Controller according to the EU General Data Protection Regulation (GDPR)
for the websites: www.eyvalon.de, www.eyvalongames.de
and all Eyvalon and EyvalonGames subdomains (*.eyvalon.de / *.eyvalongames.de)
Eyvalon Entertainment
Stefan Peters
Adolf‑Rohde‑Str. 5
25524 Itzehoe
Contact email:
1. General Information on Data Processing
We process personal data only to the extent necessary to provide a functional website,
our content, and our services. Processing is carried out in accordance with the GDPR,
particularly based on Art. 6(1)(a), (b), (c), and (f) GDPR.
2. Collection of General Server Data (Log Files)
Type of data:
When accessing our websites, technical information is automatically collected, including:
browser type and version, operating system, referrer URL, IP address, date and time of access,
and the requesting provider.
Purpose of processing:
– Ensuring stable and secure server operation
– Error analysis and technical optimization
– Protection against attacks and misuse
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in security and stability)
Storage period:
Log files are usually deleted or anonymized after 14 days.
Is the provision required?
Without processing this data, the operation of the website is technically impossible.
3. Registration and User Accounts
Certain functions (e.g., forum, community areas) require user registration.
Data collected:
– Email address
– Username (pseudonym)
– Password (encrypted)
– Optional profile information (e.g., website, location, signature)
– Technical verification data such as IP address and timestamps during registration and key account actions
Purpose of processing:
– Providing a user account
– Enabling community features
– Preventing misuse and fraud
Legal basis:
Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (performance of a contract)
Storage period:
Data is stored until the account is deleted. After deletion, technical verification data
(e.g., IP addresses) is retained for up to 13 months.
4. Contacting Us
If you contact us via contact form or email, we process the data you provide
to handle your request.
Note:
For non‑essential cookies (e.g., external media, analytics), consent is obtained via a cookie banner.
6. Disclosure of Data to Third Parties
Personal data is only shared if this is legally permitted, necessary for the performance of a contract,
or if you have given your consent.
Possible recipients include:
– technical service providers (hosting, server operation, maintenance)
– providers of embedded external services (e.g., media platforms)
– authorities where legally required
Legal basis:
Art. 6(1)(b), (c), and (f) GDPR
7. Embedded Content and External Services
Our websites may embed content from external providers, such as videos or fonts.
When accessing such content, your IP address may be transmitted to the respective provider.
YouTube (embedded videos)
We embed videos from the YouTube platform.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data processed:
– IP address
– technical browser information
– cookies set by the provider
Legal basis:
Art. 6(1)(a) GDPR (consent via cookie banner)
Note:
No YouTube videos are loaded without your prior consent. A placeholder is shown instead.
Google reCAPTCHA (spam protection)
We use reCAPTCHA to protect forms from automated misuse.
Provider: Google Ireland Limited.
Data processed:
– IP address
– mouse and keyboard interactions
– technical browser data
Legal basis:
Art. 6(1)(a) GDPR (consent)
Note:
reCAPTCHA is only loaded after you have given consent in the cookie banner.
Google Fonts (locally hosted)
We use locally hosted Google Fonts to display text consistently.
No data is transmitted to Google.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in consistent presentation)
8. SSL/TLS Encryption
Our websites use modern SSL/TLS encryption to protect transmitted data from unauthorized access.
9. Storage Duration
Personal data is deleted as soon as the purpose of processing no longer applies
or you withdraw your consent, unless legal retention obligations require otherwise.
10. Your Rights as a Data Subject
You have the following rights at any time:
– Right of access (Art. 15 GDPR)
– Right to rectification (Art. 16 GDPR)
– Right to erasure (Art. 17 GDPR)
– Right to restriction of processing (Art. 18 GDPR)
– Right to data portability (Art. 20 GDPR)
– Right to object (Art. 21 GDPR)
– Right to withdraw consent (Art. 7(3) GDPR)
You may withdraw any consent given at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
12. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect legal changes
or new website features. The current version applies to your next visit.
13. Contact Regarding Data Protection
If you have any questions about data protection, please contact us via email:
14. Final Provisions
All content of this privacy policy has been individually created for Eyvalon Entertainment.
Reproduction or distribution by third parties is not permitted without explicit consent.
Last updated: 2026
Eyvalon Entertainment – Privacy Policy
