Privacy

1. Controller

2. Hosting and connection data

This static website is hosted on Microsoft Azure Static Web Apps. When you visit, Microsoft processes connection and request data needed to deliver the website. This may include your IP address, date and time, requested URL, transferred data volume, HTTP status, browser and operating system information, and the referring page where your browser supplies it.

Processing is necessary to deliver, maintain and secure the website and to identify and prevent faults and misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure, reliable website. Recipients include Microsoft as hosting provider and the subprocessors involved in operating the service.

We do not operate visitor analytics or additional access logging. There is no verified uniform retention period for the hosting service’s technical logs. Retention depends on the technical purpose, security requirements and applicable legal duties; data must be deleted or anonymised once no longer needed for those purposes.

3. Microsoft and international processing

The existing Azure resource is configured in East US 2 (United States). Static content is delivered globally. Processing outside Germany and the European Union, particularly in the United States, is therefore possible; the resource region does not limit worldwide delivery.

Microsoft describes its data protection arrangements in its privacy statement and the Microsoft Products and Services Data Protection Addendum (DPA). For transfers from the EEA, Microsoft refers to adequacy decisions where applicable and standard contractual clauses. Details of these safeguards and data protection terms are available in the documents below. You may also contact us for further information or a copy of the safeguards applicable to a particular processing activity.

Microsoft privacy statement
Microsoft Products and Services DPA

4. HTTPS, local assets and cookies

The website is delivered over HTTPS/TLS. Fonts and product images are served with the website; visiting a page does not load external font, image or media services. Your language is selected through the URL.

Our website does not set cookies or store preferences in localStorage or sessionStorage. We use no analytics or marketing services, advertising pixels or third-party scripts. There are no user accounts, newsletters, embedded videos or contact forms. This technical setup does not use a consent banner.

5. Email contact

If you email us, we process your email address, your name if provided, the message content and related communication data to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries; otherwise it is Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries.

The contact address uses Gmail. Google processes messages and connection data to provide email services. Google identifies Google Ireland Limited as the relevant provider for EEA users. Google companies or service providers outside the EEA may also process data. Google explains its use of adequacy decisions and standard contractual clauses in its data transfer information. Gmail is used when you send an email; no Google service is embedded in this website.

We retain correspondence for as long as needed to deal with and document the enquiry. It is then deleted unless statutory retention duties or the establishment, exercise or defence of legal claims require further retention. The period depends on the content and purpose of the message.

Google privacy policy
Google: international data transfers

6. External links and Steam

Our Steam links are ordinary links, not embedded widgets. A connection to the destination is established when you follow a link. The destination provider is responsible for subsequent processing. For the Steam Store, this is Valve and Steam’s privacy policy applies. The same principle applies to other external websites linked here.

Steam privacy policy

7. Your rights

Subject to the applicable legal requirements, you have the following rights:

• Access to your personal data (Article 15 GDPR).
• Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR).
• Erasure and restriction of processing (Articles 17 and 18 GDPR).
• Data portability for automated processing based on consent or a contract (Article 20 GDPR).
• Withdrawal of any consent you have given, with effect for the future (Article 7(3) GDPR).

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. We will then stop processing unless we demonstrate compelling legitimate grounds or processing is required for the establishment, exercise or defence of legal claims.

To exercise your rights, contact us at the email address above.

8. Right to lodge a complaint

Under Article 77 GDPR, you may complain to a supervisory authority, particularly in the member state of your habitual residence, place of work or the alleged infringement. The authority responsible for our business in Lower Saxony is:

Der Landesbeauftragte für den Datenschutz Niedersachsen

9. Providing data and automated decisions

You are not required to send us an email. Without the information needed to respond, we may be unable to handle your enquiry. Technical connection data is necessary to deliver the website. We do not carry out profiling or automated decisions with legal or similarly significant effects.