Last updated: January 2026<\/em><\/p>\n\n\n\n Scope<\/strong> and Purpose of the Platform<\/strong><\/p>\n\n\n\n This privacy policy is valid for the Nextcloud which is offered behind the domain nextcloud.gamedevworkshop.org<\/a>.<\/p>\n\n\n\n The Platform is used exclusively for the organization, communication and collaboration within the GameDev Workshop.<\/a>\u200b<\/p>\n\n\n\n Providing your account data is necessary to participate in the Platform; without this data, you cannot use the workshop collaboration functions.<\/a>\u200b<\/p>\n\n\n\n Contact Details<\/strong><\/p>\n\n\n\n This Nextcloud instance (“the Platform”) is operated by:<\/p>\n\n\n\n Distant Meadows Email: games[at]felixbaumgarten[dot]de Distant Meadows is the controller<\/strong> within the meaning of Art. 4(7) GDPR and is responsible for the processing of personal data in connection with this Platform.<\/a>\u200b<\/p>\n\n\n\n If a data protection officer is required under Art. 37 GDPR, we will publish the relevant contact details here; currently, no data protection officer is appointed.<\/a><\/p>\n\n\n\n 1. Purpose and Legal Basis of Processing<\/strong><\/p>\n\n\n\n The Platform is used exclusively for the organization, communication, and collaboration within the GameDev Workshop<\/strong>. <\/p>\n\n\n\n Personal data are processed on the following bases:<\/p>\n\n\n\n Where processing is based on consent (Art. 6(1)(a) GDPR), you may withdraw your consent<\/strong> at any time with effect for the future, e.g., via your account settings or by contacting us using the details above.<\/p>\n\n\n\n 2. Categories of Personal Data<\/strong><\/p>\n\n\n\n We process in particular the following categories of personal data when you use the Platform:<\/a>\u200b<\/p>\n\n\n\n Users should not upload or share special categories of personal data within the meaning of Art. 9 GDPR (e.g., health data, data about religious beliefs) on the Platform unless this is absolutely necessary for the workshop purpose.<\/a>\u200b<\/p>\n\n\n\n All personal data processed on this Platform are obtained directly from you; we do not receive personal data about you from third parties.<\/a>eliefs) on the Platform unless this is absolutely necessary for the workshop purpose.<\/a>\u200b<\/p>\n\n\n\n 3.<\/strong> Cookies and Tracking<\/strong><\/p>\n\n\n\n The Platform uses cookies solely to maintain technical functionality and user sessions. The legal basis for technically necessary and security\u2011related cookies (in particular session cookies) is Art. 6(1)(f) GDPR (legitimate interest in providing a secure and functional online service).<\/a>\u200b<\/p>\n\n\n\n If preference cookies are not strictly necessary, they are used based on our legitimate interest in user\u2011friendly configuration of the Platform under Art. 6(1)(f) GDPR; if required by applicable law, any non\u2011essential cookies are only used after you have given consent via a corresponding setting or prompt.<\/a>\u200b<\/p>\n\n\n\n You can disable or delete cookies at any time via your browser settings; however, this may limit the functionality of the Platform, especially login and session management.<\/a>\u200b<\/p>\n\n\n\n 4.<\/strong> Recipients and Data Transfers<\/strong><\/p>\n\n\n\n For the operation and maintenance of the Platform, we use carefully selected service providers who process personal data on our behalf in accordance with Art. 28 GDPR.<\/a>\u200b<\/p>\n\n\n\n Your personal data are disclosed to the following categories of recipients:<\/a><\/p>\n\n\n\n In addition, authorized personnel of Distant Meadows (administration, support) may access user data to the extent necessary for operating the Platform, troubleshooting, and support requests, and only where required for these purposes.<\/a>\u200b<\/p>\n\n\n\n No further sharing of personal data with third parties takes place unless we are legally obliged to do so (e.g., by court order or public authorities) or you have explicitly consented.<\/a><\/p>\n\n\n\n 5. Storage Period<\/strong><\/p>\n\n\n\n Personal data are stored only as long as necessary to operate the Platform or as legally required. <\/a>\u200bBackups:<\/strong> Deleted data may remain in automated backups for up to 12 months<\/strong> for disaster recovery purposes. These backups are access-restricted, encrypted, and not used for active processing. After this period, all backup copies are deleted.<\/p>\n\n\n\n 7. Data Security<\/strong><\/p>\n\n\n\n All data transfers are encrypted via TLS. 8. Rights of Data Subjects<\/strong><\/p>\n\n\n\n In accordance with the GDPR, you have the following rights:<\/p>\n\n\n\n You can exercise these rights at any time by contacting us at games[at]felixbaumgarten[punkt]de.<\/p>\n\n\n\n We will respond to your request<\/strong> without undue delay and in any event within one month of receipt, as required by Art. 12(3) GDPR; this period may be extended by a further two months in complex cases, in which case you will be informed of the reasons for the delay.<\/a>\u200b<\/p>\n\n\n\n You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).<\/a>\u200b Bayerisches Landesamt f\u00fcr Datenschutzaufsicht (BayLDA) 9. International Data Transfers<\/strong><\/p>\n\n\n\n Push notifications and related services provided by Google and Apple may involve transmission to the United\u202fStates. 10. Automated Decision-Making and Profiling<\/strong><\/p>\n\n\n\n No automated decision\u2011making within the meaning of Art. 22 GDPR and no profiling take place on this Platform.<\/a>\u200b<\/p>\n\n\n\n
Felix Baumgarten Games UG
Schmausengasse 9
90403 N\u00fcrnberg, Deutschland<\/p>\n\n\n\n
For all questions relating to data protection and to exercise your rights, you can contact us here<\/a>.<\/p>\n\n\n\n\n
\n
\n
\n
\n
\n
\n
\n
These cookies are set when you log in and are required to keep you authenticated while using the Platform.<\/p>\n\n\n\n\n
\n
The Platform is hosted by Hetzner\u202fOnline\u202fGmbH (Germany)<\/strong>. All files and data are stored on servers located within Germany. Hetzner acts as a processor under a GDPR\u2011compliant data processing agreement and implements appropriate technical and organizational measures to protect your data.<\/li>\n\n\n\n
Transactional and system emails (e.g., registration confirmations, password reset messages, security and service notifications) are sent via Strato\u202fAG (Germany)<\/strong>, using only the necessary delivery and content data.
Strato acts as a processor under a data processing agreement.<\/a><\/li>\n\n\n\n
When using the official Nextcloud mobile apps<\/strong>, push notification tokens may be transmitted to Google\u202fLLC (USA)<\/strong> or Apple\u202fInc. (USA)<\/strong>. These tokens are technical identifiers only and contain no personal message content.<\/li>\n\n\n\n
When you set or change your password, a partial anonymized hash is compared via HaveIBeenPwned\u202f(Australia)<\/strong> to check whether it appears in known data breaches. No actual passwords or identifiable data are shared.<\/li>\n<\/ul>\n\n\n\n
All user accounts and related data will be deleted after the workshop concludes.<\/p>\n\n\n\n
Server access is restricted to authorized administrators.
The hosting provider implements industry\u2011standard technical and organizational measures (TOMs) in accordance with Art.\u202f32\u202fGDPR.
Users are responsible for keeping their passwords confidential.<\/p>\n\n\n\n\n
For our company, for example, the competent authority is:<\/p>\n\n\n\n
Promenade 27
91522 Ansbach
Germany.<\/a>\u200b<\/p>\n\n\n\n
Both companies participate in the EU\u2013US\u202fData\u202fPrivacy\u202fFramework<\/strong> or rely on Standard Contractual Clauses<\/strong> approved by the European\u202fCommission, ensuring an adequate level of data protection.<\/p>\n\n\n\n