1. Data controller
Spuilwerk Studios UG (haftungsbeschränkt) i. G.Graf-von-Drechsel-Straße 11
92421 Schwandorf
Germany
Telephone: +49 151 26997958
Email: [email protected]
2. Website delivery and server logs
When you visit this website, your browser sends technical information to our web server and the providers involved in delivering the website. Server logs may include:
- The requesting device’s IP address;
- The date and time of the request;
- The requested file or URL;
- The referring URL, if supplied by your browser;
- Your browser type and version, and operating system;
- The HTTP status code and the amount of data transferred.
We use this information to provide the website, maintain its stability and security, and detect technical faults and misuse. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is the secure and reliable operation of our website.
Our web server logs are rotated daily and retained for up to 14 days, with the current day’s log in addition. Information may be kept longer where there is specific evidence of a security incident or unlawful use and it is needed to investigate that incident. Hosting and IT service providers may process these data on our behalf.
3. Cloudflare
We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to deliver and protect this website. Requests pass through Cloudflare’s network before reaching our server. Cloudflare may process technical connection and request data, including IP addresses, to deliver content, prevent attacks and maintain the service.
This processing is based on our legitimate interest in a secure, available website under Article 6(1)(f) GDPR. Cloudflare may process data outside the European Economic Area. Information about its processing, international transfer safeguards and retention practices is available in Cloudflare’s privacy policy and its data processing addendum.
Depending on the security checks applied to a request, Cloudflare may use technically necessary security cookies. We do not use Cloudflare Web Analytics or advertising tracking on this website.
4. Contacting us
If you contact us by email, telephone or post, we process the information you provide, particularly your contact details, the content of your enquiry and any related documents, to respond and communicate with you.
Where your enquiry concerns entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. Otherwise, it is Article 6(1)(f) GDPR, based on our legitimate interest in appropriately handling enquiries.
We delete these data once your enquiry has been resolved and no legal retention obligation or legitimate reason for further storage applies. Documents subject to commercial or tax retention obligations are retained for the applicable statutory period.
5. Recipients of personal data
Within our company, only people who need your data for the stated purposes receive access. Selected IT, hosting and communications providers may process data while delivering their services. Where they act as processors, they are contractually bound to our instructions.
We disclose data to other recipients only where necessary to perform a contract, required by law, covered by your consent, or otherwise permitted by a legal basis.
6. Music player, cookies and local storage
The artwork, fonts and both soundtrack files are served from this website. The music player attempts to start playback automatically if your browser permits it. You can pause playback, change the track or adjust the volume at any time. Loading music creates ordinary server requests of the kind described above.
The website itself does not set cookies, store preferences in your browser’s local storage, or use analytics or advertising services. Player settings remain in memory for the current page visit only. Cloudflare’s possible security cookies are described in section 3.
7. Discord and TikTok links
Our Discord and TikTok buttons are ordinary links, not embedded social plugins. The website does not load content from these platforms merely because you visit this page. If you follow a link, you visit the relevant provider’s service and its privacy policy applies.
For details, see Discord’s privacy policy and TikTok’s privacy policy.
8. Encrypted transmission
Connections to this website use TLS encryption. The website address begins with “https://”. Unencrypted HTTP requests are redirected to HTTPS.
9. Your rights
Subject to the applicable legal requirements, you have the right to access your data (Article 15 GDPR), have it rectified (Article 16), have it erased (Article 17), restrict its processing (Article 18), and receive it in a portable format (Article 20).
You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21). If processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact [email protected]. You also have the right to complain to a data protection supervisory authority (Article 77). The authority generally responsible for private-sector organisations in Bavaria is:
Bavarian State Office for Data Protection Supervision (BayLDA)Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
10. Providing data and automated decisions
You are not legally or contractually required to provide personal data simply to visit this website. However, the website cannot be delivered without the technically necessary connection data. When contacting us, you decide which information to provide; we may be unable to respond without the necessary contact details.
We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.
11. Changes to this policy
We update this policy when the website, our data processing or applicable legal requirements change. The version published on this page applies.