Privacy Policy

1. Controller and scope

Controller: DeckGuild Publishing — Pflaumstraße 14, 76669 Bad Schönborn, Germany — privacy@deckguild.com.

This Privacy Policy explains how we process personal data when you visit our website, join the waitlist or communicate with us. We process personal data in accordance with the EU General Data Protection Regulation (EU GDPR), the UK GDPR, Germany’s Bundesdatenschutzgesetz (BDSG) and applicable local laws. Our website is hosted with Hostinger. If you join the waitlist, we use Selzy as our email service provider (under a data processing agreement) to manage the list and deliver emails.

2. Data we collect

We may process the following categories of personal data, depending on how you interact with us:

• Waitlist data: email address (required).
• Technical and usage data: IP address, device and browser type, operating system, referring URL, timestamps, basic interaction data (such as pages visited and clicks) and limited server logs for security and performance.
• Cookies and similar technologies: essential cookies needed to operate the site; and, only where enabled by you, analytics and/or marketing cookies. Details are provided in our Cookie Policy.
• Consent and communication records: records of your subscribe and unsubscribe actions, confirmation of your email address, and subscription/unsubscription timestamps.

We do not intentionally collect special categories of data (such as health data or political opinions).

3. Purposes and legal bases

We use your data for these purposes:

• Waitlist / email updates — if you subscribe, we use your email address to send you updates about the game and the launch. You can unsubscribe at any time using the link in any email.
• Support requests — if you contact us, we use the information you provide to reply and help you.
• Website basics — we process basic technical data (like IP address and user-agent) only as needed to serve the website securely and reliably.

Where required, we rely on your consent (for example for marketing emails). For necessary website processing, we rely on what is needed to provide the service securely.

4. Recipients, processors and international transfers

We use selected service providers (processors) to operate this website and to send waitlist emails. They process personal data only on our documented instructions.

• Hostinger — website hosting and related technical/security operations.
• Selzy — waitlist management and email delivery.

Depending on configuration, some processing may take place in the EU/EEA or in other jurisdictions. Where required, we use appropriate safeguards for international transfers.

We do not sell your personal data. If we add new providers that materially affect your privacy, we will update this policy.

5. Retention periods

If you join the waitlist, we keep your email address until you unsubscribe or ask us to delete it. If you unsubscribe, we may keep your email address on a suppression list so we don’t email you again by mistake.

If you contact us, we keep your message only as long as needed to resolve the request and for reasonable record-keeping.

6. Your rights (EU/UK, including Germany)

If you are in the EU, EEA, Switzerland or UK, you have the following rights under the GDPR / UK GDPR:

• Right of access (Art. 15 GDPR) – to obtain confirmation and a copy of your personal data.
• Right to rectification (Art. 16 GDPR) – to correct inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR) – to request deletion in certain circumstances.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR) – to receive data you provided in a structured, commonly used and machine-readable format, and transmit it to another controller where technically feasible.
• Right to object (Art. 21 GDPR) – to object at any time to processing based on legitimate interests, and to direct marketing.
• Right to withdraw consent at any time (Art. 7(3) GDPR) – without affecting the lawfulness of processing before withdrawal.

You can exercise your rights by contacting us at privacy@deckguild.com. For identification and security, we may ask for additional information to confirm your identity before responding.

7. Children

Our website and waitlist are not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If you believe that a child has provided us with personal data, please contact us so we can delete the information.

8. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. This includes using reputable providers such as Hostinger (hosting) and our email service provider (email infrastructure) who also implement their own security measures. However, no system can be guaranteed to be 100% secure.

9. Contact and complaints

If you have questions or concerns about this Privacy Policy or our handling of personal data, you can contact us at:

privacy@deckguild.com

You also have the right to lodge a complaint with a data protection authority, in particular the authority in your habitual residence or place of work.

For our main establishment in Germany (Baden-Württemberg), the competent supervisory authority is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW). Contact details are available at baden-wuerttemberg.datenschutz.de. UK residents may also contact the Information Commissioner’s Office (ICO).

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page indicates the current version. We will post any changes on this page and, where appropriate, notify you through other channels.