Privacy Policy
Last updated: 2026-08-06
1. Controller
The controller responsible for processing personal data on this website is:
Dreamspire Games GmbH
Unteranger 4
07646 Laasdorf
Germany
Email: contact[at]dreamspiregames.com
2. General Information
We process personal data only where necessary to operate and secure this website, manage privacy settings, display external content activated by you, or respond to enquiries.
Personal data is any information relating to an identified or identifiable natural person. This may include IP addresses, email addresses and the contents of messages.
3. Hosting and Server Log Data
This website is hosted by:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
When you visit this website, IONOS processes technical access data required to deliver and secure the website. This may include:
-
the requested page or file;
-
the referring website;
-
browser type and browser version;
-
operating system;
-
device type;
-
time of access;
-
an anonymised IP address.
The data is processed to provide the website, ensure its stability and security, analyse technical errors and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.
IONOS states that the relevant visitor data is anonymised when collected and retained for eight weeks. IONOS processes data on our behalf in accordance with Article 28 GDPR.
4. Encrypted Transmission
This website uses SSL or TLS encryption to protect information transmitted between your browser and our website.
An encrypted connection can generally be identified by the https address and the corresponding security indicator in your browser.
5. Cookies and Consent Management
We use technically necessary cookies and comparable storage technologies where required to operate the website and retain your privacy settings.
The storage of or access to information on your device is based on Section 25(2) TDDDG where it is technically necessary. Any associated processing of personal data is based on Article 6(1)(c) or Article 6(1)(f) GDPR.
Technologies that are not technically necessary, including embedded YouTube content, are activated only after you have given your consent. The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Complianz
We use Complianz to manage and document your consent settings.
Complianz may store information such as:
-
your selected consent settings;
-
the status and time of your selection;
-
the applicable privacy-policy version;
-
technical verification information;
-
browser and device information.
The necessary Complianz cookies are used to remember your selection and are generally stored for 365 days.
The legal basis is Section 25(2) TDDDG and Article 6(1)(c) GDPR insofar as consent must be documented. Processing is additionally based on Article 6(1)(f) GDPR. Our legitimate interest lies in the reliable and legally compliant management of privacy settings.
You may change or withdraw your consent at any time with effect for the future through the Cookie Settings available on this website.
Withdrawal does not affect processing carried out before consent was withdrawn.
6. Contact by Email
When you contact us by email, we process the information transmitted with your message. This may include:
-
your email address;
-
your name, where provided;
-
the content of your message;
-
attachments;
-
the date and time of communication;
-
technical email metadata.
Our email services are provided by IONOS SE.
We process this data to handle your enquiry and communicate with you.
Where the enquiry relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in responding to business-related and general enquiries.
The data is deleted when the enquiry has been conclusively resolved, unless statutory retention obligations apply or continued storage is necessary for the establishment, exercise or defence of legal claims.
7. Embedded YouTube Videos
We embed videos from YouTube. The provider responsible for users in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
YouTube videos are blocked when you first access the website. Before you give your consent, no connection to YouTube is established and only a locally provided placeholder is displayed.
The video is loaded only after you consent to external media through our consent-management system.
When a video is loaded, your browser establishes a connection to Google and YouTube servers. The following information may be processed:
-
your IP address;
-
the date and time of access;
-
the page you visited;
-
browser and device information;
-
operating-system information;
-
referrer information;
-
cookies and local-storage information;
-
your interactions with the video.
Where you are logged in to a Google or YouTube account, Google may associate your visit and interactions with that account.
We use YouTube’s privacy-enhanced mode through the youtube-nocookie.com domain. This reduces the use of video views for personalising the YouTube browsing experience. It does not completely prevent the transmission of data to Google.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time through the Cookie Settings.
Further information is available in Google’s privacy policy:
https://policies.google.com/privacy
8. International Data Transfers
When YouTube content is activated, data may be transmitted to Google companies or service providers outside the European Union or the European Economic Area, particularly in the United States.
Google LLC is certified under the EU-U.S. Data Privacy Framework. Transfers to certified recipients in the United States may therefore be based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework.
Where this mechanism does not apply, Google may use other appropriate safeguards, including the European Commission’s Standard Contractual Clauses.
9. External Links
This website contains ordinary links to external platforms, currently including Steam and YouTube.
Merely visiting our website does not establish a connection to these platforms through an ordinary link. A connection is established only when you click the link and open the external website.
The relevant platform operator is responsible for any subsequent processing of personal data on its website.
10. Recipients of Personal Data
Where necessary for the purposes described in this Privacy Policy, personal data may be processed by or disclosed to:
-
IONOS as our hosting and email service provider;
-
Google or YouTube after you consent to embedded YouTube content;
-
technical service providers acting on our instructions;
-
legal, tax or other professional advisers subject to confidentiality obligations;
-
public authorities or courts where disclosure is legally required.
Where a service provider processes personal data exclusively on our behalf, processing is governed by a data processing agreement pursuant to Article 28 GDPR.
11. Retention Periods
Unless a specific retention period is stated in this Privacy Policy, personal data is retained only for as long as necessary for the relevant processing purpose.
Data may be retained for longer where statutory retention obligations apply or where it is required for the establishment, exercise or defence of legal claims.
Once the processing purpose no longer applies and any applicable retention periods have expired, the data is deleted or anonymised.
12. Your Rights
Subject to the applicable legal requirements, you have the right to:
-
obtain access to your personal data pursuant to Article 15 GDPR;
-
request rectification pursuant to Article 16 GDPR;
-
request erasure pursuant to Article 17 GDPR;
-
request restriction of processing pursuant to Article 18 GDPR;
-
receive data in a portable format pursuant to Article 20 GDPR;
-
object to processing pursuant to Article 21 GDPR;
-
withdraw consent pursuant to Article 7(3) GDPR;
-
lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.
To exercise your rights, contact:
contact[at]dreamspiregames.com
13. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
We will then stop processing the relevant data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct-marketing purposes, you may object at any time without providing reasons.
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for companies based in Thuringia is:
Thuringian Commissioner for Data Protection and Freedom of Information
Häßlerstraße 8
99096 Erfurt
Germany
Postal address:
Postfach 90 04 55
99107 Erfurt
Germany
Email: poststelle[at]datenschutz.thueringen.de
Telephone: +49 361 57-3112900
You may also contact another competent supervisory authority, particularly the authority responsible for your habitual residence or place of work.
15. Automated Decision-Making
We do not use solely automated decision-making procedures, including profiling, that produce legal effects concerning you or similarly significantly affect you.
16. Updates to This Privacy Policy
We may update this Privacy Policy where the website, the services used or the applicable legal requirements change.
The current version is published on this website.