Privacy Policy

Last updated: 10 November 2026

1. Data Controller

The controller responsible for processing personal data is:

DauerDrauf Hosting
Owner: Claude Hurt
2, rue Eugène Reichling
L-4302 Esch-sur-Alzette
Luxembourg

Email: sanguss@dauerdrauf.com

2. Personal Data We Process

Depending on how our services are used, the following data in particular may be processed:

• Name, username and email address;
• Account and login details;
• Order, contract, invoice and payment information;
• Contents of support requests and tickets;
• IP address, timestamps, browser and device information;
• Technical server, security and error logs;
• Configuration and usage data relating to the game servers provided.

3. Purposes and Legal Bases

Personal data is processed in particular to:

• Create and manage user accounts;
• Process orders, payments and invoices;
• Provision, configure and operate game servers;
• Handle support requests;
• Prevent abuse, fraud and security incidents;
• Comply with statutory retention and record-keeping obligations;
• Maintain system stability and security.

Processing is carried out in particular for pre-contractual measures and performance of a contract, compliance with legal obligations, and legitimate interests in secure and reliable operations. Where consent is required, processing is based on that consent.

4. Payment Processing

Payments are processed through Stripe. Payment, contact, device and transaction data may be transferred directly to Stripe. As a rule, DauerDrauf Hosting receives only the information needed to match and confirm a payment, not full card details.

5. Hosting and Technical Service Providers

In particular, the following providers and technical systems are used to operate the services:

• Hetzner Online GmbH for server and infrastructure services;
• Cloudflare for DNS, security, routing and email forwarding;
• Stripe for payment processing;
• Brevo (Sendinblue) for transactional emails, including order confirmations, invoice notifications and system messages. In particular, email addresses and necessary message content are processed for this purpose;
• Paymenter for customer accounts, orders, invoices and support;
• Pterodactyl for technical provisioning and management of game servers.

Data is transferred only insofar as necessary for the relevant service or where a legal basis exists.

6. Server Logs

Technical log data may be stored when the website is accessed or the services are used. This includes, in particular, IP addresses, times, requested pages, status codes, browser information and technical error messages. These data are used for security, troubleshooting and prevention of abusive access.

7. Cookies and Sessions

The website may use technically necessary cookies or comparable storage technologies to enable login, shopping cart, payment and security functions. Cookies that are not technically necessary are used only where valid consent has been obtained.

8. Retention Periods

Data is retained only as long as necessary for the relevant purpose, contract performance, security or statutory retention obligations. Once the purpose ceases to apply, data is deleted or its processing restricted, unless legal obligations prevent this.

Email logs in Paymenter are scheduled for automatic deletion after 90 days.

If payment is overdue, a game server may be suspended after 3 days. After 30 days of overdue payment, automatic deletion of the game server is scheduled. Customer files and backups stored on the server may also be deleted.

Statutory retention obligations for invoicing and accounting records remain unaffected.

9. Recipients and International Transfers

Recipients may include the technical and commercial service providers listed above, authorities, tax advisers or other parties, where disclosure is necessary or required by law. Where data is transferred outside the European Economic Area, the applicable data protection safeguards will be observed.

10. Rights of Data Subjects

Subject to the applicable legal requirements, individuals have in particular the right to:

• Access their stored data;
• Rectify inaccurate data;
• Erasure or restriction of processing;
• Data portability;
• Object to certain processing activities;
• Withdraw consent with effect for the future;
• Lodge a complaint with a data protection supervisory authority.

In Luxembourg, the competent supervisory authority is the Commission nationale pour la protection des données (CNPD).

11. Security

DauerDrauf Hosting applies appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and other security risks.

12. Changes

This Privacy Policy may be amended if services, legal bases or service providers change. The version published on this page applies.

Legal Notice · Terms of Service · Back to DauerDrauf Hosting