Privacy Policy
1) Introduction and Controller Contact Details
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you
about the handling of your personal data when using our website. Personal data means all data by which you
can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data
Protection Regulation (GDPR) is
MG-Studios
Marcel Gast
c/o Block Services
Stuttgarter Str. 106
70736 Fellbach
Germany
E-mail: [email protected]
The controller is the natural or legal person
who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 If you use our website for informational purposes only, i.e., if you do not register or otherwise submit
information to us, we only collect data that your browser transmits to the page server (so-called "server log
files"). When you visit our website, we collect the following data, which is technically required to display
the website:
- Visited website
- Date and time of access
- Amount of data transmitted in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
Processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in
improving the stability and functionality of our website. Data is not disclosed or otherwise used. However, we
reserve the right to review server log files retrospectively if there are concrete indications of unlawful
use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content
(e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an
encrypted connection by the "https://" string and the lock symbol in your browser line.
3) Hosting and Content Delivery Network
3.1 Shopify
We use the following provider's system for hosting our website and displaying page content: Shopify
International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
("Shopify"). Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the provider's servers. We have concluded a data processing
agreement with the provider to ensure the protection of our visitors' data and to prohibit unauthorized
disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the
European Commission.
3.2 Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St., San
Francisco, CA 94107, USA.
This service allows us to deliver large media files such as graphics, page content, or scripts faster through
a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in
improving the stability and functionality of our website in accordance with Art. 6 (1) lit. f GDPR. We have
concluded a data processing agreement with the provider to ensure data protection and prevent unauthorized
disclosure.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures
compliance with the European level of data protection on the basis of an adequacy decision by the European
Commission.
3.3 Shopify CDN
We use a content delivery network from the following provider: Shopify International Limited, Victoria
Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data may additionally be
transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, and Cloudflare Inc., 101 Townsend St.,
San Francisco, CA 94107, USA.
This service allows us to deliver large media files such as graphics, page content, or scripts faster through
a network of regionally distributed servers. Processing is carried out under Art. 6 (1) lit. f GDPR on the
basis of our legitimate interest in improving website stability and functionality. We have concluded a data
processing agreement with the provider.
For data transfers to Canada, an adequate level of protection is ensured by an adequacy decision of the
European Commission. For data transfers to the USA, the recipient is certified under the EU-US Data Privacy
Framework.
4) Cookies
We use cookies, i.e., small text files stored on your device, in order to make your visit to our website
attractive and to enable the use of certain functions. Some cookies are deleted automatically when you close
your browser (session cookies); others remain on your device longer and allow page settings to be saved
(persistent cookies). In the latter case, the storage duration can be found in your browser's cookie settings
overview.
If personal data is also processed by individual cookies used by us, processing is carried out either under
Art. 6 (1) lit. b GDPR for contract performance, under Art. 6 (1) lit. a GDPR if consent has been given, or
under Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible website functionality
and a customer-friendly, effective website experience.
You can configure your browser so that you are informed about the setting of cookies and can decide
individually whether to accept them, or exclude acceptance of cookies for specific cases or in general.
Please note that if cookies are not accepted, the functionality of our website may be limited.
5) Contacting Us
5.1 AI Customer Support Integrations
We integrate AI software solutions for autonomous customer support from the following providers:
- Anthropic Ireland Limited, Dublin, Ireland (data may be transferred to Anthropic PBC, USA)
- OpenAI Ireland Limited, Dublin, Ireland (data may be transferred to OpenAI OpCo, LLC, USA)
- Google Ireland Limited, Dublin, Ireland (data may be transferred to Google LLC, USA)
Through API-based integration, visitors can submit text inquiries regarding offers, website functions, placed
orders, and contractual rights. These are then answered and processed by the provider's language models.
The provider software may collect personal data of the inquiring person to match with order history, assign
an input to a specific order, automatically review the request, and initiate processing workflows.
Collection and further processing of personal data is carried out exclusively for handling the specific
request. Processing of visitor inputs for training or further development of the providers' language models is
explicitly prevented.
Processing is based on our legitimate interest in effective visitor support, optimal marketing of our offer,
and automated customer support to reduce operational workload under Art. 6 (1) lit. f GDPR.
Collected personal data is deleted, subject to statutory retention obligations, when the provider software
determines final clarification of the matter by automatic mathematical-statistical procedures.
We have concluded data processing agreements with the providers to ensure protection of visitor data and to
prohibit unauthorized disclosure to third parties. For transfers to the USA, providers rely on EU standard
contractual clauses and/or the EU-US Data Privacy Framework, where applicable.
Further legal notices and Google's privacy information are available at
support.google.com/gemini/answer/13594961.
5.2 Contact Form / E-mail Contact
When you contact us (e.g., via contact form or e-mail), personal data is processed solely for handling and
responding to your request and only to the extent necessary.
The legal basis is our legitimate interest in responding to your request under Art. 6 (1) lit. f GDPR. If
your contact aims at concluding a contract, the additional legal basis is Art. 6 (1) lit. b GDPR. Your data
will be deleted once it can be inferred from the circumstances that the matter has been conclusively clarified
and provided that no statutory retention obligations prevent deletion.
6) Data Processing When Opening a Customer Account
Under Art. 6 (1) lit. b GDPR, personal data is collected and processed to the extent necessary when you
provide it while opening a customer account. Which data is required can be seen in the input form on our
website.
Deletion of your customer account is possible at any time by sending a message to the controller's contact
address above. After deletion of your customer account, your data will be deleted provided all contracts
concluded through the account have been fully performed, no statutory retention periods oppose deletion, and we
no longer have a legitimate interest in further storage.
7) Use of Customer Data for Direct Advertising
7.1 Subscription to Our E-mail Newsletter
If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only
mandatory information for receiving the newsletter is your e-mail address. Providing additional data is
voluntary and used to address you personally. We use the double opt-in procedure to ensure that you only
receive the newsletter once you have expressly confirmed your consent by clicking a verification link sent to
the provided e-mail address.
By activating the confirmation link, you grant us consent to use your personal data under Art. 6 (1) lit. a
GDPR. We store your IP address entered by the internet service provider (ISP) and the date and time of
registration in order to trace potential misuse of your e-mail address at a later time. Data collected for the
newsletter is used strictly for this purpose.
You can unsubscribe at any time via the link provided in the newsletter or by corresponding message to the
controller named above. After unsubscribing, your e-mail address will be removed from our newsletter list
immediately unless you have expressly consented to further use or we reserve additional use permitted by law
and explained in this policy.
7.2 Newsletter to Existing Customers
If you provided your e-mail address when purchasing goods or services, we reserve the right to send you
regular offers by e-mail for similar goods or services from our range. Under Section 7 (3) UWG (German Act
Against Unfair Competition), no separate consent is required for this. Processing is based on our legitimate
interest in personalized direct advertising under Art. 6 (1) lit. f GDPR. If you initially objected to this
use of your e-mail address, we will not send such e-mails.
You may object at any time with effect for the future by notifying the controller named at the beginning.
Only transmission costs according to basic rates apply. Upon receipt of your objection, use of your e-mail
address for advertising purposes will cease immediately.
8) Data Processing for Order Handling
8.1 To the extent necessary for contract processing for delivery and payment purposes, personal data collected
by us is passed on to the commissioned transport company and the commissioned credit institution under Art. 6
(1) lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or digital products,
we process contact data submitted during the order to inform you personally within our statutory information
obligations under Art. 6 (1) lit. c GDPR. Your contact data is used strictly for notifications about updates
owed by us and is processed only to the extent necessary for the respective information.
For order processing, we also work with service providers who support us fully or partially in contract
performance. Certain personal data is transferred to these providers as described below.
8.2 Use of Payment Service Providers
PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe)
S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method requiring advance payment by you, your payment data communicated during the
order process (including name, address, bank and payment card information, currency, and transaction number),
as well as information about your order content, are transferred to the provider under Art. 6 (1) lit. b GDPR
solely for payment processing and only to the extent necessary.
If you select a payment method where we provide advance performance, you will also be asked during checkout to
provide certain personal data (first and last name, street, house number, postal code, city, date of birth,
e-mail address, telephone number, and where applicable data on an alternative payment method).
In such cases, in order to safeguard our legitimate interest in determining your creditworthiness, we forward
this data to the provider for credit assessment under Art. 6 (1) lit. f GDPR. The provider checks, based on
your personal data and additional data (e.g., shopping cart, invoice amount, order history, payment
experience), whether the selected payment option can be granted with regard to payment and default risks.
Credit information may include probability values (score values) based on scientifically recognized
mathematical-statistical methods. Address data may be included, among other factors, in score calculation.
You can object to this processing at any time by notifying us or the provider. However, the provider may still
be entitled to process your personal data if this is required for contractual payment processing.
Shopify Payments
One or more online payment methods from the following provider are available on this website: Shopify
International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
If you select a payment method requiring advance payment by you (e.g., credit card payment), your payment data
communicated during the order process (including name, address, bank and payment card information, currency,
and transaction number), and information about your order content, are transferred to the provider under Art.
6 (1) lit. b GDPR solely for payment processing and only to the extent necessary.
9) Web Analytics Services
Shopify Network Intelligence
This website uses the "Shopify Network Intelligence" function of Shopify International Limited, Victoria
Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").
Through this function, certain customer data (order and search histories, location information, and
transaction details), where collected, is automatically transmitted to Shopify in pseudonymized form, prepared
by Shopify, and processed for statistical and analytical purposes.
Analysis results may include pseudonymized data from customers of other Shopify merchants, without any merchant
receiving individual access to such external data outside its own customer base.
In this process, Shopify does not access plaintext data; information is encrypted automatically during
transmission using a specific algorithm.
Processing is carried out under Art. 6 (1) lit. f GDPR based on our legitimate interest in statistical
evaluation of our shop's reach and acceptance of our offering for optimization purposes.
Data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. We have concluded a
data processing agreement with the provider. For transfers to Canada, an adequate level of protection is
ensured by an adequacy decision of the European Commission.
10) Site Functionalities
10.1 YouTube
This website uses plugins to display and play videos from: Google Ireland Limited, Gordon House, 4 Barrow St,
Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC, USA.
If you access a page of our website containing such a plugin, your browser establishes a direct connection to
the provider's servers at the latest when video playback starts in order to load content. Certain information,
including your IP address, is transmitted to the provider.
If playback of embedded videos is started via the plugin, the provider also uses cookies to collect
information about user behavior, compile playback statistics, and prevent abusive behavior.
If you are logged in to a user account with the provider during your visit, your data is assigned directly to
your account when you click on a video. If you do not want this assignment, you must log out before clicking
play.
All processing described above, especially cookie setting for reading information on your device, only takes
place if you have given us your express consent under Art. 6 (1) lit. a GDPR. You can revoke consent at any
time for the future by disabling this service via the cookie consent tool provided on the website.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework.
10.2 Spotify
This website integrates functionalities of the following music service provider for playback of music tracks:
Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden.
When visiting this page, the integration may establish a direct connection between your browser and the
provider's servers, even if you do not have an account with the provider or are not logged into one.
The provider thereby receives information that you visited our site. Information collected in this context
(possibly including your IP address) is transmitted directly from your browser to a server of the provider and
stored there. However, this information is not used to personally identify you and is not passed on to third
parties.
If you play a music track via the respective function while logged in to a user account with the provider, the
provider may assign your visit to our site to that account. If you do not want this assignment, you must log
out before clicking play.
The above data processing is carried out under Art. 6 (1) lit. f GDPR based on our legitimate interest in an
appealing acoustic design of visits to our website.
You can also object in the future to loading the provider's playback functions and to the above processing by
using browser add-ons, e.g., the script blocker "NoScript" (https://noscript.net/).
11) Tools and Other Services
Lexware Office
For accounting, we use the cloud-based accounting software service of Haufe-Lexware GmbH & Co. KG,
Munzinger Strasse 9, 79111 Freiburg, Germany.
The provider processes incoming and outgoing invoices and, where applicable, our company's bank transactions
in order to automatically capture invoices, match them to transactions, and create financial accounting in a
partially automated process.
If personal data is processed in this context, processing is based on our legitimate interest in efficient
organization and documentation of business processes under Art. 6 (1) lit. f GDPR.
12) Rights of the Data Subject
12.1 Applicable data protection law grants you the following data subject rights against the controller with
respect to processing of your personal data (rights of access and intervention), with reference to the legal
basis indicated for each:
- Right of access under Art. 15 GDPR
- Right to rectification under Art. 16 GDPR
- Right to erasure under Art. 17 GDPR
- Right to restriction of processing under Art. 18 GDPR
- Right to notification under Art. 19 GDPR
- Right to data portability under Art. 20 GDPR
- Right to withdraw consent granted under Art. 7 (3) GDPR
- Right to lodge a complaint under Art. 77 GDPR
12.2 Right to Object
If, within the framework of a balancing of interests, we process your personal data on the basis of our
overriding legitimate interest, you have the right at any time to object to this processing with effect for
the future on grounds arising from your particular situation.
If you exercise your right to object, we will stop processing the data concerned. Further processing may,
however, be reserved if we can demonstrate compelling legitimate grounds for processing that override your
interests, fundamental rights, and freedoms, or if processing serves the establishment, exercise, or defense
of legal claims.
If your personal data is processed by us for direct advertising, you have the right to object at any time to
processing of personal data concerning you for such advertising purposes. You can exercise your objection as
described above.
If you exercise your right to object, we will stop processing the data concerned for direct advertising
purposes.
13) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, processing purpose, and
- where applicable - additionally by the respective statutory retention period (e.g., retention periods under
commercial and tax law).
When processing personal data based on explicit consent under Art. 6 (1) lit. a GDPR, this data is stored
until you revoke your consent.
If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations
under Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods expire, provided it
is no longer required for contract performance or contract initiation and/or we no longer have a legitimate
interest in further storage.
When processing personal data based on Art. 6 (1) lit. f GDPR, this data is stored until you exercise your
right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing
that override your interests, rights, and freedoms, or processing serves the establishment, exercise, or
defense of legal claims.
When processing personal data for direct advertising under Art. 6 (1) lit. f GDPR, this data is stored until
you exercise your right to object under Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this policy regarding specific processing situations,
stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or
otherwise processed.
Last Updated: February 22, 2026, 22:44:08
