Privacy Policy

Last updated: 25.02.2025

1. Introduction

Dark Studios UG (haftungsbeschränkt) ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we handle your personal data when you visit our website and tells you about your privacy rights.

2. Data Controller

Dark Studios UG (haftungsbeschränkt) is the controller responsible for your personal data.

Contact for Data Protection:
Email: [email protected]
Dark Studios UG (haftungsbeschränkt)
Weidenweg 2
26683 Saterland
Germany

3. Data We Collect

We may collect and process the following data:

Identity Data (name, username, date of birth for minors)
Contact Data (email address)
Technical Data (IP address, browser type, device information)
Usage Data (how you use our website)
Video Submission Data (video titles, links, descriptions, thumbnails, guardian information for minors)
Server Log Files (standard Ubuntu server logs including IP addresses, access times, requested pages)

4. Legal Basis and How We Use Your Data

Legal Basis (Art. 6 GDPR):

Art. 6 (1) lit. b GDPR: Performance of a contract (video submissions, service agreements)
Art. 6 (1) lit. f GDPR: Legitimate interests (defense against legal claims, website security, server logs)
Art. 6 (1) lit. a GDPR: Consent (where applicable, e.g., cookies on links page)

We use your data to:

Provide our services and process video submissions
Respond to your inquiries
Improve our website
Send relevant communications and confirmation emails
Process payments for our services
Defend against legal claims and protect our rights (legitimate interest)
Ensure website security and prevent abuse (server logs)

5. Payment Processing

For certain services, we use Stripe as our payment processor. When you make a payment, your payment information is collected and processed by Stripe on our behalf. This includes:

Credit/debit card information
Billing address
Transaction details

Stripe's collection and use of your personal information is governed by their Privacy Policy, which can be found at https://stripe.com/privacy. We do not store your complete payment card details on our servers.

The legal basis for this processing is the performance of a contract between you and us and our legitimate interests in providing secure payment processing.

6. Data Retention

We retain your personal data, including video submissions and related information, permanently (indefinitely) for the following legitimate interests:

Legal Defense: To protect our rights and defend against potential legal claims regarding video licenses and agreements
Contract Documentation: To maintain records of agreements and consents as required by law
Evidence Preservation: To preserve evidence of consent and agreements in case of disputes

This permanent retention is based on our legitimate interest (Art. 6 (1) lit. f GDPR) to protect our legal position and defend against claims, which may arise at any time in the future.

Server Log Files: Standard Ubuntu server log files are retained according to standard server maintenance practices. These logs include IP addresses, access times, and requested pages for security and troubleshooting purposes.

7. Your Rights

Under GDPR, you have the following rights:

Right of Access (Art. 15 GDPR): You can request information about your personal data we process. Please contact us at [email protected].
Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate data.
Right to Erasure (Art. 17 GDPR): You can request deletion of your data, subject to legal retention obligations and our legitimate interests in retaining data for legal defense.
Right to Restriction of Processing (Art. 18 GDPR): You can request restriction of processing in certain circumstances.
Right to Data Portability (Art. 20 GDPR): You can request your data in a structured, commonly used format.
Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interests.
Right to Withdraw Consent (Art. 7 GDPR): If processing is based on consent, you can withdraw it at any time.

To exercise your rights, please contact us at [email protected]. We will respond to your request within one month.

Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. The competent supervisory authority in Germany is the data protection authority of the federal state where you reside or where Dark Studios UG (haftungsbeschränkt) is located.

8. Cookies and Tracking Technologies

Use of Cookies:

Our website uses cookies only on the links page to enable YouTube video embedding. Cookies are small text files stored on your device.

YouTube Embedding:

On our links page, we embed YouTube videos. When you accept cookies on that page, YouTube may set cookies on your device. YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

YouTube's privacy policy: https://policies.google.com/privacy

When you visit the links page, you will be asked for consent before YouTube videos are loaded. You can decline cookies, in which case YouTube videos will not be displayed.

Cookie Categories:

Necessary Cookies: Not used on our main website
Functional Cookies: YouTube cookies (only on links page, with consent)
Marketing/Analytics Cookies: Not used

Managing Cookies: You can control cookies through your browser settings. However, declining cookies on the links page will prevent YouTube videos from being displayed.

Note: On all other pages of our website, we do not use cookies or tracking technologies.

9. Third-Party Services

Supabase (Database and Storage):

We use Supabase (Supabase Inc.) for database and file storage services. Supabase processes data on servers located in the European Union. Supabase is GDPR-compliant when using EU regions.

Supabase privacy policy: https://supabase.com/privacy

Stripe (Payment Processing):

For payment processing, we use Stripe (Stripe, Inc.). Stripe processes payment data in accordance with their privacy policy. We do not store complete payment card details on our servers.

Stripe privacy policy: https://stripe.com/privacy

Stripe processes data in the European Economic Area (EEA) for European customers.

YouTube (Video Embedding):

On our links page, we embed YouTube videos. YouTube is operated by Google LLC, which may transfer data to the USA. Google has committed to comply with the EU-US Data Privacy Framework. When you accept cookies on the links page, YouTube may set cookies and process data according to their privacy policy.

YouTube privacy policy: https://policies.google.com/privacy

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

HTTPS encryption for all data transmission
TLS/SSL encryption for secure connections
Database encryption at rest (via Supabase)
Row Level Security (RLS) in our database
Secure server infrastructure
Regular security updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.

You are advised to review this privacy policy periodically for any changes.

12. Contact

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Email: [email protected]
Address:
Dark Studios UG (haftungsbeschränkt)
Weidenweg 2
26683 Saterland
Germany