Privacy Policy

Data Controller

The controller responsible for the processing of your personal data in connection with the online services of MGEN Poker Lounge is the operator of the poker lounge in Berlin, Germany (“we”, “us”). Full contact details are available in our Imprint / Impressum.

Personal Data We Collect

We may process the following categories of personal data when you use our website and services:

• Account data (e.g. name, email address, password, contact details).
• Reservation data (e.g. date and time of booking, table preferences, group size).
• Technical data (e.g. IP address, device information, browser type, access times).
• Communication data (e.g. messages and enquiries you send to us).
• Data from sign-in providers (e.g. Google), if you choose to log in via such services.

Purposes & Legal Bases of Processing

We process your personal data only where permitted by law. In particular, we rely on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) – to create and manage your account, handle reservations, and provide access to our services.
• Legal obligations (Art. 6(1)(c) GDPR) – for example, to comply with regulatory requirements or retention obligations.
• Legitimate interests (Art. 6(1)(f) GDPR) – such as ensuring the security of our systems, preventing misuse, and improving our services.
• Consent (Art. 6(1)(a) GDPR) – in specific situations such as optional marketing communications or certain non-essential cookies. You can withdraw consent at any time with effect for the future.

Cookies & Analytics

Our website may use cookies and similar technologies to enable core functionality (such as secure log-in and reservation management) and, where you consent, for analytics and performance purposes.

You can manage your cookie preferences at any time via the cookie banner or your browser settings. Essential cookies, which are strictly necessary for the operation of the site, are used on the basis of our legitimate interests and do not require consent.

Data Recipients & Transfers

We may share your personal data with carefully selected service providers who support our operations, for example hosting providers, email delivery services, or IT support. These processors act on our instructions and are contractually bound to appropriate data protection obligations.

Where personal data is transferred to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, in accordance with applicable data protection law.

For the processing of payments, we use external payment service providers. Depending on the selected payment method, this may include PayPal (Europe) S.à r.l. et Cie, S.C.A. and its affiliated service Braintree. These providers process personal data (such as payment details and transaction identifiers) as independent controllers or processors for the purpose of payment execution and fraud prevention.

Retention Periods

We store your personal data only for as long as necessary for the purposes described in this Privacy Policy, including to meet legal, accounting, or reporting requirements. When data is no longer required, it will be deleted or anonymised in accordance with our retention policies.

Your Rights

Under the GDPR and applicable data protection law, you have various rights regarding your personal data. Subject to the conditions set out in the law, these rights may include:

• Right of access to your personal data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”) in certain circumstances;
• Right to restriction of processing;
• Right to data portability;
• Right to object to certain processing, including direct marketing;
• Right to withdraw consent where processing is based on your consent.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or alleged infringement.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or destruction. However, no online system can be guaranteed to be 100% secure, and you share information with us at your own risk.

Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details provided in our Imprint / Impressum.