1. Controller
The controller responsible for processing personal data on this website is Next Quest Studio, sole proprietorship, owner Aleksandar Levnajic, Horst-Embacher-Allee 3, 22850 Norderstedt, Germany. You can contact us at contact@nextqueststudio.net.
2. Website hosting and server logs
This website is hosted on Netlify. When you access the website, technical data such as IP address, browser and device information, requested page, date and time, and security or diagnostic data may be processed in order to deliver and protect the website. The legal basis is our legitimate interest in providing a secure and reliable website (Art. 6(1)(f) GDPR).
3. Contact form and email
The contact form collects the name, email address, subject and message that you choose to submit. Submissions are processed through Netlify Forms and notifications and correspondence are handled through our Zoho Mail mailbox. We process this information to answer and follow up on your enquiry. Depending on the nature of the enquiry, the legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication or Art. 6(1)(f) GDPR for general business communication.
4. Support payments
The website offers optional one-time support contributions of €3, €5 or €10 through Stripe-hosted checkout pages. Stripe processes payment details and may provide us with transaction and payer information needed for payment administration, accounting, fraud prevention and support. Next Quest Studio does not receive or store full card details. Processing is based on Art. 6(1)(b) GDPR where necessary to handle the transaction, Art. 6(1)(c) GDPR for legal accounting and record-keeping obligations, and Art. 6(1)(f) GDPR for fraud prevention and payment administration.
5. Analytics, advertising and external links
This website does not use Google Analytics, Meta Pixel or comparable advertising or behavioural-tracking tools. Facebook and Steam elements are ordinary external links, not embedded social-media plugins. External services are contacted only when you choose to follow a link.
6. Service providers and international transfers
We use Netlify for hosting and form handling, Zoho Mail for email communication and Stripe for optional support payments. Where a provider processes personal data outside the European Economic Area, transfers are made using the safeguards available under applicable data-protection law, such as adequacy decisions or standard contractual clauses where required.
7. Retention
Contact enquiries are kept only as long as reasonably necessary to handle the enquiry and any follow-up, and are then deleted unless legal retention obligations or legitimate interests require longer storage. Payment and accounting records are retained for the periods required by applicable tax and commercial law.
8. Your rights
Subject to the applicable legal requirements, you may have rights to access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent where processing is based on consent. You also have the right to lodge a complaint with a competent data-protection authority.
9. Supervisory authority
For Next Quest Studio, the competent supervisory authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.
10. Changes to this policy
This policy may be updated when website services, providers or legal requirements change.