Privacy policy
This English version is provided for convenience. In case of doubt, the German version applies.
Summary
- This website is purely static. It sets no cookies and uses no tracking or analytics tools.
- Fonts, graphics and stylesheets come only from this website. No content is loaded from third-party servers.
- When you visit, the hosting provider Cloudflare processes technically necessary connection data such as your IP address to deliver the pages and protect them against attacks.
1. Controller
The controller responsible for data processing on this website is:
Daniel HolzmannHirschbergstr. 1
83607 Holzkirchen
Germany
E-mail: timbertalegames@gmail.com
2. Hosting and delivery by Cloudflare
This website is delivered via Cloudflare Workers (Static Assets). The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare runs data centers worldwide; your request is usually answered by a data center near you.
When you visit this website, Cloudflare processes data that is technically necessary to deliver it. This includes in particular:
- the IP address of the requesting device,
- date and time of access,
- the requested address (URL) and the amount of data transferred,
- browser type and version and operating system (user agent),
- the previously visited page (referrer), if your browser sends it.
The purpose is the secure, stable and fast delivery of the website, including protection against attacks and abuse. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure and working website.
I do not keep server logs myself, do not analyze individual visits and do not combine this data with other data. In the Cloudflare account I see aggregated statistics, such as the number of requests. How long Cloudflare stores log data is governed by Cloudflare’s privacy policy.
Cloudflare processes this data on my behalf under a data processing agreement (Art. 28 GDPR, Cloudflare Data Processing Addendum), which is part of Cloudflare’s terms.
Data may be transferred to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so the European Commission’s adequacy decision (Art. 45 GDPR) applies to such transfers. In addition, the data processing agreement provides for EU Standard Contractual Clauses.
More information: Cloudflare’s privacy policy.
3. Cookies and security checks
This website sets no cookies and stores nothing in your browser’s storage (such as local storage).
If Cloudflare detects unusual or suspicious traffic, it may, in exceptional cases, show a security check. Visitors who pass it receive a technically necessary cookie from Cloudflare (cf_clearance) so that the check does not appear again. This serves solely to keep the website secure (Section 25 (2) no. 2 TDDDG, Art. 6(1)(f) GDPR).
4. No tracking, no third-party content
I use no analytics or tracking tools, no advertising, no social media plugins and no embedded third-party content. There are no connections to external font providers or content delivery networks (CDNs).
Links to other websites, for example to the supervisory authority, are ordinary links. Only when you click such a link do you leave this website; the privacy notices of that provider then apply. The same goes for the games themselves: they run at their own addresses and have their own privacy notices.
5. Contact by e-mail
If you send me an e-mail, I process your e-mail address, your name (if given) and the content of your message to answer your request. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is answering requests. If your request aims at a contract, the legal basis is Art. 6(1)(b) GDPR. I delete your message once it is no longer needed, unless statutory retention obligations apply.
The mailbox is hosted by Google (Gmail; the provider for users in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). E-mails are therefore processed on Google’s servers, and a transfer to the USA is possible. Google LLC is certified under the EU-U.S. Data Privacy Framework.
6. Your rights
Under the GDPR you have the right to
- access your data (Art. 15),
- rectification of inaccurate data (Art. 16),
- erasure (Art. 17),
- restriction of processing (Art. 18),
- data portability (Art. 20) and
- object to processing (Art. 21, see below).
Just send me an e-mail. Please note: since I do not store access data myself, I usually cannot identify you from a visit to the website (Art. 11 GDPR).
Right to object
Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian Data Protection Authority)Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de
7. Obligation to provide data, automated decisions
You are not obliged to provide personal data. Without the technically necessary connection data, however, the website cannot be delivered. There is no automated decision-making, including profiling.
8. Encryption
The connection to this website is encrypted via HTTPS (TLS).
9. Changes
I update this privacy policy when the website or the legal situation changes. The version published here applies. Provider details are in the legal notice.