Privacy Policy
Last updated: 15 September 2026
1. Controller
DIOMIKO UG (haftungsbeschränkt), Frankenbacher Str. 32, 74336 Brackenheim, Germany
Email: info@diomiko.com
Phone: +49 (0)151 50590736
2. Accessing Elys City and server logs
When you access the website, the web server processes technically required connection data, in particular your IP address, time of access, requested resource, amount of data transferred and browser/system information where transmitted by the browser. This processing is used to provide the service securely and reliably, diagnose errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Log data is retained only for as long as necessary for operation and security or as provided by the server configuration.
3. Technically required session data
Elys City uses technically required session information for sign-in, security functions and protection of forms. This information is used in particular to identify signed-in users and protect requests against misuse. The legal bases are Article 6(1)(b) and (f) GDPR. These technically required functions are not used for advertising or analytics consent purposes.
4. User account
If you create or use an account, we process in particular your email address, public username, password hash, verification status and technically required access tokens. Your email address is not displayed as a public profile name. The legal basis is Article 6(1)(b) GDPR. Account data is generally stored for the duration of the account; statutory retention duties for billing-related data remain unaffected.
5. Plots, buildings and public content
For a purchase, we process in particular your email address, purchase and payment assignment, plot, building type, building name, number of floors, color and, where provided voluntarily, public name, website and uploaded image/logo. After successful payment, information intended for display is shown publicly in Elys City. This may include your username, building name, image/logo and linked website. Your email address and payment details are not published as part of the building. The legal basis for contract and purchase data is Article 6(1)(b) GDPR and, for billing data subject to statutory retention duties, Article 6(1)(c) GDPR.
6. Billboard campaigns
For ad spaces, we process your email address, selected plan, ad space, campaign duration and payment assignment, as well as the uploaded advertising creative and, where provided voluntarily, website, title and campaign text. The creative and campaign information intended for publication are displayed publicly during the active campaign period. The legal basis is Article 6(1)(b) GDPR.
7. Payments via Stripe
We use Stripe for payments and subscriptions. When you proceed to Stripe Checkout, order information required for payment is transmitted to Stripe; you enter any additional payment, billing and, where applicable, tax information directly with Stripe. Elys City stores Stripe references such as checkout, payment, customer, invoice or subscription IDs and available receipt links where required for payment processing, contract administration and record-keeping. The legal bases are Article 6(1)(b) GDPR and, where statutory retention duties apply, Article 6(1)(c) GDPR. Stripe may process data within its international infrastructure and uses its own data-protection transfer mechanisms. Further information is available in Stripe's privacy information.
8. Email delivery
We use the email address you provide for transaction-related messages, in particular access and confirmation links, purchase and campaign confirmations and information about invoices or receipts. Messages are sent using the mail infrastructure configured for Elys City. The legal basis is Article 6(1)(b) GDPR.
9. Purchase offers between users
Signed-in users can manage purchase offers for buildings. We process the user assignment, building, offer amount, message, status and time. This function is used to carry out offer-related communication requested by the user. The legal basis is Article 6(1)(b) GDPR. An offer by itself does not transfer ownership and does not trigger a payment.
10. Retention periods
We retain personal data only for as long as necessary for the relevant purpose. Contract, payment and invoice data may be retained for longer periods in accordance with statutory commercial and tax retention obligations. Publicly displayed content generally remains available until it is changed, the relevant campaign ends or removal is required. Security and access tokens are time-limited or invalidated after use.
11. Recipients
Recipients may include technical service providers used for hosting and email delivery and Stripe for payment and subscription processing, in each case to the extent required for the purposes described above. Building and campaign content intended for public display can be accessed by visitors to Elys City.
12. Your rights
Subject to the statutory requirements, you have rights including access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on Article 6(1)(f) GDPR (Article 21). You also have the right to lodge a complaint with a data protection supervisory authority.
13. Contact
You can send privacy requests to info@diomiko.com.
Account deletion
You can permanently delete your account under Your Account → Delete account. Your profile, buildings, uploaded content and offer messages are removed. Account access and access links are revoked. Advertising linked to your verified account email is stopped. Transaction and invoice records needed for accounting are retained separately; deleting an account does not automatically issue a refund. File cleanup and cancellation of recurring advertising renewals are processed automatically, with retries if a service is temporarily unavailable.