Data Protection Information

Last updated: 26 September 2025

Club21 GmbH
Schloss Burgscheidungen
Schlossbergstraße 56
06636 Laucha an der Unstrut

OT Burgscheidungen
Germany

Handelsregister: HRB 39216
Steuernummer: 119/107/13045
USt-IdNr.: DE346073331

Geschäftsführer: Serkan Naziroglu

Privacy Information Notice

1. Controller

Club21 GmbH / CryptoCastle is the controller for processing on this website. See the address above. If we appoint a Data Protection Officer, we will add their contact details here.

2. What This Site Does

This site provides information and an email contact point. There are no user accounts, no newsletters, and no analytics or marketing tracking.

3. Personal Data We Process

Email enquiries: we process your email address, the content of your message, and any personal data you include.
Server logs: our host records standard technical data when you access the site, such as IP address, date and time, requested URL, referrer, and user agent. These logs help secure the site and diagnose faults.

Legal basis: Article 6(1)(b) GDPR for contract related enquiries, or Article 6(1)(f) GDPR for our legitimate interest in communications and website security.

4. Cookies and Tracking

We do not use non‑essential cookies, analytics, or tracking. If optional cookies or similar technologies are introduced, we will ask for your consent first in line with Section 25 TTDSG.

5. Recipients and Processors

We do not share your personal data with third parties without your express permission. We use service providers who act on our behalf under Article 28 GDPR, for example hosting and email providers that are bound by a data processing agreement.

6. International Transfers

We aim to use providers in the EU or EEA. If processing outside the EEA is necessary, we will ensure appropriate safeguards such as EU Standard Contractual Clauses, or we will obtain your explicit consent.

7. Storage Periods

Email enquiries: usually deleted 12 months after our final reply, unless retention laws apply or the data is needed to establish, exercise, or defend legal claims.
Server logs: kept for a short period for security, then deleted or anonymised.

8. Your Rights

You have the right of access, rectification, erasure, restriction, portability, and objection. If we rely on consent, you may withdraw it at any time with future effect. You can also lodge a complaint with a supervisory authority in the EU, for example your regional authority in Germany.

9. Voluntary Provision

You are not legally required to provide personal data. Without a usable email address or sufficient information, we may be unable to reply.

10. Security

We apply appropriate technical and organisational measures to protect your data, including secure hosting and restricted access to mailboxes.

11. No Automated Decisions

We do not use automated decision‑making or profiling.

12. Updates

We may update these notes to reflect changes in law or our services. The latest version will always be available on this page.

Legal Notice

The throne of Web3.