Privacy Policy

Last updated: August 15, 2026

1. Controller

Team Nava Games UG (haftungsbeschränkt)
Gießerstraße 32A
04229 Leipzig
Germany

Email: business@teamnavagames.de
Phone: +49 1522 7242867

Team Nava Games UG (haftungsbeschränkt) is the controller responsible for the processing of personal data in connection with this website within the meaning of the General Data Protection Regulation (GDPR).

2. General Information

We take the protection of your personal data seriously.

This Privacy Policy explains what personal data we process when you visit and use our website, why we process it, the legal bases on which we rely, how long we retain personal data, and what rights you have under applicable data protection law.

Personal data means any information relating to an identified or identifiable natural person.

We process personal data only where permitted by applicable law and only to the extent necessary for the respective purpose.

3. Visiting Our Website

When you visit our website, certain technical information is automatically processed to enable the website to be delivered to your device and to ensure its secure and reliable operation.

This may include:

  • IP address or anonymised IP information;
  • date and time of access;
  • requested pages and resources;
  • browser type and version;
  • operating system;
  • referring URL;
  • technical information concerning your device; and
  • information contained in server log files.

This information is primarily processed to:

  • provide and maintain our website;
  • ensure the stability and security of our website;
  • detect and prevent misuse, attacks and other security incidents; and
  • diagnose and resolve technical problems.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and functional operation of our website.

4. Web Hosting and Server Logs

Our website is based on WordPress and hosted by STRATO GmbH.

In connection with hosting and the delivery of our website, STRATO may process technical access data and server log information. This may include information such as the requested resource, date and time of access, browser information, referring URL and technical information concerning the accessing device.

STRATO states that its web hosting services involve the processing of data required for the secure and efficient provision of the website and that server log files are used for technical and security purposes.

Where required, we have entered into an appropriate Data Processing Agreement (Auftragsverarbeitungsvertrag) with our hosting provider in accordance with Art. 28 GDPR.

The legal basis for this processing is Art. 6(1)(f) GDPR, based on our legitimate interest in providing a secure, stable and functional website.

Server log data is retained only for as long as necessary for these purposes or as required by applicable law. STRATO states that its standard hosting logfiles are made available for a limited period and that IP addresses in its relevant hosting statistics/logfiles are anonymised.

5. WordPress

Our website uses WordPress, an open-source content management system.

The use of WordPress itself does not mean that personal data is automatically transmitted to WordPress.org or Automattic. The processing of personal data on our website primarily depends on our hosting environment, plugins and other services integrated into the website.

WordPress is used to operate, maintain and manage our website.

Technical information such as IP addresses, browser information, access times and server log data may be processed in connection with the operation and security of the website.

The legal basis for this processing is Art. 6(1)(f) GDPR.

6. Contact Form

You can contact us through the contact form provided on our website.

When you submit an enquiry, we process the information you provide, which may include:

  • your name;
  • email address;
  • company or organisation;
  • subject or topic of your enquiry; and
  • the contents of your message.

We use this information to respond to your enquiries, including questions, collaboration requests, partnership enquiries, business proposals and other communications relating to Team Nava Games and our projects.

Depending on the nature of your enquiry, the legal basis for this processing is:

  • Art. 6(1)(b) GDPR, where processing is necessary to take steps at your request prior to entering into a contract or for the performance of a contract; or
  • Art. 6(1)(f) GDPR, where we have a legitimate interest in responding to your enquiry and maintaining business communications.

We retain contact enquiries only for as long as necessary to process the respective enquiry and any resulting communication, unless statutory retention obligations or other legitimate reasons require longer retention.

7. Instagram Feed

We use the Smash Balloon Instagram Feed plugin provided by Smash Balloon LLC to display selected content from our Instagram account on our website.

The plugin is installed and hosted directly on our WordPress website. According to Smash Balloon, its Instagram Feed plugin does not collect personal data from visitors itself, and Instagram account data retrieved through the plugin is stored on the website on which the plugin is installed rather than being transmitted to Smash Balloon’s own servers.

The plugin retrieves publicly available Instagram content through Meta’s APIs. Retrieved content may be temporarily cached in our WordPress database and, depending on the plugin configuration, certain images or other feed data may also be stored locally on our server. Smash Balloon describes these caching mechanisms in its GDPR documentation.

Smash Balloon also provides GDPR-specific functionality designed to prevent certain external Instagram resources from being loaded before the required consent has been given. When enabled, the GDPR-compliant version of the feed can use locally stored images before consent rather than loading images directly from Instagram’s CDN.

Where our consent management mechanism requires consent for external resources associated with the Instagram feed, these resources are loaded only after the corresponding consent has been provided.

When you interact directly with Instagram or follow a link to Instagram, the privacy practices of Meta apply.

Further information can be found in Meta’s Privacy Policy and Instagram’s Privacy Policy.

8. External Links and Social Media

Our website contains links to external websites and online platforms, including social media platforms, game platforms, professional networks, business services and other third-party services.

Examples may include:

  • Instagram
  • LinkedIn
  • Steam
  • Patreon
  • Linktree
  • other social media and online platforms

Simply displaying an external link on our website does not normally result in personal data being transmitted to the linked provider.

However, when you follow an external link, you leave our website and the privacy policy of the respective provider applies.

We have no control over the processing of personal data carried out by third-party providers and are therefore not responsible for their privacy practices.

We recommend reviewing the privacy policy of the respective provider before using an external service or providing personal data.

9. Google Analytics

We use Google Analytics provided by Google to analyse how visitors use our website and to improve its content, functionality and user experience.

Google Analytics may process information such as:

  • technical identifiers;
  • browser and device information;
  • pages visited;
  • interactions with our website;
  • approximate geographical information;
  • date and time of access; and
  • information concerning how our website is used.

Google Analytics is activated only after the visitor has provided the required consent through our consent management mechanism.

The legal basis for this processing is Art. 6(1)(a) GDPR.

You may withdraw or change your consent at any time through our available consent management settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Google provides mechanisms for connecting Google Analytics with a website’s consent management solution and for respecting users’ consent choices.

Google may process personal data outside the European Economic Area. Where applicable, appropriate safeguards for international data transfers are used in accordance with applicable data protection law.

Further information about Google’s processing of personal data can be found in Google’s Privacy Policy.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some technologies are technically necessary for the operation, security and functionality of our website. Other technologies, such as those used for analytics, may require your consent under applicable law.

Under § 25 TDDDG, storing information on a user’s device or accessing information already stored on the device generally requires the user’s consent unless an applicable statutory exception applies, in particular where the technology is strictly necessary to provide a service expressly requested by the user.

Where consent is required, we obtain it through our consent management mechanism before the respective technologies are activated.

You can withdraw or change your consent at any time through the available privacy or cookie settings.

For further information about the cookies and similar technologies used on our website, please refer to our Cookie Policy.

11. Consent Management

We use a consent management mechanism to obtain and manage your consent for cookies and other technologies that require consent under applicable law.

The consent management mechanism allows you to decide whether optional technologies, such as analytics services, may be used.

Your consent decision may be stored so that we can respect your preferences and, where necessary, demonstrate that consent was obtained.

You can change or withdraw your consent at any time through the available privacy or cookie settings.

Where consent is required for the storage of or access to information on your device, such processing is carried out only after consent has been obtained, unless an applicable legal exception applies. This reflects the requirements of § 25 TDDDG.

12. Locally Hosted Fonts

The fonts used on our website are hosted locally on our own web server.

As a result, your browser does not need to establish a connection to Google’s servers to load these fonts.

No personal data is therefore transmitted to Google solely for the purpose of loading the fonts used on our website.

13. Legal Bases for Processing

Depending on the specific processing activity, we rely on the following legal bases under Art. 6(1) GDPR:

Consent, Art. 6(1)(a) GDPR

We process personal data where you have given us consent for a specific purpose, for example where consent is required for analytics or certain cookies and similar technologies.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Contract and pre-contractual measures, Art. 6(1)(b) GDPR

We process personal data where this is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.

This may apply, for example, when handling business enquiries, collaboration requests or potential partnerships.

Legal obligations, Art. 6(1)(c) GDPR

We process personal data where this is necessary to comply with a legal obligation to which we are subject.

Legitimate interests, Art. 6(1)(f) GDPR

We may process personal data where this is necessary for our legitimate interests, provided that your interests or fundamental rights and freedoms do not override those interests.

Our legitimate interests may include:

  • operating and securing our website;
  • preventing misuse and security incidents;
  • responding to enquiries;
  • maintaining business communications;
  • maintaining and improving our website; and
  • protecting and enforcing our legal rights.

14. Recipients and Service Providers

We may disclose personal data to carefully selected service providers where this is necessary for the operation of our website or the provision of our services.

Depending on the respective processing activity, recipients may include:

  • our web hosting provider;
  • website and IT service providers;
  • analytics providers such as Google;
  • providers of embedded or integrated social media content, such as Meta; and
  • other technical or professional service providers where necessary.

Where required by applicable law, we enter into appropriate data processing agreements with service providers acting as processors.

We do not sell personal data.

15. International Data Transfers

Some of the service providers used on our website may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a third country, we ensure that an appropriate legal mechanism under Chapter V GDPR is used where required.

Depending on the provider and processing activity, this may include:

  • an adequacy decision;
  • the EU-US Data Privacy Framework; or
  • Standard Contractual Clauses.

The applicable safeguards depend on the respective service and processing activity.

16. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The applicable retention period depends on the type and purpose of the processing.

For example:

  • Contact enquiries: for as long as necessary to process the enquiry and any resulting communication;
  • Server logs: for the period necessary for technical and security purposes;
  • Analytics data: according to the retention settings configured for our Google Analytics property;
  • Consent records: for as long as necessary to manage and, where required, demonstrate your consent; and
  • Business and accounting records: for the statutory retention periods applicable under German law.

Once personal data is no longer required, it is deleted or anonymised unless continued storage is legally required or otherwise permitted.

17. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include appropriate access controls, secure website connections using HTTPS/TLS, regular maintenance and security measures appropriate to the risks associated with our processing activities.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

18. Your Rights

Under the GDPR, you may have the following rights, depending on the applicable legal requirements and circumstances:

  • Right of access under Art. 15 GDPR;
  • Right to rectification under Art. 16 GDPR;
  • Right to erasure under Art. 17 GDPR;
  • Right to restriction of processing under Art. 18 GDPR;
  • Right to data portability under Art. 20 GDPR;
  • Right to object under Art. 21 GDPR; and
  • Right to withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

19. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

As Team Nava Games UG (haftungsbeschränkt) is based in Saxony, the competent supervisory authority is the:

Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany

Phone: +49 351 85471-101
Email: post@sdtb.sachsen.de

Website: https://www.datenschutz.sachsen.de

The authority confirms that it is responsible for data protection complaints concerning non-public entities based in Saxony.

20. Withdrawal of Consent

Where we process your personal data based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You can withdraw or modify consent for cookies and similar technologies through our available consent management settings.

For other consent-based processing, you can contact us directly using the contact details provided below.

21. External Websites

Our website may contain links to websites and services operated by third parties.

We are not responsible for the privacy practices, content or security of third-party websites.

The privacy policy of the respective provider applies when you use an external service.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, our services, our data processing activities or applicable legal requirements.

The current version will always be published on this page with the date of the latest update.

23. Contact

If you have any questions, comments or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

Team Nava Games UG (haftungsbeschränkt)
Gießerstraße 32A
04229 Leipzig
Germany

Email: business@teamnavagames.de
Phone: +49 1522 7242867

You can also contact us through our website contact form.

Last updated: August 15, 2026