Privacy Policy

01 — Controller

The data controller responsible for processing on this website is:
NextGate Digital UG (haftungsbeschränkt)
Im Winkel 8, 50189 Elsdorf, Germany
Email: studio@agency-19.com

02 — Contact form

When you submit the contact form, we process the data you enter — name, email address, optionally company name, budget selection, and your message — in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering a contract) and, where no contract results, Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries sent to us).

Submissions are sent by email using Resend (Resend, Inc., USA) as our email delivery processor, and land directly in our inbox. We do not store submissions in a database of our own — the only record is the email itself. We retain that email only for as long as needed to handle your enquiry and any resulting business relationship, after which it is deleted, unless statutory retention obligations under German commercial or tax law (§ 257 HGB, § 147 AO — typically 6 to 10 years for business correspondence) require us to keep it longer.

To prevent spam and abuse, our server briefly records the IP address of anyone submitting the form, to limit how many submissions the same address can send within a 10-minute window. This is separate from the message content — it's held in server memory only (not a database), is never linked to your submission's content, and ages out automatically once that window passes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the form usable and free of abuse).

03 — Hosting & server log data

Our hosting provider automatically records standard server log data for every visit — IP address, date and time, requested page, browser type, and referring URL — for security and technical stability (Art. 6(1)(f) GDPR). This data is not merged with any other data source and is deleted automatically after a short period.

04 — Fonts

Web fonts used on this site are hosted on our own server and delivered with the page. We do not load fonts from Google Fonts or any other third-party font CDN, so no connection to a third-party server and no transfer of your IP address happens for this purpose.

05 — Cookies & analytics

We use Matomo, a self-hosted web analytics tool, to understand how visitors use this site. Matomo runs on our own server (tracking.agency-19.com) in cookieless mode — no cookie is set on your device for analytics, and no data is sent to Google, Meta, or any other third party.

Because no cookie or local storage is used for this, it doesn't fall under the consent requirement in § 25 TTDSG (which governs storage of, or access to, information on your device — cookies and similar). The legal basis is our legitimate interest, Art. 6(1)(f) GDPR, in understanding how the site is used well enough to improve it.

Analytics is active by default for this reason. You can opt out at any time via the "Cookies" button in the bottom-left corner of the page, which stops tracking immediately for your browser.

We do not use any advertising, social-media, or third-party tracking tools.

06 — Your rights

Under the GDPR you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), and object to (Art. 21) the processing of your personal data, as well as the right to data portability (Art. 20). You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

07 — Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.