, the EEA or a recognised appropriate third country is used in individual cases, a transfer will only take place under the conditions of the type. 44 ff. GDPR. Further information provided by QONZER in its Data protection declaration<\/a> bereit.<\/p>\n For hosting, CRCON and managed service services, we process project and contact data, technical server data, configurations, roles, status information, support communication and \u2013 where necessary \u2013 logs of administrative processes. Access data will only be received via the secure routes provided and will only be used for the agreed purpose.<\/p>\n Command Node and similar management interfaces can display server states, roles, events, and technical information. Access is bound to login and authorization. The legal basis is Art. 6 par. 1 lit. b DSGVO for the provision of services as well as art. 6 par. 1 lit. f GDPR for security, traceability and abuse prevention.<\/p>\n For community profiles, teammate searches, comments, contact forms, reports and banishment requests, we process the information you submit as well as technically necessary metadata. This can include user and game names, platform IDs, servers, times, facts, messages and receipts.<\/p>\n For comments, in addition to the comment text, your assigned frontline account, display name, e-mail address, IP address, time and browser information can be stored. This information is used for the presentation, assignment, moderation and detection of spam and abuse.<\/p>\n For the display of profile pictures in comments, the Gravatar function integrated in WordPress is activated. A non-immediately readable string (hash) can be formed from the e-mail address belonging to the account and transmitted to the Gravatar service operated by Automattic in order to check whether a profile picture is stored there. After sharing a comment, this profile picture may appear publicly next to the comment. If no Gravatar is to be used, a profile picture can be omitted from the Gravatar account or another e-mail address can be used.<\/p>\n Moderation documents are not provided as a public gallery. They are only accessible to authorized persons and are used for purposes related to verification, community protection, objection and support. Please do not provide data that is not necessary for the specific process.<\/p>\n The legal basis is type, depending on the operation. 6 par. 1 lit. b GDPR, art. 6 par. 1 lit. f GDPR or a consent according to art. 6 par. 1 lit. a GDPR.<\/p>\n In addition to the technically required server protocols, we use the self-hosted extension WP Visitor Statistics (Real Time Traffic)<\/strong>. The collected data is stored in the WordPress database on our own website infrastructure; no external analysis service is loaded for this local evaluation.<\/p>\n In particular, complete IP address, a visit recognition generated by the system, WordPress user ID for registered users, accessed page, referrer, date and time, stay and session information, browser, operating system, device type, language, screen resolution, cookie support and approximate location information derived from the IP address, such as country, region or city, can be processed. We use this information to evaluate reach, page views, entry and reference pages as well as the technical use of our offer. Access to the evaluations is only given to correspondingly authorized administrators.<\/p>\n Insofar as information is stored or read out in the terminal device for the local range measurement or a recognizable visit recognition is used, the legal basis is your consent according to \u00a7 25 para. 1 TDDDG and art. 6 par. 1 lit. a GDPR. Independently, the technically required server protocols described in Section 4 may be based on type. 6 par. 1 lit. f GDPR is processed.<\/p>\n For the technical management of measurement and analysis tags we use Google Tag Manager<\/strong>. For the range measurement, Google Analytics 4<\/strong> with the measurement ID Depending on the service, device setting and your selection in consent management, in particular accessed pages, time, referrer, browser and device information, approximate location information, technical identifiers, session data and interactions with the website can be processed. After obtaining statistical consent, we also collect selected, data-saving events, such as opening an Discord link, intending to join a game server, starting the checkout or hosting request, and successfully sending a hosting request. No form contents or access data are transmitted as an analytics event.<\/p>\n Google Analytics uses first-party cookies in particular if consent is given Google Consent Mode is initially configured for Germany and other European regions with denied memory accesses. Without given consent, Google tags can still transmit consent status and cookieless measurement signals, according to Google. After consent, the released analytics or marketing functions, including the cookies and identifiers provided for this purpose, can be used. The Tag Manager serves as a technical playout and administration interface; within the container, only documented tags may be used that correspond to the specified categories and consent states.<\/p>\n The legal basis for non-necessary memory accesses and the subsequent processing is your consent according to \u00a7 25 Abs. 1 TDDDG and art. 6 par. 1 lit. a GDPR. You can change your selection at any time via \"Manage consent\". Further information can be found in the Data protection declaration of Google<\/a> and in the Data protection and security information about Google Analytics<\/a>.<\/p>\n In order to measure and assign advertising campaigns, Reddit for WooCommerce<\/strong> Connected to a Reddit Business account. After your marketing consent, the Reddit Pixel can Page views, product views, shopping cart promotions and completed purchases as well as product ID and name, quantity, order value, currency, event and order identifier, IP address, user agent, the Reddit pixel identifier can be recorded or transmitted. The legal basis for Reddit Pixel and conversion tracking is your consent according to \u00a7 25 Abs. 1 TDDDG and art. 6 par. 1 lit. a GDPR in the category \u201cMarketing\u201d. Without marketing consent, neither the pixel should be loaded nor conversion events transmitted to Reddit. You can revoke the consent at any time via \"Manage consent\". Further information can be found in the Privacy Policy of Reddit<\/a>.<\/p>\n Management tools used in the WordPress backend alone do not automatically lead to processing in the browser; the decisive factors are the services actually integrated in the frontend and the selection options displayed in the Consent Manager.<\/p>\n Our WordPress installation is designed for selected technical functions with Jetpack<\/strong> and services of Automattic<\/strong> connected. This may include in particular account protection, WordPress blocks, contact forms, technical interfaces and administrative functions. Technical website and configuration data, information about activated functions and, in the case of a deliberately used function, the necessary account, form or communication data can be transmitted to Automattic or synchronized with WordPress.com services.<\/p>\n Jetpack Stats and WooCommerce Analytics are disabled on fln.gg.<\/strong> Jetpack is therefore not used as an additional service for public range measurement. If you use a form provided via Jetpack, the information you entered will be processed to process the request. The legal basis is according to the function type. 6 par. 1 lit. b GDPR, art. 6 par. 1 lit. f GDPR or your consent. Further information can be found in Jetpack Privacy Center<\/a> and in the Data protection declaration of Automattic<\/a>.<\/p>\n As far as external service providers process personal data exclusively on our behalf and according to our instructions, we bind them as processors according to art. 28 GDPR and check whether a contract for order processing (AVV) is necessary. Such a contract shall in particular govern the subject matter and duration, type and purpose of the processing, data types and categories of persons concerned, instruction binding, confidentiality, technical and organisational protective measures, the use of further processors, support for data subject rights as well as the return or deletion of the data.<\/p>\n This applies in particular to hosting and infrastructure services, as far as the respective provider \u2013 i.e. QONZER for the game server infrastructure \u2013 can technically access personal data and processes it exclusively for Frontline Network. The contracts themselves are not published on the website, but are documented by Frontline Network and checked for timeliness.<\/p>\n Not every recipient is a processor. Payment service providers, platform operators or communication services may be jointly or individually responsible for certain processing operations. In these cases, the transfer depends on the relevant legal basis and the data protection information of the recipient; an APR according to art. 28 GDPR is then not automatically the appropriate contract instrument.<\/p>\n Data can only be obtained from locations that need it for operation or performance. This can include web hosting and infrastructure operators, QONZER as a game server provider, payment service providers such as PayPal, WooPayments and Stripe, the wallet or installment payment providers selected for a payment, email and support services, Discord, Google, Reddit, Automattic and technical service providers. Local visitor statistics are processed within our own WordPress infrastructure.<\/p>\n For recipients outside the EU or the EEA, a transfer will only take place if the legal requirements are met, such as an adequacy decision, suitable guarantees such as standard contractual clauses or a relevant exception.<\/p>\n We only store data for as long as it is necessary for the respective purpose. Account data will generally remain stored until the account is deleted. Contractual, invoice and payment data are kept in accordance with statutory storage obligations. Support, game server and moderation data will be checked after completion and deleted or anonymized as soon as there are no legitimate or legal reasons for further storage.<\/p>\n Individual data sets of the local visitor statistics are deleted or condensed in such a way that a personal reference is no longer necessary as soon as they are no longer needed for short-term use, error or security evaluations. Aggregated statistics can be stored longer. For Google Analytics, the retention periods for user and event data set in the property apply; for a standard property, two or fourteen months are technically adjustable. Cookie runtimes and currently recognized services are complementary in the Cookie policy<\/a> listed. For data that Reddit receives after a marketing consent, the retention rules established by Reddit also apply.<\/p>\n Backups can contain data for a limited additional period. They are not used for new purposes and are overwritten in the regular backup cycle.<\/p>\n Within the framework of the legal requirements, you have the right to access, rectification, deletion, restriction of processing, data portability and objection. You can revoke a given consent at any time with effect for the future.<\/p>\n For the exercise of your rights use the zentralen Kontaktweg<\/a>. In order for data not to be disclosed or deleted to unauthorized persons, appropriate identity verification may be necessary.<\/p>\n You have the right to complain to a data protection supervisory authority. For a responsible person based in Hamburg, the Hamburg Commissioner for Data Protection and Freedom of Information can be reached in particular. Further information can be found under datenschutz-hamburg.de<\/a>.<\/p>\n We use technical and organizational measures to protect data from loss, manipulation and unauthorized access. This includes encrypted transmission, role-based access, separate administration paths, logging of security-relevant operations and regular updates.<\/p>\n We update this privacy policy if services, processing or legal requirements change. The version published on this page with the above mentioned status applies.<\/p>\n
Christoph Paschen
Volksdorfer Damm 257b
22395 Hamburg
Deutschland<\/strong><\/p>\n2. What data we process<\/h2>\n
3. WordPress, WooCommerce and Website Content<\/h2>\n
4. Website access and server protocols<\/h2>\n
5. Cookies, Consent and similar technologies<\/h2>\n
6. Customer account, registration and Discord<\/h2>\n
discord.gg<\/code> in a new browser tab. The public visibility of this information is determined by the server widget settings of the frontline Discord.<\/p>\n7. Shop, orders and payment<\/h2>\n
8. QONZER, Gameserver, VIP and RCON<\/h2>\n
9. Hosting, CRCON, Command Node and Support<\/h2>\n
10. Community, Comments, Reports and Banishments<\/h2>\n
11. Range measurement, interaction and conversion tracking<\/h2>\n
11.1 Lokale Besucherstatistik<\/h3>\n
11.2 Google Tag Manager and Google Analytics 4<\/h3>\n
G-DZG1GLTQFK<\/code> involved. Google Analytics is displayed in the frontend via SEOPress; Google Site Kit is connected to the same property for management and evaluation and does not generate a second Analytics snippet. The Google Tag Manager is integrated via Site Kit. Provider for users in the European Economic Area Google Ireland Limited<\/strong>, Gordon House, Barrow Street, Dublin 4, Irland.<\/p>\n_ga<\/code> and _ga_<Container-ID><\/code>, to distinguish users or sessions. The default validity is up to two years, according to Google; browsers can limit the actual duration. For accesses from the EU, Switzerland or the United Kingdom, Google first uses the IP address to derive rough location data and discards it according to its own information before logging.<\/p>\n11.3 Reddit Ads, Pixels and Conversion API<\/h3>\n
redditstatic.com<\/code> are loaded. In addition, events can be transmitted on the server side via the Reddit Conversion API. For users in the European Economic Area Reddit Netherlands B.V.<\/strong>, Euro Business Center, Keizersgracht 62, 1015 CS Amsterdam, Netherlands, contact person for processing in connection with Reddit.<\/p>\n_rdt_uuid<\/code> and an existing Reddit click identifier, if any rdtCid<\/code>. This data is used for conversion measurement, campaign mapping, reaching and avoiding duplicate events. An e-mail address of registered users is not transferred to the pixel after the currently used plugin stand.<\/p>\n12. Jetpack and Automattic<\/h2>\n
13. Auftrags
14. Consignee and third country
15. Speicherdauer<\/h2>\n
16. Your rights<\/h2>\n
17. Beschwerderecht<\/h2>\n
18. Security<\/h2>\n
19 Amendments to this Data Protection