Privacy Policy

1. Controller
Engito Labs GmbH (Brand: Ammersee Digital)
Skellstr. 1d, 86911 Diessen am Ammersee, Germany
Phone: 08807 / 286 97 88
Email: hallo@ammersee-digital.de
Managing Director: Christian Engert

2. Hosting & Content Delivery Network (CDN)
This website is served through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare acts as a reverse proxy and content delivery network. All requests to this website pass through Cloudflare servers, which may involve data transfers to the USA. Cloudflare processes the following data, among others: IP address, pages accessed, browser type and version, date and time of access, volume of data transferred. Cloudflare may also set a cookie (e.g. "__cflb") for load balancing purposes.

The use of Cloudflare is based on our legitimate interest in the secure and efficient delivery of our website pursuant to Art. 6(1)(f) GDPR. Data transfers to the USA are safeguarded by the EU Standard Contractual Clauses (SCCs) implemented by Cloudflare. Further information: cloudflare.com/privacypolicy.

3. Server Log Files
Each time our website is accessed, information is automatically collected in server log files: IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), HTTP status code, volume of data transferred, referrer URL, browser type and version, operating system. This data is technically necessary to deliver the website correctly and is processed on the basis of Art. 6(1)(f) GDPR. No merging with other data sources takes place.

4. Contact Form
When you contact us via the contact form, the data you enter (name, email address, phone number, company name, message, selected package) is processed for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

The form data is processed via a server-side function on our own infrastructure (Cloudflare Pages Functions) and forwarded to us by email. The email is sent via Resend (Resend, Inc.) with data processing in the EU (Frankfurt). Resend processes the data exclusively on our behalf and not for its own purposes. No disclosure to other third parties takes place. Further information: resend.com/legal/privacy-policy.

5. Data Retention
The data you submit via the contact form will remain with us until you request its deletion, you revoke your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions — in particular commercial and tax law retention periods (6 or 10 years) — remain unaffected. Server log files are deleted after no more than 30 days.

6. Fonts (Self-Hosting)
This website uses locally hosted fonts (self-hosting). No connection to external servers (e.g. Google) is established. The font files are loaded directly from our own server. No personal data is transferred to third parties in this process.

7. Cookies
This website uses only technically necessary cookies. Our content delivery network Cloudflare may set a technical cookie (e.g. "__cflb") for load balancing. This cookie does not contain any personal data and serves exclusively to ensure the technical functionality of the website. Consent is not required for this pursuant to Section 25(2) TDDDG (formerly TTDSG), as it is a strictly necessary cookie. No tracking, analytics or marketing cookies are used.

8. SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and displays a lock icon. When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

9. Your Rights
Under the GDPR, you have the following rights:
— Access (Art. 15): Information about which data we have stored about you.
— Rectification (Art. 16): Correction of inaccurate data.
— Erasure (Art. 17): Deletion of your data, provided no statutory retention obligation exists.
— Restriction of processing (Art. 18).
— Data portability (Art. 20): Provision of your data in a machine-readable format.
— Objection (Art. 21): Against processing based on Art. 6(1)(f) GDPR.

Contact for all enquiries:
Email: hallo@ammersee-digital.de
Phone: 08807 / 286 97 88

10. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

As of: April 2026