Privacy Policy

Thank you for your interest in Agony Studios. Protecting your personal data matters to us. Below we explain, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), which data we process when you visit this website and when you contact us.

This is an English translation of our Datenschutzerklärung. If the two versions differ, the German version prevails.

1. Controller

[Full name / company name — to be added]
Agony Studios
[Street and number, postcode, city, country — to be added]
Email: infoagonystudios@gmail.com

2. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply send a message to infoagonystudios@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence or place of work.

3. Hosting and server log files

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and delivered through its network. When you visit the website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page requested, your browser type and operating system. This is required to deliver the website and to protect it against attacks.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses are also in place. More information: cloudflare.com/privacypolicy.

4. Cookies, local storage and tracking

We use no analytics, tracking or advertising cookies and do not embed any tracking services. Fonts are loaded locally from our own server; no connection to Google Fonts is made.

Your browser’s session storage only records that you have already seen the welcome screen, so it isn’t shown again. This entry contains no personal data, never leaves your device and is deleted when you close the browser tab (§ 25(2) no. 2 TDDDG).

5. Contacting us by email and the contact form

When you contact us by email or use the contact form, Gmail (Google) opens in your browser with a pre-filled message to us. The message is only sent once you send it yourself. We process the data you provide (name, email address, and if given your Discord name and business, as well as your message) in order to answer your request.

The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We use Gmail by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for email. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy.

We delete your data once your request has been fully dealt with, unless statutory retention obligations apply.

6. Orders via Discord

All purchases are handled through tickets on our Discord server. When you join our server and open a ticket, we process the data you share there (in particular your Discord name, your project description and contact details) to prepare and carry out your order (Art. 6(1)(b) GDPR).

Discord is provided by Discord Netherlands BV, Schiphol Boulevard 195, 1118 BG Schiphol, the Netherlands, or Discord Inc., USA. Discord’s own privacy policy applies to its processing: discord.com/privacy. The links to Discord on this website are plain links; no data is transferred until you click one.

7. Payment via PayPal

Payments are processed by PayPal, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The data required for payment (for example name, email address, amount and transaction details) is transferred to PayPal. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). More information: PayPal privacy statement.

We keep order and payment records for as long as tax and commercial retention obligations require (usually up to 10 years, Art. 6(1)(c) GDPR).

8. Online ordering system (if enabled)

If we enable direct ordering on this website, the following also applies: your order and project details are stored in our database at Supabase, Inc. To create an internal project summary, your project description may be sent to OpenAI, L.L.C. (USA); according to OpenAI, data sent through its API is not used to train its models. We send order confirmations via Gmail. To prevent abuse, we store a shortened, irreversible checksum (hash) of your IP address. The legal bases are Art. 6(1)(b) and (f) GDPR. For transfers to the USA we rely on the EU-US Data Privacy Framework or standard contractual clauses.

9. Data security

This website is delivered exclusively over encrypted HTTPS. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

10. Obligation to provide data

You are not legally or contractually required to provide your data. However, without the details needed for an enquiry or order we cannot process your request. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

11. Changes

We update this privacy policy when our website or the legal requirements change. The version published here always applies.