Privacy policy
Information pursuant to Art. 13 GDPR
Last updated: October 2026
1. Controller
NextGate Digital UG (haftungsbeschränkt), Im Winkel 8, 50189 Elsdorf, Germany. Local court Cologne, HRB 128572. Contact: [email protected]
2. Hosting and server log files
This website runs on a virtual server operated by us and provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, the server automatically records access data (IP address, time, page requested, browser type) in server log files.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the website. The log files are used for this purpose only and are deleted automatically after seven days.
3. Contact form, email and phone
The data you enter in the form (name, email address, topic, message) is sent by email to our mailbox. If you email us directly, we process your email address and the content of your message. If you call us, we process your phone number and what you tell us. In both cases we use the data solely to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries). Providing the data is voluntary, but without it we cannot answer your enquiry.
We delete the data once the matter is closed, unless statutory retention periods (for example for business correspondence under the German Commercial Code and Fiscal Code) require us to keep it.
To protect the form against automated spam, we store a hash of your IP address when you submit it, created with a secret key (HMAC). Without that key, the IP address cannot be derived from the hash. Entries older than ten minutes are deleted the next time the form is used. The legal basis is Art. 6 (1) (f) GDPR. We do not use a CAPTCHA or any third-party service for this.
4. Cookies and web analytics (Matomo)
Strictly necessary cookies store your cookie settings: the cookie “ncc_c” records that you have made a choice, and “ncc_e” records which optional cookies you allowed. Both are deleted after one year. The legal basis is § 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6 (1) (f) GDPR.
Only if you consent in the cookie settings do we use the web analytics tool Matomo. We run Matomo ourselves on the server named in section 2; it is reachable at tracking.agency-19.com. No data is passed to third parties or advertising networks. Matomo sets cookies and records, among other things, the pages you visit, time spent, device and browser.
Your IP address is shortened by its last two bytes before it is stored, so it can no longer be linked to you. We delete the raw data automatically after 180 days; after that only aggregated statistics without personal reference remain.
The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Matomo is not loaded before you consent. You can withdraw your consent at any time with effect for the future via the “Cookie settings” button at the bottom of the page.
5. Processors and transfers outside the EU
The server on which this website, the web analytics and our email mailbox run is provided by STRATO GmbH, Berlin. A data processing agreement under Art. 28 GDPR is in place with STRATO.
All data is processed on servers in Germany. We do not transfer personal data to countries outside the European Union or the European Economic Area.
6. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR). To do so, write to [email protected].
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the authority responsible for us: the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
8. Right to object under Art. 21 GDPR
Where we process data on the basis of Art. 6 (1) (f) GDPR (server log files, spam protection, answering enquiries), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You can object informally, for example by email to [email protected].