Privacy Policy

We actively avoid collecting data wherever possible. The best way to secure data is to not have it in the first place. If you have any questions, concerns, or actions for us to take after reading this privacy policy, you can send us an e-mail to dpo@something.pink or an actual letter to:

Something Pink GmbH
Webgasse 43/3d
1060 Wien
Austria

When you visit our website

If you open something.pink in your browser, we do not store any of your data. Your request details are only used to serve the files you request from our server (see GDPR, Art. 6 (1b)). No cookies, no analytics. Logging is disabled on our web server. If we ever change this, we will update this privacy policy accordingly.

When you send us an e-mail

We offer a public e-mail address you may use to send us business, legal, and other inquiries. We process the contents of your e-mail in accordance with GDPR, Art. 6 (1f), legitimate interests, as well as GDPR, Art. 6 (1b and 1c), to fulfill contractual or legal obligations. This includes the contents of your e-mail as well as server logs. In order to resolve technical issues, logs are stored for 30 days. The e-mails themselves are stored only as long as necessary to process your request and any potential follow-up, or as long as required by law. Notably, we are legally obliged to keep any documentation about legal, financial, contractual, and similar activities for 7 years (Bundesabgabenordnung, §132 lit. 1). Additionally, we maintain a spam filter, which is trained on any e-mail sent to us and ensures that the data are anonymized and not recoverable. These data are not sent to any third parties and serve the sole purpose of ensuring the operability of our mail server.

When we deal with financial transactions

If we send you an invoice or receive one from you, or deal with similar financial transactions, the details of the invoice or transaction including your contact details, may be shared with our bank, lawyers, as well as our tax advisors (see GDPR, Art. 6 (1b and 1c)). These data must be retained for a period of minimum seven years to comply with the law.

When you play our games

Our games are sold on third party platforms, which means when you are playing using one of these platforms, you have already agreed to their respective privacy policy. As of now, we do not have any analytics or account system within our games and do not host multiplayer servers. If that changes, we will update this privacy policy.

One exception to the above paragraph is if you sign up or receive an invitation to a private or public beta, at which point you will have to provide explicit consent for our processing of your data (see GDPR, Art. 6 (1a)). These betas are held for purposes of game stability, network testing, and subsequent bug fixing, and the data collected, which may be your IP, name, e-mail, or other data you provide or are made aware of for each individual beta, will be deleted 30 days after the beta period ends. You have the right to withdraw consent at any time during the beta, at which point you will lose access and no additional data will be collected.

When you watch our YouTube videos

Our YouTube videos are not embedded into the website and are available from youtube.com. Their use is governed by the YouTube privacy policy. You can change your privacy settings when opening YouTube for the first time, or later under the ads settings. Please contact the YouTube Data Protection Officer with your questions regarding YouTube as we do not have access to or control over the details you provide to YouTube beyond what you make publicly available.

Your Rights under GDPR

If you are an EU resident, you have the following rights in accordance with the GDPR:

• Right to information and portability (upon your request and identity verification, we inform you which personal data we may hold about you as well as provide a machine-readable copy of them, free of charge — see GDPR, Art. 15 and Art. 20)
• Right to rectification (you can let us know if data we may hold are no longer accurate and you have a right to get them rectified — see GDPR, Art. 16)
• Right to erasure (we already rigidly delete any data that we do not have to keep for legal reasons or legitimate interests, but you may request deletion of other personal data, such as might be the case with e-mails you sent us if they have not been deleted yet — see GDPR, Art. 17)
• Right to restriction of processing (as an alternative to requesting a deletion or during data rectification, you may want us to keep your data, but limit their processing for a period of time — see GDPR, Art. 18)
• Right to object (you may object to the processing of your personal data we may hold on the basis of legitimate interests, such as is the case with e-mails and mail server logs that may not have been deleted yet — see GDPR, Art. 21)
• Right to lodge a complaint (apart from contacting us as outlined above, you may also file a complaint with the data protection authority in your Member State — see GDPR, Art. 77)

This document has last been updated on Apr 20, 2023.