๐Ÿ”’ Privacy Policy

Last updated: January 2026

1. Overview of Data Protection

General Information

The following information provides an easy-to-navigate overview of what happens with your personal data when you visit this website. "Personal data" refers to all data that can be used to personally identify you. For detailed information about data protection, please consult our complete Privacy Policy below.

Data Recording on This Website

Who is responsible for data recording?

The data on this website is processed by the operator of the website, whose contact information is available in the "Controller Information" section of this Privacy Policy.

How do we record your data?

We collect your data when you share it with us, for example through our contact form or Discord login. Other data is recorded automatically by our IT systems when you access this website, including technical information such as web browser, operating system, or access time.

What do we use your data for?

A portion of the data is generated to ensure error-free website provision. Other data may be used to analyze usage patterns and improve our services.

What rights do you have regarding your data?

You have the right to receive information about your archived personal data, its source, recipients, and purposes at any time without charge. You also have the right to demand rectification or deletion of your data. Please contact us if you have questions about data protection.

2. Hosting

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the host's servers, including IP addresses, contact requests, metadata, communications, and other data generated through the website.

External hosting serves to fulfill contracts with our customers (Art. 6(1)(b) GDPR) and for secure, fast, and efficient provision of our online services (Art. 6(1)(f) GDPR).

Hosting Provider:

netlixor.de

Data Processing Agreement

We have concluded a data processing agreement (DPA) with our hosting provider, ensuring they process personal data only based on our instructions and in compliance with the GDPR.

3. General Information & Mandatory Information

Data Protection

We take the protection of your personal data very seriously and handle it confidentially in compliance with statutory data protection regulations and this Privacy Policy.

Please note that data transmission via the Internet (e.g., email communication) may have security vulnerabilities. Complete protection against third-party access is not possible.

Controller Information (GDPR)

Lucas Wilms

๐Ÿ“ž Phone: 015679569872

๐Ÿ“ง Email: dsgvo@stafflist.de

Storage Duration

Unless a specific storage period is specified, your personal data remains with us until the purpose for collection no longer applies. Upon justified deletion request or consent revocation, your data will be deleted unless legally permissible reasons for storage exist (e.g., tax or commercial law retention periods).

Legal Basis for Data Processing

If you have consented to data processing, we process your data based on Art. 6(1)(a) GDPR. For contract fulfillment, we rely on Art. 6(1)(b) GDPR. For legal obligations, Art. 6(1)(c) GDPR applies. Processing based on legitimate interest follows Art. 6(1)(f) GDPR.

Recipients of Personal Data

In the scope of our business activities, we cooperate with various external parties. In some cases, this requires the transfer of personal data. We only disclose personal data if required for contract fulfillment, if legally obligated, if we have a legitimate interest (Art. 6(1)(f) GDPR), or if another legal basis permits disclosure.

4. Your Rights

Revocation of Consent

Many data processing operations require your express consent. You can revoke any consent you have given at any time. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to Object (Art. 21 GDPR)

IF DATA IS PROCESSED BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING AT ANY TIME BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION.

We will cease processing unless we can demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms, or if the processing serves to claim, exercise, or defend legal entitlements.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME. Your data will subsequently no longer be used for direct advertising purposes.

Right to Lodge a Complaint

In the event of GDPR violations, you are entitled to lodge a complaint with a supervisory agency, particularly in the member state where you reside, work, or where the alleged violation occurred.

Right to Data Portability

You have the right to receive data we process automatically based on consent or contract fulfillment in a common, machine-readable format. Direct transfer to another controller will be done only if technically feasible.

Right to Information, Rectification & Deletion

You have the right to demand information about your archived personal data, their source, recipients, and processing purpose. You may also have your data rectified or deleted. Contact us for any questions about personal data.

Right to Processing Restrictions

You can demand processing restrictions in the following cases:

Restricted data may only be processed with your consent, for legal claims, to protect others' rights, or for important public interest reasons.

5. Data Recording on This Website

SSL/TLS Encryption

This website uses SSL or TLS encryption for security. Encrypted connections are indicated by "https://" in the address bar and a lock icon in your browser. When encryption is active, transmitted data cannot be read by third parties.

Use of AI (Discord API)

We use AI-supported services via the Discord API on our website. When you interact with elements using artificial intelligence, your input including metadata is processed to generate appropriate responses.

This is based on Art. 6(1)(f) GDPR - we have a legitimate interest in using modern technologies to improve our services. If consent is required, processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.

Contact via Email, Phone, or Fax

If you contact us, your request including all personal data (name, inquiry) will be stored and processed to handle your request. We do not share this data without your consent.

Processing is based on Art. 6(1)(b) GDPR if related to contract fulfillment, otherwise on Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) GDPR (consent). Data remains with us until you request deletion or the storage purpose lapses. Statutory retention periods remain unaffected.