Privacy Policy

1. Data Controller

2. Hosting & Server Logs

Our website and all services named here run on a virtual server provided by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in a data centre in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR). We use Caddy as our web server.

The web server does not keep access logs of individual page views. Your IP address is processed briefly with every request so the website can be delivered. It is only stored in two cases:

• in error logs, if a technical error occurs during your request (with date, time and page requested)
• in the failed-attempt lock, if a wrong PIN is entered for a PIN-protected internal area

This data is used exclusively for ensuring technical operation, defending against attacks and troubleshooting.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technical security and stability)

Storage duration: error logs at most 7 days, failed-attempt lock entries until the lock expires (usually 20 minutes)

3. Web Analytics (Umami)

We use Umami, a privacy-friendly, open-source web analytics tool hosted on our own servers (analytics.pong-pengo.de).

Umami collects anonymous usage statistics such as page views, time on page, and country of origin. In doing so:

• No cookies are set
• No personal data is stored
• No IP addresses are stored (they are only used at the moment of the request to determine the country)
• No data is shared with third parties
• No user profiles are created

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in anonymous analysis of usage behavior to improve the website)

Data processing: Entirely on our server in Germany (see section 2). No third-party access.

4. Newsletter (Self-Hosted)

For our newsletter, we use Listmonk, an open-source newsletter software hosted on our own servers in Germany (newsletter.pong-pengo.de).

Registration with Double Opt-In

When you subscribe to our newsletter, we store:

• Your email address
• Your name (optional)
• Time of registration

After registration, you will receive a confirmation email (double opt-in). Only after clicking the confirmation link will newsletters be sent to you.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Data processing: The subscriber list is stored on our server in Germany (see section 2). The emails are sent via the mail server of STRATO GmbH (Otto-Ostrowski-Straße 7, 10249 Berlin, Germany), which processes your email address and the content of the email on our behalf. There is no transfer to third countries.

Open and click counting: We count how often a newsletter is opened in total and how often links in it are clicked. For this, the emails contain an invisible counting image and redirect links via newsletter.pong-pengo.de. The counting is anonymous and is not linked to you. If your email program does not load images automatically, no opens are counted.

Legal basis for counting: Art. 6 para. 1 lit. f GDPR (legitimate interest in knowing whether the newsletter is read)

Cookies: No cookies are set for the newsletter service.

Unsubscribe: At any time via the link in each email or by message to info [at] pong-pengo.de. After unsubscribing you will not receive any more emails. Your address remains stored as blocked so that it is not contacted again by mistake. You can delete your data completely at any time yourself via the page the unsubscribe link opens, or by sending us a message.

Storage duration: Until unsubscription or withdrawal of consent; after that as a blocked address until you request deletion

5. Fonts (Local Hosting)

We use the font "Sora", which is stored locally on our server.

No data is transmitted to external services like Google. The font files are loaded directly from our servers.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in uniform and appealing presentation)

Data processing: No transmission of personal data to third parties