Privacy / Datenschutz
1. Who is responsible?
Controller: Pavlos Tagkaloglou
Developer name: Estathia Games
Address:
Lyoner Str. 50
60528 Frankfurt am Main
Germany
Privacy contact:
Email: info at estathia dot com
Last updated: 14 October 2026.
2. Website hosting
This website uses Cloudflare Workers for content delivery and security. Cloudflare’s self-service provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Hosting infrastructure receives IP addresses, requested URLs, timestamps and other connection/request information needed to deliver pages and protect the service against misuse.
The legal basis for necessary website delivery and security is Article 6(1)(f) GDPR: the legitimate interest in providing a reliable, secure website. Cloudflare and its service providers receive technical data in operating this infrastructure; processing may take place outside the European Economic Area.
Cloudflare’s self-service terms incorporate its data-processing addendum, which describes processing on customers’ behalf, subprocessors, deletion criteria and transfer safeguards, including standard contractual clauses where applicable. Details are also available in Cloudflare’s privacy policy.
Where Cloudflare Workers Logs is enabled on the Free plan, Cloudflare currently documents a three-day retention period for those logs. This period does not cover every Cloudflare security record, backup or other service. Processing and retention for those categories depend on the service, security/legal requirements and the provider arrangements described above. See Workers Logs documentation.
3. Optional Vimeo trailer
The initial poster is an image hosted with this website. Loading this page, navigation and scrolling do not load Vimeo. The embedded player stays blocked until you give consent. Without a saved consent, selecting Play opens a video window with a permission panel over the local trailer artwork, “Allow Vimeo & play”, a privacy-information link and a close button. Closing the video window or pressing Escape declines playback without giving consent. You can use the rest of the website without allowing the video.
The provider is Vimeo.com, Inc. Loading the player sends connection and device information to Vimeo for playback. Processing may take place in the USA and elsewhere. This website sets dnt=1; that setting is not a guarantee of no cookies or no data processing.
“Allow Vimeo & play” inside the trailer, or enabling “Allow Vimeo” in Privacy settings and saving your choice, gives consent to activate the optional embed. Closing the video window, pressing Escape or leaving the permission panel unanswered does not give consent. The bottom banner’s “Accept” only acknowledges and dismisses the information notice; it never enables Vimeo. Saving permission in general settings does not start playback; an explicit request to play is also required. Older playback preferences and notice acknowledgements are not treated as consent.
We rely on your consent under Article 6(1)(a) GDPR for our activation of the Vimeo embed and the associated transmission of personal data. Where access to or storage of information on your device by this optional embed requires consent, that consent is requested under §25(1) TDDDG. Vimeo’s further processing is described in its own privacy information linked below.
To withdraw your consent, open “Privacy settings” in the footer, turn off “Allow Vimeo” and save, or select “Reject Vimeo”. This removes an active embedded player and prevents further embedded playback until you give consent again. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. It does not undo prior transfers, delete provider-held data, or erase Vimeo cookies already stored by the browser.
More information: Vimeo’s privacy policy and Vimeo’s player-cookie information. These links open external websites only when followed.
Vimeo explains that reduced-tracking playback may still set security cookies and send cookies already stored in the browser. Its player-cookie information lists the relevant security-cookie lifetimes. Its privacy policy explains how it uses and retains player-related information; disabling this embed does not control that retention.
Vimeo’s privacy policy describes its use of service providers, retention for playback/security information and international transfers, including standard contractual clauses and its stated participation in the EU–US Data Privacy Framework. Information about the safeguards is available through the linked policy and Vimeo’s privacy contact. These safeguards concern international transfers and are separate from your choice to activate the embedded player.
4. Contact by email
The contact button opens the visitor’s email application. This website has no contact-form backend. If a visitor sends an email, its contents, sender details and any attachments are handled through the website owner’s email service.
Email correspondence is handled through Zoho Mail. When you send a message, your email address, message content, attachments and email delivery information are processed to receive and answer your enquiry. Merely browsing this website does not load a Zoho email widget or connect your browser to Zoho through the website’s own code.
The mailbox uses Zoho’s EU service region (mail.zoho.eu). Zoho identifies Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, as the processor providing EU data centres. Zoho and its authorised service providers handle the correspondence to provide the mail service. Zoho describes possible technical-support access from India and safeguards based on standard contractual clauses; EU hosting does not mean every processing activity stays inside the EU.
Provider information: Zoho privacy policy and Zoho Mail data-protection information. These are external links.
For enquiries about entering or performing a contract, processing relies on Article 6(1)(b) GDPR where its conditions are met. Other correspondence is processed under Article 6(1)(f) GDPR: the legitimate interest in receiving and answering enquiries. Where statutory retention duties apply, the basis is Article 6(1)(c) GDPR.
Providing information by email is voluntary, but an answer may not be possible without sufficient contact details and information about the enquiry.
Retention depends on whether an enquiry remains open, whether correspondence is needed for a continuing business relationship or legal claim, and whether statutory recordkeeping duties apply. Zoho’s handling of deleted messages and backups is described in its linked provider information; trash cleanup is not a retention period for all inbox correspondence. You can contact the operator to ask about retention or request deletion, subject to applicable exceptions.
5. Cookies, browser storage and external links
To remember your requested video choice, this website stores estathia-privacy-v3 in first-party localStorage. It contains the record version, consent-notice version, date/time and your Vimeo decision. A separate record, estathia-privacy-notice-v1, contains the version, acknowledgement and time when you dismiss the information banner; it does not give video permission. This storage serves only to retain those choices, not to track you. Neither record has a visitor or advertising identifier or is sent to our server. Records expire after 180 days; invalid, expired or older-version video records do not enable Vimeo. If storage is unavailable, choices apply only to the current page. You may remove these records through your browser’s site-data settings. Cloudflare and Vimeo may also use security cookies; the website is not described as universally cookie-free.
Following “Watch on Vimeo” opens Vimeo’s website directly, separately from this website’s embedded-playback preference.
The current website source contains no advertising or analytics integration, newsletter registration, user accounts or contact form. Images and fonts are served with the website rather than requested from an external font or thumbnail service. External links connect to the linked service only when followed; those services have their own privacy information.
6. Privacy rights and complaints
Subject to the conditions and exceptions in the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability (Articles 15–20). Contact the operator using the details in section 1. Requests are normally answered within one month; where a lawful extension is needed, you will be informed within that month.
Right to object: where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Processing must then stop unless compelling legitimate grounds override your interests, rights and freedoms, or processing is needed for legal claims. You may object to processing for direct marketing at any time (Article 21).
Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal. For this website’s Vimeo embed, use “Privacy settings” in the footer to reject Vimeo or turn “Allow Vimeo” off and save.
You may complain to a data-protection supervisory authority, particularly in the EU country of your habitual residence, place of work or the alleged infringement (Article 77). For an operator based in Frankfurt am Main, the regional authority is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden; email: poststelle [at] datenschutz [dot] hessen [dot] de; telephone: +49 611 1408-0. You do not have to contact the operator before making a complaint.