Privacy Policy

1. Controller

The controller responsible for processing personal data on this website and within Global Fleet & Trade is:

Email address for privacy enquiries: [datenschutz@globalfleettrade.de](mailto:datenschutz@globalfleettrade.de)

General contact address: [info@globalfleettrade.com](mailto:info@globalfleettrade.com)

2. General Information on Data Processing

The protection of personal data is very important to us. We process personal data only where there is a legal basis for doing so, where processing is necessary to provide our website or game features, where a request must be processed, or where a data subject voluntarily submits their data.

Personal data means any information relating to an identified or identifiable natural person. This may include in particular a name, email address, username, IP address, technical usage data, and data linked to a game account.

Global Fleet & Trade is currently under development. Data processing is limited to technical operation, registration, login, administration of the game account, storage of game progress, the contact form, system emails, and administrative management functions.

3. Technical Data Collected When Visiting the Website

When this website is accessed, technical data is processed automatically. This data is required to deliver the website, ensure its stable operation, detect display errors, and trace attacks or abusive use.

This may include the following data in particular:

• IP address of the accessing system
• Date and time of access
• Page or file accessed
• amount of data transferred
• HTTP status code
• Browser type and browser version
• operating system used
• Referrer URL, where transmitted
• technical connection data

Processing is carried out for the technical provision of the website and to safeguard our legitimate interests in secure, stable, and error-free operation.

The legal basis is Article 6(1)(f) GDPR.

4. Server Log Files

The hosting provider may automatically store information in so-called server log files. This data is required to ensure the technical operation of the website, analyse errors, maintain the stability of the service, and prevent abusive access.

This log data is not combined with other data sources unless this is necessary to investigate technical faults, security incidents, attacks, or abusive use.

Server log files are stored only for as long as is necessary for the stated purposes or for as long as legal obligations require a longer retention period.

The legal basis is Article 6(1)(f) GDPR.

5. Cookies, Sessions, and Technical Storage

Global Fleet & Trade uses technically necessary cookies, session technologies, or comparable storage mechanisms where these are required for the operation of the website, login, security, and the use of protected features.

The following information in particular may be processed:

• Session ID
• Login status
• technical security information
• CSRF token for protecting forms
• temporary status or success messages

This storage is necessary to provide the service expressly requested. This includes in particular login, protected game areas, form protection, and the prevention of abusive form submissions.

The legal basis is Article 6(1)(b) GDPR where storage is necessary for the use of the game account, and Article 6(1)(f) GDPR for security and protection against abuse. Section 25(2) TDDDG also applies to technically necessary storage.

According to the current status, non-essential tracking, advertising, or marketing cookies are not used.

6. Registration and User Account

Registration is required to use certain areas of Global Fleet & Trade. During registration and administration of the user account, we process the data required to create, secure, and use the account.

This includes in particular:

• Username
• Email address
• Password in the form of a password hash
• Shipping company name or in-game company name
• Registration date
• Activation status
• Email confirmation status
• Activation token
• Last login
• User account status

The password is not stored in plain text. It is processed as a technical password hash so that login credentials can be verified without storing the original password in a readable form within the system.

Processing is carried out for the creation and administration of the user account, login, access security, email confirmation, and the provision of game features.

The legal basis is Article 6(1)(b) GDPR.

7. Email Confirmation and System Messages

After registration, Global Fleet & Trade may send an email to confirm the specified email address. For this purpose, an activation token is generated and sent to the specified email address.

The confirmation is used to verify that the specified email address can be reached, reduce abusive registrations, and secure access to the user account.

In addition, technical system messages may be sent where this is necessary for registration, login, account security, or support.

The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

8. Game Account, Game Progress, and Game-Related Data

When using Global Fleet & Trade, game-related data is processed and stored. This data is necessary for the game to function as an ongoing economic and trading simulation and for personal game progress to be retained.

This may include in particular:

• User ID
• Starting city or home port
• In-game balance
• Rank and game status
• Ships and their condition
• Ship routes, departure times, and arrival times
• Offices and warehouse inventories
• Port rights and permissions
• Market activities, purchases, and sales
• Player logbook and system events
• game-related settings and progress data

This data is used exclusively to provide, administer, and continue the game. Without this data, game progress, routes, trading activities, offices, ships, and achievements could not be stored permanently or displayed correctly.

The legal basis is Article 6(1)(b) GDPR.

9. Contact Form and Communication

If you contact us through the contact form or by email, we process the information you provide in order to handle and respond to your request.

The following data in particular may be processed through the contact form:

• Name
• Email address
• Request category
• Subject
• Message text
• Confirmation that the privacy policy has been read and understood
• technical protection data, such as CSRF tokens and spam protection checks

Confirmation of the privacy policy serves to acknowledge this privacy information. It does not constitute separate consent to advertising.

If you are not logged in, your request will be sent by email as usual to [info@globalfleettrade.com](mailto:info@globalfleettrade.com) transmitted. According to the current status, no additional in-game storage as a ticket takes place for guests.

If you are logged in while contacting us, your request may additionally be linked to your game account. The following additional data may be processed:

• User ID
• Username
• Account email address
• Shipping company name
• Request status
• Date of creation
• IP hash
• browser user agent

This assignment is intended to allow support requests from registered players to be managed later in an internal ticketing system and, where appropriate, answered within the game.

The legal basis is Article 6(1)(b) GDPR where the request relates to the game account or the use of Global Fleet & Trade. For general enquiries, the legal basis is Article 6(1)(f) GDPR.

10. Email delivery

Global Fleet & Trade uses a technical SMTP/PHPMailer solution to send contact, registration, and system emails.

The following data in particular may be processed when sending emails:

• Recipient address
• Sender address
• Subject
• Message content
• technical delivery data
• time of sending

Emails are sent to confirm registrations, deliver contact requests, and provide necessary system communications.

The legal basis is Article 6(1)(b) GDPR for account-related or game-related messages and Article 6(1)(f) GDPR for general contact requests.

11. Administration Area and Internal Management

Global Fleet & Trade has an internal administration area. Authorised administrators may perform technical and organisational tasks there, including the administration of news, changelog entries, registrations, game content, and, at a later stage, support or ticket requests.

Administrative access data, content data, status information, and processing data may be processed where this is necessary for the operation, security, and administration of the project.

Access to the administration area is restricted to authorised persons.

The legal basis is Article 6(1)(f) GDPR.

12. Desktop App / WebView Use

Where Global Fleet & Trade is used through a desktop application with an embedded web interface, essentially the same data is processed as when using a standard web browser.

The web interface may store technically necessary session data locally so that login, the game account, and game features can be provided. According to the current status, no additional analysis, advertising tracking, or external profiling takes place.

13. No Advertising, Tracking, or Profiling

According to the current status, Global Fleet & Trade does not use external analytics, advertising, or tracking services such as Google Analytics, Meta Pixel, or comparable marketing technologies.

Personal data is not disclosed for advertising purposes, no publisher analysis is carried out, no commercial profiling takes place, and user data is not sold.

Should this change in the future, this privacy policy will be updated. Where required by law, such services will be used only after prior consent has been obtained.

14. Legal Bases for Processing

Depending on the purpose, personal data is processed on one or more of the following legal bases:

• Article 6(1)(b) GDPR: Processing for the performance of a contract or for taking pre-contractual measures, particularly in connection with registration, user accounts, login, and game operation.
• Article 6(1)(f) GDPR: Processing to safeguard legitimate interests, particularly for technical operation, security, error analysis, protection against abuse, handling contact requests, and administrative management.
• Article 6(1)(c) GDPR: Processing to comply with legal obligations, where such obligations exist.
• Article 6(1)(a) GDPR: Processing based on consent, where consent is obtained for certain features in the future.

Technically necessary storage or access to end devices is additionally carried out on the basis of Section 25(2) TDDDG, where this is strictly necessary to provide the service expressly requested.

15. Storage Period

Personal data is stored only for as long as is necessary for the respective purpose or for as long as statutory retention periods apply.

The following principles apply in particular:

• Registration and account data is stored for as long as the user account exists.
• Game progress data is stored for as long as it is necessary to provide and maintain the game account.
• Contact requests are stored for as long as this is necessary to process the request.
• Support and ticket data belonging to registered players may be stored to ensure that support cases remain traceable for as long as the user account exists or legitimate interests in documentation apply.
• Server log files are stored only for as long as is necessary for security, error analysis, and protection against abuse.
• Unconfirmed or obviously abusive registrations may be deleted after a reasonable period.

Where data is no longer required and no legal obligations or legitimate interests prevent this, it will be deleted or anonymised.

16. Recipients and Service Providers

Personal data is disclosed only where this is necessary for the operation of the website, provision of the game, sending of emails, technical administration, or compliance with legal obligations.

Possible recipients or service providers include in particular:

• Hosting provider
• Email or SMTP service provider
• technical administrators
• legally authorised bodies where a legal obligation exists

Where external service providers process personal data on our behalf, this takes place in accordance with the legal requirements governing commissioned processing.

Personal data is not disclosed for advertising, marketing, publishing, or profiling purposes.

17. Transfers to Third Countries

According to the current status, no transfer of personal data to countries outside the European Union or the European Economic Area is intended.

Should such a transfer become necessary in the future, it will take place only where the legal requirements are met, for example through an adequacy decision, appropriate safeguards, or a legally provided exception.

18. Data Security

We take technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised alteration, and unauthorised disclosure.

This includes in particular:

• Password storage as a hash instead of plain text
• server-side validation of forms
• CSRF protection for forms
• Spam protection mechanisms for the contact form
• restricted access to administrative areas
• technical error and security logging
• role-based and permission-based protection of restricted features

Despite careful protective measures, data transmission over the internet can never be guaranteed to be completely risk-free.

19. Rights of Data Subjects

Subject to the applicable legal requirements, you have the following rights in particular:

• Right of access to the personal data being processed
• Right to rectification of inaccurate data
• Right to erasure of personal data
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing activities
• Right to withdraw consent with effect for the future
• Right to lodge a complaint with a data protection supervisory authority

To exercise your rights, you may contact us using the contact details provided above. For requests concerning a game account, please provide your username or the email address linked to the account where possible so that we can identify your request.

20. Objection to Processing Based on Legitimate Interests

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

In the event of an objection, we will no longer process the personal data concerned unless there are compelling legitimate grounds for processing or the processing is required for the establishment, exercise, or defence of legal claims.

21. Deletion of the User Account

Users may request the deletion of their user account. Upon deletion, personal account data will be deleted unless statutory retention obligations or legitimate interests prevent this.

Game-related data directly linked to the user account may also be deleted or anonymised as part of account deletion, unless it is required for the technical integrity of the game system, protection against abuse, or compliance with legal obligations.

22. Underage Users

According to the current status, Global Fleet & Trade is not specifically aimed at children. Should we become aware of indications that personal data belonging to minors has been processed without the required consent, we will review the matter and take the necessary measures.

23. Changes to This Privacy Policy

This privacy policy may be amended if technical, legal, or organisational requirements change. This applies in particular if new game features, a ticketing system, payment features, external services, analysis features, or additional communication channels are introduced.

The current version is available on this website.

Last updated: July 2026