Privacy policy
The controller within the meaning of the EU General Data Protection Regulation (GDPR) and of the UK GDPR is CultureClub Kulturagentur UG (haftungsbeschränkt), Muttenzer Strasse 24, 79639 Grenzach-Wyhlen, Germany. For contact details, see the Legal notice. As a company established in Germany, we are subject to the GDPR. Because this website is aimed at people in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply to the processing of their data (Art. 3(2) UK GDPR). Because the service is also aimed at people in Switzerland, the revised Swiss Federal Act on Data Protection (revFADP) also applies. Unless stated otherwise, the articles cited below have the same number in the GDPR and in the UK GDPR.
Without your consent: as long as you do not consent, this website sets no cookies and loads no analytics or tracking services. We collect neither your name nor your address nor any other details from you: there is no account and no form. The website can be used without restriction without giving consent.
Server logs: when a page is opened, our hosting provider Netlify, Inc. processes connection data for technical reasons, including your IP address, the date and time, the address requested and details of your browser and operating system. The purpose is to deliver the page and to keep operations secure and protected against attacks. The legal basis is our legitimate interest in secure operation, Art. 6(1)(f) GDPR. Netlify acts as a processor under Art. 28 GDPR. We do not analyse these logs and do not combine them with any other data. Criterion for the retention period: the logs are kept only for as long as they are needed to detect and investigate operational faults and attacks, and are deleted afterwards. Netlify does not publish a fixed period in days, so we state the criterion instead of a number (Art. 13(2)(a) GDPR allows either).
Transfer to the USA: Netlify, Inc. is based in the United States. For people in the EU and in Switzerland, the transfer relies on Netlify’s participation in the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR) and the Swiss-U.S. Data Privacy Framework and, in addition, on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR; Implementing Decision 2021/914). For people in the United Kingdom, it relies on Netlify’s participation in the UK Extension to the EU-U.S. Data Privacy Framework (UK-US data bridge), for which the Data Protection (Adequacy) (United States of America) Regulations 2023 recognise an adequate level of protection.
What are cookies? Cookies and similar technologies, such as the local storage of your browser, store and read information on your device while you browse. This website uses them only for the purposes described below and, apart from the entry that stores your decision, only with your consent.
Consent and storage of your choice: on your first visit we ask in a notice window whether you agree to audience measurement with Google Analytics and session analysis with Microsoft Clarity. “Reject” and “Accept” carry equal weight; closing the window with the X counts as rejecting; under “Choose individually” you can agree to each service separately. We store your decision in your browser’s local storage (entry “sp-einwilligung” with your choice and the date); it is not transmitted to us. This entry is strictly necessary in order to respect your decision, so it does not require consent (Art. 5(3) of Directive 2002/58/EC and Section 25(2) no. 2 TDDDG; for people in the United Kingdom, paragraph 4 of Schedule A1 to the Privacy and Electronic Communications (EC Directive) Regulations 2003, “PECR”). After six months we ask again, and earlier if we change the services or their purposes.
Audience measurement with Google Analytics (only with your consent): if you agree, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose is to understand how this website is used: which pages and game descriptions are opened, where visitors come from (country, search engine, referring website), how far they read, which filters are used, which terms are entered in the search field and which external links and email links are opened. This lets us improve the selection, the texts and the handling. The data processed are usage data (addresses opened, times, clicks, scroll depth, search terms from the search field), details of the device and browser, and the IP address. Search terms containing an email address or five or more digits are not sent to Google. According to Google, Google Analytics 4 uses the IP address only to determine the approximate location and neither logs nor stores it. For this purpose Google Analytics sets the cookies “_ga” and “_ga_” followed by an identifier, which contain a random identifier of your browser; we have limited their lifetime to 13 months. Advertising features, Google Signals and the link to advertising accounts are switched off. Google processes the data on our behalf (Art. 28 GDPR). The legal basis is your consent, Art. 6(1)(a) GDPR and Art. 5(3) of Directive 2002/58/EC (implemented in Germany by Section 25 TDDDG); for people in the United Kingdom, regulation 6 of and paragraph 2 of Schedule A1 to PECR. Event data are deleted 14 months after your last visit; aggregated reports with no link to individual browsers are kept.
Session analysis with Microsoft Clarity (only with your consent): if you agree to this category, we use Microsoft Clarity from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how the pages are used (clicks, scrolling and mouse movements, screen format, device, operating system and browser) and presents this as heatmaps and as pseudonymised recordings of individual visits. The addresses of the pages visited, of the referring page and of links clicked are also processed, as is the IP address, from which, according to Microsoft, Clarity determines the location. Entries in fields are masked. The purpose is to identify usability problems and make the pages easier to understand. For this purpose Clarity sets the cookies “_clck” (lifetime 1 year) and “_clsk” (lifetime 1 day) on this website, which contain a pseudonymous identifier, and may use cookies on Microsoft domains such as “MUID”. Microsoft states that it acts as a controller within the meaning of the GDPR for Clarity; Microsoft’s privacy statement (www.microsoft.com/privacy/privacystatement) also applies. The legal basis is your consent, Art. 6(1)(a) GDPR and Art. 5(3) of Directive 2002/58/EC (implemented in Germany by Section 25 TDDDG); for people in the United Kingdom, regulation 6 of and paragraph 2 of Schedule A1 to PECR. According to Microsoft, recordings are available to us for 30 days, those marked as favourites and a random sample for up to nine months; heatmaps can be accessed for up to nine months.
Transfer to the USA for the analytics services: Google and Microsoft may transfer data to their parent companies Google LLC and Microsoft Corporation in the USA. Both are certified under the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework. For people in the EU, the transfer relies on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR) and, in addition, on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR); for people in Switzerland, on Annex 1 of the Swiss Data Protection Ordinance (DPO), which finds an adequate level of protection for certified companies; for people in the United Kingdom, on the Data Protection (Adequacy) (United States of America) Regulations 2023 (UK-US data bridge).
Withdrawing consent: your consent is voluntary. You can withdraw or change it at any time with effect for the future, using “Cookie settings” at the bottom of the page (on every page except the Legal notice and the error page for addresses that do not exist, so also on this privacy policy). If you withdraw consent, we delete this website’s analytics cookies in your browser and no longer load the services. The lawfulness of the processing carried out until then remains unaffected (Art. 7(3) GDPR). We cannot delete cookies that Microsoft may set on its own domains (such as “MUID”) from this website; you can delete them in your browser settings.
No shop buttons: this edition has no shop buttons and no affiliate links. No affiliate network is involved, and no purchase is attributed to an affiliate account. Links to sources, for example to publishers, reviews or award juries, lead to other websites. You leave this website only when you click such a link; from then on, the privacy rules of that website apply. Nothing is transmitted to these websites before the click.
Your rights: under Art. 15 to 21 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, contact the address given in the Legal notice. If you think that we have not handled your personal data in accordance with data protection law, you can complain to us at the same address; for people in the United Kingdom, this right is set out in section 164A of the Data Protection Act 2018. You can also complain to a supervisory authority. If you live in the United Kingdom, this is the Information Commission (ICO, ico.org.uk), section 165 of the Data Protection Act 2018. Under Art. 77 GDPR you can complain in particular to the authority in the EU member state of your habitual residence, your place of work or the place of the alleged infringement; the authority responsible for us, at our registered office, is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (Germany). In Switzerland the contact point is the Federal Data Protection and Information Commissioner (FDPIC).
Other information: you are not obliged to provide us with any data: the website can be used without restriction without giving consent. We do not take decisions based solely on automated processing and do not carry out profiling within the meaning of Art. 22 GDPR (in the UK GDPR, Art. 22A to 22D).
Last updated: October 2026