Data Privacy Statement for the Use of Nectar Arcade

This Data Privacy Statement applies for the offering and use of the “Nectar Arcade” service (hereinafter referred to as “Nectar Arcade”), which is provided to you by adjoe GmbH, 20099 Hamburg (hereinafter referred to as “we” or “us”) for use on your mobile device. Access to Nectar Arcade is possible via partner apps, which integrate Nectar Arcade in their apps (hereinafter referred to as “Nectar Arcade partner app”). The Nectar Arcade partner app acts as a distribution channel for Nectar Arcade. The provider of the Nectar Arcade partner app does not become the contractual partner of the user for using Nectar Arcade. Neither do we become the contractual partner of the user for using the Nectar Arcade partner app.

When using Nectar Arcade, personal data will be collected, processed and used by us. Because the protection of your privacy when using Nectar Arcade is important to us, we would like to inform you with the following information about what personal data we collect when you use Nectar Arcade and how we handle this data.

Data Controller

adjoe GmbH, 20099 Hamburg (you will find exact contact details in the legal notice in the adjoe partner app or at Imprint) is the “controller” in accordance with the applicable data protection law, in particular the EU General Data Protection Regulation (GDPR).

Should you have any questions or comments about data privacy when using Nectar Arcade, please feel free to contact us by post (adjoe GmbH, An der Alster 42, 20099 Hamburg) or send us an email to dataprivacy@adjoe.zone.

What is Personal Data?

“Personal data” refers to information that can identify you directly (e.g. your name) or indirectly (e.g. via unique identifiers such as a device ID or IP address). In some cases, you will provide us with immediate access to the data (e.g. when registering for Nectar Arcade and contacting us) and in some cases we will collect the data automatically during the use of Nectar Arcade (e.g. in order to offer our services and understand how you use our services and your apps).

We will use your data to perform and process the contract on the use of Nectar Arcade. Within this framework, we will use your data primarily for the calculation and payment of the bonuses acquired by you in the course of your use of Nectar Arcade, to provide these bonuses in your used apps and inform you about apps participating in Nectar Arcade. Other use will only take place due to other statutory obligations or authorisation, if you have granted us permission, or if the use is for legitimate interests of adjoe GmbH as the provider of Nectar Arcade.

This Data Privacy Statement applies to all personal data collected and processed through your use of Nectar Arcade.

What Data We Collect and Why

When you use Nectar Arcade, we collect and process a limited set of personal data. This allows us to operate, secure, and improve our services, and to provide you with personalized app recommendations and rewards. Below is an overview of the data we may collect and how it is used.

Data We Collect on Android Devices

Always Collected (to operate the service):

Nectar ID: A unique ID used to identify your account.
Device Identifiers (e.g. GAID): Used to allocate rewards and track app installs.
Device Information: Such as device model, operating system version, screen resolution, and browser type.
Network Type: Whether you’re on Wi‑Fi or cellular.
IP Address: Used for fraud prevention and system security.
Log Data: Information about when and how you access our content (e.g., files requested, access times).

Collected Only with Your Consent:

Installed Games: Used to recommend similar games.
Apps Installed via Nectar Arcade: Used to track usage and award bonuses.
Apps Associated with Fraud (e.g. VPN apps): Used solely for fraud prevention.

Data We Collect on iOS Devices

Always Collected (to operate the service):

Nectar ID: A unique ID used to identify your account.
Device Information: Such as model, operating system version, screen resolution, and browser type.
IP Address and Browser Metadata: Used temporarily for fraud prevention and system security. This data is not stored on our servers.
IDFA: Only collected if you choose to share it with us through Nectar.

Collected Only with Your Consent:

Game Progress Data from Publishers: Used to track your progress and award bonuses.

How We Use Your Data

To provide and improve the Nectar Arcade service
To allocate rewards and verify completed tasks
To detect and prevent fraud
To ensure the security and stability of our systems
To optimize the display of content on your device

In some cases, we share necessary data (e.g., device ID) with our advertising partners so they can confirm that a recommended app was installed via Nectar Arcade.

Anonymized Usage Data

We also process anonymized data to understand how users interact with Nectar Arcade. This includes:

Device models and operating systems
Browser types and display settings
General usage patterns (e.g. which content is accessed most)

This information helps us improve our app and identify any technical issues. It cannot be linked back to you personally.

Additional details about the Data we collect

Data Processing for the Recommendation of New Apps

Applicable only for Android:

In order to recommend relevant new apps and ensure the integrity of our platform, we process limited data related to apps installed on your device:

Apps installed via Nectar Arcade: We collect information about the apps you have installed through the Nectar Arcade platform. This data is used solely to track the time you spend using those games, which helps us provide tailored recommendations and ensure accurate reward attribution.
Apps associated with potential fraud (e.g., VPN apps): We may also collect data regarding certain apps on your device that are commonly linked to fraudulent behavior, such as VPNs. This information is processed exclusively for fraud prevention purposes, to protect the security and fairness of the Nectar Arcade ecosystem.

Applicable for Android & iOS Platform:

Usage Data Logging: To analyze how Nectar Arcade is used, we log your interactions within the app (e.g. clicks). Processing is based on your consent and is necessary to provide and improve the services offered under our user agreement.

All data is not used for profiling beyond the purposes described above.

Data Processing for the Calculation of Bonus Payments

Applicable on Android:

We also use the data about your use of the apps running in the foreground of your end device to calculate the bonuses generated by you, if you have obtained and installed these apps via Nectar Arcade.

The processing of this data takes place based on the consent granted by you (see above) and serves to perform the contract on the use of Nectar Arcade by you.

Usage Data about the End Device Used by You

In order to be able to identify you beyond any doubt during the use of Nectar Arcade and allocate you for the purpose of the recommendation of new apps, and the calculation and payment of the bonus payments, we store other data about the use of Nectar Arcade and the end device used by you for this purpose. This includes the so‑called Google Advertiser ID (“GAID” for Android) and the so‑called Apple Identifier for Advertisers (“IDFA” for Apple iOS), the model and product name of your end device, the version of the operating system, the browser type used and its display resolution, as well as the IP address allocated to your end device and information about when which content from our offering was accessed, the names of the files requested, and their dates and times of access. We require this data to determine the content requested by you (e.g. text, images, apps and games, and product information as well as files provided for download etc.), in order to enable the offering of our services in accordance with the terms and conditions of use, and for the optimal display of Nectar Arcade on your end device. In order for app providers to finance our app suggestions, they must be sent the device ID for billing purposes if you installed a new app of one of our partners on your device after it has been suggested to you by Nectar Arcade.

The processing of this data takes place based on the consent granted by you (see above) and serves to perform the contract on the use of Nectar Arcade by you.

If our server logs also automatically log your IP address, this will take place solely for the purpose of guaranteeing the security of our systems, or for fraud prevention, and the IP address will be automatically erased after 30 days at the latest.

The processing of this data therefore takes place to safeguard legitimate interests of adjoe GmbH as the provider of Nectar Arcade.

Anonymised Usage Data to Improve Our Services

Otherwise, the above‑mentioned use data will be prepared, and we will process it in a general and anonymised manner in order to generally analyse the use of Nectar Arcade. This data includes the models and product names of the end devices employed for the use of Nectar Arcade, the version of the operating system, the browser types used and their display resolutions, as well as general details about when which content from our offering is accessed, the names of the files requested or which data is accessed most frequently, and their dates and times of access. This data is solely for the needs‑based design of Nectar Arcade and therefore to constantly improve our services, and detect and rectify any security flaws.

This data does not enable matches to be made to you personally. The processing of this data will take place to safeguard legitimate interests of adjoe GmbH as the provider of Nectar Arcade.

Note: Authorisation to Access Functions and Data on the End Device

In order to be able to use all functions of Nectar Arcade, you must grant Nectar Arcade any necessary authorization to access certain functions and data on your end device (however, this is dependent on your device and the operating system, on which we have no influence). We will use all authorisation granted by you solely for the above‑named purposes, even if authorisation granted (e.g. for technical reasons) theoretically enables other possible uses. You can normally (in other words, depending on your device and the installed operating system) cancel granted authorisation in your device settings at any time.

Legal Basis for the processing of your data

The legal basis for the processing of your data may be the following:

your consent to data use within the framework of Nectar Arcade in accordance with Art. 6(1)(a) GDPR;
the fulfilment of our service obligations resulting from the contract on the use of Nectar Arcade, in order to provide you with the desired services, in accordance with Art. 6(1)(b) GDPR;
our legitimate interest in accordance with Art. 6(1)(f) GDPR;
our commercial interests in the improvement of our services, so that we can better understand your needs and expectations and therefore improve our services for you;
for the prevention of fraud and to guarantee that the use of Nectar Arcade takes place completely and without fraudulent conduct and in accordance with the terms and conditions of use of Nectar Arcade: We reserve the right to exclude certain users and their end devices from the services, in the event of impermissible use behaviour, without specifying the exact reason (impermissible behaviour includes, for example, the use of multiple end devices from one IP address [if this is not customary at the respective location or in the respective country], multiple use of user accounts that are linked to payment service providers, and certain changes to the mobile operating systems, such as the granting of unrestricted admin access, installation of malware or a specific modification of the operating system etc.);
in order to guarantee the security of our services and ensure that our offering (apps and web server) is technically safe and works properly;
to secure and implement our contractual entitlements and claims.
Legal bases in accordance with Art. 6(1)(c) GDPR, if the collection, storage, transfer or other processing of the data is legally prescribed or necessary for the processing, in order to fulfil our statutory obligations.

What Rights Do You Have Regarding Your Data?

You have the right at any time to receive free information about the extent and content of the processing of your personal data by us. You also have the right to request from us the rectification, restriction of processing, or erasure of your personal data.

In the event of data privacy violations, you also have the right to lodge a complaint with the competent supervisory authority.

Further information can be found further down in this Data Privacy Statement, in the following section: “Your Rights as a Data Subject”.

In particular, your personal data will be used as follows during the use of Nectar Arcade:

Information about Withdrawing Consent

The withdrawal of your consent and the termination of the use of Nectar Arcade is possible at any time with future effect, and can be sent to adjoe GmbH by email to dataprivacy@adjoe.zone.

Special fees (beyond the regular transmission fees of your telephone or internet service provider, or letter postage) do not apply for the withdrawal of consent. In the event of withdrawal, your data will be erased from the Nectar Arcade database; if an erasure is not possible, it will be blocked instead of erased. Further use by Nectar Arcade is no longer possible after the withdrawal of your consent.

Data Retention

We adhere strictly to the principles of data minimisation and storage limitation when processing your personal data, in line with Article 5(1)(e) of the GDPR. This means we only retain your data for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Your personal data will be stored and processed under the following conditions:

Active Use of Nectar Arcade: While you are actively using Nectar Arcade, we will store and process your personal data for the duration of your usage, including the maintenance of your user account and the fulfilment of our contractual obligations and legitimate interests (e.g., ensuring you are not repeatedly shown the same games or offers).
User Accounts: If you have set up a user account, we will retain your personal data for as long as your account remains active or request deletion of your data.
Customer Support Queries: If you contact us with a query, we will process your personal data for as long as is necessary to address and resolve your request.
Inactivity Policy:

If your account is inactive for a continuous period of 12 months, we will consider it dormant.
During this 12‑month inactivity period, we retain your personal data only to ensure a smoother experience should you return (e.g., preserving your preferences and previously seen content).
If inactivity continues beyond 12 months, your personal data will be deleted or anonymised, unless we are legally required to retain it for longer.

We may retain certain personal data beyond these periods if necessary to:

Comply with legal or regulatory obligations,
Manage or assert our legal rights (e.g., for litigation or dispute resolution), or
Use the data in an anonymised format for statistical purposes.

Once your data is no longer needed for any of the above purposes, it will be securely deleted or anonymised so that it can no longer be used to identify you.

Forwarding of Data

The passing on of your personal data without your explicit prior permission will only take place in the following cases, in addition to the other cases named in this Data Privacy Statement:

If necessary for the resolution of unlawful use or misuse of Nectar Arcade or for prosecution, personal data will be passed on to the criminal prosecution authorities and, if necessary, to third parties who have been harmed. However, this will only take place if there are specific indications of unlawful conduct or misuse. We are also legally obliged to provide information to certain public bodies upon request. These are criminal prosecution authorities, authorities that pursue administrative offences punishable by a financial penalty, and the financial authorities.
The forwarding to third parties bound to professional secrecy can only take place if this is necessary for the implementation of the Nectar Arcade terms and conditions of use or other agreements, and our claims from the contract on the use of Nectar Arcade.
For the provision of our service, we are occasionally reliant on contractually bound third‑party companies and external service providers, e.g. for our customer service and the hosting of Nectar Arcade. In such cases, information will be passed on to these companies or individual people in order to enable further processing. These external service providers are carefully selected by us and checked regularly, to ensure that your privacy remains protected, and they may only process the data for the purposes specified by us. They are also contractually obliged by us to only handle your data exclusively in accordance with this Data Privacy Statement and the German data privacy laws.
As part of the further development of our business, the structure of our company may change, in that the legal form is changed, or subsidiary companies, business units or components are founded, purchased or sold. In the event of such transactions, the customer information will be passed on, together with the part of the company to be transferred, with your consent. During any transfer of personal data to third parties to the specified extent, we will ensure that the further use takes place in accordance with this Data Privacy Statement and the relevant data protection laws, and we will ask for your permission.

Security Measures to Protect the Data Stored by Us

We are obliged to protect your privacy and treat your personal data confidentially. Your data will be stored in our databases, which are only accessible to us and employees specifically trained in data protection.

If we use support from third‑party service providers who process your data on our behalf in order to provide our web services, we have ensured that they are subject to the strict conditions of this Data Privacy Statement, and that the use of your data beyond the cases described in this Data Privacy Statement will not take place. All contractors, service providers and their employees are subject extensively to our instructions and are also in particular legally obliged to observe, and trained in, the protection of your data.

In order to prevent the loss or misuse of the data stored by us, we take comprehensive technical and organisational safety precautions, which are regularly reviewed and adjusted to meet technological advances. If it is within our sphere of influence, we use in particular modern encryption techniques as well as a variety of other measures to prevent third parties from obtaining unauthorised information.

However, we would like to point out to you that due to the structure of the internet, it is possible that the data protection regulations and the above‑named security measures of other persons or institutions not within our area of responsibility cannot be observed. In particular, data passed on in a non‑encrypted form can be read by third parties, even if it is sent via email. We have no technical influence on this occurrence. In these cases, it is the responsibility of the user to protect the data it provides against misuse, by encryption or other methods.

Data Storage Abroad

We consistently ensure the strict data protection made legally binding in the European Union. In some cases, particularly for technical reasons, it may transpire that your data entrusted to us is stored on servers outside of your country (even outside of the European Union) in which you originally entered your data. In this case and in the case of a risk that countries to which your data are sent are not subject to data protection law that is just as strict as that in your home country and in the country from which you use our services, we ensure that your data is handled in accordance with the provisions of this Data Privacy Statement.

Your Rights as a Data Subject

As a data subject in the data processing by Nectar Arcade, you have the following rights listed in this section. Please note that we may request proof of your identity before we can process it.

Information, Restriction of Processing and Erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about the data stored about you personally, its origin and recipients, and the purpose of the data processing. On presentation of the respective prerequisites, you may also have the right to the rectification of incorrect data, the restriction of the processing, and the erasure of data.

Withdrawal of Your Consent to Data Processing

Some forms of data processing are only possible on the basis of your explicit consent. You can withdraw consent already given at any time. The legitimacy of the data processing carried out until the withdrawal will remain unaffected by the withdrawal.

Right to Data Portability

Regarding the data that we process automatically on the basis of your consent or in the performance of a contract, you generally have the right to access it yourself or have it provided to a third party in a customary, machine‑readable format. If you require the direct transfer of this data to a third party, this will only take place if this is technically possible with reasonable effort.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of data privacy violations caused by us, you have the right to lodge a complaint with the competent supervisory authority. The supervisory authority responsible for adjoe GmbH in data protection law matters is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), the contact details of which can be found in the following link: https://www.datenschutz-hamburg.de/wir-ueber-uns-kontakt/wie-erreichen-sie-uns.html.

Contact

Personal Data Requests: Should you have any questions or comments about the handling or use of your personal data, should you require information about the personal data stored about you, or should you wish to exercise your other rights named above, you can contact us by post at adjoe GmbH, An der Alster 42, 20099 Hamburg or by sending an email to dataprivacy@adjoe.zone.

Operational Data Protection Officer of adjoe GmbH

As legally stipulated, we have appointed a data protection officer for our company:

Mr Rechtsanwalt Stephan Krämer, LL.M.
KINAST Rechtsanwaltsgesellschaft mbH
Nordstraße 17A, 50733 Köln, Germany

You can contact our data protection officer via its website http://www.kinast-partner.de or via email at dataprivacy@adjoe.zone.

Customer Support

Nectar Customer support service can be contacted via the Nectar’s contact us link in the chatbot within the Nectar Arcade.

Links to Third‑party Websites

On our website, there are links to websites of other service providers. When activating these links, you will be forwarded directly to the websites of the other service providers. You will notice this by the change of URL, amongst other things.

We cannot accept any responsibility for the confidential handling of your data on these websites of third‑party companies, as we have no influence on the compliance of these companies with the data protection regulations. Please inform yourself about the use of your personal data by these companies directly on these websites.

Changes to this Data Privacy Statement

We always keep this Data Privacy Statement up‑to‑date. Therefore, we reserve the right to change it from time to time and update it with changes during the collection, processing and use of your data. Therefore, please read through this Data Privacy Statement regularly.

You can access the current version of this Data Privacy Statement at any time at T&C stage and also later under Data Privacy in the “Help Section” in Nectar Arcade.