Privacy Policy (Datenschutzerklärung)
Scope: this policy covers the website amarbaro.com only. The AMARBARO Android
applications each have their own policy: ABCam,
ABSend, ABDoc.
Last updated: 2 September 2026
Summary
This is a static website. It has no accounts, no comment forms, no tracking pixels, no advertising, and no analytics. It loads no third-party resources — no external fonts, no CDN, no embedded video — so visiting a page produces no request to any server other than ours. The only personal data processed is what our web server unavoidably records in order to deliver the page to you, and whatever you choose to put in an email if you write to us.
Controller
[LEGAL NAME] [STREET AND NUMBER] [POSTCODE CITY] [COUNTRY]
Email: privacy@amarbaro.com
There is no statutory obligation to appoint a Data Protection Officer for this site (Art. 37 GDPR, § 38 BDSG), and none has been appointed.
Server log data
Our web server (Caddy, running on a virtual server we rent, see Hosting below) writes an access log entry for each request. That entry can contain:
| Field | Example |
|---|---|
| IP address | 203.0.113.7 |
| Date and time of the request | 2026-09-02T14:03:11Z |
| Requested path and HTTP method | GET /impressum/ |
| HTTP status code and response size | 200, 18432 |
| Referrer, if your browser sends one | https://example.org/ |
| User agent string | Mozilla/5.0 (…) Firefox/141.0 |
Purpose and legal basis. Delivering the site, keeping it stable, and detecting attacks and abuse. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in operating a functioning and secure website. An IP address is personal data, which is why it is listed here even though we never look at these logs to identify anyone.
Retention. Log entries are deleted or rotated out within 14 days. They are not merged with any other data source and are not used to build profiles.
Hosting
The site is served from a virtual server rented from Contabo GmbH, Aschauer Straße 32a, 81549 München, Germany. Contabo processes the log data described above on our behalf as a processor under Art. 28 GDPR, under a data processing agreement. The servers are located in the European Union.
Cookies and local storage
This site sets no cookies. It stores exactly one value in your browser's localStorage:
| Key | Value | Purpose |
|---|---|---|
amarbaro-theme |
"dark" or "light" |
Remembers whether you chose the dark or light appearance. |
This value never leaves your browser — it is not transmitted to us or to anyone else. It is strictly necessary to provide the display setting you explicitly asked for, so no consent banner is required (§ 25 (2) no. 2 TDDDG). You can delete it at any time through your browser's site-data settings; the site will then simply follow your operating system's dark/light preference again.
Contacting us by email
If you write to support@amarbaro.com, bugs@amarbaro.com or privacy@amarbaro.com, we
process your email address, your message and any information you choose to include, for the
sole purpose of answering you. The legal basis is Art. 6 (1) (b) GDPR where your message
concerns a contract or pre-contractual steps, otherwise Art. 6 (1) (f) GDPR — our
legitimate interest in responding to enquiries. We keep correspondence for as long as it is
needed to handle the matter and to comply with statutory retention periods, then delete it.
Our mailboxes are hosted by Purelymail LLC (United States), which acts as a processor. Transfers to the United States are covered by the EU Standard Contractual Clauses. Email is inherently not confidential in transit unless both ends use encryption; please do not send us sensitive personal data by unencrypted email.
What we do not do
- No web analytics of any kind, self-hosted or otherwise.
- No advertising, no ad networks, no conversion tracking.
- No social media plugins, no share buttons that phone home.
- No third-party fonts, scripts, or CDNs — every asset is served from
amarbaro.com. - No user accounts, newsletters, contact forms, or comment sections.
- No automated decision-making or profiling within the meaning of Art. 22 GDPR.
- No sale or sharing of personal data with third parties, other than the processors named above acting strictly on our instructions.
Your rights
Under the GDPR you have the right to:
- Access (Art. 15) — ask what data we hold about you.
- Rectification (Art. 16) — have inaccurate data corrected.
- Erasure (Art. 17) — have data deleted.
- Restriction (Art. 18) — have processing limited.
- Data portability (Art. 20) — receive your data in a machine-readable format.
- Object (Art. 21) — object at any time to processing based on legitimate interest, including the server logging described above.
- Withdraw consent (Art. 7 (3)) — where processing rests on consent, withdraw it at any time with effect for the future.
To exercise any of these, email privacy@amarbaro.com. Note that server logs contain no
identifier that lets us connect an IP address to you, so for an access request about log
data we may be unable to identify you within the meaning of Art. 11 (2) GDPR.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in the EU member state of your residence, place of work, or of the alleged infringement.
TLS
The whole site is served over HTTPS with certificates from Let's Encrypt. Plain HTTP requests are redirected to HTTPS.
Changes to this policy
We update this policy when the site changes in a way that affects it — for example if analytics or a contact form were ever added. The date at the top always reflects the current version.
Language note. This Datenschutzerklärung is currently published in English only. A German version will follow.