Privacy Policy

Courtesy translation. The German version is the legally binding one.

1. Controller

The controller responsible for data processing on this website is Oliver Heidorn, Flottbeker Drift 18, 22607 Hamburg, phone +49 175 5947311, email work@oliverheidorn.de. A data protection officer is not legally required.

2. Server log files

When you visit this website, your browser transmits technically necessary data that the server stores in log files: page requested, date and time, amount of data transferred, referrer, browser type and version, operating system, and the IP address in truncated form. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure and stable operation of the website. Log files are deleted after 7 days at the latest and are not merged with other data sources.

3. Hosting

This website is operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider. No data is transferred to third countries.

4. Reach measurement with Umami

For statistical evaluation of usage I use Umami — open-source analytics software that I run on my own server in Germany. No cookies are set and no data is written to localStorage. What is recorded: page visited, referrer, approximate origin (country), device type, browser, screen size, and triggered interactions (e.g. a click on the booking link). The IP address is not stored; visits are distinguished using a server-side, regularly rotating hash value that allows no inference back to your identity. Data is not shared with third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a needs-appropriate design of the website). Since no information is stored on or retrieved from your device, no consent under § 25 TDDDG is required. If your browser signals "Do Not Track" or "Global Privacy Control", the analytics script is not loaded.

5. Appointment booking

The booking link leads to a Nextcloud instance at the domain cloud.oliverheidorn.de, which I operate myself. Data entered there (name, email address, requested time, optional message) is used exclusively to carry out the appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Data is deleted once the exchange is concluded, unless statutory retention periods require otherwise.

6. Contact by email and phone

If you contact me by email or phone, I store your details to process the request and in case of follow-up questions. The legal basis is Art. 6(1)(b) or (f) GDPR. This data is not passed on without your consent.

7. Fonts and external content

All fonts are served from this server. There is no connection to Google Fonts or any other content delivery network. No third-party social-media plugins, maps or embedded videos are loaded.

8. Retention period

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations (in particular under the German Commercial Code and Fiscal Code) stand in the way.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interests (Art. 21 GDPR). Please contact me at the address given above.

10. Right to complain

You may lodge a complaint with a data protection supervisory authority; the competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg.

Last updated: July 2026