Privacy Policy
At pong & pengo, we take the protection of your personal data very seriously. This privacy policy informs you about how we collect, use and protect your data.
1. Data Controller
pong & pengo e.V.
Tumblinger Creative Hub
Tumblingerstraße 23
80337 Munich, Germany
Contact:
Email: info@pong-pengo.de
Phone: +49 157 72181838
Supervisory Authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
2. Hosting & Server Logs
Our website is hosted on a dedicated server in Germany. We use Caddy as our web server.
When you visit our website, the following data is automatically recorded in server log files:
- IP address
- Date and time of request
- Page/file accessed
- HTTP status code
- Amount of data transferred
This data is used exclusively for ensuring technical operation and troubleshooting.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technical security and stability)
Storage duration: 7 days, then automatic deletion
3. Web Analytics (Umami)
We use Umami, a privacy-friendly, open-source web analytics tool hosted on our own servers (analytics.pong-pengo.de).
Umami collects anonymous usage statistics such as page views, time on page, and country of origin. In doing so:
- No cookies are set
- No personal data is stored
- No IP addresses are collected or stored
- No data is shared with third parties
- No user profiles are created
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in anonymous analysis of usage behavior to improve the website)
Data processing: Entirely on our own servers in Germany. No third-party access.
4. Newsletter (Self-Hosted)
For our newsletter, we use Listmonk, an open-source newsletter software hosted on our own servers in Germany (newsletter.pong-pengo.de).
Registration with Double Opt-In
When you subscribe to our newsletter, we store:
- Your email address
- Your name (optional)
- Time of registration
After registration, you will receive a confirmation email (double opt-in). Only after clicking the confirmation link will newsletters be sent to you.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Data processing: All data is processed exclusively on our own servers in Germany. There is no data transfer to third parties or third countries.
Cookies: No cookies are set for the newsletter service.
Unsubscribe: At any time via the link in each email or by message to info@pong-pengo.de. After unsubscribing, your data will be deleted immediately.
Storage duration: Until unsubscription or withdrawal of consent
5. Fonts (Local Hosting)
We use the font "Sora", which is stored locally on our server.
No data is transmitted to external services like Google. The font files are loaded directly from our servers.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in uniform and appealing presentation)
Data processing: No transmission of personal data to third parties
6. YouTube Videos (Two-Click Solution)
We embed videos from the platform YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
To protect your privacy, we use a two-click solution: YouTube videos are initially displayed only as a preview image. Only when you actively click "Load video" is a connection to YouTube servers established. We use the enhanced privacy mode (youtube-nocookie.com).
Without your explicit click, no data is transmitted to YouTube/Google.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent through active click)
Data transfer to the USA: Google is EU-US Data Privacy Framework certified.
More info: Google Privacy Policy
7. Local Storage (No Cookie Tracking)
Our website does not use tracking cookies and does not use third-party cookies.
We only use your browser's localStorage to save your cookie banner preference. This storage is only available locally on your device and is not transmitted to our or any other servers.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in storing user preferences)
Storage duration: Until manual clearing of browser data
All services we use (newsletter, web analytics) are self-hosted and also do not set any cookies.
8. External Content
Our website blocks all external scripts and content that do not originate from our own servers by default. External content (e.g., YouTube videos) is only loaded after your explicit consent.
The following services are operated entirely on our own servers and require no data transfer to third parties:
- Web analytics (Umami)
- Newsletter (Listmonk)
- Content management (Directus)
- Fonts (Sora, locally hosted)
9. Your Rights
Under the GDPR, you have the following rights:
Access (Art. 15 GDPR)
You can request information about the data we process.
Rectification (Art. 16 GDPR)
You can request the correction of incorrect data.
Erasure (Art. 17 GDPR)
You can request the deletion of your data, provided there are no legal retention obligations.
Restriction (Art. 18 GDPR)
You can request the restriction of processing.
Data Portability (Art. 20 GDPR)
You can receive your data in a common format.
Objection (Art. 21 GDPR)
You can object to the processing of your data at any time.
Withdrawal (Art. 7 para. 3 GDPR)
You can withdraw your consent (e.g., newsletter) at any time.
Complaint (Art. 77 GDPR)
You can file a complaint with the competent supervisory authority (see above).
10. Data Security
We implement technical and organizational measures to protect your data:
- SSL/TLS encryption for all data transmissions
- Dedicated server in Germany
- Regular security updates
- Access restrictions and authorization concepts
- All services self-hosted (no third-party access to user data)
11. Contact
If you have questions about data protection or want to exercise your rights, please contact us:
Email: info@pong-pengo.de
Mail: pong & pengo e.V., Tumblingerstraße 23, 80337 Munich, Germany
12. Changes
This privacy policy may be updated as needed. You can always find the current version on this page.
Last updated: February 2026