Privacy Policy
In accordance with EU Regulation 2016/679 (GDPR), this Privacy Policy of ScratchScratch informs users that personal data collected through the website will be processed in compliance with the principles of lawfulness, fairness, and transparency.

Data Controller
The data controller is Red Blu – Digital Advertising UG (haftungsbeschränkt)
Registered office: Terminalstraße Mitte 18, 85356 München-Flughafen, Germany
Purpose of Data Processing
- User registration and access to platform services
- Sending communications related to the promotional and advertising activities of registered companies
- Management of prize winnings, prize collection, and automated communications
- Legal and tax obligations
Types of Data Processed
Processed data may include: first name, last name, email address, province of residence, IP address, browsing data, and any other data voluntarily provided through the platform.
Legal Basis for Data Processing in ScratchScratch
Data processing is based on the user’s explicit consent, performance of a contract, or legal obligations.
Data Retention
Data will be retained for the time necessary to provide the service and for the periods required by applicable law.
Data Transfer
Some data may be transferred outside the EU, exclusively where appropriate safeguards are in place pursuant to Articles 44 et seq. of the GDPR (e.g., tools such as Google Analytics, reCAPTCHA, hosting services, etc.).
Data Security
ScratchScratch adopts technical and organizational measures to protect personal data from unauthorized access, loss, or misuse.
User Rights
Users may exercise their rights under Articles 15–22 of the GDPR, including: access, rectification, erasure, restriction, objection, and data portability. To exercise these rights, users can contact the Data Controller using the dedicated form available in this section.
Cookies and Tracking Tools
For information on the use of cookies and similar technologies, please refer to our Cookie Policy available on the website.
For further legal information, visit the website of the European Data Protection Board or consult the official GDPR guide.