Privacy policy

Controller

The controller for the processing of personal data on this website is Vinstand Studios UG (haftungsbeschränkt). Address, authorised representatives and contact details are stated in the imprint.

No data protection officer has been appointed; the conditions of Art. 37 GDPR and Section 38 BDSG are not met.

Hosting and delivery

This website runs on a rented virtual server operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, in a data centre within the European Union. A data processing agreement under Art. 28 GDPR is in place with STRATO.

When a page is requested, the server processes the data without which no connection can be established: IP address, requested address, time, amount of data transferred and browser identification. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in delivering the page and in defending against attacks.

No permanent access log is kept on this server. Connection data is processed for the duration of the request and is not stored afterwards.

Content delivery network and attack mitigation

All requests to this website pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare terminates the encrypted connection, mitigates overload and attack attempts and forwards the request to our server. In doing so, Cloudflare processes your IP address, the requested address and the browser identification, among other data.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in a reachable website protected against attacks; without this layer in front of it, the server would be directly exposed.

A data processing agreement is in place with Cloudflare. For transfers to the United States, Cloudflare relies on the European Commission's standard contractual clauses. Its representative in the Union under Art. 27 GDPR is Cloudflare Portugal, Unipessoal Lda., Largo Rafael Bordalo Pinheiro 29, 1200-369 Lisbon, Portugal.

Language selection

This website stores the displayed language in a cookie named NEXT_LOCALE. Its content is the language code de or en, nothing else.

It is set as soon as the displayed language differs from the language your browser reports: after a click in the language switcher, or when you open a language version directly that does not match your browser setting. If the two match, no cookie is created.

It is a session cookie and is deleted when you close your browser. Recognising you as a person is therefore neither possible nor intended.

The cookie is necessary for the service you have expressly requested and therefore does not require consent under Section 25(2) no. 2 TDDDG. The legal basis for the subsequent processing is Art. 6(1)(f) GDPR. You can delete the cookie in your browser settings at any time.

Consent to cookies

We store your decision about non-essential cookies in a cookie named holcuras_consent. It contains nothing but the time of your decision, a version number of the purposes presented to you, and the identifiers of the categories you agreed to. It holds no identifier for you as a person, and none is created.

The cookie expires after six months; after that we ask again. If we add a new purpose, we raise the version number — your previous decision then loses its validity and the notice reappears, because consent only ever covers the purposes named at the time.

Storing the decision itself is exempt from consent under Section 25(2) no. 2 TDDDG: without this cookie we could not honour a rejection. The legal basis for the processing you agree to is Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). The dialog for this opens via “Cookie settings” in the footer, which makes withdrawing as easy as giving consent. The lawfulness of the processing carried out until then remains unaffected.

At present no processing beyond the necessary cookies is active. The statistics category is already listed, but no service has been assigned to it yet; as long as that is the case, nothing is loaded even where consent has been given.

Contact form

Through the form on the contact page you send us your name, your email address and your message. We forward these details as an email to our mailbox; there is no database or ticketing system in which the enquiry would additionally be stored.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or its initiation, and Art. 6(1)(f) GDPR otherwise; the legitimate interest lies in answering enquiries.

For delivery we use the SMTP relay service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service accepts the message and delivers it to our mailbox. A data processing agreement under Art. 28 GDPR is in place.

To fend off automated submissions we limit the number of submissions per IP address. Your IP address is counted for this purpose in the server's memory only, is not written to disk and is not transmitted with your message. Restarting the service discards the counter.

We delete the message as soon as it is no longer needed and no retention period under commercial or tax law stands in the way.

Contacting us by email

If you write to the address given in the imprint, we process your details solely in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where a contract or its initiation is concerned, and Art. 6(1)(f) GDPR otherwise.

We delete the message as soon as it is no longer needed and no retention period under commercial or tax law stands in the way.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21).

An informal message to the address given in the imprint is enough for any of these rights.

Right to lodge a complaint

Irrespective of the above, you may lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.