Data privacy statement

of astragon Entertainment GmbH

Back to Website
Forest Divider

I. General information

Thank you for your interest in our website and welcome! Below we explain which personal data we collect and process when you use our services or make use of our offers.

Our standard

The protection of your privacy is of the utmost importance to us. For this reason, compliance with the statutory provisions on data protection is a given for us. However, it is also important to us that you know at all times which personal data we collect and why, and how we process it. We will also be happy to explain to you what rights you have and how you can exercise them.

What is personal data?

In short, anything that can be used to identify you as an individual person, whether through the information itself or in connection with other information. Examples of this are your name, your e-mail address or even a customer number, but also the time at which you visit our website, if this is stored together with your IP address. We always endeavour to collect as little personal data as possible. At the same time, we inform you in detail in this document about your personal data, if we collect any.

Why is this document so long?

The legislator requires that we describe all personal data to you individually,

  • What personal data we collect (= type of data collected)
  • Which law, regulation or provision allows us to do this (= legal basis)
  • Why we collect this data (= purpose of use)
  • What exactly happens to your data (= type of processing)
  • How long we store your personal data
  • Which rights you have in relation to your personal data (= data subject rights)

1. Responsible body & company data protection officer

We are responsible within the meaning of the European General Data Protection Regulation (GDPR):

astragon Entertainment GmbH
Am Wehrhahn 33, 40211 Düsseldorf
info@astragon.de

For all enquiries regarding data protection, please contact our company data protection officer. You can reach the data protection officer at: datenschutz@astragon.de

2. Legal basis

We collect and process personal data based on the following legal bases:

  • Consent pursuant to Article 6 para. 1 lit. a of the General Data Protection Regulation (GDPR). Consent is a declaration of intent. This can be given in writing in the form of a declaration or by any other unambiguous affirmative act. Either way, consent must be voluntary, apply to a specific case and unequivocally express that the data subject agrees to the processing of their personal data. To this end, the data subject must be adequately informed and understand the consent.
  • Necessity for contract fulfilment or implementation of preparatory measures pursuant to Article 6 para. 1 lit. b GDPR.
    This means: the data is required so that we can fulfil our contractual obligations towards you or we need the data to prepare the conclusion of a contract with you.
  • Processing for the fulfilment of legal obligations pursuant to Article 6 para. 1 lit. c GDPR.
    This means that we are required to process the data, e.g. due to a law or other regulations.
  • Processing to safeguard legitimate interests in accordance with Article 6 para. 1 lit. f GDPR
    This means that the processing of data is necessary to protect our legitimate interests or those of third parties, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail.

We store and access information on your device based on the following legal bases:

  • • Consent pursuant to Section 25 para. 1 of the Telecommunications and Digital Services Data Protection Act (TDDDG).

3. Rights of data subjects

When it comes to your personal data, you are the data subject. You are entitled to the following rights with regard to data processing by us to the extent specified in the respective articles of the General Data Protection Regulation:

  • Right to information in accordance with Art. 15 GDPR - i.e. the right to be informed by us about how your personal data is processed and which personal data is processed by us
  • Right to rectification in accordance with Art. 16 GDPR - i.e. the right to demand the immediate rectification of incorrect personal data concerning you, including the completion of incomplete data
  • Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR - i.e. the right to request the erasure of your personal data, provided that certain conditions are met
  • Right to restriction of processing in accordance with Art. 18 GDPR - i.e. the right to request the restriction of the processing of your personal data, provided that certain conditions are met
  • Right to data portability in accordance with Art. 20 GDPR - i.e. the right to request that you receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to transmit this data to a third party, provided that certain conditions are met
  • Right to object pursuant to Art. 21 GDPR - i.e. the right to object to the processing of your personal data if the processing is based on our legitimate interests, provided that certain conditions are met

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, work or the place of the alleged infringement if you believe that the processing of personal data relating to you infringes the GDPR.

4.Deletion of data and duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

II. Specific data processing

1. Data collection when visiting the website

a) Scope of the data processing

When you visit our website, the following data is processed by our web server:

  • IP address
  • Date and time of the request
  • Time zone difference to GMT
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred
  • Referrer URL
  • Browser, operating system, language and version

Our website is hosted and technically supported by Second Stage, which processes this data on our behalf as a processor.

b) Legal basis

The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interests). Our legitimate interest is the secure and technically error-free provision of our website.

c) Purpose of the data processing

The processing is necessary to deliver the website to your device, to ensure stability and security, and to prevent misuse.

d) Storage duration

Server log data is stored only for as long as necessary for the purposes stated above and is then deleted or anonymized, unless longer retention is required for security reasons or legal obligations.

e) Right to object

The collection of data for providing the website and the storage in log files is mandatory for operation of the website; therefore, there is no right to object.

2. Consent management with Cookiebot

a) Scope of the data processing

We use the consent management platform Cookiebot to obtain, manage and document your consent for cookies and similar technologies on our website.

Cookiebot processes, in particular, the following data:

  • Your consent status (granted/denied)
  • Time of consent
  • Consent ID / consent key
  • Technical information (e.g., anonymized IP address, user agent)

b) Legal basis

The legal basis is Art. 6(1)(c) GDPR (legal obligation) in conjunction with Art. 6(1)(f) GDPR (our legitimate interest in compliant consent management) and, where applicable, Section 25(2) TDDDG.

c) Purpose of the data processing

The purpose is to store your selection and to provide proof of consent.

d) Storage duration

Consent data is stored for as long as necessary to demonstrate compliance and is deleted in accordance with our retention concept.

e) Exercising your choices

You can change or withdraw your consent at any time via the cookie settings on our website.

3. Google Tag Manager

a) Scope of the data processing

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tag management system that allows us to centrally manage and deploy tracking and marketing tags on our website. The tool itself does not create user profiles, does not store cookies for its own purposes and does not independently analyze user behavior.

However, when tags are triggered, technical data such as your IP address may be transmitted to Google. The actual data processing takes place only through the respective services integrated via Google Tag Manager (e.g., Google Analytics or advertising pixels), which are described separately in this Privacy Policy.

b) Legal basis

Where Google Tag Manager is used purely for technical tag administration, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in efficient website management).

If tags managed via Google Tag Manager involve the storage of or access to information on your device, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

c) Purpose of the processing

The purpose is the efficient technical management and integration of third-party services on our website.

Further information on data processing by Google can be found at: https://policies.google.com/privacy

4. Google Analytics

a) Scope of the data processing

With your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze how users interact with our website. The information generated may include:

  • IP address (shortened/anonymized within the EU where applicable)
  • Device and browser information
  • Visited pages and user interactions
  • Referrer URL
  • Timestamps and session duration

The data may be transmitted to Google servers and processed there, including in the United States.

b) Legal basis

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

c) Purpose of the processing

The purpose of the processing is to analyze website usage, improve user experience and optimize our online presence.

d) Third country transfers

Data may be transferred to third countries, in particular to the United States. Transfers are based on adequacy decisions pursuant to Art. 45 GDPR or appropriate safeguards pursuant to Art. 46 GDPR (e.g., EU Standard Contractual Clauses), where applicable.

e) Withdrawal of consent

You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

Further information on data processing by Google can be found at: https://policies.google.com/privacy

5. Online advertising and conversion tracking technologies

a) Scope of the data processing

With your consent, we use online advertising and conversion tracking technologies to measure the effectiveness of our advertising campaigns, optimize marketing activities and build audiences for interest-based advertising.

In particular, we use the following services:

These technologies allow us to record user interactions on our website (e.g., page views, newsletter registrations or other defined events) and to attribute them to advertising campaigns.

Depending on the implementation, the following categories of data may be processed:

  • IP address (possibly shortened)
  • Device and browser information
  • Referrer URL
  • Visited pages and interactions/events
  • Timestamps
  • Cookie identifiers and other online identifiers

The data may be transmitted to the respective providers and may also be processed by them for their own purposes in accordance with their privacy policies. Where legally required, we have concluded appropriate agreements with the providers.

b) Legal basis

The legal basis for the use of these technologies is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

c) Purpose of the processing

The purpose of the processing is conversion measurement, campaign optimization, audience creation and the display of interest-based advertising.

d) Third country transfers

Some providers may process personal data outside the European Union or the European Economic Area, in particular in the United States. In such cases, data transfers are based on adequacy decisions pursuant to Art. 45 GDPR or on appropriate safeguards pursuant to Art. 46 GDPR (e.g., EU Standard Contractual Clauses), where applicable.

e) Withdrawal of consent

You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

6. Newsletter dispatch (CleverReach)

a) Scope of the data processing

If you subscribe to our newsletter, we process the data you provide (e.g., email address and, if applicable, name) to send you the newsletter.

We use CleverReach as a service provider for newsletter dispatch and campaign management. Registration typically takes place via a double opt-in procedure. To verify your subscription, we may also process the time of registration, confirmation, and your IP address.

If we use success measurement, we also process information on whether a newsletter was delivered, opened and which links were clicked (newsletter tracking). You can choose whether you want to consent to tracking where required.

b) Legal basis

The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR. The legal basis for storing proof of consent is Art. 6(1)(c) GDPR and/or Art. 6(1)(f) GDPR.

c) Purpose

Sending newsletters, communicating updates and marketing information, and (if applicable) optimizing newsletter content.

d) Storage duration

We store your data for newsletter dispatch until you unsubscribe or withdraw your consent.

e) Withdrawal

You can withdraw your consent at any time with effect for the future, e.g., via the unsubscribe link in each newsletter.

7. YouTube embedded

a) Scope of the data processing

We embed videos from Youtube.com on our websites. In this case, this content is not initially loaded. Only when you click on a correspondingly labelled link with information about the respective provider of the integrated content, this content will be loaded. This establishes a direct connection to the web server of the respective provider and the respective provider can process your personal data. Please refer to the provider's privacy policy to find out what data is involved:
Google / YouTube provides data protection information here: https://policies.google.com/privacy

b) Legal basis

The legal basis for enabling data collection by the respective content provider is your express consent pursuant to Art. 6 para. 1 lit. a GDPR by clicking on the corresponding link despite a corresponding notice.

c) Purpose of the data processing

The purpose of enabling data collection by the content providers is to enable access to further content of interest to the visitor on our website.

d) Duration of the storage

We do not store any data.

e) Right to objection and removal

You can decide for each embedded content whether you want to give the corresponding consent. Claims for objection or deletion must then be addressed to the data controller.

8. Use of our Discord server

a) Scope of the data processing

We operate a server with the Discord service of Discord Netherlands BV. This allows users to communicate with each other in writing or via voice chat and exchange content. Data processing by Discord takes place on the basis of the necessary contract with Discord itself. The scope and legal basis for processing by Discord can be found in their data protection information: https://discord.com/privacy

We ourselves do not have access to the Discord database and can only moderate the respective channels editorially and exclude users from using them.

b) Legal basis

The legal basis for the processing is the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR. There is joint responsibility with Discord in accordance with Art. 26 GDPR.

c) Purpose of the data processing

The purpose is to exchange information about our game with the user and other players.

d) Duration of the storage

The storage period of posts is determined by Discord in its privacy policy.

e) Right to objection and removal

Users can delete their messages or their customer account on Discord themselves at any time or contact the contact point specified in Discord's privacy policy. If the deletion of posts is desired, you can contact us at datenschutz@astragon.de.

9. Social media presence

a) Scope of the data processing

We maintain publicly accessible profiles on various social networks. Your visit to these profiles triggers a variety of data processing operations. These data processing operations may be necessary for individual functionalities of our profiles in social networks. These functionalities are not available to the user or are only available to a limited extent if the user does not provide us with their personal data. When users visit our profiles, their personal data is not only collected, used and stored by us, but also by the operators of the respective social network. This happens even if the user does not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and are not necessarily traceable by us. The user can find details about the collection and storage of the user's personal data and about the type, scope and purpose of its use by the operator of the respective social network in the data protection declarations of the respective operator:

As the operator of a Facebook fan page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged into it when you visit our fan page. In addition, Facebook provides us with anonymous usage statistics that we use to improve the user experience when visiting our fan page. We do not have access to the usage data that Meta Platforms collects to compile these statistics. Meta Platforms has committed to us to assume primary responsibility under the GDPR for the processing of this data, to fulfil all obligations under the GDPR with regard to this data and to make the essentials of this obligation available to the data subjects.
We do not have access to the databases of the social media providers.

b) Legal basis

The legal basis for the processing of the data is Art. 6 para. 1 lit. a and f GDPR. This data processing serves our (and your) legitimate interest in enabling dialogue with you and other players about our game and improving the user experience when visiting the respective social media presence in line with the target group.
There is joint responsibility with the social media providers in accordance with Art. 26 GDPR.

c) Purpose of the data processing

The purpose is to exchange information with you and other players about our game and to improve the user experience when visiting our social media presences for specific target groups.

d) Duration of the storage

The storage duration of data processing operations on our social media presences is determined by the respective privacy policies of the social media providers.

e) Right to objection and removal

You can delete your messages or your customer account on the social media sites yourself at any time or contact the contact points specified in the privacy policies of the social media providers.

Last updated: 25.02.2026