Privacy policy
Which data we process on vinmark.de, for what purpose and for how long.
1. Controller
Cognisance UG (haftungsbeschränkt)
Krummstraße 3
40789 Monheim am Rhein, Germany
Phone: +49 (0) 2173 2037069
Email: [email protected]
2. Hosting and delivery of the website
This website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Nuremberg (Germany). Delivery passes through a content delivery and security network of Cloudflare Germany GmbH, which speeds up access and protects against attacks. Both providers act for us as processors under Art. 28 GDPR.
When you open the website, the servers automatically process the data your browser sends: IP address, date and time, page requested, amount of data transferred, status code, referrer URL and browser and operating system identifiers. The legal basis is our legitimate interest in stable and secure operation under Art. 6 (1) (f) GDPR. We delete these logs after seven days at the latest, unless we need them longer to investigate a specific security incident.
3. Cookies and cookie banner
We set technically necessary cookies without consent, based on § 25 (2) no. 2 TDDDG: the session identifier, your language choice and your choice in the cookie banner. Without them the website does not work as intended.
We set all other cookies only with your consent under § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You give it in the cookie banner with “Accept all”; “Only essentials” declines. You can change your choice by deleting this website's cookies in your browser; the banner then appears again on your next visit. Withdrawal takes effect for the future.
4. Google Tag Manager, Google Analytics and Google Ads
We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager itself sets no cookies; it loads the services we have configured in it: Google Analytics 4, to see how vinmark.de is used (pages viewed, time on page, origin, device and browser, clicks on Kickstarter, Steam and the raven post), and Google Ads, to measure whether our ads lead to visits and to show visitors of our site relevant ads later (remarketing).
With your consent, Google Analytics and Google Ads set cookies (for example _ga, _ga_*, _gcl_au) that recognise your browser on later visits; they expire after two years at the latest. If you are signed in to Google and have allowed personalised advertising, Google can link this data to your account across devices (Google Signals). The legal basis is your consent under § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.
Without your consent we use Google Consent Mode: the Google script loads but sets no cookies and stores no identifiers on your device. Google then only receives individual events without a user identifier, such as page view, time, referrer, browser and device type and your consent status. For technical reasons your IP address is transmitted; according to Google, Google Analytics 4 does not store IP addresses. The legal basis is our legitimate interest in privacy-friendly reach measurement under Art. 6 (1) (f) GDPR. You can object at any time by writing to [email protected] or by blocking scripts from googletagmanager.com in your browser.
Google stores the analytics data for 14 months and then deletes it. Processing by Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.
5. Raven post (newsletter)
For the raven post we need your email address. Sign-up uses the double opt-in procedure: after submitting you receive a confirmation email and are only added to the list after clicking the link in it. We log the time and IP address of sign-up and confirmation to be able to prove your consent. The legal basis is your consent under Art. 6 (1) (a) GDPR.
We manage the list with Odoo Email Marketing on our own server. For sending we use Brevo by Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France, as a processor under Art. 28 GDPR. We evaluate whether a raven post was opened and which links in it were clicked in order to improve the content; your consent covers this as well.
You can unsubscribe at any time via the link in every raven post or by writing to [email protected]. We then remove your address from the list; we keep the proof of your earlier consent for up to three years.
6. Contact by email
If you contact us by email or phone, we process your details to handle the enquiry. The legal basis is our legitimate interest in responding under Art. 6 (1) (f) GDPR. We delete enquiries once they have been fully handled and no retention obligations apply.
7. Links to social networks, Kickstarter and Steam
The buttons for Discord, YouTube, TikTok, Instagram, Facebook, X, Kickstarter and Steam are plain links. Opening vinmark.de sends no data to these services. Only when you click a link does the provider's page open, and that provider is then responsible under its own privacy notice.
8. Fonts and content
This website serves all fonts and images itself. There is no connection to Google Fonts or other external font services, and we do not embed videos or content from third-party platforms. The only third-party script is Google Tag Manager (section 4).
9. Retention
We store personal data only as long as necessary for the respective purpose. The periods for each processing are given in the sections above.
10. Transfers to third countries
We generally process your data in the EU. Processing in the USA is possible with Google (section 4) and cannot be entirely ruled out technically with Cloudflare's parent company; both are certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to withdraw consent at any time with effect for the future (Art. 7 (3)).
You also have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR). An informal message to [email protected] is enough.
12. Right to lodge a complaint
You can lodge a complaint with a data protection authority at any time. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf.
Last updated: 9 November 2026