Privacy policy

Green Gaming Corp (Enkeltmandsvirksomhed — Sole proprietorship (registered trading name)), CVR-nr. 35576762, of c/o Jesper Broesby, Øster Hæsingevej 17, 5600 Faaborg, Denmark, is the data controller for personal data collected through greengamingcorp.com.

We can be reached about anything in this policy at info@greengamingcorp.com. We are not required to appoint a Data Protection Officer and have not appointed one; the owner handles data protection questions directly.

We collect only what a form asks for. There is no account system, no profiling, no advertising pixel that fires before you allow it, and no purchase of data about you from anybody else.

Game pitch submissions

Studio name, contact person, e-mail address, studio website, game title, genre, development stage, target platforms, the links you provide, and anything you write in the message box.

Lawful basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract. Where a submission does not lead to an agreement, our record of having assessed it rests on Article 6(1)(f), our legitimate interest in knowing what we have already reviewed. You can object to that at any time under Article 21.

Retention: declined pitches are deleted within 12 months. If we enter into an agreement, the submission is kept for the life of that agreement and for the statutory period afterwards.

Contact messages

Your name, e-mail address, company or studio if you give one, subject, and the message itself.

Lawful basis: Article 6(1)(b) where your message concerns a contract or steps before one; Article 6(1)(f) otherwise — our legitimate interest in answering correspondence addressed to us and keeping a record of it.

Retention: 24 months from our last reply, then deletion. Records we are required to keep for Danish accounting law are kept for the statutory period instead.

Marketing e-mails

Only if you tick the optional box on a form. That box is off by default, it is not required to submit anything, and ticking it is the only place on this site where we rely on consent.

Lawful basis: Article 6(1)(a) — consent. You can withdraw it at any time, by replying to any message or writing to info@greengamingcorp.com. Withdrawing consent does not affect anything done before you withdrew it.

Technical records

Our server keeps standard access logs — the requested address, the time, the response code, the browser’s user-agent string, and the IP address. We use them to keep the site running and to identify abuse.

Lawful basis: Article 6(1)(f) — our legitimate interest in the security and availability of the service. Retention: access logs are rotated and deleted after 14 days. Where we store an IP address alongside a form submission for anti-abuse purposes, we store a salted hash of it rather than the address itself.

You may be used to forms that will not submit until you agree to a privacy policy. We deliberately do not do that.

Reading your pitch and replying to your enquiry rests on Article 6(1)(b) and Article 6(1)(f), not on consent. Asking for consent we do not rely on would be misleading, and consent that you must give in order to press Submit is not freely given within the meaning of Article 7(4) — so it would not be valid consent anyway.

Instead, each form carries a short notice, next to the button, saying who gets the data, why, on what basis and for how long. The only genuine consent on this site is the optional marketing box, which changes nothing else if you leave it alone.

Nobody outside Green Gaming Corp sees your pitch or your message in the ordinary course of business. We do not sell personal data, we do not share it with advertising networks, and we do not use it to train any machine-learning model.

The exceptions are the ordinary ones: our hosting provider, which processes data on our behalf under Article 28 as our processor and only on our instructions; and any disclosure we are legally required to make to a court or authority. If we ever engage another processor, this section will name it before it starts.

This website runs on a rented virtual server. We will name the hosting provider and the country the server is in here once that has been confirmed by measurement rather than assumed from a provider’s marketing material.

We are not making a claim either way in the meantime. In particular we are not claiming that data stays inside the EU or the EEA — a claim like that is meaningless unless somebody has actually checked where the machine is, and publishing it before then would be exactly the kind of unverified statement this policy exists to avoid.

Strictly necessary storage — the record of your cookie choice, and the token that protects the forms against cross-site request forgery — is set without consent, as permitted by the ePrivacy Directive as implemented in Danish law.

Everything else runs only if you allow it in the banner. That means measurement and the Microsoft Advertising UET tag, which is used to see whether an advertisement led to an enquiry. It is not loaded at all until you accept it, and rejecting costs you nothing on this site.

Every item of storage is listed individually, with its purpose and lifetime, in the cookie policy.

Before you make a cookie choice, this website makes no request to any third-party server at all. Fonts, styles, scripts and images are all served from greengamingcorp.com itself. There is no content delivery network, no embedded video, no social media widget and no analytics script running by default.

This is a deliberate design decision. Loading a font or a script from somebody else’s server discloses your IP address to them before you have had any opportunity to object, and we would rather not put you in that position to save ourselves a few kilobytes.

Under the GDPR you have the right to:

• access — get a copy of the personal data we hold about you;
• rectification — have inaccurate data corrected;
• erasure — have data deleted where the conditions in Article 17 apply;
• restriction — have processing paused while a dispute is resolved;
• portability — receive data you gave us in a machine-readable format;
• objection — object to processing based on legitimate interests, including at any time under Article 21;
• withdrawal of consent — withdraw consent to marketing at any time.

Write to info@greengamingcorp.com and we will respond within one month. There is no charge, and we do not require a particular form of words.

If you are not satisfied with how we handle it, you can complain to Datatilsynet, the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Denmark.

The site is served over HTTPS only. Form submissions are validated and escaped on the server, stored through parameterised queries, and protected against cross-site request forgery by a per-session token. Access to the database is restricted to the application account, which holds only the privileges it needs.

No system is perfect. If we ever suffer a breach that is likely to result in a risk to your rights and freedoms, we will notify Datatilsynet within 72 hours and tell you directly where Article 34 requires it.

This is a business-to-business site aimed at game development studios. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to info@greengamingcorp.com and we will delete it.

If we change how we handle personal data, we will update this page and change the “last updated” date at the top. Where a change materially affects people who have already contacted us, we will tell them directly rather than relying on them re-reading this page.