Privacy statement

Diese Seite auf Deutsch ›

1. Controller

The controller under the GDPR is:

Lechner Alexander
c/o IP-Management #12263
Ludwig-Erhard-Straße 18
20459 Hamburg
Germany
Email: contact@telacynetwork.com

Telacy Esports currently has no legal form of its own. The controller is therefore Alexander Lechner as a natural person.

Data protection officer

No data protection officer has been appointed.

2. What this website stores in your browser

This section lists everything this website stores in your browser or reads from it: cookies, local storage and session storage. Storing or reading information on your device needs your consent (§ 25 (1) TDDDG in Germany, § 165 (3) TKG 2021 in Austria), unless it is strictly necessary to provide a service you have asked for (§ 25 (2) no. 2 TDDDG). Everything in the tables below is strictly necessary in this sense and is used only by this website. Optional content, today only Twitch live streams, loads only after you agree.

Open cookie settings

Cookies

Before you sign in, this website sets no cookie at all. All cookies are first-party cookies of this website, marked HttpOnly (scripts cannot read them) and SameSite=Lax. There are no advertising or tracking cookies.

Local storage and session storage

These entries stay in your browser. Entries in local storage remain until you or the website delete them; entries in session storage end when you close the tab. You can delete all of them in your browser settings at any time.

Legal basis: for storing and reading, § 25 (2) no. 2 TDDDG and § 165 (3) TKG 2021 (strictly necessary); for the processing, Art. 6 (1) (b) GDPR where it serves your membership account, otherwise Art. 6 (1) (f) GDPR: our legitimate interest in a website that works and remembers the settings you made.

Cookie banner and your consent

On your first visit a banner asks whether we may load external media. "Necessary only" and "Accept all" are equal choices; under "Settings" you choose each category. Nothing optional is switched on in advance, and the site can be used fully without agreeing. Until you agree, no content from third parties is loaded.

Your choice is stored in your browser (telacy.einwilligung). As proof that you agreed (Art. 7 (1) GDPR), our server also records each choice: a random identifier created in your browser, the version of the banner, the categories allowed and the time. We store no IP address, no account and no page with it, so the record does not tell us who you are. Records are deleted automatically after three years.

We ask again after 12 months, after 6 months if you chose necessary only, and when the banner changes in an important way.

Legal basis: for optional content § 25 (1) TDDDG, § 165 (3) TKG 2021 and Art. 6 (1) (a) GDPR: your consent. For the record of your choice Art. 6 (1) (c) GDPR together with Art. 7 (1) GDPR (we have to be able to prove consent).
Withdrawal: you can change or withdraw your consent at any time with effect for the future, under "Cookie settings" at the bottom of every page. A stream that is already playing is removed when you withdraw.

External media: Twitch live streams

When a player or staff member of ours is live on Twitch, team pages, player profiles and the home page can show the stream. Before you agree, you only see a placeholder from our own server (name, "LIVE", title of the stream, number of viewers). No player, no picture and no request goes to Twitch. Only when you allow external media, in the banner, in the settings or with the button at the player, does your browser load the player from player.twitch.tv and preview pictures from static-cdn.jtvnw.net. The player starts muted.

Twitch then receives your IP address, information about your browser and device, the address of our page and, if you are signed in to Twitch, your Twitch account. Twitch can set its own cookies and similar entries in the player and use the data for its own purposes; that is described in the privacy notice of Twitch.

To know who is live, our server asks Twitch every two minutes about the channel names our members entered on their profiles. This request comes from our server and contains no data about visitors of this website.

Provider: Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA, a company of Amazon.com, Inc.
Legal basis: § 25 (1) TDDDG, § 165 (3) TKG 2021 and Art. 6 (1) (a) GDPR: your consent.
Transfer to the USA: Amazon.com, Inc. and its US affiliates take part in the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). Where a transfer is not covered by it, it is based on your explicit consent, Art. 49 (1) (a) GDPR.
Withdrawal: at any time under "Cookie settings". Cookies that Twitch has already set can be deleted in your browser settings.

Visitor statistics without cookies

To know which pages are read and where visitors come from, we count page views ourselves, on our own server. No cookie is set and nothing is stored in your browser for this, and no third party is involved. When a public page opens, it sends our server the address of the page, the website you came from (only its domain, grouped, such as X, Discord or Google), the language of the page and whether the window is the size of a phone, tablet or desktop.

To count each visitor only once per day, the server forms a daily code from the IP address, the browser identification and a random value that exists only for the current day. The IP address itself is never stored. At the end of the day the codes and the random value are deleted; only totals per day remain (for example page views per page), which contain no personal data. These totals are deleted after 25 months. Requests from known bots are not counted, and the internal dashboard is not counted. Only the Founder and the Chief Executive Officer see the statistics.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest lies in knowing how the website is used, in order to improve it, without profiles and without tracking across websites.
Objection: if your browser sends the Global Privacy Control signal (GPC) or Do Not Track (DNT), you are not counted. You can also object at any time by writing to contact@telacynetwork.com.

External resources when simply reading

Fonts, scripts and styles are served exclusively from our own server, in particular no fonts from Google. Pictures come from our own server as well, with one exception: a team logo, banner or partner picture that our staff linked from another https address is loaded from there, and that host then receives your IP address. A connection to Discord, Google or FACEIT is made only if you start the sign-in or the link yourself (sections 5 and 6), a connection to Twitch only after your consent.

3. Server log files

When you open this website the hosting provider automatically records data transmitted by your browser:

• IP address
• Date and time of access
• Page requested and volume of data transferred
• Browser type and operating system
• Referring page

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in technically sound operation and in defending against attacks.
Retention: Logs are deleted as soon as they are no longer needed for the stated purpose, at the latest after 14 days.
Hosting provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Processing takes place on a server in Germany.

4. Your membership account

You can create an account with your email address. The data lives on our own server. We process:

• Email address
• Display name
• Your password, stored only as a salted scrypt hash, never in clear text
• The date the account was created and of your last sign-in
• An optional link to your Discord or Google account
• Your date of birth, if you choose to give it
• The time you confirmed that you are at least 13 years old and accept the Terms
• A profile picture and a banner, if you upload them. They are public on your profile and replace the pictures from Discord.

Date of birth

Giving your date of birth is voluntary, during setup or later on your profile. We store the date and show only the age calculated from it: people in our staff who have access to the internal dashboard always see it, everybody else only if you switch on "Show my age on my profile". The date itself is never published.

Purpose: to know the age of players and staff, for example for team composition and the rules of tournaments.
Legal basis: Art. 6 (1) (a) GDPR: your consent by giving the date. You can withdraw it at any time by removing the date on your profile.
Retention: until you remove it or delete the account.

Purpose: to identify you as a member and to give you the members area.
Legal basis: Art. 6 (1) (b) GDPR: you request the membership yourself.
Retention: until you delete the account.

Emails about your account

We send you an email only for your account itself, never for advertising: to confirm your email address after you sign up or change it, to reset your password when you ask for it, and to tell you that your password or your address has changed. For this we store:

• whether and when your email address was confirmed, and a new address you entered until you confirm it
• for each link we send: a fingerprint of it (a SHA-256 hash, never the link itself), the account it belongs to, the address it confirms, the time it was created and when it stops working
• for a password change by link, a notice on your profile

A link to reset your password works once and for 60 minutes, a link to confirm an address once and for 24 hours. Asking for a new link makes the older one invalid. Once used, a link is deleted at once, an expired one within an hour. To stop the forms being used to flood someone's inbox, we count requests per IP address and per email address within a short time; this count is kept in memory only and is not stored. When someone asks to reset the password for an address, the page shows the same answer whether or not an account exists.

Until you confirm your email address, you can sign in and read, but posting in the forum, commenting, applying for a position and the contact form as a signed-in member are paused. Accounts that sign in with Discord or Google count as confirmed.

Purpose: to make sure the address belongs to you, to let you back into your account and to protect it against takeover and abuse.
Legal basis: Art. 6 (1) (b) GDPR: the emails are part of the membership account you requested, and Art. 6 (1) (f) GDPR: our legitimate interest in the security of the accounts and of the website.
Recipients: the emails are sent through Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor.
Retention: links as described above; the confirmation time until you delete the account.

Deleting your account

You can delete your account on your profile at any time. People in our staff with the right to do so can also delete an account, for example a test account or one that breaks the Terms. Deleting removes the account with your email address, password hash, profile, alias and its history, profile picture and banner, date of birth, connections to Discord, Google and FACEIT, sessions, open links, notices, your reactions and reports under news and internal notes kept only about the account.

Your comments under news and your posts in the forum stay where they are, so that discussions remain readable. They are shown as "Deleted user", with no name, picture or link to you, whether you deleted the account yourself or it was deleted by our staff. Delete them yourself beforehand if they should go as well. An application you sent stays until its own deletion date, without the link to your account. Your place in a team comes from Discord and is not affected.

5. Signing in with Discord

You can sign in with your Discord account. Data is transmitted to Discord in the process, and Discord supplies us with details of your account:

• Discord user ID
• Display name and username
• Avatar
• Your roles on the Telacy server

Purpose: to authenticate you and to show the areas matching your role.
Legal basis: Art. 6 (1) (b) GDPR: you request the sign-in yourself.
Recipients: Discord Netherlands BV, the Netherlands, and Discord Inc., USA.
Transfer to the USA: Discord Inc. is certified under the EU-US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR), supplemented by standard contractual clauses (Art. 46 GDPR).

6. Signing in with Google

Alternatively, you can sign in with your Google account. Data is transmitted to Google in the process, and Google supplies us with details of your account:

• Google user ID
• Name
• Email address
• Avatar

Purpose: to authenticate you and to give you your membership account.
Legal basis: Art. 6 (1) (b) GDPR: you request the sign-in yourself.
Recipients: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA.
Transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR).

7. Linking your FACEIT account

You can link your FACEIT account in your profile. You sign in at FACEIT itself; FACEIT then tells us which account belongs to you. We store:

• your FACEIT ID and FACEIT name
• when you linked the account

We do not store the FACEIT access token. Through the ID we match your public game data from FACEIT (matches, maps, statistics) to your player profile, your team and the match pages.

Purpose: to attribute your statistics correctly and to make sure nobody links someone else's FACEIT account.
Legal basis: Art. 6 (1) (b) GDPR, the link is made at your request.
Recipient: FACE IT Limited, Millbank Tower, 21-24 Millbank, London SW1P 4QP, United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom (Art. 45 GDPR).
Retention: until you unlink the account in your profile or delete your account.

8. Our Discord server and the Telacy bot

Teams, rosters and roles of Telacy Esports are run on Discord. Our bot reads the following on the Telacy Esports Discord servers you are a member of, even if you have no account on this website:

• Discord ID, display name, username and profile picture
• your roles on these servers, and from them your team and position (for example player, sub, tryout, coach, manager)
• when the bot last saw you

The bot also assigns and removes roles on Discord when your team or position changes on this website, and posts messages such as match announcements and results to our channels.

What is public: on team pages, player profiles and match pages we show the alias, profile picture, team and position of the teams' players and staff. We do not publish your Discord ID.

What is internal only: people in our staff with the relevant permission see a member list from the website and our Discord servers in our internal dashboard. There they can assign roles, suspend accounts and keep internal notes about a person; changes are logged with person and time.

Direct messages with the bot: if you write to our bot Nexus in a direct message on Discord, or the bot sends you one, we store the messages (text, file names and links of attachments, time, your Discord ID and name) for 30 days and then delete them. Only the leadership of Telacy Esports (Founder, Chief Executive Officer, Development) can read them in our internal bot dashboard, to answer you and to see that our messages arrive.

Nexus Chat, the AI in a chat channel: in a channel we name for it, Nexus answers as an AI when a message starts with "Nexus" or mentions @Nexus. Only such messages are processed: the text, your display name and the recent conversation with Nexus in that channel go to Anthropic PBC, USA, which creates the answer with its model Claude. Nexus has no access to your account, your profile or other data of this website. We keep the question, the answer, your Discord ID and name for 30 days to prevent abuse, and the conversation so Nexus can follow it, until it is reset or at most 30 days, then delete them; only the leadership of Telacy Esports can see them. Messages in other channels are not read or stored. Answers are written by an AI and can be wrong.

Purpose: to manage teams and rosters, keep the website and Discord in step and moderate the community.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is to organise and present our teams and our community, as you would expect when joining our Discord server. You can object at any time (Art. 21 GDPR), for example at contact@telacynetwork.com.
Recipients: Discord Netherlands BV and Discord Inc., USA, as described in section 5. What Discord itself processes is set out in Discord's privacy policy. For Nexus Chat also Anthropic PBC, USA; the transfer to the USA is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.
Retention: alias, team and position are kept while you are on one of our servers. After that, past team memberships remain for team history and results; we delete them at your request. Internal notes are deleted once they are no longer needed, at the latest with your account.

9. Match statistics and scouting

For our teams we analyse matches from FACEIT: results, maps, picks and bans and player figures per match. To prepare for opponents this also covers players of other teams in the same league. This data does not come from you but from FACEIT's public data (Art. 14 GDPR).

Purpose: performance analysis for our teams and match preparation.
Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in competitive preparation; the data is public on FACEIT anyway.
Who sees it: publicly only the result and score per map. Signed-in members see player figures; picks, bans and scouting are visible only to the players and staff of the Telacy team concerned.
Retention: scouting data on other teams is deleted automatically 30 days after the end of the FACEIT season. Matches involving a Telacy team remain as results and team history.
Objection: you can object at any time (Art. 21 GDPR), at contact@telacynetwork.com.

10. Contacting us

If you write to us by email we process your details in order to handle your enquiry. The legal basis is Art. 6 (1) (b) or (f) GDPR. We keep this data for as long as handling the matter requires and delete it afterwards, unless statutory retention periods apply.

Contact form

On /contact you can send us business enquiries with a form. We process your full name (if you are signed in, your alias instead), the email address, the topic, the subject and the message you enter, together with the time of sending.

Purpose: to answer your enquiry.
Legal basis: Art. 6 (1) (b) GDPR where your enquiry concerns a partnership or a staff application, otherwise Art. 6 (1) (f) GDPR: our legitimate interest in answering messages sent to us.
Storage: the message is stored on our own server in Germany and can be read in our internal dashboard only by people we have given that right. It is deleted automatically after 12 months, earlier once the matter is settled and we delete it.
Recipients: each message is also sent to us by email. Our email runs on Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor.

To protect the form against automated spam we use no captcha and no external service: the form contains a hidden field that people do not see, and we count how many messages arrive from one IP address within a short time. This count is kept in memory only and is not stored. We send no confirmation email.

Applications for a position

On /career we list open positions in our staff. Each position has its own application form. We process what you enter there: name or alias, Discord username, email address, age, country, your answers to our questions (about yourself, your experience, why you want the position, how you picture the role, why we should pick you and where you see yourself in two years), any links you add and any PDF files you attach (for example a CV, at most three), together with the time of sending and, if you are signed in, a reference to your account. If you send us further documents for your application later, for example on Discord, we may add them to your application as PDF files. Before you send, you confirm that you have read this privacy policy. You must be at least 18 years old to apply.

Purpose: to review your application, to contact you about it and to decide whether you join our staff.
Legal basis: Art. 6 (1) (b) GDPR: steps taken at your request before you join our staff.
Storage: the application is stored on our own server in Germany. In our internal dashboard only people with the right to manage hiring can read it (currently the Founder, the Chief Executive Officer and People & HR). We delete an application automatically six months after we have decided on it, and twelve months after it arrived at the latest, together with its files.
Recipients: each application is also sent to us by email, through Google Workspace as described for the contact form. The email names attached files but does not contain them; the files stay on our server. A summary of each application is also posted to a private channel of People & HR on our internal Discord server for staff (see section 8): name or alias, Discord username, age, country, your answers (shortened) and links, but not your email address and not your files. Only People & HR and the Founder can see this channel. The post is deleted at the latest together with the application.

The form is protected against spam in the same way as the contact form. We contact you about your application on Discord. You can withdraw your application at any time by writing to contact@telacynetwork.com, and we then delete it.

11. Comments, reactions and the forum

Members who are signed in and have completed their profile can comment on news stories, react to them and take part in the members' forum at /forum. We process the text you write, the time it was written or edited, the account it belongs to, your reactions and any reports you send about a comment or post.

Purpose: exchange between members and moderation of what is published on this website.
Legal basis: Art. 6 (1) (b) GDPR (use of the membership account) and Art. 6 (1) (f) GDPR: our legitimate interest in keeping the website free of abuse.
Who sees it: comments and reactions under news are public and show your alias, your profile picture, the time and the text. The forum is visible only to signed-in members. Reports are visible only to the people we have given the right to moderate.
Storage: on our own server in Germany, until you delete the comment or post yourself or until it is removed by moderation. Deleting your account removes your reactions and reports under news. Your comments and forum posts stay so that discussions remain readable; they are then shown as "Deleted user" with no link to you, also when our staff delete the account (see Deleting your account). Delete them yourself beforehand if they should go as well.

To protect against spam we count how often one account writes within a short time. This count is kept in memory only and is not stored.

Moderation notices and suspensions

If moderation hides or removes your content, closes your topic or suspends your account, we store a notice for you: what was affected, the start of your text, the reason, the date and, for a suspension, how long it lasts. For a suspension we also store at your account who suspended it and when, until it ends or is lifted. Only you see your notices, on your profile. Suspensions are visible to the people we have given the right to suspend accounts.

Legal basis: Art. 6 (1) (c) GDPR together with Art. 17 of the Digital Services Act (we have to tell you the reasons for a moderation decision) and Art. 6 (1) (f) GDPR: our legitimate interest in keeping the website free of abuse.
Storage: notices until your account is deleted.

12. Your rights

You have the following rights against the controller:

• Access to the data held about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)

Where you have given consent you may withdraw it at any time with effect for the future.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, the one where you live or the one responsible for the controller:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

13. Status

This statement describes the position as of 12 October 2026. If what the website does changes, this statement changes with it.