Privacy Policy

1. Controller

If you have questions regarding data protection, you can contact us using the details above.

2. Hosting and Server Log Files

This website is hosted with IONOS SE. When you visit our website, the hosting provider collects and stores information in so-called server log files, which your browser transmits automatically.

Categories of data

• IP address
• Date and time of the request
• Requested page / file
• Referrer URL (if transmitted)
• Browser type and version
• Operating system

Purpose and legal basis

Processing is carried out to ensure the secure and stable provision of the website, to troubleshoot errors, and to defend against and investigate misuse or attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Processor

We have concluded a data processing agreement (Art. 28 GDPR) with the hosting provider.

Storage period

Server log files are stored for as long as necessary for the purposes stated above and are then deleted or anonymized in accordance with the hosting provider’s retention policies, unless longer storage is required for evidence purposes (e.g., in the event of security incidents).

3. Database-driven Website Content

Our website content (e.g., products, portfolio items, and news articles) is delivered through a database-driven system. The database stores editorial and technical information required to display this content.

Product and portfolio entries do not contain personal data of website visitors. News articles may, depending on topic, contain editorial references to public entities, products, or individuals.

4. Internal Analytics & Click Tracking

We use internal, server-side analytics to understand how website content and links are used (e.g., which product, news item, portfolio item or external link is clicked, and when) in order to improve usability and optimize our content.

How it works

For this purpose, we record aggregated interaction events (e.g., a click event with a content/link identifier and a timestamp). We do not create user profiles and we do not assign these events to identified or identifiable natural persons.

No third-party tracking

We do not use third-party analytics services or marketing tracking technologies for this purpose. This measurement is performed internally and does not involve cross-site tracking.

Legal basis

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in optimizing our website and improving usability).

5. Contact Form and E-mail Communication

If you send us requests via the contact form or by e-mail, we process the information you provide (e.g., name, e-mail address, message) for the purpose of handling your request and in case of follow-up questions.

Legal basis

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract) or Art. 6(1)(f) GDPR (legitimate interest in communication).

Storage period

We store contact requests only as long as required to process the request. If statutory retention obligations apply (e.g., for business correspondence), the data may be stored for the duration of those obligations.

6. Newsletter (Mailjet / Sinch Email)

If you subscribe to our newsletter, we process your e-mail address and any optional fields you provide (e.g., name) to send you updates about our products, releases, and studio news.

Double opt-in (DOI) and proof of consent

Subscription takes place using the double opt-in procedure. After you submit the newsletter form on our website, we first store your registration as a pending subscription and send you a confirmation e-mail. Only after you click the confirmation link will your subscription be activated.

For the purpose of documenting consent and preventing misuse, we process and store technical registration data such as the time of registration and confirmation, and (where technically provided) IP address and user agent.

Service provider (email delivery)

The delivery of newsletter e-mails is handled via Mailjet (Sinch Email), an e-mail service provider. Mailjet processes subscriber data on our behalf for the purpose of sending e-mails and managing subscriptions/unsubscribes.

Where your data is processed

According to Mailjet, personal data is hosted in secure data centers located within the European Union (e.g., Frankfurt, Germany and Saint-Ghislain, Belgium). Depending on the chosen configuration and sub-processors, processing outside the EU/EEA may occur in compliance with applicable safeguards.

Legal basis and withdrawal

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time with effect for the future by using the unsubscribe link included in every newsletter e-mail (provided by Mailjet).

Storage period

Pending registrations are deleted after the confirmation link expires or once the subscription is confirmed. Confirmed subscriptions are stored until you unsubscribe or request deletion, subject to statutory retention obligations.

7. Administration Area and Security

Access to internal administration areas is restricted to authorized administrators only. In this context, security-related technical logs may be processed to prevent misuse and ensure system integrity.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring security and preventing unauthorized access). Security logs are stored only for as long as necessary for security purposes.

8. External Links (e.g., Discord)

Our website contains links to external platforms (e.g., Discord or marketplaces). When you follow such a link, the respective provider may process personal data (e.g., IP address, browser data). The privacy policies of the respective providers apply.

9. Your Rights

Under the GDPR, you have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

If processing is based on consent, you can withdraw your consent at any time with effect for the future.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement.

For Bavaria (Germany), the competent supervisory authority for the private sector is typically the Bavarian State Office for Data Protection Supervision (BayLDA).

11. Updates to this Privacy Policy

We may update this privacy policy to reflect legal, technical or operational changes. The current version will always be available on this page.

Last updated: February 5, 2026