Privacy Policy
At pong & pengo, we take the protection of your personal data very seriously. This privacy policy informs you about how we collect, use and protect your data.
1. Data Controller
pong & pengo e.V.
Tumblinger Creative Hub
Tumblingerstraße 23
80337 Munich, Germany
Contact:
Email: info@pong-pengo.de
Phone: +49 157 72181838
Supervisory Authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
2. Hosting & Server Logs
Our website is hosted by Strato AG (Pascalstraße 10, 10587 Berlin, Germany). The servers are located in Germany.
When you visit our website, the following data is automatically recorded in server log files:
- IP address (anonymized after 7 days)
- Date and time of request
- Page/file accessed
- Browser type and version
- Operating system
- Referrer URL
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in technical security and stability)
Storage duration: 7 days, then automatic deletion
3. Newsletter (Self-Hosted)
For our newsletter, we use Listmonk, an open-source newsletter software hosted on our own servers in Germany.
Registration with Double Opt-In
When you subscribe to our newsletter, we store:
- Your email address
- Your name (optional)
- Time of registration
After registration, you will receive a confirmation email (double opt-in). Only after clicking the confirmation link will newsletters be sent to you.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Data processing: All data is processed exclusively on our own servers in Germany. There is no data transfer to third parties or third countries.
Cookies: No cookies are set for the newsletter service.
Unsubscribe: At any time via the link in each email or by message to info@pong-pengo.de. After unsubscribing, your data will be deleted immediately.
Storage duration: Until unsubscription or withdrawal of consent
4. Fonts (Local Hosting)
We use the font "Sora", which is stored locally on our server.
No data is transmitted to external services like Google. The font files are loaded directly from our servers.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in uniform and appealing presentation)
Data processing: No transmission of personal data to third parties
Storage duration: The font files are stored in the browser cache (standard browser cache duration)
5. YouTube Videos
We embed videos from the platform YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
When playing a video, a connection to YouTube servers is established. YouTube learns which pages you visit and sets cookies. Your IP address is transmitted to Google in the process.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent via cookie banner or video click)
Data transfer to the USA: Google is EU-US Data Privacy Framework certified.
Storage duration: Depending on YouTube cookies (up to 2 years)
More info: Google Privacy Policy
6. Cookies
Our website uses only technically necessary cookies. These are small text files that are stored on your device.
Technically Necessary Cookies
These cookies are required for the operation of the website (e.g., storing your cookie settings).
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage duration: Session or up to 12 months
We do not use tracking cookies or third-party cookies. All services (newsletter, analytics) are self-hosted and GDPR-compliant.
7. Your Rights
Under the GDPR, you have the following rights:
Access (Art. 15 GDPR)
You can request information about the data we process.
Rectification (Art. 16 GDPR)
You can request the correction of incorrect data.
Erasure (Art. 17 GDPR)
You can request the deletion of your data, provided there are no legal retention obligations.
Restriction (Art. 18 GDPR)
You can request the restriction of processing.
Data Portability (Art. 20 GDPR)
You can receive your data in a common format.
Objection (Art. 21 GDPR)
You can object to the processing of your data at any time.
Withdrawal (Art. 7 para. 3 GDPR)
You can withdraw your consent (e.g., newsletter) at any time.
Complaint (Art. 77 GDPR)
You can file a complaint with the competent supervisory authority (see above).
8. Data Security
We implement technical and organizational measures to protect your data:
- SSL/TLS encryption for all data transmissions
- Secure servers in Germany (Strato AG)
- Regular security updates
- Access restrictions and authorization concepts
- Data processing agreements with all service providers
9. Contact
If you have questions about data protection or want to exercise your rights, please contact us:
Email: info@pong-pengo.de
Mail: pong & pengo e.V., Tumblingerstraße 23, 80337 Munich, Germany
10. Changes
This privacy policy may be updated as needed. You can always find the current version on this page.
Last updated: January 2026