Skip to content

Privacy Policy and Data Protection

Data protection notice
As of September 2026

The following data protection notice applies to website sevenonestudios.com (“online offering”).

  1. WHO ARE WE? (CONTROLLER)
  2. The controller in terms of data protection law is Seven.One Studios GmbH, Medienallee 7, 85774 Unterföhring, phone: +49 89 95077312, fax: +49 89 9507 79399, e-mail: info@sevenonestudios.com, hereinafter referred to as “we” or “us.”
    Exceptions are explained in this data protection notice.
    Our contact details can be found in the Contact section].
  4. WHICH CATEGORIES OF PERSONAL DATA DO WE PROCESS?
  5. General
    Personal data is any information relating to an identified or identifiable natural person. When we process personal data, this means that we collect, store, use, transfer to others, or delete it, for example.
    The categories of personal data we process about you depend on how you use our online services. We have listed the possible categories for you below.
  6. Categories of personal data
    Contact data: When you contact us (e.g., via a form or email), we process the data you provide (usually your first and last name, email address, and/or phone number, and the content of your inquiry) as well as any subsequent communication.
    Log files: Each time you use an online service, your device automatically transmits what is known as online usage data (time stamp of the request, browser information, IP address, search query, referrer URL, device information, cookie ID, device ID, geo-location, user ID, email address, click path), which we store in log files.
  8. WHO RECEIVES YOUR PERSONAL DATA AND WHY?
  9. Transfer of data to third parties
    We only disclose your personal data to third parties if this is necessary for the fulfilment of the contract, if we or the third party have a legitimate interest in the disclosure, if you have given your consent, or if this is necessary to fulfil a legal obligation.
  10. Details on third parties can be found in the following section: Why do we process your personal data, on what legal basis, what are our legitimate interests, who receives your personal data?
  11. We may disclose personal data to a third party in particular
    • if we are required to do so in individual cases due to legal requirements or enforceable official or court orders;
    • in connection with legal disputes (before courts or our lawyers) or tax audits (before auditors);
    • in connection with possible criminal offenses vis-à-vis the competent investigating authorities;
    • in the event of a sale of the business (to the purchaser and their legal and tax advisors).
  12. In the case of a transfer based on consent, the explanation may also be provided when consent is obtained.
  13. Transfer of data to service providers
  14. We reserve the right to use service providers when collecting or processing data. Service providers only receive the personal data they need for their specific activities from us. For example, your email address may be passed on to a service provider so that they can deliver a newsletter you have ordered. Service providers may also be commissioned to provide server capacity. Service providers are generally involved as so-called processors, who may only process the personal data of users of this online service in accordance with our instructions.
    Details on the service providers we use can be found in the following section: Why do we process your personal data, on what legal basis, what are our legitimate interests, who receives your personal data?
  16. WHY DO WE PROCESS YOUR PERSONAL DATA, ON WHAT LEGAL BASIS, WHAT ARE OUR LEGITIMATE INTERESTS, WHO RECEIVES YOUR PERSONAL DATA?
  17. We process your data for the following purposes and—to the extent required by applicable law—on the basis of the legal grounds specified. Explanations of the data categories can be found in the section “Which categories of personal data do we process?” In the event that data processing is based on the legal basis of legitimate interest, we also explain our legitimate interest in processing the data. In addition, we indicate to which recipients or categories of recipients we disclose your personal data.
  18. General purposes of processing:
  19. Purpose of processing: Provision of this online offering. This includes in particular:
    a) Enabling the use of the online offering
    Categories of personal data: log files
    Legal basis for processing: Legitimate interest
    Legitimate interest: We have a legitimate interest in making our online offering available to interested users in order to draw attention to our business activities.

Categories of recipients:
IT service provider (technical support), EU/EEA area, USA
IT service provider (hosting), EU/EEA area]]

Please note your right to object to the processing of data for direct marketing purposes or for personal reasons (see sections Your right to object to direct marketing and Your right to object for personal reasons).

  1. WHEN DO WE TRANSFER DATA TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA?
  2. We also transfer personal data to third parties or processors based in non-EEA countries. In this case, we ensure before the transfer that the recipient has an adequate level of data protection (e.g., based on an adequacy decision by the European Commission for the respective country in accordance with Art. 45 GDPR or the agreement of so-called EU Standard Contractual Clauses of the European Commission with the recipient in accordance with Art. 46 GDPR, with the implementation of so-called Transfer Impact Assessments and, where necessary, the implementation of additional protective measures, Module 1 (for recipients who are controllers) or Module 2 (for recipients who are processors)) or that we have obtained the express consent of our users.
    These are third parties or processors in the following countries: United Kingdom.
    You can obtain an overview of the importers in third countries and a copy of the specific arrangements agreed to ensure an adequate level of data protection from us. Please use the information in the Contact section for this purpose.
  4. HOW LONG DO WE STORE YOUR DATA?
  5. We store your data for as long as is necessary to provide our online offering and the associated services, or for as long as we have a legitimate interest in further storage. In all other cases, we delete your personal data with the exception of data that we must continue to retain in order to comply with statutory retention periods (e.g., tax or commercial law) (e.g., invoices).
  6. We block data that is subject to a retention period until the end of the period.
    Specifically, the following retention periods apply to the personal data processed within the scope of this online offering:
    Log files: [7 to 10 days, as long as there has been no security incident that requires longer storage]
  8. ARE YOU OBLIGATED TO PROVIDE US WITH PERSONAL DATA?
    In principle, you are not obliged to provide us with your personal data. However, the use of certain services on this website may require the provision of personal data, e.g., registration or participation in a competition. If this is the case, we will point this out to you. Mandatory fields are regularly marked with an asterisk (*). If you do not wish to provide us with the necessary data, you will unfortunately not be able to use the corresponding services.
  10. YOUR RIGHTS (RIGHTS OF THE DATA SUBJECT)
  11. How can you exercise your rights?
    To assert your rights, please use the information in the Contact section. Please ensure that we are able to clearly identify you.
    Your rights to information and correction
    You can request that we confirm whether we process personal data relating to you, and you have a right to information regarding the data we process. If your data is incorrect or incomplete, you can request that your data be corrected or completed. If we have passed on your data to third parties, we will inform them of the correction, insofar as this is required by law.
  12. Your right to erasure
    If the legal requirements are met, you can request that we delete your personal data immediately. This is particularly the case if
    • your personal data is no longer required for the purposes for which it was collected;
    • the legal basis for processing was solely your consent and you have revoked this;
    • you have objected to processing for advertising purposes (“advertising objection”);
    • you have objected to processing on the basis of legitimate interest for personal reasons and we cannot demonstrate compelling legitimate grounds for processing;
    • your personal data has been processed unlawfully; or
    • your personal data must be deleted to comply with legal requirements.
    If we have shared your data with third parties, we will inform them of the deletion, if required by law.
    Please note that your right to erasure is subject to restrictions. For example, we are not required or permitted to erase data that we are still required to retain due to statutory retention periods. Data that we need to assert, exercise, or defend legal claims is also excluded from your right to erasure.
  13. Your right to restrict processing
    If the legal requirements are met, you can request that we restrict processing. This is particularly the case if
    • the accuracy of your personal data is disputed by you, and then until we have had the opportunity to verify its accuracy;
    • the processing is not lawful and you request restriction of use instead of erasure (see previous section);
    • we no longer need your data for the purposes of processing, but you need it to assert, exercise, or defend your legal claims;
    • you have objected on personal grounds, and until it is determined whether your interests prevail.
  14. If there is a right to restrict processing, we will mark the data concerned to ensure that it is only processed within the narrow limits that apply to such restricted data (namely, in particular, for the defense of legal claims or with your consent).
  15. Your right to data portability
    You have the right to receive personal data that you have provided to us for the performance of a contract or on the basis of consent in a structured, commonly used, and machine-readable format. In this case, you may also request that we transmit this data directly to a third party, provided this is technically feasible.
  16. Your right to withdraw consent
    If you have given us your consent to process your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until revocation remains unaffected.
    For other revocations, please use the information in the following section Contact.
  17. Your right to lodge a complaint with a supervisory authority
    You have the right to lodge a complaint with a data protection authority. In particular, you can contact the data protection authority responsible for your place of residence or federal state, or the authority responsible for the place where the violation of data protection law occurred. Alternatively, you can also contact the data protection authority responsible for us.
  19. CONTACT
  20. For information and suggestions on the subject of data protection, please contact us.
    If you would like to contact us by other means, you can also reach us as follows:
    Seven.One Studios GmbH, Medienallee 7, 85774 Unterföhring.