We – Travian Games GmbH, Moosacher Str. 70 in 80809 Munich (referred to in the following as "Travian Games" or "we") – operate the website www.traviangames.com and are responsible for the collection, processing and use of your personal data within the meaning of the EU General Data Protection Regulation (GDPR), other national data protection laws of member states, and further provisions on data protection. Your personal data is collected and used exclusively in accordance with the legal provisions of applicable data protection law.

First and foremost, we adhere to data protection legislation and protect your privacy to the greatest extent possible. However, we would like to make it absolutely clear: Data exchange is the lifeblood of the internet, and the internet still has many security vulnerabilities. Even when your data is encrypted when visiting our website, there is always a residual risk – especially while interacting with external websites. If you visit other websites – for example via a link on our website – please note that this Privacy Policy does not apply to third-party websites.

In the event that you are directed to another website not operated by Travian Games via a link contained on the website operated by Travian Games or use third-party services (e.g. while making an order), please note that this Privacy Policy does not apply to such third-party websites.

What is personal data?

In this context, personal data refers to all details about the personal or material circumstances of an identified or identifiable natural person, such as name, address, email address and IP address.

‍Controller for the processing of data pursuant to Art. 4 (7) GDPR

The controller is:

Travian Games GmbH
Moosacher Str. 70
80809 Munich
Phone: +49 (0)89 324915-0
Fax: +49 (0)89 324915-970
Email: [email protected]

Contacting the data protection officer

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us or our data protection officer. You can reach our data protection officer via the following email address: [email protected] or alternatively by post using the above-mentioned address including the additional line "Data Protection Officer". You can find additional contact options and information in our imprint.

When you contact us by email, we will store your email address and, if you have provided the respective details, your name and telephone number in order to answer your questions. All data arising in this context is deleted after storage is no longer necessary or – in the case of statutory retention obligations – the corresponding processing is restricted.

What are my rights?

You can contact us at any time if you have any questions about your rights with regard to data protection or if you would like to assert one of your following rights:

• Right of revocation pursuant to Art. 7 (3) GDPR (e.g. you can contact us if you wish to retract your previous consent to our newsletter)
• Right of access to information pursuant to Art. 15 GDPR (e.g. you can contact us if you wish to know what data we have stored about you)
• Right of rectification pursuant to Art. 16 GDPR (e.g. you can contact us if your email address has changed and we should replace the old email address)
• Right of erasure pursuant to Art. 17 GDPR (e.g. you can contact us if we should delete certain data that we have stored about you)
• Right of restriction of processing pursuant to Art. 18 GDPR (e.g. you can contact us if you would like us to send you emails only when absolutely necessary, but do not want us to delete your email address)
• Right of data portability pursuant to Art. 20 GDPR (e.g. you can contact us if you wish to receive the data we have stored about you in a compressed format, because, for example, you want to provide the data to another website)
• Right to object pursuant to Art. 21 GDPR (e.g. you can contact us if you do not agree to one of the advertising or analysis procedures mentioned here)
• Right to lodge a complaint with the responsible supervisory authority pursuant to Art. 77 (1) GDPR (e.g. you can also contact the data protection supervisory authority directly if you have a complaint)

Responsible supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (Department of Bavaria for Data Protection Supervision)

Postal address

P.O. Box 606
91511 Ansbach
Germany

Erasure and storage period

Unless otherwise indicated, we delete your data as soon as we no longer need it. The data will also be erased or blocked if a storage period determined by law expires, unless further storage of the data for the conclusion or performance of a contract is necessary. Certain data must be retained for longer periods for legal reasons. Of course, you may request information about your stored data at any time.

How is your personal data protected?

We will take all reasonable and appropriate measures to protect the personal information we store about you against misuse, loss or unauthorized access. To this end, we have taken a range of technical and organizational measures. They also encompass measures for our response in the event of any suspected data breaches. If you suspect that your personal data has been misused or misplaced or accessed by an unauthorized person, please let us know as soon as possible by contacting us using the above-mentioned contact details.

Legal bases for data processing

We only collect and process your personal data if this is permitted by law. Besides your explicit consent, further legal bases may exist in this connection. If processing is based on your consent, Art. 6 (1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of your data. The processing of personal data required for the fulfillment of a user contract is based on Art. 6 (1b) GDPR. Insofar as the processing of personal data is required for the fulfillment of a legal obligation to which our company is subject, this is based on Art. 6 (1c) GDPR. If processing is required to protect a legitimate interest of Travian Games or a third party and the interests, basic rights and freedoms of the data subject do not prevail over the former interest, this processing is based on Art. 6 (1f) GDPR. In the event that processing is based on such a balance of interests, you have a right to object to this data processing, insofar as you have special reasons for this objection and that we are unable to demonstrate any compelling and legitimate reasons for this processing.

You will find the relevant legal basis for individual data processing procedures at the end of the respective descriptions of the data processing procedures.

If we use contracted service providers for individual functions of our offering or would like to use your data for advertising purposes, we will inform you in detail about the respective procedures below. Where we cooperate with appropriate service providers, we have carefully selected them with regard to compliance with the legal requirements for data protection and data security, and have entered into data processing agreements with them, which comply with the requirements of Art. 28 GDPR. If the service providers are based outside the EU, we ensure that there are appropriate safeguards as referred to in Art. 46 GDPR, such that a corresponding level of data protection is maintained by the data processor. In this connection, certification under the EU-US Data Privacy Framework (DPF) or the EU's standard contractual clauses may be considered as a corresponding level of data protection. We will refer to the appropriate safeguards accordingly.

Visiting the website

We do not collect any personal data during simple visits to our website, with the exception of data transmitted by your browser in order to enable the visit to the website, primarily including the following:

‍

• IP address (e.g. 95.91.215.example or 2a02:8109:9440:1198:bdb1:551f:example)
• Approximate location based on the IP region (e.g. Berlin and the surrounding area)
• Internet provider (e.g. Deutsche Telekom or Vodafone)
• Internet speed (e.g. 120 mbps)
• Date and time (e.g. 11.45 a.m. on 05.25.2018)
• Referring website (e.g. google.com)
• Browser (e.g Chrome or Safari)
• Operating system (e.g. Mac OS)
• Hardware (e.g. Intel processor)

For you as a visitor to our website, the most interesting item is the IP address, as this refers to data that can in theory be linked to your identity. As a security measure for your privacy, we therefore delete or anonymize your IP address after you have visited our website. This means the other technical data can no longer be traced back to you and this data may thus only serve anonymous, statistical purposes in order to optimize our website. The purpose of storing data temporarily at the beginning of your visit is to ensure the connection as well as the accessibility and correct presentation of our website. The IP address and the aforementioned technical data are required in order to display the website, prevent display problems for visitors, and resolve error messages. The legal basis is provided by our legitimate interest, which was reviewed in connection with the aforementioned protection measures and in accordance with European data protection requirements arising from Art. 6 (1f) GDPR.

Applicant data

We collect and process the personal data of applicants for the purpose of conducting the application procedure. Processing may take place electronically with the involvement of our partner HRworks GmbH. For this purpose, a data processing agreement was concluded with HRworks GmbH. Applicant data is processed electronically in particular when applicants send us application documents via electronic channels (e.g. email) or apply using the application option on our website. Insofar as we enter into an employment contract with an applicant, the transmitted data is stored for the purpose of conducting the employment relationship in accordance with statutory regulations. If an applicant is not subsequently hired, the application documents will be deleted six months after completion of the application procedure, unless such deletion is opposed by a legitimate interest of ours. Another legitimate interest in this sense is, for example, proof of evidence in cases according to the General Equal Treatment Act. Also as an applicant, you are entitled to the rights detailed in this Privacy Policy. You can contact us at any time if you have any questions.

Data collection in connection with registering for newsletters

We use the "double opt-in" procedure for providing our newsletters. This means we will only send you a newsletter by email if you confirm that you wish to receive our newsletter by clicking on a link contained in our notification email. If you confirm your wish to subscribe to the newsletter, we will store your email address until you cancel your newsletter subscription. The data is stored only in order to be able to send you the newsletter. Naturally, you may cancel your subscription to our newsletter at any time; a relevant link can be found in each newsletter. Alternatively, you may use the above-mentioned contact details of ours. In order to distribute our newsletter, we are collaborating with SC-Networks GmbH, Würmstraße 4, 82319 Starnberg and Schober Information Group Deutschland GmbH, Meisenweg 37, 70771 Leinfelden-Echterdingen until mid-August 2026. This collaboration will be gradually replaced from the end of April 2026 by collaboration with the service provider Braze, Inc., 63 Madison Building 28 East 28th Street, Floor 12 New York, NY 10016, USA. We have concluded data processing agreements with all aforementioned service providers in accordance with the requirements of Art. 28 GDPR.

Cookies

Our website sometimes uses cookies. Cookies are small text files that are usually saved in a folder of your browser. Cookies contain information about the current or most recent visit to the website:

• Name of the website
• Expiry date of the cookie

In the event of cookies that do not contain an exact date of expiry, they are only stored temporarily and automatically deleted as soon as you close your browser or restart the terminal device. Cookies with a date of expiry also remain stored when you close your browser or restart the terminal device. These cookies are only removed on the date indicated or if you delete them manually. On our website, we use the following three types of cookies:

• Essential cookies (we need these, for example, in order to display the website correctly for you and temporarily save certain settings)
• Functional and performance-related cookies (these help us to analyze technical data about your visit, for example, and thereby prevent error messages)
• Advertising and analysis-related cookies (these ensure that advertising for shoes is displayed, for example, if you previously search for shoes)

You can configure, block and delete cookies in the settings of your browser. If you delete all cookies for our website, it is possible that some functions of the website will not be displayed correctly.

In addition, a cookie consent tool is used on all our websites, which can be accessed in the bottom left corner by clicking the corresponding icon. The following information, in particular, can be obtained from it:

• Companies that process personal data
• Type of data processed
• Purpose of this data processing
• Legal basis of data processing

Since, according to Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), non-essential cookies are subject to the consent of the end user, these can be set or removed as desired in the cookie consent tool.

Google Fonts

In order to improve the presentation of our fonts, we use a collection of fonts called Google Fonts (https://fonts.google.com) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). These fonts are sent to your browser's storage folder and activated when you visit this website. If this is not supported, the text on the website will only be displayed in a standard font. To enable this feature, a request is sent to our web servers, which contains your IP address for technical reasons.

As a protective measure, all our websites host Google Fonts exclusively locally, so no data is transferred to the USA. The purpose of integrating Google Fonts is to enable the correct presentation of fonts in the form we have configured. The IP address is necessary to establish a connection with our web servers and download the collection of fonts, unless this is already stored on the terminal device. The legal basis is provided by our legitimate interest, which was reviewed in pursuit of the purpose, in connection with the aforementioned protection measures and in accordance with the European data protection requirements arising from Art. 6 (1f) GDPR.

Google Analytics

We use Google Analytics, a web analysis service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses the advertising and analysis cookies described above in order to analyze our website with regard to your usage behavior. The information generated by the cookies about your use of the website is transmitted to and stored by Google on servers in the USA. However, your IP address is shortened before the usage statistics are evaluated, so that no conclusions can be drawn about your identity.  Google uses the anonymous information obtained by the cookies to evaluate your use of the website, to compile reports on the website activities for the website operators and to provide further services associated with the use of the website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. As a protection measure, we use the anonymization procedure offered by Google; as a result, the data is not subsequently analyzed based on your personal identity, but only on a statistical basis.

The purpose of using Google Analytics is to enable the anonymized analysis of your usage behavior on our websites. The insights gained in this way help us to improve our offering. The legal basis is provided by the consent of the data subject pursuant to Art. 6 (1a) GDPR.

Handling of children's data

We are aware of the importance of data security and the protection of children on the internet. For this reason and in order to comply with certain laws, we neither deliberately collect the personal, individually identifiable information of children under 16 years of age, nor do we offer content to children under 16 years of age.

Privacy Policy version: April 2026

‍