Privacy policy
Last updated: October 2026. The German version is legally authoritative.
Controller
The controller for data processing on this website is Oguzhan Günel, Astalyne Studios, Günzburger Str. 37, 89340 Leipheim, Germany. Contact details are in the imprint. No data protection officer has been appointed, as there is no legal obligation to do so.
Hosting
The website runs on a server operated by team.blue in the Netherlands. When you open a page or submit the contact form, the server processes the technical data needed for this, in particular your IP address and the content you submit. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the reliable and secure provision of the website.
Cloudflare
To protect against attacks and for fast delivery, all traffic to this website passes through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Acting as our processor, Cloudflare processes your IP address, request data and all content you send to this website, including your entries in the contact form. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure and stable operation. Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework. The transfer is based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). Should the certification lapse, Cloudflare's contract terms provide for the EU Standard Contractual Clauses. Cloudflare may set security-related cookies, for example to detect automated access. Under § 25(2) no. 2 TDDDG this storage does not require consent, as it is strictly necessary to provide the website you requested securely.
Server logs
Each request logs the IP address, date and time, requested address, referrer and browser identifier. The purpose is secure and stable operation. The legal basis is Art. 6(1)(f) GDPR. Logs are deleted after 14 days.
Contact requests
When you write to us via the form or by email, we process your details to handle and answer your request. Mandatory fields in the form are name, email address and message. Without them we cannot handle your request. All other details are voluntary. There is no statutory or contractual obligation to provide them. The legal basis is Art. 6(1)(b) GDPR where your request is aimed at concluding or performing a contract, otherwise Art. 6(1)(f) GDPR. In that case our legitimate interest is answering requests addressed to us. We send messages from the form through Amazon Simple Email Service of Amazon Web Services EMEA SARL, Luxembourg, in the AWS Frankfurt region (eu-central-1). AWS acts as our processor. The AWS Data Processing Addendum forms part of our contract with AWS. No transfer to third countries is intended. Where AWS transfers data to third countries in individual cases, the EU Standard Contractual Clauses, which form part of the AWS contract terms, apply. To prevent abuse, the server keeps your IP address in memory for 10 minutes when you submit the form and discards it afterwards. The legal basis is Art. 6(1)(f) GDPR. We delete your request once it is settled, unless statutory retention periods apply. If it leads to an engagement or is relevant for tax purposes, we keep the correspondence as business correspondence for six years (§ 147(1) nos. 2 and 3, (3) AO).
Cookies, tracking and fonts
This website itself sets no cookies and uses no analytics or tracking services. For security-related cookies set by Cloudflare, see the Cloudflare section. Fonts are served from our own server.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). To exercise these rights, use the contact details in the imprint. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach.
Right to object under Art. 21 GDPR
Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to the contact details in the imprint.