Privacy Policy
What happens to your personal data when you visit gershgaming.com, and what rights you have.
1. Data protection at a glance
General information
The following notes provide an overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the full declaration below.
Who is responsible for data collection on this website?
Data processing is carried out by the website operator, MOTHERSHIP Talents GmbH. Contact details are in our imprint.
How do we collect your data?
- Data you provide directly (e.g. via our contact form or by e-mail).
- Data collected automatically by our IT systems when you visit the site (e.g. browser, operating system, time of access) — this is server log data.
- Anonymous usage statistics from our self-hosted, cookieless audience measurement (see section 5).
- Where you have given consent, data collected via cookies and similar technologies (e.g. marketing analytics with HubSpot and LinkedIn).
What are your rights?
You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge, and the right to request correction, restriction of processing, or deletion of that data. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with the competent supervisory authority.
2. General and mandatory information
Responsible body (data controller)
MOTHERSHIP Talents GmbH
Lichtstraße 45
50825 Cologne, Germany
Phone: +49 221 95437304
E-Mail: contact@mothersh1p.de
Withdrawal of consent
Where processing is based on your consent, you can withdraw it at any time, e.g. by informal message to the e-mail address above, or via “Cookie settings” in the website footer. Processing carried out before withdrawal remains lawful.
Right to lodge a complaint with a supervisory authority
As our registered seat is in North Rhine-Westphalia, the competent authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf
www.ldi.nrw.de
SSL/TLS encryption
This site uses SSL/TLS encryption for the transmission of confidential content. You can recognize this by “https://” and the lock symbol in your browser bar.
Right to information, restriction, deletion
You may request information about your stored data at any time, and, subject to legal requirements, its correction, restriction of processing or deletion. Contact us via the details given in the imprint.
Objection to advertising mail
We hereby object to the use of contact data published in our imprint for sending unsolicited advertising or information material. We expressly reserve the right to take legal action against unsolicited advertising, such as spam e-mail.
3. Hosting and server log files
This website is hosted on our own server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on the basis of a data processing agreement (Art. 28 GDPR).
The server automatically collects and stores information in server log files that your browser transmits to us: browser type/version, operating system, referrer URL, IP address, date/time of request, and host name. This processing is necessary for the technical operation and security of the website and is based on our legitimate interest under Art. 6 para. 1 lit. f GDPR. Log data is deleted as soon as it is no longer needed for these purposes.
5. Analytics and third-party tools
HubSpot
We use HubSpot, a marketing and CRM platform of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA (in the EU: HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland). With your consent, HubSpot's tracking code records which pages you visit, where you came from and how long you stay, and recognises your browser on later visits using cookies. If you contact us, this information can be linked to your enquiry in our CRM.
The data is stored on HubSpot servers in the USA. HubSpot is certified under the EU-U.S. Data Privacy Framework, and we have concluded a data processing agreement with HubSpot. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG), which you can withdraw at any time via “Cookie settings” in the website footer. Further information: legal.hubspot.com/privacy-policy.
LinkedIn Insight Tag
We use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. With your consent, it collects information about your visit (e.g. URL, referrer, IP address, device and browser characteristics, time of visit) and sets cookies. LinkedIn uses this to provide us with anonymised reports on our audience and the performance of our LinkedIn ads, and to show you relevant ads on LinkedIn. We do not receive any data that identifies you personally.
LinkedIn may also process data in the USA; LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG), which you can withdraw at any time via “Cookie settings” in the website footer. If you are a LinkedIn member, you can also manage ad settings in your LinkedIn account. Further information: linkedin.com/legal/privacy-policy.
Umami (self-hosted audience measurement)
We measure how our website is used with Umami, an open-source analytics tool that we run on our own server (umami.gershgaming.com). No data is passed to third parties. Umami does not set cookies and does not store anything on your device. It records page views, referring websites, browser, operating system, device type, country and interactions such as how far a page is scrolled. Your IP address is not stored: visits are grouped using an anonymous identifier derived from a hash that includes a regularly changing random value, so you cannot be recognised across days or websites. The legal basis is our legitimate interest in understanding which content is useful and improving the website (Art. 6 para. 1 lit. f GDPR).
bunny.net (images and video)
Images and videos are delivered through the content delivery network and video platform of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (EU). Videos are embedded with the bunny.net player; we do not embed YouTube or other video platforms. To load these files, your browser connects to bunny.net servers, which process your IP address and the technical request data described in section 3. We use bunny.net for fast and reliable delivery of media-heavy pages (Art. 6 para. 1 lit. f GDPR). Processing takes place on the basis of a data processing agreement.
Fonts
All fonts are hosted on our own server. Your browser does not connect to Google or any other font provider.
6. Contact form and e-mail
If you use the contact form, we process the data you enter: name, e-mail address, company (optional) and your message. The form sends this information to our mailbox as an e-mail (Google Workspace, Google Ireland Limited, Ireland; data may also be processed in the USA under the EU-U.S. Data Privacy Framework). The same applies if you e-mail us directly.
To protect the form against abuse, our server briefly keeps your IP address in memory to limit the number of messages per sender. It is not written to disk and is discarded after about ten minutes.
We use your data only to answer your enquiry. The legal basis is Art. 6 para. 1 lit. b GDPR where your enquiry relates to a contract or its preparation, and otherwise our legitimate interest in responding to enquiries (Art. 6 para. 1 lit. f GDPR). We delete your data once your enquiry has been dealt with, unless statutory retention periods (for example for business correspondence) require us to keep it longer.
7. Pitch pages
We share confidential proposals with business contacts as pitch pages, protected by a personal link and passphrase. These pages are not part of the public website. When you open a pitch page, we record:
- date and time of access and the pitch viewed,
- a random visit identifier, time spent on the page and scroll depth,
- browser and operating system (user agent), referrer, browser language and window size,
- your IP address in shortened form (IPv4 without the last block, IPv6 shortened to the first four blocks),
- approximate location: country, region, city and internet provider.
To determine the approximate location, your full IP address is sent once per visit to the geolocation service ip-api.com. We do not store the full IP address. To prevent passphrase guessing, failed attempts are counted per IP address in memory for 15 minutes.
We use this information to understand whether and how our proposal is being reviewed. The legal basis is our legitimate interest in following up on business proposals (Art. 6 para. 1 lit. f GDPR). Log entries are deleted automatically after 12 months, and together with the pitch if it is deleted earlier.
8. Links to other websites
Our pages link to other websites, for example LinkedIn, Instagram and partner companies. These are plain links: no data is transferred until you click them. From then on, the privacy policy of the respective provider applies.
9. Your rights in detail
You have the right, at any time and free of charge, to:
- obtain information about the personal data we hold about you (Art. 15 GDPR),
- request rectification of inaccurate data (Art. 16 GDPR),
- request erasure (“right to be forgotten”), subject to legal retention obligations (Art. 17 GDPR),
- request restriction of processing (Art. 18 GDPR),
- receive your data in a portable format (Art. 20 GDPR),
- object to processing based on legitimate interest, including profiling (Art. 21 GDPR),
- lodge a complaint with a supervisory authority (Art. 77 GDPR).
To exercise these rights, contact us at contact@mothersh1p.de or via the details in the imprint.