Privacy policy

Note: This translation is provided for convenience. The German privacy policy is authoritative.

This policy explains how personal data is processed when you use dlbl-lasertag.de.

1. Controller

2. Hosting and server logs

The website is hosted by Hetzner Online GmbH on a dedicated server in Falkenstein, Germany, under a data processing agreement. Technically necessary server logs may contain a shortened IP address, timestamp, requested resource, transfer status, browser, operating system and referrer. They are normally deleted within 14 days. Processing is based on Art. 6(1)(f) GDPR for secure and stable operation.

3. Encryption, email and fonts

The website is delivered via HTTPS. Domain and email services are provided by IONOS SE. Messages sent to us are processed to answer your request under Art. 6(1)(b) or (f) GDPR. Saira fonts are delivered locally; no connection to Google Fonts is made.

4. Cookies and anonymous statistics

Public pages use no cookies and no external advertising or tracking services. A technically necessary session cookie is used only in the internal login area. Anonymous analytics store aggregated daily page and selected button counts only. No IP addresses, visitor IDs, device identifiers, browser fingerprints, referrers, query parameters or individual usage histories are stored or linked to registrations.

5. Team registration

We process the captain's first and last name, email address, team name, team tag and an optional logo to review the registration. Email ownership is confirmed with a one-time code whose cryptographic hash expires after ten minutes. The legal bases are consent under Art. 6(1)(a) GDPR and pre-contractual steps under Art. 6(1)(b) GDPR.

6. Transfer to Discord

After email confirmation, registration details and an optional logo are sent to our Discord server so the organizers can review them. Discord Netherlands BV and Discord Inc. may process data in the USA. Discord Inc. participates in the EU-US Data Privacy Framework and also relies on standard contractual clauses. The transfer is based on explicit consent under Art. 6(1)(a) and Art. 49(1)(a) GDPR. Discord's policy is available at discord.com/privacy.

7. Abuse prevention

To prevent automated abuse, a short-lived hash derived from the IP address is stored with a timestamp and action. The legal basis is Art. 6(1)(f) GDPR. These entries are deleted after a short period.

8. Your rights

You may request access, correction, deletion, restriction, portability and object to processing based on legitimate interests. You may withdraw consent for the future at any time. Contact info@dlbl-lasertag.de.

9. Complaint

You may complain to a data protection authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.