Privacy Policy
This policy explains what personal data this website collects, why, and what rights you have under the General Data Protection Regulation (GDPR / DSGVO).
01 — Controller
The data controller responsible for processing on this website is:
NextGate Digital UG (haftungsbeschränkt)
Im Winkel 8, 50189 Elsdorf, Germany
Email: studio@agency-19.com
02 — Contact form
When you submit the contact form, we process the data you enter — name, email address, optionally company name, budget or package selection, the topic you enquired about, and your message — in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering a contract) and, where no contract results, Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries sent to us).
Submissions are sent by email using Resend (Resend, Inc., USA) as our email delivery processor, and land directly in our inbox. We do not store submissions in a database of our own — the only record is the email itself. We retain that email only for as long as needed to handle your enquiry and any resulting business relationship, after which it is deleted, unless statutory retention obligations under German commercial or tax law (§ 257 HGB, § 147 AO — typically 6 to 10 years for business correspondence) require us to keep it longer.
To prevent spam and abuse, our server limits how many submissions the same IP address can send within 10 minutes. For this, the IP address is stored only as a one-way hash with a timestamp in a temporary file on our server — not in a database, never linked to your message content, and no longer used once the 10 minutes have passed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in keeping the form usable and free of abuse).
03 — Hosting & server log data
Our hosting provider automatically records standard server log data for every visit — IP address, date and time, requested page, browser type, and referring URL — for security and technical stability (Art. 6(1)(f) GDPR). This data is not merged with any other data source and is deleted automatically after a short period.
03b — Free tools
Our free tools under /tools (e.g. voucher, notice and QR code generators, calculators) run entirely in your browser. Your input — including uploaded logos — is not sent to us or third parties and is not stored on our servers.
Only the menu template keeps your draft in your browser's session storage (sessionStorage) so nothing is lost on reload. Your browser deletes this storage automatically as soon as you close the tab.
Our cookieless analytics (see section 05) only records that a tool was used (e.g. “voucher printed”) — never the content of your input.
04 — Fonts
Web fonts used on this site are hosted on our own server and delivered with the page. We do not load fonts from Google Fonts or any other third-party font CDN, so no connection to a third-party server and no transfer of your IP address happens for this purpose.
05 — Cookies & analytics
We use Matomo, a self-hosted web analytics tool, to understand how visitors use this site. Matomo runs on our own server (tracking.agency-19.com) in cookieless mode — no cookie is set on your device for analytics, and no data is sent to Google, Meta, or any other third party.
Because no cookie or local storage is used for this, it doesn't fall under the consent requirement in § 25 TTDSG (which governs storage of, or access to, information on your device — cookies and similar). The legal basis is our legitimate interest, Art. 6(1)(f) GDPR, in understanding how the site is used well enough to improve it.
Analytics is active by default for this reason. You can opt out at any time via the "Cookies" button in the bottom-left corner of the page, which stops tracking immediately for your browser.
We do not use any advertising, social-media, or third-party tracking tools.
06 — Your rights
Under the GDPR you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), and object to (Art. 21) the processing of your personal data, as well as the right to data portability (Art. 20). You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
07 — Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.