Privacy Notice

1. General Information and Scope

This privacy policy gives you information about how medion collects, uses and shares your personal data when you use this website, register for challenges, or participate in other medion activities such as sweepstakes.

2. Responsible Entity

The responsible entity is medion GmbH, Am Zehnthof 77, 45307 Essen, Germany. (collectively referred to as medion, “we”, “us” or “our” in the privacy policy)
You can also reach the Data Protection Officer via the following email address: datenschutz@medion.com if you have any questions about this privacy policy, including any requests to exercise your legal rights.

3. Categories of Data Processed and Purposes of Processing:

We collect, store, and process the following categories of personal data:

When registering and participating in challenges

• Name
• Date of birth
• Email address
• Discord profile (optional)
• Phone number
• Address
• Nickname / Username
• Steam name / PS name (for online participation)
• Password

When signing up for the newsletter

• Email
• Name
• Date of birth
• Phone number (when signing up for the WhatsApp newsletter)

When participating in sweepstakes

• Name
• Date of birth
• Email address
• Phone number
• Address

When logging in/registering for an Erazer profile

• Name
• Date of birth
• Email address
• Nickname / Username
• Password

Below is a brief explanation of the purposes for collecting the above-mentioned data:

First and last name: 
First and last names are used to uniquely assign all other data. This also ensures that only natural persons are active users and participants. Additionally, it helps ensure fair participation and prevents users from registering multiple times under different pseudonyms.

Nickname / Username: 
The nickname is your freely chosen pseudonym. It is visible to all other users and is the name under which you appear publicly. Your nickname should adhere to appropriate conduct and must not violate any legal regulations (e.g., it must not be discriminatory). If these conditions are not met, the user account may be suspended.

Discord Username: 
You can optionally add your Discord username to your user profile. If you do, you will gain access to the official ERAZER Discord via a link and have access to exclusive information and communication channels. It is also important for challenge coordination that we can quickly and easily identify which player we are communicating with. Your Discord username is visible to all other users.
Discord Inc. is a U.S.-based company operating the Discord communication platform. As mentioned, we use Discord as our main communication tool for the YR2V challenge. Our interface with Discord allows us to automatically link accounts on our website with corresponding Discord profiles. For more information, please refer to Discord’s privacy notice: https://discord.com/privacy 

Epic Name: 
To track your participation in the YR2V challenge, you must provide your "Epic Name." This refers to the unique username associated with your Epic Games account. It serves as your player ID in multiplayer games and on the Epic Games platform, similar to a gamer tag. Your Epic Name is visible to all other users.

Date of Birth: 
This is primarily used to verify age for age-restricted games or to confirm eligibility for participation in certain activities. It is also used for statistical analysis.

Phone Number: 
Providing a phone number is optional and is used for communication regarding activities, such as providing important information or check-in requests.

Password: 
You set a password when creating your account, which gives you exclusive access to your user profile and protects it from third-party access. We do not have access to your password; it is stored in our databases in encrypted form. After creating an account, you can also change or reset your password.

Email Address: 
The email address is required to register for activities, newsletters, or to create an account. It is also used for account-related communication, such as resetting the password or verifying the account.

Image and video recordings as part of the YR2V tournament series
As part of participation in the YR2V Challenge and the associated live final, we may take photos and videos of participants. These may include game footage, live streams, webcam recordings, and group photos.
These recordings are used for tournament documentation and promotional/public relations purposes (for example, highlight clips and social media content).
The processing of this personal data is carried out on the basis of our legitimate interests (Article 6(1)(f) UK GDPR). Where we wish to use specific individual recordings (such as close-up interviews or prominently featured personal content), we will seek separate consent in advance in accordance with Article 6(1)(a) UK GDPR.

4. How is your personal data collected?

We use different methods to collect data from and about you including through:
Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you
apply for our products or services;
create an account on our website;
subscribe to our service or publications; 
request marketing to be sent to you;
enter a competition, promotion or survey; or
give us feedback or contact us. 
Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
Third parties or publicly available sources. We will receive personal data about you from various third parties and public sources as set out below
Technical Data is collected from the following parties:
analytics providers such as Google based outside the UK; 
advertising networks Google or Criteo based inside OR outside the UK; and
search information providers such as Google based inside OR outside the UK.
Identity and Contact Data is collected from publicly available sources such as Companies House and the Electoral Register based inside the UK.

5. Legal Bases

The legal basis for processing your data is the GDPR, in particular:

• Art. 6(1)(a) GDPR: If you have given us your consent to process personal data for specific purposes (e.g. subscribing to the newsletter or participating in a medion challenge, evaluating data for marketing purposes), the processing is lawful based on your consent. You can revoke your consent at any time. The revocation does not affect the legality of the data processed up to the point of revocation.
• Art. 6(1)(b) GDPR: Where the processing is necessary for carrying out marketing activities and providing our contractual services.
• Art. 6(1)(f) GDPR: We process your data based on our legitimate interests. These include the provision of services or information you request, the execution of technical and administrative website functions, the management of your user account and settings, the sharing of information with challenge organizers or service providers involved in the challenge, and contacting you in connection with your participation.

(A)  Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
 

6. Recipients

Recipients of your personal data are solely those employees of our company who need this information to fulfill their responsibilities or to carry out specific campaigns (need-to-know principle).

Additionally, affiliated companies and selected service providers, agents, and partners (e.g. logistics companies, IT service providers, web hosting, technical services) may also receive your data for these purposes.

medion GmbH has taken all necessary legal and contractual measures to ensure the protection of your personal data in accordance with legal requirements.

7. Data Transfers to Third Countries or International Organizations

We generally process your personal data only within the EU. Data transfers to countries outside the European Union (so-called third countries) only take place if necessary for the execution of your orders, required by law, or if you have given us your consent.

However, medion uses service providers for certain tasks who may in turn use subcontractors based in third countries (with headquarters, parent companies, or data centers outside the EU). According to Art. 45 GDPR, such a transfer is allowed if the European Commission has determined that the third country ensures an adequate level of protection.

We comply with these requirements and ensure your data is only transferred to countries with adequate data protection or where appropriate safeguards (e.g. Standard Contractual Clauses) have been agreed upon if no adequacy decision exists.

8. Storage Periods

Personal data is stored as long as necessary for the intended purpose, required by law, or justified by other legal reasons. 
Data is deleted as soon as the purpose of processing no longer applies or there is a reason for deletion under Art. 17(1) GDPR (e.g. revocation of consent) and no exception under Art. 17(3) GDPR applies.

9. Your Rights as a Data Subject

You have a number of rights under data protection laws in relation to your personal data. 

You have the right to:

Request access to your personal data (commonly known as a "subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.

You also have the absolute right to object any time to the processing of your personal data for direct marketing purposes (see OPTING OUT OF MARKETING in paragraph 4 for details of how to object to receiving direct marketing communications). 

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

[Withdraw consent at any time where we are relying on consent to process your personal data (see the table in section 4 for details of when we rely on your consent as the legal basis for using your data). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.]

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:

If you want us to establish the data's accuracy;
Where our use of the data is unlawful but you do not want us to erase it;
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

If you wish to exercise any of the rights set out above, please contact us at datenschutz@medion.com 
(B)    No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
(C)    What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
(D)    Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We have set up a dedicated privacy tool for your requests according to Art. 15(3)(3) GDPR. To exercise your rights mentioned above, please submit a privacy request via this tool. Please set your preferred user language within the privacy tool. We will review, process, and respond to your request in accordance with data protection regulations.

Additionally, you have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). For medion, this is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 200444, 40212 Düsseldorf https://www.ldi.nrw.de/metanaviKontakt/index.php 

9. Automated Decision-Making and Profiling

Automated individual decision-making, including profiling, does not take place.

10. Collection of Personal Data When Visiting Our Website

When using our website purely for informational purposes—meaning you do not register or otherwise transmit information to us—we only collect the personal data that your browser transmits to our server. This is technically necessary to display the website and ensure stability and security (legal basis is Art. 6(1)(f) GDPR):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

11. Cookies and Consent Management Tool

As a user, you can decide for yourself whether cookie-based services/technologies and related data collection are allowed on our portal, and you can adjust or revoke your consent at any time with future effect. This is possible via an information and consent banner displayed during initial visits or when services are updated, as well as via the cookie settings, which are accessible through a link at the bottom of every page. In compliance with GDPR, we only activate services requiring consent after obtaining your explicit consent. You may also use our website without giving this consent.

To provide this settings and consent functionality in line with GDPR and to inform users about the use of cookie-based technologies, we use a Consent Management System provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This system also documents your choices in your browser to fulfill data protection requirements for documentation and proof.

Usercentrics sets cookies and collects the date and time of your visit, browser and device information, anonymized IP address, as well as opt-in and opt-out data solely to store your consent and comply with legal obligations under § 25(2)(2) TDDDG in conjunction with Art. 6(1)(c) GDPR. Data is processed within the European Union.

More information can be found in the processor’s privacy notice: https://www.cookiebot.com/de/privacy-policy/

Details on each cookie and service, including options to activate, deactivate, or withdraw consent, are provided in the cookie policy or via the user interface of the consent management tool.

12. Newsletter

A) Via Email 
Our newsletters are sent by the service provider emarsys eMarketing Systems AG, Hans-Fischer-Str. 10, 80339 Munich, commissioned by medion. 
When you sign up for our free newsletter, we collect your email address and any other personal data you voluntarily provide (e.g., name, first name, possibly your date of birth).

You will regularly receive updates on new products, helpful tips, exclusive offers, voucher and gift campaigns. 
After registration, you’ll receive a confirmation email with a verification link to complete the sign-up process for the medion newsletter. 
No data is passed on to third parties without your consent. You may object to the use of your data for the aforementioned purposes—particularly for advertising and market or opinion research—at any time with future effect by contacting medion GmbH as the data controller. No other costs will incur aside from basic transmission fees.

Your data will be stored from the time of registration until you revoke your consent. 
If you no longer wish to receive the medion newsletter, you can unsubscribe at any time using the unsubscribe link in any newsletter. 
There, you can also review and change your granted consents. Alternatively, you can send an email to datenschutz@medion.com.

B) Via WhatsApp 
When signing up for the free WhatsApp newsletter, we collect your phone number and WhatsApp profile name. The legal basis for processing is Art. 6(1)(a) GDPR.

If you wish to receive regular offers as a subscription, you consent by clicking the “START” button or typing “START” in the chat. You may revoke your consent at any time by clicking the “STOP” button or sending the message “STOP” in the chat.

Your phone number will be transmitted to WhatsApp Ireland Limited and other WhatsApp-affiliated companies in third countries. 
By consenting to receive our offers via WhatsApp, you agree that your data may be transferred to a non-EU country that does not provide an adequate level of data protection or safeguards for your data.

WhatsApp is solely responsible for how your data is processed. You can find their privacy policy here: 
https://www.whatsapp.com/legal/privacy-policy-eea

13. Social Media

1. Our website contains links in the form of icons to social media platforms such as Facebook and Instagram. These are not plugins provided by the platforms themselves (e.g., Facebook or Instagram), which would automatically transmit user data upon page load. These are simple links that redirect you to the respective social media site. No user data is transmitted from our website to the social media platforms.
2. If you are already logged in to the respective social media service when clicking the icon, this will be recognized. If not, you will be prompted to log in. From that point, you are on the website of the respective social media platform.
3. Clicking on the Instagram icon will redirect you to Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. For information on how your data is collected, stored, and used by Instagram LLC, see their privacy policy: 
   https://help.instagram.com/155833707900388
4. Clicking on the TikTok icon will redirect you to TikTok Information Technologies UK Limited (WeWork, 125 Kingsway, London, WC2B 6NH, England) and TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. TikTok is generally the sole controller of data processing when visiting their site. More information: 
   TikTok Privacy Policy
5. Clicking on the YouTube icon will redirect you to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For information on data collection and usage by YouTube, see: 
   https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/
6. Clicking on the Discord icon will redirect you to Discord (responsible entity: Discord Netherlands BV). For Discord’s privacy policy, visit: 
   Privacy Policy | Discord

14. Single Sign-On (SSO) via Third-Party Providers

We offer you the option to log in to our services using “Single Sign-On” (SSO). If you use SSO, you will be redirected to the website of the respective third-party provider, where you will log in using your credentials. Personal data (such as your name and email address) may be transmitted to us by the third-party provider when you use this login option.

We use this data solely to create your customer account or provide access to our services. No permanent link exists between your account with us and the third-party provider.

Categories of processed data:

• Third-party account data (e.g., name, email address)
• IP address
• Registration timestamp

The processing of data received via SSO is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in simplifying the registration process. Data is stored until the purposes of processing are fulfilled.

For more information on how these providers process data, please refer to their privacy policies:

• Google: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

15. Floodlight / DV360

We use DV360, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for campaign management.

The data processed includes app, browser, and device data (unique identifiers, browser and device type and settings, operating system, mobile network info such as carrier name and phone number, and app version), interaction data (IP address, crash reports, system activity, date/time and referrer URL), activity data (search terms, viewed videos/content/ads, voice and audio data, purchase activity, communication/content sharing, activity on third-party websites/apps using Google services, and Chrome browsing history synced with a Google account), location data (GPS, IP address, sensor data, and nearby Wi-Fi access points or Bluetooth devices), and publicly available information.

Data processing, including cookie usage, takes place with your consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of processing prior to the revocation.

More information: https://policies.google.com/privacy

16. ActiveAgent

We use Active Agent, a service from ADITION technologies AG, Oststraße 55, 40211 Düsseldorf, Germany. Active Agent functions as a Demand Side Platform (DSP).

Processed data includes information about the internet connection (provider, speed, latency), browser (type, version, language, cookie handling), device (OS, language settings, brand, unique IDs, mobile ad ID, IP address), visited websites/apps (type, domain/app name, technical data including referrer URL, date/time of visit), user behavior (viewed content, duration, apps used), ads (which were shown, clicked, landing page visited, app downloaded), user decisions about processing operations, and location data.

Data processing, particularly cookie placement, is based on your consent under Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting prior lawful processing.

More information: https://www.adition.com/datenschutz-plattform/

17. Facebook

This is a tracking technology offered by Meta and used by other Meta services, such as Facebook Custom Audiences. It is used to track user interactions with websites (“events”) after they have clicked on an ad placed on Facebook or other services provided by Meta (“conversion”).

Data Controller: 
Meta Platforms Ireland Ltd. 
4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland

Data Processing Purposes:

• Marketing
• Retargeting
• Tracking acceptance
• Analytics
• Advertising
• Conversion tracking
• Personalization

Technologies Used: 
This list includes all technologies used by this service to collect data. Common technologies include cookies and pixels placed in the browser:

• Cookies
• Data attributes
• Pixel-specific data: HTTP headers & optional parameters

Data Collected: 
This list includes all (personal) data collected through the use of this service:

• Facebook User ID
• Browser information
• Usage data
• Device information
• Operating system
• Device ID
• Non-sensitive custom data
• Referrer URL
• Pixel ID
• Location information
• Pixel-specific data
• User behavior
• Viewed ads
• Viewed content
• Interactions with ads, services, and products
• Clicked elements
• Marketing information
• IP address
• Visited pages
• Facebook cookie information
• Usage/click behavior
• User Agent

Legal Basis: 
Art. 6(1)(a) GDPR — Consent

Place of Processing: 
European Union

Retention Period: 
Data is deleted as soon as it is no longer required for processing purposes. User interactions captured via websites are not stored for more than two years.

Transfer to Third Countries: 
The collected data may be transferred to countries that do not meet EU data protection standards. Countries to which data may be transferred include:

• Singapore
• United States of America
• United Kingdom

Data Recipients:

• Meta Platforms Ireland Ltd.
• Meta Platforms Inc.

Data Protection Officer Contact: 
https://www.facebook.com/help/contact/1650115808681298

More Info & Opt-Out:

• Opt out across all Meta domains: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
• Privacy policy: https://www.facebook.com/privacy/explanation
• Cookie policy: https://www.facebook.com/policies/cookies

18. Reddit

We use a conversion tracking and remarketing tool called the Reddit Conversion Pixel to evaluate our advertising efforts on Reddit. This service is provided by the U.S.-based company Reddit Inc. (548 Market St. #16093, San Francisco, California 94104). For the European region, Reddit Ireland Limited (Reddit EU Data Inquiries, 70 Sir John Rogerson's Quay, Dublin 2, Ireland) is responsible.

Using the Reddit Pixel allows Reddit to determine that you visited our online offering and to show you targeted ads (known as “Reddit Ads”) based on that visit. This helps ensure that our Reddit Ads are only shown to users who have shown interest in our services or meet certain criteria—for example, interest in a specific product. The collected information is transmitted to Reddit (“Customer Audiences”). The data we receive is anonymous and does not allow us to identify individual users.

The Reddit Pixel also allows us—and Reddit—to track user actions after they have clicked on a Reddit ad. This helps us measure the effectiveness of ads for statistical and market research purposes and optimize future campaigns.

The use of the Reddit Pixel and storage of conversion cookies occurs only if you have consented to the use of cookies and similar technologies when visiting our website. 
Legal basis: Art. 6(1)(a), Art. 49(1)(a) GDPR. 
You can revoke your consent at any time through the general opt-out mechanisms.

More information about Reddit Ads cookies: 
https://www.redditinc.com/policies/cookies

Data processing responsibility: 
Reddit is responsible for processing personal data associated with the delivery of our ads on their social network. 
Reddit’s full privacy policy can be found at: 
https://www.redditinc.com/policies/privacy-policy

19. Amazon

Amazon Europe Core SARL, Société à responsabilité limitée, 38 avenue John F. Kennedy, L-1855 Luxembourg, processes your personal data based on your consent via the Amazon Advertising Pixel for the purpose of generating campaign reports, tracking conversions and click events, and providing targeted advertising outside our websites (retargeting).

We do not receive any personal data about you from Amazon—only anonymized campaign reports concerning website audience and ad performance.

You can opt out of interest-based advertising from Amazon by:

• Changing your ad preferences on Amazon’s website: https://advertising.amazon.com/legal/ad-preferences?ref=a20m_us_fnav_l_adprf
• Visiting the Digital Advertising Alliance opt-out page: https://optout.aboutads.info/?c=2&lang=EN

Or using: https://www.youronlinechoices.com

For more information, visit: 
https://www.amazon.com/gp/help/customer/display.html?no-deId=GX7NJQ4ZB8MHFRNJ

20. Outbrain

This website uses technology from Outbrain Inc. ("Outbrain", 39 W 13th Street, New York, NY 10011, USA). This technology enables us to target users who have previously shown interest in our offerings on partner sites with tailored advertising, and to collect data accordingly.

The technology is based on cookie-enabled analysis of user behavior. These ads are displayed only in Outbrain advertising placements, either through Outbrain Engage or the Outbrain Extended Network.

If you do not wish to receive interest-based ads, you can disable this feature via the following link: 
https://www.outbrain.com/legal/privacy#privacy-policy

21. Taboola

This website uses Taboola’s Content Discovery Technology to recommend additional online content you may be interested in. To personalize these recommendations, Taboola collects information about your device and your behavior on this website (and other partner sites) using cookies and similar technologies.

For more information, visit Taboola’s privacy policy: 
https://www.taboola.com/de/policies/datenschutzerklaerung

To opt out, use the following link: 
https://accessrequest.taboola.com/access

22. Ad Up

Our websites include tracking from Ad Up, a technology and service provider of Axel Springer Teaser Ad GmbH (Axel-Springer-Straße 65, 10969 Berlin). Through the collection of anonymized and/or pseudonymized data, Ad Up can deliver interest-based advertising on websites for a certain period of time.

Ad Up uses cookies to offer advertisers conversion tracking, allowing them to measure the effectiveness of their ads and keywords.

More information about Ad Up’s data protection policies can be found at: 
https://www.adup-tech.com/datenschutz/

You also have the option to activate an opt-out cookie in your browser via the button provided on their website, thereby deactivating Ad Up tracking in that browser.

Last updated: July 2025