Privacy Policy

1. Controller

Glacial Guardians UG (haftungsbeschränkt)
Markenbildchenweg 21, 56068 Koblenz, Germany
Represented by: Karlo Lovric
Email: orga@glacialguardians.gg

We are not legally required to appoint a data protection officer. For privacy questions, contact us at the address above.

2. Principles

We only process personal data where this is necessary for a working website, our content and services, or where you have given consent. The legal bases are in particular Art. 6 (1) (a) GDPR (consent), (b) (contract and pre-contractual steps), (c) (legal obligation) and (f) (legitimate interests). Storing information on, or accessing it from, your device is governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): without your consent this only happens where it is strictly necessary.

3. Hosting and server log files

We run this website on our own cloud server rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. The server is located in a data centre in the EU. When you open a page, our server processes technically necessary data in server log files: IP address, date and time, requested page, referrer URL, browser type and operating system. This serves the delivery and security of the website (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days unless needed to investigate a security incident. We have a data processing agreement with Hetzner (Art. 28 GDPR).

4. Fonts

All fonts are served locally from our own server. No connection is made to Google or any other font provider when you open a page.

5. Contact form and email

When you write to us via the contact form or by email, we process your details (topic, name, email address, message) to handle your request. The form sends your details encrypted to our server, which forwards them as an email to our mailbox; the message is not stored on the server itself. The legal basis is Art. 6 (1) (b) GDPR where your request aims at a contract (such as a tryout or a partnership), and Art. 6 (1) (f) GDPR otherwise. We delete the data once the request is settled, unless statutory retention obligations apply.

To protect against spam and abuse, the form contains a field that is invisible to people, and our server keeps your IP address in memory for at most ten minutes to reject too many requests in a short time (Art. 6 (1) (f) GDPR). We use no third-party services and no cookies for this.

6. Consent management

On your first visit we ask whether we may load statistics services and external media. We store your decision in your browser's local storage (entry "gg-consent" with your choice and the time). This storage is strictly necessary to respect your choice (Section 25 (2) no. 2 TDDDG, Art. 6 (1) (c) GDPR). The entry never leaves your browser.

You can change or withdraw your consent at any time with effect for the future: Cookie-Einstellungen.

7. Google Analytics 4

Only with your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG) do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). No Google script is loaded before you consent.

Google Analytics sets cookies (e.g. "_ga", "_ga_<ID>") and records information about your use, such as pages viewed, time on page, approximate location (country, region), device and browser. Google Analytics 4 does not store IP addresses. We use Google's consent mode with advertising features disabled. Data is deleted after 2 months.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission. We have a data processing agreement with Google. More information: policies.google.com/privacy.

To withdraw consent, use the cookie settings in the footer. We then also delete any analytics cookies already set in your browser.

8. Twitch

You can watch our Twitch stream on the home page. The provider is Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA. The player only loads when you click it or allow external media in general (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Twitch then receives in particular your IP address and device information and may set cookies. Details: twitch.tv/p/legal/privacy-notice.

9. YouTube

We may embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com). Videos only load after your click or your consent to external media (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework.

10. Discord

We link to our Discord server and may embed a Discord widget. The provider is Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA. The widget only loads after your click or your consent to external media (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Discord then receives in particular your IP address.

11. Transfers to third countries

Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework if the recipient is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

Our server is located in the EU; operating the website and the contact form involves no transfer of data to third countries. Transfers to the USA (Google Analytics, Twitch, YouTube, Discord) only take place if you have consented to the service concerned.

12. Links to social networks

Our profiles on Twitch, YouTube, Discord, Instagram, X and TikTok are plain links. You are only taken to the provider when you click a link; no data is sent to it before that.

13. Your rights

You have the right to

• access the data we store about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7 (3) GDPR).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.

14. Data security

This website is only served encrypted via HTTPS (TLS). We take technical and organisational measures to protect your data against loss and unauthorised access.

15. Changes

We update this privacy policy when our website or the legal situation changes. The version published here applies.