Privacy policy
Last updated: 22 September 2026
This privacy policy explains which personal data we process on this website and for what purposes.
Controller
The controller is Amyla · Noël Sabosch, Stadtweg 87, 24837 Schleswig, Germany. Contact: info@amyla.net.
Hosting and server logs
We host this website using Laravel Cloud, provided by Laravel Holdings Inc., 60 Broad Street, 24th Floor, #1559, New York, NY 10004, USA. Laravel Cloud processes personal data on our behalf as a processor and uses infrastructure and network providers, including Amazon Web Services (AWS) and Cloudflare.
Our application infrastructure is located in the EU region selected by us. Incoming requests are routed through the globally distributed Cloudflare network for content delivery, network security, and protection against attacks. In particular, IP addresses and technical request data may be processed for these purposes outside Germany.
To deliver and secure the website and diagnose errors, we process technical information: IP address, time of access, requested URL, referrer, browser and system information, HTTP status codes, and transferred data volumes.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable, and efficient operation of this website.
Logs under our control are retained only for as long as necessary for operation, security, and error analysis. Individual log data may be retained longer to investigate a specific security incident or enforce legal claims.
Contact requests and email
When you contact us, we process your name, email address, message, and any budget range you provide. In the contact form, your name, email address, and message are required to handle your enquiry; the budget range is optional.
We send form submissions through the European email service of AhaSend B.V., Willem Fenengastraat 16, 1096 BN Amsterdam, the Netherlands. AhaSend processes sender and recipient details, message content, and delivery metadata. We store the received enquiry in our Google Workspace mailbox provided by Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland. Retention periods are listed below.
The legal basis is Art. 6(1)(b) GDPR for enquiries relating to entering into or performing a contract. For other enquiries, it is Art. 6(1)(f) GDPR: our legitimate interest in handling business communications.
Protection against automated submissions
We use self-hosted ALTCHA to protect our forms against spam and abuse. We process technically necessary connection and verification data. No data is sent to an external ALTCHA service, and no cookies or local browser storage are used. Data to prevent reuse is retained for no longer than ten minutes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting our forms against abuse.
Error analysis with Laravel Nightwatch
We use Laravel Nightwatch, provided by Laravel Holdings Inc. (address under Hosting), to identify technical errors and performance problems. Monitoring data is stored in the EU data region selected by us.
Data may include request and connection data such as IP addresses and URLs, error, stack-trace and log data, performance information, and database, HTTP and email metadata. Request body capture is disabled; sensitive headers such as cookies and authorisation data are redacted.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in error analysis, IT security, and reliable operation).
Retention period
- Server and proxy logs: according to the operational, security, and error analysis needs described above
- Nightwatch monitoring data: 90 days by default according to the provider
- Pirsch: IP addresses are not stored according to the provider; separately stored user-agent data for no longer than three months
- AhaSend: delivery metadata for seven days; message content only for immediate transmission, with no retention afterwards
- Contact requests in Google Workspace: until final processing; beyond that only where statutory retention obligations or the establishment, exercise, or defence of legal claims require it
Recipients and processors
The providers named above and below process data on our behalf for hosting, analytics, email delivery, mailbox operation, and monitoring. AhaSend uses infrastructure within the EU/EEA for our European email delivery, including Germany and Finland.
Laravel Cloud, including AWS and Cloudflare, Google Workspace, and Laravel Nightwatch may process data outside the EU/EEA, particularly in the USA. Third-country transfers rely on adequacy decisions, including the EU-US Data Privacy Framework for certified recipients, or European Commission Standard Contractual Clauses under Art. 44 et seq. GDPR.
For more information, see the Laravel Cloud Privacy Policy, the Pirsch Privacy Policy, the AhaSend Privacy Notice, the Google Privacy Policy, and the Laravel Nightwatch Privacy Policy.
Your rights
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
- withdrawal of consent with effect for the future where processing is based on consent (Art. 7(3) GDPR)
To exercise your rights, an informal message to info@amyla.net is sufficient. We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular the Independent State Centre for Data Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.
Email: info@amyla.net