Legal

Privacy Policy

This website sets no cookies, runs no tracking and loads nothing from third-party servers. Below is what little data is processed when you visit, and what rights you have over it.

Last updated: 14 August 2026

1. Who is responsible

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Georg Lippitsch
Email: hello@indergy.com

2. No cookies, no tracking, no third parties

We want to be specific rather than reassuring, because this is unusual enough to be worth stating plainly. This website:

  • stores nothing on your device — no cookies, no local storage, no session storage;
  • uses no analytics, no tracking pixels, no advertising or remarketing tools;
  • loads no fonts, maps, videos, social media buttons or scripts from external servers, so no third party learns that you visited;
  • builds no user profiles and makes no automated decisions about you.

Every image, stylesheet and script on this site is delivered from our own web server. Because nothing is stored on or read from your device, no consent banner is required under Article 5 of Law no. 41/2004 of 18 August (as amended by Law no. 46/2012), which transposes the ePrivacy Directive into Portuguese law.

3. Server log files

When you open this page, your browser necessarily transmits certain data to our hosting provider, which records it in server log files:

  • your IP address
  • date and time of the request
  • the page or file requested
  • HTTP status code and volume of data transferred
  • the referring page, if your browser sends one
  • browser type and version, and operating system

Purpose and legal basis. This data is required to deliver the website to you at all, and to keep the server stable and secure. The processing rests on our legitimate interest in operating a functioning, secure website, Art. 6 (1) (f) GDPR.

Retention. Log files are deleted after 1 month. This data is not merged with other data sources, and we do not attempt to identify individual visitors from it.

4. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes the log file data described in section 3 on our behalf as a processor, under a data processing agreement pursuant to Art. 28 GDPR.

We use Hetzner's managed web hosting, whose servers stand in Hetzner's German data centres in Nuremberg. No personal data is transferred to a country outside the European Union.

The same package provides our email service, so Hetzner also stores and transmits the correspondence described in section 5. The Art. 28 agreement covers both.

5. Contacting us by email

If you write to us at the address on this site, we process your email address, your name and whatever else you choose to put in your message, for the sole purpose of answering you and handling any business relationship that follows.

Legal basis. Where your message concerns a contract or steps taken prior to entering into one, Art. 6 (1) (b) GDPR; otherwise our legitimate interest in responding to enquiries addressed to us, Art. 6 (1) (f) GDPR.

Retention. We keep correspondence until the enquiry is settled and there is no longer a reason to retain it, unless statutory retention obligations — commercial and tax law in particular — require us to keep it longer. You may ask us to delete it at any time.

Our mailboxes are operated by Hetzner as part of the hosting package described in section 4, so your message is stored on Hetzner's servers in Germany. Incoming mail passes through Hetzner's spam filter before it reaches us.

Please note that email is not encrypted in transit by default and can in principle be read by third parties. Do not send us sensitive information by email.

6. Who receives your data

Your data is not sold, and it is not passed on for advertising purposes — we run no advertising. It is disclosed only to:

  • Hetzner, as our hosting and email provider, described in section 4;
  • public authorities and courts, where we are legally obliged to disclose it.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15);
  • rectification of inaccurate data (Art. 16);
  • erasure (Art. 17);
  • restriction of processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21).

To exercise any of these, write to hello@indergy.com. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority if you believe our processing infringes the GDPR. The competent authority for us is:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa, Portugal
www.cnpd.pt

In Portugal, the GDPR is supplemented by Law no. 58/2019 of 8 August, which gives it effect in the national legal order.

8. Security

This site is delivered over an encrypted TLS connection, recognisable by https:// in the address bar. We take appropriate technical and organisational measures to protect data against accidental or deliberate manipulation, loss, destruction and unauthorised access, as required by Art. 32 GDPR.

9. Changes to this policy

We will update this policy when the site changes in a way that affects data processing — for example if a contact form, a newsletter or an embedded map is added. The current version always applies.

← Back to the main page