Privacy policy

1. Controller

Tim Heineccius, Heineccius Consulting, Am Stingenberg 35, 53227 Bonn, Germany. Email: kontakt@heineccius.de.

2. Hosting and server log files

This website runs on a self-managed server operated by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) in a data centre in Germany. When you access it, technically necessary data is processed: IP address, date and time, page requested, data volume transferred, browser and operating system (server log files).

Purpose: technical operation, stability and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Retention: log files are deleted after 7 days at the latest, unless a security-related analysis is required.

3. Contact form and email

If you use the contact form, your name, email address, optionally your company, the selected topic and your message are processed. Delivery is handled by the email service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) under a data processing agreement. Sending itself runs through the service's EU region (Ireland); Resend stores account and log data in the USA. Resend is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition.

Purpose: handling your request and preparing a quote.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (interest in answering requests).

Retention: until your request has been fully handled; if a contract is initiated, the statutory retention periods apply thereafter.

To protect against spam, the form contains a field invisible to humans. If it is filled in, the message is discarded. No additional data is stored in the process.

4. Page analytics (Umami)

To measure how this website is used, the open-source software Umami is employed. Umami runs self-hosted on the same server as this website (see section 2); no data is transferred to third parties. Umami sets no cookies, does not access your device's local storage and builds no cross-device profiles. IP addresses are not stored; pages viewed, referrer, browser, device type and approximate country are recorded in aggregated form.

Purpose: understanding which content is used, to improve the offering.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in data-minimizing page analytics). Consent under Sec. 25 TDDDG is not required because no information is stored on or read from your device.

Retention: aggregated statistics without personal reference, indefinitely.

Objection: you can object to the processing at any time, for example by enabling the "Do Not Track" setting of your browser or by email to kontakt@heineccius.de.

5. Fonts

The font used (Manrope) is served locally from this server. No connection to servers of Google or other font providers takes place.

6. External links (Calendly, LinkedIn, YouTube, etc.)

This website does not embed third-party content. Appointment booking is done via a link to Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA) that opens in a new tab. Calendly's privacy policy applies only once you open Calendly. The same applies to links to LinkedIn, YouTube, GitHub and other external sites.

7. Cookies and local storage

This website sets no cookies for analytics or marketing purposes. To remember your language choice (German/English), a technically necessary cookie may be set; it is required for the language switch to work (Sec. 25(2) no. 2 TDDDG) and contains no personal data. A cookie banner is therefore not required.

8. Your rights

You have the following rights vis-à-vis the controller regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR), e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

To exercise your rights, an email to kontakt@heineccius.de is sufficient.

9. Changes

This privacy policy is updated when the website or the legal situation changes. The version published here applies.