← Back to home

Privacy Policy

Protecting your personal data matters to me. This website is intentionally data-minimal: it uses no cookies, no tracking, no analytics tools and no embedded third-party services. A cookie banner is therefore not required.

1. Controller

Heinzmann Consulting
Hübelgasse 27
67471 Elmstein
Germany
Email: info@heinzmannconsulting.com

2. Hosting

This website is hosted by an external service provider (processor):

netcup GmbH
Daimlerstraße 25
76185 Karlsruhe
Germany

The host processes, on my behalf, personal data that arises when this website is accessed (in particular server log files, see section 3). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the reliable and secure provision of this website). A data processing agreement (DPA) under Art. 28 GDPR is in place; the server location is in Germany.

3. Server log files

When the website is accessed, the host automatically collects and stores information in server log files that your browser transmits:

• anonymized / shortened IP address
• date and time of access
• requested page/file and amount of data transferred
• HTTP status code
• browser type and version, operating system
• referrer URL

This data is not merged with other sources. Processing is based on Art. 6 (1) (f) GDPR for the technically error-free presentation and security of the website, and is deleted once no longer required.

4. Cookies and tracking

This website sets no cookies and uses no analytics, tracking or reach-measurement tools. No profiling takes place.

5. Fonts (self-hosting)

The web fonts used (Space Grotesk, Inter, JetBrains Mono) are served locally from my server and are not loaded from an external provider (such as Google Fonts). No connection to third-party servers is established when the site is accessed.

6. Contact

This website has no contact form. If you contact me by email or phone, your details will be processed to handle your request. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual / contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in handling your request). The data is deleted once it is no longer required and no retention obligations apply.

7. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption (recognizable by “https://” in the address bar), so that data you transmit cannot be read by third parties.

8. Your rights

Within the limits of the law, you have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). An informal message to the contact details above is sufficient.

9. Right to lodge a complaint

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for me is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz, Germany
www.datenschutz.rlp.de

Last updated: June 2026