LEGAL
PRIVACY POLICY
DATA CONTROLLER
GENERAL INFORMATION
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
We take the protection of your personal data very seriously and treat your data confidentially and in accordance with statutory data protection regulations.
Hosting, CDN & Protection (Cloudflare, Bunny CDN)
To deliver our website securely and quickly, we use an upstream reverse proxy as well as content delivery networks. Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) acts as a reverse proxy and provides a Web Application Firewall (WAF) and protection against DDoS attacks; in doing so, Cloudflare processes in particular your IP address in order to enable content delivery and to fend off attacks. Static content (images, videos, fonts, and other assets) is additionally delivered via the Bunny CDN content delivery network, operated by BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia/EU); here, too, your IP address is processed in order to deliver the requested files to your browser. In each case, processing is based on our legitimate interest in the secure, high-performance, and fail-safe provision of the website (Art. 6 para. 1 lit. f GDPR). Data processing agreements are in place with both providers; the transfer to Cloudflare in the USA is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses, while Bunny CDN processes data within the EU. More information: https://www.cloudflare.com/privacypolicy/ and https://bunny.net/privacy/
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption, which is provided in part via our Cloudflare reverse proxy. You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock icon in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.
DATA COLLECTION ON THIS WEBSITE
Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and the IP address. This data is not merged with other data sources. Collection is based on our legitimate interest in the technically error-free presentation and protection of our website (Art. 6 para. 1 lit. f GDPR). The data is deleted after a short period unless it is required as evidence in the event of attacks or abuse.
Contact Form (Email Delivery via Mailgun)
When you send us a message via the contact form, we process the data you provide (name, email address, subject, and message content) to handle your inquiry and in case of follow-up questions. These messages are technically delivered to us via the email delivery service Mailgun (Mailgun Technologies, Inc., a company of the Sinch group, 112 E Pecan St #1135, San Antonio, TX 78205, USA). The data entered in the form is transmitted to Mailgun and processed for the purpose of reliable email delivery. A data processing agreement (DPA) is in place with Mailgun; transfer to the USA is based on the EU Standard Contractual Clauses. The legal basis is your consent or our legitimate interest in efficiently processing your inquiry (Art. 6 para. 1 lit. a or lit. f GDPR). More at: https://www.mailgun.com/legal/privacy-policy/
Web Analytics (Matomo)
This website uses Matomo (matomo.org), an open-source web analytics tool that is self-hosted for us by Ayonto UG (haftungsbeschränkt) and operated under the domain track.ayon.to. Matomo is used in cookieless mode — no cookies are placed on your device and no consent banner is required. The analysis is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in the statistical evaluation of user behavior to optimize our web offering.
Collected data includes: pages visited, time on page, scroll depth, outbound links, downloads, browser type, screen resolution, language setting, and approximate location (city level). IP addresses are anonymized. There is no merging with other data sources. An opt-out is not required, as no personal data within the meaning of the GDPR is processed.
Matomo is self-hosted on servers of Ayonto UG in Germany (Hetzner Online GmbH, Nuremberg). Data is not shared with third parties.
You can opt out of Matomo data collection here:
Cloudflare Turnstile (Bot Protection)
Our contact form uses Cloudflare Turnstile, a privacy-friendly bot protection service by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Turnstile checks technical characteristics (e.g., browser behavior) to determine whether a request originates from a human — without CAPTCHAs or cookies. Technical data (IP address, browser information) is transmitted to Cloudflare. Processing is based on our legitimate interest in protection against spam and abuse (Art. 6 para. 1 lit. f GDPR). Cloudflare processes data in accordance with the EU-US Data Privacy Framework. More at: https://www.cloudflare.com/privacypolicy/
Superchat Widget (Messaging)
This website embeds a chat widget by Superchat GmbH (Oranienstrasse 185, 10999 Berlin, Germany). When the page loads, the widget script is loaded from Superchat servers. Personal data (e.g., name, message content, phone number) is only processed when you actively open the chat and send a message. Processing is based on your consent (Art. 6 para. 1 lit. a GDPR). More information: https://www.superchat.de/datenschutz
YOUR RIGHTS
You have the right to obtain free information about the origin, recipients, and purpose of your stored personal data at any time (Art. 15 GDPR). In addition, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR), and a right to object to processing based on legitimate interest (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
If you have any questions about data protection, you can contact us at any time: office@battleground.de
