Privacy Policy

We care deeply about how your data is handled. This Privacy Policy explains clearly and transparently how we process your personal data when you use our website.

1. CONTROLLER

The controller responsible for data processing on this website is:

Parable Studios UG (haftungsbeschränkt)
Represented by Alexander Zehrer and Lukas Augustin
Heuterdamm 9
23627 Groß Grönau
Germany

Email: hello@parable-studios.com

2. GENERAL INFORMATION

Personal data means any information relating to an identified or identifiable natural person (e.g. name, email address, IP address).

We process your personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications-Telemedia Data Protection Act (TTDSG).

3. DATA PROCESSING ON OUR WEBSITE

3.1 Informational Use of the Website

When you visit our website without actively providing information, we automatically collect the following data:

  • IP address
  • Date and time of access
  • Time zone difference (GMT)
  • Requested content (specific page)
  • Access status / HTTP status code
  • Amount of data transferred
  • Referrer URL
  • Browser type and version
  • Operating system

This data is technically necessary to ensure the functionality and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Legitimate interest: Ensuring system stability, security, and proper functioning of the website

The data is stored for a maximum of 30 days and then deleted automatically.

3.2 Contact and Communication

If you contact us via contact form, email, or phone, we process the data you provide (e.g. name, email address, message).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in communication)

We store your data only as long as necessary to process your request or until you request deletion, unless statutory retention obligations apply.

3.3 Community Registration

If you register for our community, we process:

  • Name
  • Email address
  • Address
  • Payment-related data

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Your data is stored for the duration of your subscription and deleted afterwards, unless legal retention obligations apply or you have subscribed to our newsletter.

Payment processing:
Payments are processed via Stripe Payments Europe Ltd. (Ireland). We do not store full payment details ourselves.

3.4 Newsletter

If you subscribe to our newsletter, we process your email address.

Legal basis: Art. 6(1)(a) GDPR (consent)

We use a double opt-in procedure, meaning you will receive a confirmation email before being added to the mailing list.

You can withdraw your consent at any time via the unsubscribe link in each email or by contacting us.

4. COOKIES AND TRACKING

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device to ensure functionality, improve user experience, and analyze usage.

4.1 Consent Management (Real Cookie Banner)

We use the consent tool Real Cookie Banner (devowl.io GmbH, Germany) to obtain and document your consent.

Legal basis: § 25(2) TTDSG (necessary cookies) and Art. 6(1)(c) GDPR (legal obligation)

4.2 Types of Cookies
Necessary Cookies

Required for the operation and security of the website.
Legal basis: § 25(2) TTDSG

Preference Cookies

Enable enhanced functionality.
Legal basis: § 25(1) TTDSG (consent)

Statistics Cookies

Used to analyze website usage (e.g. via Google Analytics).
Legal basis: § 25(1) TTDSG (consent), Art. 6(1)(a) GDPR

Marketing Cookies

Used for advertising and tracking.
Legal basis: § 25(1) TTDSG (consent), Art. 6(1)(a) GDPR

4.3 Google Services

We may use services provided by Google Ireland Limited (e.g. Google Analytics).

These services may transfer data to countries outside the EU/EEA, particularly the United States.

In such cases, appropriate safeguards are in place, such as Standard Contractual Clauses (Art. 46 GDPR).

5. RECIPIENTS OF DATA

We may share your data with:

  • Authorized internal staff
  • IT and hosting providers
  • Service providers acting on our behalf under data processing agreements (Art. 28 GDPR)

Current providers include:

  • Sendinblue GmbH (Germany)
  • Stripe Payments Europe Ltd. (Ireland)
  • DomainFactory GmbH (Germany)
  • Google Ireland Limited (Ireland)

6. DATA RETENTION

We store personal data only as long as necessary for the respective purposes or as required by law.

7. YOUR RIGHTS

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent (Art. 7 GDPR)
  • Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority, in particular in your country of residence or in Germany.

8. RIGHT TO OBJECT (ART. 21 GDPR)

You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.

If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds or need the data for legal claims.

You may object at any time to the processing of your data for direct marketing purposes.

9. DATA TRANSFERS TO THIRD COUNTRIES

If data is transferred outside the EU/EEA, we ensure appropriate safeguards in accordance with Art. 44 et seq. GDPR, such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions of the European Commission

10. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect legal or technical changes.

Last updated: May 2026