Privacy Policy

§ 1 General Information

This Privacy Policy provides detailed information about what happens to your
personal data when you visit our website, https://companion.g-place.de/
. Any data that allows for your personal identification is
considered personal data. When processing your data, we strictly adhere to legal requirements
, in particular the General Data Protection Regulation (“GDPR”). It is very important to us
that your visit to our website is completely secure.

§ 2 Data Controller

See the Legal Notice.

§ 3 Access Data (Server Log Files)

When you visit our website, we automatically collect access data that your
browser transmits to us and store it in what are known as server log files. This includes the following
:

• Browser type and version on your PC
• the operating system used on your PC
• Referrer URL (source/link from which you arrived at our website)
• Hostname of the connecting computer
• Date and Time of the
  Server Request Page 1 of 9
• the IP address currently being used by your computer (in anonymized form, if applicable)
  . As a rule, it is neither possible for us nor our intention to associate this data with a
  specific individual. This data is processed in accordance with Article 6(
  1)(f) of the GDPR to safeguard our legitimate interest in improving the stability and
  functionality of our website.

§ 4 Contacting Us

When you contact us, including via email, the data you
provide—including your contact information—will be stored so that we can
process your inquiry and be available to answer any follow-up questions. This
data will not be disclosed to third parties without your express consent.

The processing of your personal data is based exclusively on
the consent you have provided pursuant to Article 6(1)(a) of the GDPR. You have
the right to withdraw this consent at any time without providing a reason. An
informal email to us is sufficient to withdraw your consent. The lawfulness of
the data processing carried out prior to the withdrawal remains unaffected
by the withdrawal.

We will store the data you provide until you request that we delete it,
revoke your consent to its storage, or there is no longer a need to
store the data. This does not affect any statutory retention periods.

§ 5 Cookies and Local Storage

Cookies: We generally do not set cookies for visitors. Exceptions include logging in with Discord when reporting errors (see § 7) and editors and administrators logging in to the WordPress admin area. These cookies are technically necessary and are set only when you log in (§ 25(2)(2) TDDDG).

Local Storage: To remember your selections, the website stores small entries in your browser's memory. These remain on your device, are not transmitted to our server, and do not contain any data that would allow us to identify you:

• aion2-companion-realm: Your color choice (Elyos or Asmodae)
• aion2-news: which news items you've already seen, so that the notification of new posts only appears when there are actually new posts
• aion2-slider-last: which section of the home page you last viewed

These entries are required for the features you use (Section 25(2)(2) of the TDDDG). You can delete them at any time by clearing your browser's cache for companion.g-place.de.

§ 6 Use and Disclosure of Data

We assure you that any personal information you provide
to us—for example, via email (such as your name, address, or email address)—will not be sold to third parties or
otherwise used for commercial purposes. Your data will
be processed solely for the purpose of corresponding with you and to fulfill the purpose for
which you provided us with the data.

The data collected automatically when you visit our website is
used exclusively for the purposes listed above. The
data is not used for any other purpose.

The protection of your personal data is important to us. Therefore
, we do not disclose your data to third parties unless we are legally required to
do so or you have given us your express consent.

The desktop app runs entirely locally on your computer. Your data in the app (e.g., characters, tasks, timers, and builds) is stored only on your computer and is not transmitted to us. There is no user account and no telemetry (no usage statistics, no crash reports).

The app connects to this website only in the following cases:

• Update Check: After launching the app and when you manually check for updates. The app retrieves the current version number. An update is downloaded only after you confirm it.
• News: After launching, the app retrieves the latest post from this website to notify you of any news.

No data is transmitted from the app during this process. Only the access data specified in § 4 is collected (including IP address, time, and app identifier). The legal basis is our legitimate interest in informing you about updates and news (Art. 6(1)(f) GDPR).

§ 7 Encryption (SSL/TLS)

Our website uses SSL or TLS encryption to ensure the security and
protection of confidential content during transmission. This applies
in particular to requests that you, as a visitor to the site, send to us as the website
operator. An encrypted connection can be identified by “https://” in your
browser’s address bar and the padlock icon in your browser’s address bar.

Enabling SSL or TLS encryption ensures that the data you send to us
cannot be intercepted by unauthorized third parties.

§ 8 Retention Period

The personal data you provide to us via our website
will be stored only for as long as is necessary to achieve the respective purpose of
the data processing. However, in accordance with commercial and tax
law retention requirements, certain data may be stored for up to 10 years
.

§ 9 Your Data Protection Rights

As a data subject, you have the following rights with respect to your personal data vis-à-vis the data controller
, in accordance with the
applicable legal provisions:

A. Right of Withdrawal

Many data processing activities are only possible with your explicit consent. If
the processing of your data is based on your consent, you have the right to withdraw that
consent at any time, effective for the future, in accordance with Article 7(3) of the GDPR. The lawfulness of data processing carried out on the basis of your consent up until the time of revocation remains unaffected. The storage of data for billing and accounting purposes is not affected by a revocation.

B. Right to Information

Pursuant to Article 15 of the GDPR, you have the right to
request confirmation from us as to whether we are processing your personal data. If this is the case, you
have the right to access this data, including the purposes of processing, the
categories of data being processed, the recipients or categories of recipients to whom the data has been or will be disclosed,
the planned retention period
or the criteria for determining it, the existence of a right to rectification,
erasure, restriction of processing, objection to processing,
lodge a complaint with a supervisory authority, the origin of the data if it was not collected directly from
you, the existence of automated decision-making
, including profiling, and, where applicable, meaningful information about the logic
involved, as well as the significance and intended consequences of such
processing for you, as well as your right to be informed of the safeguards in place pursuant to Article 46
of the GDPR when your data is transferred to third countries.

C. Right to Correction

You have the right, at any time, pursuant to Article 16 of the GDPR, to request that we correct any inaccurate
personal data concerning you and/or supplement any incomplete
data.

D. Right to Erasure

You have the right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data
if any of the following grounds apply:

1. a. Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent, which served as the legal basis for the processing under Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Article 21(1) of the GDPR, and there are no compelling legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
4. The processing of personal data is unlawful.
5. We are required to delete the personal data due to a legal obligation under Union law or the law of the Member State to which we are subject.
6. The personal data was collected in connection with the provision of information society services in accordance with Article 8(1) of the GDPR.

This right may be restricted under the following circumstances, if the processing
is necessary:

1. to comply with a legal obligation that requires processing under the law of the Union or of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority;
2. to comply with a legal obligation that requires processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
3. for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
4. for archival purposes, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, which are in the public interest, provided that the protection of the data subject’s rights would render the purposes of such processing impossible or seriously impair them; or
5. to assert, exercise, or defend legal claims. If we have made your personal data public and are obligated to delete it in accordance with the preceding provisions, we will take reasonable measures, including technical measures, taking into account available technology and implementation costs, to notify the data controllers processing this data that you, as the data subject, have requested the deletion of all links to your personal data or of copies or replicas of such data.

E. Right to Restriction of Processing

Pursuant to Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted (blocked). To exercise this right, you may contact us at any time. You can find our contact information in the legal notice. You may request that processing be restricted in the following cases:

1. If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification process, you have the right to request that the processing of your personal data be restricted.
2. If the processing of your personal data was or is unlawful, you may request that the processing be restricted instead of having the data erased.
3. If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of being erased.
4. If you have filed an objection under Article 21(1) of the GDPR, a balancing of your interests against ours must be conducted. As long as it has not yet been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.

Once the processing of your personal data has been restricted, it may generally be processed only with your consent. Exceptions apply in certain cases defined by law, such as to assert legal claims or to protect public interests.

F. Right to Information

If you exercise your right to rectification, erasure, or restriction of the processing of your personal data, we are required under Article 19 of the GDPR to inform all recipients to whom the data has been disclosed. This does not apply if such notification proves impossible or involves a disproportionate effort. Upon your request, we will inform you of the recipients of your data.

G. Protection Against Automated Decision-Making (Profiling)

Pursuant to Article 22 of the GDPR, you have the right not to
be subject to a decision based solely on automated
processing—including profiling—that produces legal effects concerning you or similarly
significantly affects you.

This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and us,
2. is permitted under Union or Member State law to which the controller is subject, and such laws provide for appropriate measures to safeguard your rights, freedoms, and legitimate interests; or
3. was done with your express consent.

However, decisions in the cases referred to in (a) through (c) may not be based on
special categories of personal data within the meaning of Article 9(1) of the GDPR
, unless Article 9(2)(a) or (g) applies and appropriate measures have been
taken to protect your rights and freedoms as well as your legitimate
interests.

In the cases mentioned in (a) and (c), we will take appropriate measures to protect your
rights and freedoms, as well as your legitimate interests. This includes
, at a minimum, the right to
request human intervention by the data controller, to present your own point of view, and to challenge the decision.

H. Right to Data Portability

In the event that the processing of your personal data is based on your consent
pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR, or on a contract
pursuant to Article 6(1)(b) of the GDPR, and is carried out using automated means,
you have the right under Article 20 of the GDPR to receive the data you have provided to us in a
structured, commonly used, and machine-readable format and to transmit it to another controller
or to request that we transmit it to another controller
, provided this is technically feasible.

I. Right to Object

If we process your personal data based on a balancing of interests pursuant
to Article 6(1)(f) of the GDPR, you have the right to object to such processing
at any time for reasons arising from
your particular situation; this also applies to profiling based on such processing. You can find the applicable
legal basis for the processing in this Privacy Policy.
In the event of an objection, we will no
longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the
processing that override your interests, rights, and freedoms, or the
processing is necessary for the establishment, exercise, or defense of
legal claims (objection pursuant to Article 21(1) of the GDPR).

If your personal data is processed for the purpose of direct marketing
, you have the right to object to such processing at any time; this also applies
to profiling, provided it is related to such direct marketing. If
you object, your personal data will no longer be used for
direct marketing purposes (objection pursuant to Art. 21(2) of the GDPR).

With regard to the use of information society services, notwithstanding
Directive 2002/58/EC, you have the option of exercising your right to object through automated
means, using technical specifications.

J. Right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR

In the event of violations of the provisions of the GDPR, data
subjects have the right to file a complaint with a competent supervisory authority. In particular, the
complaint may be lodged in the Member State where the data subject has his
or her habitual residence, place of work, or where the alleged
violation occurred. The right to lodge a complaint under this provision is
without prejudice to any other administrative or judicial remedies.

Our competent supervisory authority is:

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia

P.O. Box 20 04 44
40102 Düsseldorf

Kavalleriestraße
2-4, 40213 Düsseldorf

Phone: 02 11/384 24-0
Email:
Website: https://www.ldi.nrw.de

§ 10 Validity and Amendments to This Privacy Policy

This Privacy Policy takes effect on September 27, 2026. We reserve the right to amend this
policy as necessary and in compliance with applicable data protection laws.
This may be necessary, for example, to comply
with new legal requirements or to reflect changes to our website or new services offered through our website
. The most current version of
the Privacy Policy, available at the time of your visit to our website,
is binding.

If we make any changes to this Privacy Policy, we will post them on this page
to fully inform you about what personal
data we collect, how we process it, and under what conditions we may share it
.