Loading

Privacy Policy

1. Principles and General Information

We welcome your visit. Protecting your personal data is our highest priority.

According to Art. 4 No. 1 GDPR, personal data means any information relating to an identified or identifiable natural person. This includes, among others:

  • First and last name
  • Address
  • Telephone number
  • IP address

If data is anonymized, it is no longer considered personal data. Processing of such data requires your consent or another legal basis in accordance with Art. 4 No. 2 GDPR. Such data must be deleted when there is no retention obligation and the purpose of processing has been achieved.

In order to operate this website, we must collect personal data about you. On this page you will find all information on how we handle your personal data. In particular, we explain the type and scope, the purpose, the legal basis, and the retention period of the personal data collected.

If you follow links from our website to other sites, we cannot accept responsibility for the handling of your personal data on those sites. Please inform yourself directly from the respective operator about their privacy policies.

This privacy policy applies exclusively to this website.

2. Responsibilities

The authorized Managing Director is responsible for the processing of personal data on this website. You can find this information in the Imprint.

3. Server Logs

a. Type and Scope

When using the website, we collect technically necessary data. This data is automatically transmitted to the server.

This includes in particular the following information:

  • IP address
  • Date and time of access
  • Name of the requested file
  • Browser version
  • Operating system
b. Legal Basis and Purpose

In accordance with Art. 6 para. 1 lit. f GDPR, the collection of this personal data serves the legitimate interest of our company, as it is technically necessary for the operation and presentation of the website. Additionally, we use this data to ensure the security and stability of our system.

c. Duration

The data is deleted immediately once it is no longer necessary for the purpose stated above. In individual cases, storage may occur due to legal regulations. There is no possibility to object due to the mandatory necessity to provide the website.

4. Cookies

This website uses cookies. These are small files stored on your device. There are technically necessary cookies required for the operation of the website, as well as cookies for analyzing and improving the user experience. Below we explain the types of cookies used:

a. Temporary Cookies

These cookies serve to uniquely identify you during a session. They are automatically deleted as soon as you close your browser.

b. Permanent Cookies

These cookies store information for longer periods and can be manually deleted in the browser settings.

  • Analytical Cookies: These allow us to analyze user behavior anonymously and optimize the website.
  • Advertising Cookies: These collect information for marketing purposes and targeted advertising.
  • Social Media Cookies: These enable content sharing and connecting to social networks.

In addition, NClip uses your browser’s local storage to save language preferences and improve your user experience. This information remains locally on your device and is not transmitted to our servers.

Many browsers accept cookies automatically by default. These settings can be adjusted at any time. However, please note that blocking necessary cookies may limit the functionality of the website.

c. Legal Basis

The processing of personal data via cookies is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in operating the website. If you have given your consent via the cookie banner, Art. 6 para. 1 lit. a GDPR also applies.

d. Duration

The data is deleted once it is no longer necessary for the respective purpose. In cases required by law, longer storage may occur.

5. Collection of Personal Data in Preparation of Contracts and for Contract Fulfillment

a. Type and Scope

We collect personal data in connection with the initiation and execution of contractual relationships. These include in particular name, address, email address, and telephone number. This data is necessary in order to contact you, prepare offers, or provide services.

b. Legal Basis and Purpose

The collection of this data is based on Art. 6 para. 1 lit. b GDPR. It is required to carry out pre-contractual measures or to fulfill an existing contract. Any further processing is only carried out with your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

c. Duration

The data will be deleted as soon as the purpose of processing no longer applies. If statutory retention obligations under commercial or tax law exist, deletion will occur immediately after these periods have expired.

6. Purchase

a. Type and Scope

On our platform, users have the option to purchase paid features such as premium subscriptions or creator-specific extensions. In doing so, we collect the following personal data: email address, username, and details of the selected subscription or product.

b. Legal Basis and Purpose

The collection of this data is based on Art. 6 para. 1 lit. b GDPR. Processing is necessary to conclude and execute the contract for the paid feature. The data is used exclusively to fulfill this purpose.

c. Duration

The data will be deleted as soon as the purpose of processing no longer applies, unless statutory retention obligations (e.g., commercial or tax law) require longer storage. In that case, deletion will occur immediately after these periods have expired.

7. Registration and Login on the Platform

a. Type and Scope

You can register or log in to our platform. With the first login, a user account is automatically created. We store your email address, username, and connected social media handles if you link them. These data are not passed on to third parties.

b. Legal Basis and Purpose

The processing of these data is carried out in accordance with Art. 6 para. 1 lit. b GDPR to carry out pre-contractual measures and to fulfill the user agreement. A login is required to use all functions of the platform – in particular to participate in quests, ticket allocation, and manage your profile. If you have additionally given your consent to data processing, Art. 6 para. 1 lit. a GDPR also applies. You can delete your account at any time – please contact support@nclip.io for this.

c. Duration

The data will be deleted as soon as your user account has been terminated and no statutory retention obligations remain.

8. Data Collection for Giveaway Participation

a. Type and Scope

For participation in giveaways, we may dynamically collect various personal data as needed, such as name, address, date of birth, email address, telephone number, and other information.

b. Legal Basis and Purpose

The processing of these data is carried out in accordance with Art. 6 para. 1 lit. b GDPR to carry out pre-contractual measures and to fulfill the user agreement.

c. Duration

No data will be stored beyond the scope of the giveaway. It will be deleted immediately after the giveaway ends: for all non-winners as soon as the contest is closed, and for the winner once the prize has been delivered and the giveaway record has been removed.

9. Data Transfer

We only share your data with third parties if:

  • you have given express consent in accordance with Art. 6 para. 1 lit. a GDPR,
  • this is necessary in accordance with Art. 6 para. 1 lit. b GDPR to fulfill a contractual relationship,
  • there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR, e.g. to authorities, social insurance providers, or health insurance companies,
  • this is necessary in accordance with Art. 6 para. 1 lit. f GDPR to assert, exercise, or defend legal claims or to protect legitimate interests, provided that no overriding interests worthy of protection oppose this,
  • a processor is used in accordance with Art. 28 GDPR who is contractually obligated to comply with data protection regulations.

We use such service providers in particular in the following areas:

  • IT services
  • communication services
  • analysis and security services

Data transfer to third countries only takes place if there is an adequate level of data protection in accordance with the EU Commission or if appropriate safeguards (e.g. EU standard contractual clauses) ensure that your data is protected to the same extent as within the EU.

10. Contact Form

a. Type and Scope

When you contact us via a contact form on our website, we collect and store the following data, provided you submit it. By submitting the form, you agree to the processing in accordance with this privacy policy:

  • Name
  • Company
  • Industry
  • Position
  • Street
  • Street Number
  • Postal Code
  • City
  • Country
  • Email Address
  • Phone Number
  • Subject
  • Message Content

In addition, we use a website chatbot based on OpenAI technology. When you contact us via this bot, personal data such as name, email address, or chat content may also be processed if you provide it voluntarily during the conversation. The processing serves to support support requests or general inquiries.

b. Legal Basis and Purpose

The processing is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this at any time. We use the submitted data exclusively to process your request and do not pass it on to third parties.

c. Duration

The data will be deleted as soon as the purpose of the processing no longer applies. Statutory retention periods – in particular those under commercial or tax law – remain unaffected. After these periods have expired, deletion also occurs automatically.

11. Contact via Email

a. Type and Scope

You can contact us at any time via email. In doing so, we collect only your email address and any personal data you voluntarily provide in your message.

b. Legal Basis and Purpose

Processing is carried out under Art. 6 para. 1 lit. f GDPR based on our legitimate interest in properly handling your inquiry.

c. Duration

The data will be deleted as soon as the purpose for their processing no longer applies. Statutory retention obligations – in particular under commercial or tax law – remain unaffected. After these periods have expired, deletion occurs automatically.

12. Applications

a. Type and Scope

If you apply to us, we store all personal data that you provide to us as part of your application.

b. Legal Basis and Purpose

Processing is carried out on the basis of Art. 88 para. 1 GDPR in conjunction with § 26 BDSG as well as Art. 6 para. 1 lit. b GDPR for the purpose of conducting the application procedure. If you give your consent to be included in our applicant pool, Art. 6 para. 1 lit. a GDPR also applies.

c. Duration

In the event of an unsuccessful application, your data will be deleted after six months in accordance with § 61b para. 1 ArbGG in conjunction with § 15 AGG. The period begins upon receipt of the rejection. If you are included in our applicant pool, we will store your data for a maximum of two years.

d. Disclosure

Within the company, only those individuals involved in the application process will have access to your data. In addition, disclosure to public authorities (e.g. police, tax office, social security agencies) may occur if there is a legal obligation. With your explicit consent, disclosure to other entities may also take place.

13. Newsletter

a. Type and Scope

You have the option to subscribe to a free and regular newsletter to stay informed about current offers and updates on our platform. Subscription takes place via the so-called double opt-in process: After subscribing, you will receive an email with a confirmation link to ensure that no unauthorized third party is using your email address.

By clicking on the confirmation link, we store your email address and your IP address to prevent possible abuse.

b. Legal Basis and Purpose

The processing of your data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 7 para. 2 no. 3 UWG. In addition, it is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in being able to document the subscription traceably.

c. Duration

Your data will be stored until you unsubscribe from the newsletter. Thereafter, deletion will occur immediately.

14. Tracking and Analytics Tools

Google AdSense

We use Google AdSense to present personalized advertising to you. This is a web analytics service of Google Ireland Ltd, Gordon House, 4 Barrow St, Dublin, D04E5W5, Ireland (“Google”).

By using this service, we want to make our website more interesting for you. Statistical information about you is collected and processed by Google. You can recognize these advertisements by the “Google Ads” label.

Google receives information when you visit our website. For this, Google uses a web beacon to store a cookie in your browser. If you are logged in with your Google account, the data may be directly associated. It is possible that Google will pass this data on to authorities or third parties. You can find a list of these third-party providers at this link.

You can prevent the storage of cookies by setting your browser accordingly. However, you may then not be able to use all functions of our platform fully.

Contact details for Google:
Google Dublin, Google Ireland Ltd.
Gordon House, 4 Barrow Street
Dublin, Ireland
Phone: +353 (1) 436 1000
Fax: +353 (1) 436 1001

For more information on data protection at Google, please visit http://www.google.com/intl/de/policies/privacy
Advertising privacy policy: https://www.google.de/intl/de/policies/technologies/ads

Google AdWords Conversion Tracking

We use Google AdWords to display advertising to you on Google and third-party websites. This is a web analytics service from Google.

Through conversion tracking, we attempt to evaluate the quality of our advertising campaigns. Certain parameters for measuring success, such as clicks and impressions, are recorded using cookies. The goal is to trace referrals by clicking on links. To this end, Google may store a cookie in your browser, which usually expires after one month. This cookie allows Google to recognize your browser again. We do not collect any personal data as part of this measure.

When our website loads, your browser automatically establishes a connection to Google’s servers. We have no influence on how Google processes the data. According to our knowledge, Google learns which pages of our website you have visited or which ads you have clicked on. If you are logged in to Google, your visit may be assigned to your user account. Even without logging in, your IP address may be processed.

You can prevent the storage of cookies by configuring your browser accordingly. However, this may restrict the functionality of our website.

Alternatively, you can use the following browser plugin to prevent Google from processing your data: http://www.google.com/settings/ads/plugin

Contact details for Google:
Google Dublin, Google Ireland Ltd.
Gordon House, 4 Barrow Street
Dublin, Ireland
Phone: +353 (1) 436 1000
Fax: +353 (1) 436 1001

For more information on data protection at Google, please visit https://www.google.com/intl/de/policies/privacy

Google AdWords Remarketing

We use Google AdWords Remarketing. This is a web analytics service from Google.

It is possible that after visiting our platform, you will be shown advertising from us on another website. This is done through cookies. According to Google, data is pseudonymized and no personal storage takes place.

Contact details for Google:
Google Dublin, Google Ireland Ltd.
Gordon House, 4 Barrow Street
Dublin, Ireland
Phone: +353 (1) 436 1000
Fax: +353 (1) 436 1001

For more information on data protection at Google, please see here: https://www.google.com/intl/de/policies/privacy

Google Analytics

We use Google Analytics, a tracking tool from Google.

On our behalf, Google uses data from cookies, which are typically transferred to and stored on a server in the USA. The aim is to systematically evaluate the use of our website, generate reports on web page activity, and provide other services.

When you visit our website, the following data is stored:
– Three bytes of the IP address of the requesting system (anonymized)
– The page accessed
– The website from which the user comes (referral URL)
– The subpages accessed
– The duration of the visit
– The frequency of visits

We use Google Analytics with IP anonymization enabled. This means that no identification of individual users is possible.

The legal basis is your consent pursuant to Art. 6 (1) a GDPR.
The data will be deleted by us after 2 years.

You can prevent the collection of this data by installing the following plugin: http://tools.google.com/dlpage/gaoptout?hl=de

Further information:
Terms of use: www.google.com/analytics/terms/de.html
Privacy information: support.google.com/analytics/answer/6004245?hl=de

You can revoke your consent at any time in the cookie settings.

Google Fonts

We use Google Fonts. This is a service from Google.

The fonts are loaded via a server request, usually through servers in the USA. In doing so, Google processes, among other things, your IP address and the page you accessed.

The use is based on your consent pursuant to Art. 6 (1) a GDPR. The purpose is to ensure a uniform display of fonts on our website.

We do not store any of this data ourselves. If you wish to object to the processing, you can find more information here: https://www.google.com/policies/privacy/

Google reCAPTCHA

We use Google reCAPTCHA, a service from Google to detect bots and protect against spam.

In doing so, among other things, your IP address and possibly other data are collected, the exact details of which we do not know. The purpose is to distinguish entries from natural persons from automated programs and to secure our platform against abuse.

The legal basis is Art. 6 (1) f GDPR. There is a legitimate interest in the security and functionality of our online offering.

The data is deleted as soon as it is no longer necessary for the specified purpose.

You can disable cookies in your browser or use Google’s opt-out cookie to prevent processing. Further information can be found at: http://www.google.de/intl/de/privacy

Social Media

We use links to social networks (e.g., Instagram, LinkedIn, Twitter, YouTube) on our website. Simply visiting our page does not transmit any data to these platforms. Only when you actively follow a link is a connection established to the respective social network.

It is possible that personal data is processed by the network operator even if you are not logged in to the respective network. This generally occurs through the placement of cookies for marketing and analytics purposes.

The following data may be processed by the network operator:

  • IP address
  • Date and time
  • Pages visited within the network
  • Referral URL
  • URLs of internal and external pages
  • Device used
  • Language settings
  • Region
If you are logged in to the network, a direct link to your user account may be made.

If we receive aggregated statistical data (e.g., page views) from the networks, it is provided anonymously. We cannot identify which users are behind this data.

Processing of your data on these platforms is beyond our control. Please refer to the privacy policies of the respective providers to learn how and whether third parties gain access.

We use social networks based on our legitimate interest in informing you about our offers and news (Art. 6 (1)(f) GDPR). If you actively share or comment on content, your consent under Art. 6 (1)(a) GDPR also applies.

Content you post under our content remains public until you request its removal. Private messages are deleted no later than six months after the last contact.

According to the case law of the European Court of Justice, we share responsibility with the platform operators for compliance with data protection regulations. For requests regarding data deletion or access, we recommend contacting the respective network directly, as only they have access to user data.

If you unfollow our pages or no longer use links to social networks, no further processing of your data occurs in this context.

Use of External APIs

APIs (application programming interfaces) are part of our platform's functionality, allowing us to automatically retrieve certain information. One example is verifying whether and to what extent users have completed certain tasks (quests).

Only the data necessary for this purpose is processed—for example, your user ID or quest ID. This information is usually processed pseudonymously and stored only as long as needed for validation.

The legal basis for this processing is Art. 6 (1)(b) GDPR, as it is necessary to fulfill the contract. If you actively give us your consent to evaluate this data, processing is additionally based on Art. 6 (1)(a) GDPR.

We ensure high data protection standards when selecting our API providers and conclude appropriate data processing agreements in accordance with Art. 28 GDPR when external providers are involved.

Use of Artificial Intelligence

In cases where automatic verification via APIs is not possible (e.g., when a platform does not provide a corresponding interface), we use AI-supported image processing to verify quest completion. In these cases, users are prompted to upload screenshots as proof.

These screenshots are automatically deleted after successful verification and are not stored permanently. Processing is carried out solely for the purpose of validation and to prevent manipulation or automated bot participation.

By using artificial intelligence, we ensure that user actions can be evaluated fairly and reliably even without an API connection. Manual approval by the creator is also possible to ensure full control.

Processing is carried out on the basis of Art. 6 (1)(f) GDPR (legitimate interest in fraud prevention and platform integrity) and Art. 6 (1)(b) GDPR (contract fulfillment). If you explicitly consent during usage, Art. 6 (1)(a) GDPR also applies.

Facebook and Instagram

We integrate the social networks Facebook and Instagram into our platform. When you visit our Facebook or Instagram page, Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, processes and stores your personal data. You can find Facebook’s privacy policy at: https://de-de.facebook.com/policy.php.

By using “Insights”, the following aggregated data may be made available to us:

  • Predefined interactions
  • Timestamps
  • Country/City
  • HTTP language code
  • Age/Gender group
  • Previously visited website
  • Device used
  • Facebook user ID

Facebook bears the primary responsibility for processing this data. However, we share joint responsibility with Facebook for compliance with data protection regulations. Please contact Facebook directly regarding your rights under the GDPR. You can find the details of the joint responsibility here: www.facebook.com/legal/terms/page_controller_addendum.

Further information on Facebook Insights can be found at:

In the event of a voluntary linking of a Facebook or Instagram account by a content creator for the management and automation of their campaigns, we also collect personal data via Meta’s official API interface. These include, among others, the user ID, the published content, and associated public comments. This data is used solely for the purpose of automatically creating appropriate quests and automatically verifying their completion. The legal basis for this processing is Art. 6 (1) lit. b GDPR (contract fulfillment) and Art. 6 (1) lit. a GDPR (consent).

Twitter

We run a Twitter channel to inform you about news, offers, and product developments around NClip. The entity responsible for data processing is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. You can find Twitter’s full privacy policy at: https://twitter.com/de/privacy.

We use Twitter Analytics to analyze the reach and effectiveness of our content on the platform and continuously improve our communication. Twitter provides us with aggregated and anonymized data that does not allow conclusions about individual persons. More information on this service can be found at: https://business.twitter.com/de/advertising/analytics.html.

If a content creator or user voluntarily links their Twitter account with NClip, publicly available information such as posts, comments, likes, or follower counts is processed via the official Twitter API. We use this data to create and verify quests. Linking is optional but required to use certain automation features in full. The legal basis is Art. 6 (1)(b) GDPR (contract fulfillment) and Art. 6 (1)(a) GDPR (consent).

Even for users who interact with our content via Twitter, publicly visible information such as likes, retweets, or replies may be used for platform-specific interaction analysis. This processing is carried out exclusively within the scope of the provided functions and is based on our legitimate interest under Art. 6 (1)(f) GDPR to improve platform functionality and prevent abuse.

YouTube

We regularly upload videos to our official YouTube channel to illustrate our platform and features. Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, processes personal data in this context. You can find Google’s privacy policy at: https://policies.google.com/privacy?hl=de&gl=de.

We use YouTube’s analytics feature to measure the reach of our content and improve our offerings. The evaluations are anonymized and do not allow conclusions about individual users. More information can be found at: https://support.google.com/youtube/answer/9002587?hl=de.

If a content creator or user links their YouTube account with NClip, we automatically retrieve publicly available content such as videos, comments, likes, and channel information via the API. This serves the automated creation and verification of quests. Linking is voluntary and based on Art. 6 (1)(a) GDPR (consent) and Art. 6 (1)(b) GDPR (contract fulfillment).

LinkedIn

Our LinkedIn presence informs about our company, product developments, and career opportunities. LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You can find the privacy policy here: https://www.linkedin.com/legal/privacy-policy.

We use LinkedIn Analytics to anonymously evaluate user behavior and continuously optimize our offerings. More information on this service can be found at: https://business.linkedin.com/de-de/marketing-solutions/reporting-analytics.

If a creator or user links their LinkedIn profile with NClip, we process publicly available information such as posts, comments, or likes to create and verify quests. This processing is voluntary and based on Art. 6 (1)(a) GDPR (consent).

In addition, we use LinkedIn to identify and directly approach suitable candidates for open positions. In this context, contact may be made via the network itself.

Twitch

We operate an official Twitch channel through which we inform our community about new features and host livestreams. Twitch is operated by Twitch Interactive, Inc., 350 Bush Street, San Francisco, CA 94104, USA. You can find Twitch’s privacy policy at: https://www.twitch.tv/p/legal/privacy-policy/.

If a content creator links their Twitch account with NClip, we access publicly available information via the Twitch API. These include, among others, the username, stream title, follower counts, chat content, and livestream status. We use this data exclusively for the automated creation and verification of quests.

Processing is carried out on the basis of Art. 6 (1)(b) GDPR (contract fulfillment), if platform usage requires it, or on the basis of Art. 6 (1)(a) GDPR (consent), when linking is manually initiated. The data is stored only for the duration of platform use and then deleted.

Data Security

We give you our word to treat your personal data confidentially. We regularly take measures to keep our IT security up to date with the state of the art.

Our systems use recognized encryption methods to ensure the security of data transmission.

Please note that we have no influence on the encryption of data that reaches us from external sources. Responsibility for the integrity of this data lies with the user.

Changes

This privacy policy may be updated from time to time to reflect legal or technical changes. Please review this policy regularly to stay informed of the current status.

Rights of Data Subjects

Below you will find a list of your rights regarding personal data. These arise from Articles 7, 15–22, and 77 GDPR.

a. Right to Withdraw Your Consent under Art. 7 (3) Sentence 1 GDPR
You may withdraw your consent at any time for the future. Withdrawal does not affect the lawfulness of processing carried out up to that point.

b. Right to Access under Art. 15 GDPR
You have the right to obtain confirmation as to whether we are processing personal data about you. Upon request, you will receive information about processing purposes, categories, recipients, and storage duration.

c. Right to Rectification and Completion under Art. 16 GDPR
You have the right to have inaccurate personal data corrected and incomplete data completed.

d. Right to Erasure under Art. 17 GDPR
You have the right to request the deletion of your data if, for example, the processing purpose no longer applies, you withdraw your consent, or the data has been processed unlawfully.

e. Right to Restriction of Processing under Art. 18 GDPR
You have the right to request restriction of processing of your personal data, for example, if you contest its accuracy or the processing is unlawful.

f. Right to Data Portability under Art. 20 GDPR
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

g. Right to Object under Art. 21 GDPR
You may object to the processing of your personal data at any time on grounds relating to your particular situation.

h. Right not to be Subject to Automated Individual Decision-Making under Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

i. Right to Lodge a Complaint under Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.