Privacy policy

1. Controller

Daniel Heltemes UG (haftungsbeschränkt), Ludwigstraße 16, 85757 Karlsfeld, Germany
Managing director Daniel Heltemes
Phone +49 160 5566060, e-mail dh@helt.partners

No data protection officer has been appointed, as the legal requirements for this do not apply.

2. What this website does and does not do

This website is a static information site without accounts, newsletters or advertising networks. It sets no cookies, uses no analytics or tracking services and embeds no services that transfer data to third parties on a mere page view. Fonts and videos are loaded from our own server.

3. Hosting and server logs

The website is hosted by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) via Cloudflare Pages; Cloudflare processes connection data in data centres in the EU and, where applicable, in the USA. When you open our pages, technically necessary data are processed: IP address, date and time, page requested, amount of data transferred, browser and operating system, referring page. These data serve the secure and stable operation of the website (defence against attacks, error analysis). The legal basis is Art. 6 (1) (f) GDPR. Transfers to the USA rely on the EU-US Data Privacy Framework, of which Cloudflare is a member, and on the EU standard contractual clauses. Log files are deleted after a short period, usually within a few days.

4. Videos

Our film and self-hosted reference videos are delivered from our own server; only the connection data described in section 3 arise. Some reference videos are hosted on YouTube. They are loaded exclusively in privacy-enhanced mode (youtube-nocookie.com) and only after you click the preview image. Only with that click is a connection to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) established; Google may then process your IP address and, if you are signed in to Google, assign the view to your account. The legal basis is your consent given by the click, Art. 6 (1) (a) GDPR; you can instead watch the videos directly on YouTube. Information on data processing by Google: policies.google.com/privacy.

5. Booking a call via Calendly

The link “Book a call” leads to our booking page at Calendly LLC (271 17th St NW, Atlanta, GA 30363, USA). Only there, on Calendly’s website, do you enter your name, e-mail address and possibly further details; Calendly passes these data on to us to hold the meeting. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract). Calendly is certified under the EU-US Data Privacy Framework. Calendly’s privacy notice: calendly.com/privacy.

6. Outbound assessment

The assessment on this website is calculated entirely in your browser. Your entries are neither transferred to us or third parties nor stored unless you actively send the result to us. If you choose “Send result”, your e-mail program opens with a prepared message to us; only when you send it do we receive the information it contains. We process it to answer your request and to prepare a conversation, Art. 6 (1) (b) GDPR.

7. Contact by e-mail or phone

If you contact us by e-mail or phone, we process the data you provide (name, contact details, content of the request) to handle the request and follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where the request aims at a contract, otherwise Art. 6 (1) (f) GDPR (our interest in answering requests). Our e-mail is processed via Google Workspace (Google Ireland Limited) under a data processing agreement. Requests are deleted once they are settled and no statutory retention obligations apply.

8. Links to LinkedIn and YouTube

The website contains links to our profiles and videos on LinkedIn and YouTube. When you click them you leave our website; the privacy policies of the respective providers (LinkedIn Ireland Unlimited Company, Google Ireland Limited) apply there. No data are transferred to these providers when you merely view our pages.

9. Your rights

You have the right of access to the personal data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time to processing based on Art. 6 (1) (f) GDPR (Art. 21), and you may withdraw any consent given with effect for the future. Please use the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. Changes

We update this policy when the website or the legal situation changes. The version published here applies.