Privacy
Privacy policy
This privacy policy applies to the Xiphoris Legion (XPL) website in its current technical state. It covers in particular visits to the pages /, /events, /teams, /partner, /impressum, and /datenschutz.
Responsible entity
Controller within the meaning of the GDPR
Justin Schneider
Marktstraße 1
99444 Blankenhain
Germany
Email: justinschneidergmx@gmail.com
Phone: 01522 6832 890
Discord: @Admin
General
Type and scope of processing
When you visit this website for informational purposes, we generally process only the data that is technically necessary to deliver the website and to ensure the stability and security of operations.
This website currently offers informational pages, event overviews, a team page, and a partner overview with linked external offerings. There is currently no registration, no login area, no order form, and no internal contact form on the website.
Legal bases
Legal bases for processing
Where personal data is processed, this is done depending on the processing on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure and functional operation of the website), Art. 6(1)(b) GDPR (initiation or performance of communication), or Art. 6(1)(c) GDPR (legal obligations).
Where consent is required in individual cases, processing is based on Art. 6(1)(a) GDPR.
Server operation
Hosting and server log files
When the website is accessed, connection data is processed for technical reasons. This may include in particular the following data:
- IP address of the requesting device
- Date and time of access
- Requested page/file (URL)
- HTTP status code
- Browser type and version
- Operating system
- Referrer URL (if transmitted by the browser)
The processing of this data is carried out to provide the website, analyze errors, and ensure security and stability of the system. Retention period depends on technical requirements and the specifications of the hosting/server infrastructure used.
Cookies & tracking
No analytics or marketing tools (current status)
As of the current state of this website, we do not use our own analytics or marketing tools and do not use our own cookies for tracking purposes.
Technically necessary processes of hosting or upstream infrastructure (e.g., security or proxy services) may be unaffected.
Internal scripts
Local JavaScript functions
Local JavaScript files are used on the website (e.g., for animations on the homepage and opening the partner detail view). These scripts serve to display and operate the website and, to the current state, do not transmit analytics or tracking data to external services.
Fonts
Google Fonts (loaded externally)
This website currently loads fonts via Google Fonts (Google) through external integration. When the website is accessed, a connection to Google's servers is established, which may process your IP address and technical metadata.
The integration serves a consistent and appealing presentation of the website. Further development plans include fully local hosting of fonts.
External links
Linked platforms and third-party offers
The website contains external links, including to Discord, Twitch, and partner pages and social media platforms (e.g., YouTube, Instagram, TikTok). When simply loading our website, this content is not embedded; data is generally transmitted to these services only when you actively click the respective link.
The respective operators are solely responsible for the processing of personal data on the linked pages. The privacy notices of the respective providers apply there.
Contact
Communication via email, phone, or Discord
If you contact us via email, phone, or Discord, we process the data you provide (e.g., name, contact details, message content) to handle your request.
Processing is generally based on Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in handling inquiries). When communicating via Discord, Discord's privacy notices also apply.
Retention period
Deletion and storage
Personal data is stored only as long as necessary for the respective purposes or as long as statutory retention obligations exist. Thereafter, the data is deleted or processing is restricted.
Your rights
Data subject rights under the GDPR
You have the following rights in particular under the statutory provisions:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to certain processing (Art. 21 GDPR)
- Right to withdraw consent with effect for the future
- Right to lodge a complaint with a data protection supervisory authority
In particular, you can contact the supervisory authority responsible for your place of residence or for Thuringia.
Status
Status of this privacy policy: February 26, 2026
We will adjust this privacy policy if functions, content, or data processing on the website change.