Privacy policy

1. Controller

Darkbane Media
Sascha Siracusano
Von-Der-Tann-Str. 5
66955 Pirmasens
Germany
Email: info@darkbane-media.com

2. General information

Protecting your personal data is important. Personal data is handled confidentially and in accordance with applicable data protection laws and this privacy policy.

3. Hosting and delivery (Cloudflare)

This website is delivered through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When a page is requested, technical connection and security data are processed, in particular IP address, timestamp, requested URL, referrer, browser and operating-system details, and technical error and security information.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable and efficient provision of the website. Cloudflare states that Pages Functions logs are not stored persistently. According to Cloudflare, HTTP request logs through Logpull are generally available for at least 3 and up to 7 days; additional logging or security features may have different retention periods and settings. This website does not set up its own persistent visitor profiles or analytics storage.

Processing in the United States cannot be ruled out. For transfers, Cloudflare identifies in its standard Data Processing Addendum the EU Standard Contractual Clauses (SCCs), including supplementary measures where appropriate, and for transfers to the US also the EU-US Data Privacy Framework (DPF). The version applicable to the specific Cloudflare account must be checked in that account. A copy of the relevant safeguards can be obtained through the provider documentation.

The font files used on this website (Bricolage Grotesque, Manrope and JetBrains Mono) are self-hosted and served from the same website domain. Loading the fonts therefore does not establish a connection to Google Fonts or send an IP address to Google for that purpose.

4. Contact by email and form

If you contact Darkbane Media directly by email, the sender address, message content, time and any information you include are processed to respond to your enquiry. The domain's public MX records point to IONOS. IONOS therefore processes the technical receipt and delivery of emails to info@darkbane-media.com as a processor under the completed Data Processing Agreement (AVV). The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries or Art. 6(1)(f) GDPR for other matters and reliable communication. Under the AVV, processing under the agreement takes place in the EU or EEA unless a third-country transfer is required to provide the service; any such transfer must meet GDPR Articles 44 et seq.

The contact form is processed through a Cloudflare Pages Function. Your email address and message are required so the enquiry can be identified and answered; the form cannot be submitted without them. Your name and selected area are optional. The submitted information is then sent to Resend (Plus Five Five, Inc., San Francisco, USA) for delivery to info@darkbane-media.com. The legal basis is Art. 6(1)(b) GDPR (handling pre-contractual enquiries) or Art. 6(1)(f) GDPR (handling other matters and reliable delivery).

Cloudflare and Resend may process data in the United States. Their standard Data Processing Addenda identify the EU Standard Contractual Clauses (SCCs); both providers also refer to their participation in the EU-US Data Privacy Framework. Resend's DPA specifically identifies SCC Module 2 when it processes data as a processor. Whether the relevant standard DPA and these mechanisms apply to the accounts used by Darkbane Media must be checked against the contractual documents available in each account. The applicable safeguards are available there or from the provider. See Resend’s DPA and Cloudflare’s SCC text.

Enquiries are kept in the email mailbox only as long as needed to handle and follow up on them, then deleted unless statutory retention duties or the establishment, exercise or defence of legal claims require further retention. The website operator deletes or archives received enquiries according to this purpose. Resend's DPA describes deletion of customer data within 90 days after account termination; specific retention and deletion options for messages and delivery logs may also depend on the active plan and account settings. Retention in an IONOS mailbox is additionally governed by the mailbox settings and managed by the mailbox owner. See IONOS privacy information.

5. Cookies and similar technologies

The website itself does not set analytics, advertising or preference cookies and does not use web analytics. Cloudflare’s dashboard shows Bot Fight Mode and the Browser Integrity Check enabled for the domain. The Browser Integrity Check evaluates browser HTTP headers and may return a block page if it detects a threat.

Because bot protection is enabled, Cloudflare may set the __cf_bm cookie to detect and mitigate automated traffic. According to Cloudflare, it expires after 30 minutes of inactivity. If a visitor has to pass a Cloudflare security challenge, Cloudflare may also store cf_clearance. The Challenge Passage setting in the dashboard is set to 30 minutes.

Whether an individual visit actually receives a challenge cookie depends on whether Cloudflare triggers a security check for that request. The website itself continues not to use analytics, advertising or other non-essential cookies. More information: Cloudflare cookie documentation.

6. Your rights

You have the right to:

• Access your stored data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Data portability
• Object to processing

7. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. For Rhineland-Palatinate, the competent authority is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate:
Hintere Bleiche 34, 55116 Mainz, Germany
Email: poststelle@datenschutz.rlp.de · datenschutz.rlp.de

8. SSL/TLS encryption

This website uses SSL/TLS encryption for security.

9. Changes to this policy

This policy may be updated to reflect current legal requirements.