Legal

Privacy policy

This privacy policy explains, in accordance with Art. 13 GDPR, which personal data is processed when you visit this website and contact me, for what purpose, on which legal basis and for how long.

Last updated: September 17, 2026

REVIEW BEFORE LAUNCHThis text is a draft and not legal advice. Have it reviewed by a lawyer or a service such as eRecht24 before publication and replace every placeholder in square brackets. The German version is the legally binding one.

1. Controller

Tim Heineccius, Heineccius Consulting, [Street and number], [Postal code] Bonn, Germany. Email: kontakt@heineccius.de.

2. Hosting and server log files

This website runs on a self-managed server at [hosting provider, server location, e.g. Hetzner Online GmbH, Germany/Finland]. When you access it, technically necessary data is processed: IP address, date and time, page requested, data volume transferred, browser and operating system (server log files).

Purpose: technical operation, stability and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

Retention: log files are deleted after [7/14] days at the latest, unless a security-related analysis is required.

3. Contact form and email

If you use the contact form, your name, email address, optionally your company, the selected topic and your message are processed. Delivery is handled by the email service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the data on our behalf under a data processing agreement; the transfer to the USA is based on the EU standard contractual clauses or a certification under the EU-US Data Privacy Framework. [Verify: confirm current certification status and data processing region.]

Purpose: handling your request and preparing a quote.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (interest in answering requests).

Retention: until your request has been fully handled; if a contract is initiated, the statutory retention periods apply thereafter.

To protect against spam, the form contains a field invisible to humans. If it is filled in, the message is discarded. No additional data is stored in the process.

4. Page analytics (Seline Analytics)

To measure how this website is used, Seline Analytics is employed, a cookieless analytics service with data processing in the EU [add provider details: Seline, address, server location]. Seline sets no cookies, does not access your device's local storage and builds no cross-device profiles. IP addresses are not stored; pages viewed, referrer, device type and approximate country are recorded in aggregated form.

Purpose: understanding which content is used, to improve the offering.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in data-minimizing page analytics). Consent under Sec. 25 TDDDG is not required because no information is stored on or read from your device.

Retention: aggregated statistics without personal reference, indefinitely.

Objection: you can object to the processing at any time, for example by enabling the "Do Not Track" setting of your browser or by email to kontakt@heineccius.de.

5. Fonts

The font used (Manrope) is served locally from this server. No connection to servers of Google or other font providers takes place.

6. External links (Calendly, LinkedIn, YouTube, etc.)

This website does not embed third-party content. Appointment booking is done via a link to Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA) that opens in a new tab. Calendly's privacy policy applies only once you open Calendly. The same applies to links to LinkedIn, YouTube, GitHub and other external sites.

7. Cookies and local storage

This website sets no cookies for analytics or marketing purposes. To remember your language choice (German/English), a technically necessary cookie may be set; it is required for the language switch to work (Sec. 25(2) no. 2 TDDDG) and contains no personal data. A cookie banner is therefore not required.

8. Your rights

You have the following rights vis-à-vis the controller regarding your personal data:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interests (Art. 21 GDPR)
Complaint to a supervisory authority (Art. 77 GDPR), e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

To exercise your rights, an email to kontakt@heineccius.de is sufficient.

9. Changes

This privacy policy is updated when the website or the legal situation changes. The version published here applies.