Legal

Last updated: 26 September 2026

1. Controller

The controller responsible for processing personal data through Cenvalo is:

Leon Gruber
Mitterweg 21
82140 Olching
Germany

Email: Cenvalo.Contact@Proton.me

Cenvalo is a product and service name operated by Leon Gruber.

2. Scope of this Privacy Policy

This Privacy Policy applies to the Cenvalo website, customer dashboard, associated Discord login, and Cenvalo-operated Discord bot services.

3. Website Access and Server Logs

When you visit the website, technical information may be processed automatically by the hosting infrastructure. This can include:

• IP address
• Date and time of access
• Requested page or file
• Browser and operating-system information
• Referrer URL, where transmitted by your browser
• HTTP status and technical error information

This processing is necessary to deliver, secure, maintain and troubleshoot the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Technical log data is retained only for as long as necessary for security, troubleshooting and abuse prevention.

4. Hosting

The website and its database are hosted using Hetzner Cloud, operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Hetzner processes personal data only as required to provide the hosting infrastructure and technical support for Cenvalo.

5. Discord Login and Customer Dashboard

You can sign in to the Cenvalo dashboard using Discord. When you choose this option, Discord provides Cenvalo with the information required for authentication.

This may include:

• Discord user ID
• Discord username
• Display name
• Discord avatar reference
• Discord server information available through the permissions you approve
• Login time and dashboard session information

Cenvalo uses this data to authenticate you, connect your account to your products or services, manage dashboard access, and protect the dashboard against unauthorized access.

The legal basis is Article 6(1)(b) GDPR, where processing is necessary to provide the requested dashboard service, and Article 6(1)(f) GDPR for security and abuse prevention.

Dashboard sessions are stored using technically necessary, HttpOnly cookies. Authentication sessions expire after a limited period. No advertising or analytics cookies are currently used.

Discord is an independent provider. When you use Discord login or interact with Discord, Discord’s own privacy policy also applies.

6. Products, Projects and Support Requests

When you access a Cenvalo product or use the customer dashboard, we may process:

• Your Discord account information
• Product access and entitlement information
• Project status, delivery and hosting information
• Requests, notes and messages you submit
• Website settings you save or submit for review
• Release download records
• Security and audit records relating to important dashboard actions

This processing is necessary to provide, manage, support, document and secure your requested services. The legal basis is Article 6(1)(b) GDPR and, where necessary for security and accountability, Article 6(1)(f) GDPR.

We retain this information for as long as it is needed to provide the service, maintain security, resolve disputes, meet legal obligations or document relevant product actions.

7. Discord Bot Services

If you invite or use a Cenvalo Discord bot, we may process data necessary to provide the bot function. Depending on the activated feature, this can include:

• Discord user IDs and server IDs
• Server, channel and role configuration
• Bot commands and submitted settings
• Support-ticket or configuration content sent directly to the bot
• Technical operation, security and audit records

Cenvalo does not use Discord bot data for advertising or sell it to third parties.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the requested bot service, and Article 6(1)(f) GDPR for security, abuse prevention and reliable operation.

8. Recipients and International Transfers

Personal data is only shared where necessary to operate Cenvalo or where legally required.

Recipients may include:

• Hetzner Online GmbH, as hosting provider
• Discord, when you use Discord login, Discord bots or Discord-based support
• Authorities or legal advisers, where disclosure is required by law or necessary to establish, exercise or defend legal claims

Discord may process personal data outside the European Economic Area. For details about Discord’s processing and international transfers, please consult Discord’s own privacy policy.

9. Cookies

Cenvalo currently uses only technically necessary cookies for:

• Discord login security
• Login-session management
• Protection against authentication attacks

These cookies are required for the requested dashboard and login functions. No consent banner is used for technically necessary cookies.

If Cenvalo introduces analytics, marketing tools or other non-essential cookies in the future, this Privacy Policy and the consent process will be updated before those tools are activated.

10. No Automated Decision-Making

Cenvalo does not use automated decision-making or profiling that produces legal effects or similarly significant effects for you within the meaning of Article 22 GDPR.

11. Your Rights

Subject to the legal requirements, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request data portability
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise your rights, contact:

Cenvalo.Contact@Proton.me

12. Supervisory Authority

You may lodge a complaint with the competent data protection supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

Website: https://www.lda.bayern.de

13. Changes to this Privacy Policy

This Privacy Policy may be updated when Cenvalo’s services, technical infrastructure or legal obligations change. The current version is published on this website.