Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Dr. Jonas Heimicke
Durlacher Allee 12
76133 Karlsruhe
Germany
Email: info@dr-heimicke.de
Phone: +49 176 832 10 693

2. General information on data processing

This website processes personal data only to the extent necessary to provide a functional website and our content and services. Processing regularly takes place only with the consent of the data subject or on the basis of a legal permission, in particular where processing is necessary for the performance of a contract, to respond to inquiries, or to safeguard legitimate interests (Art. 6(1)(a), (b), (f) GDPR).

3. Hosting and Content Delivery Network

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. To provide the website securely, quickly, and reliably, we use technical infrastructure from IONOS, including a Content Delivery Network (CDN).

When this website is accessed, IONOS processes technically necessary data, in particular IP address, date and time of access, browser type and version, operating system used, referrer URL, host name of the accessing device, and the pages or files accessed.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast, and stable provision of our website and in optimizing load times.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with IONOS.

4. Contact form and email contact

If you contact us via the contact form or by email, the data you provide (e.g. name, email address, message content) will be stored by us to process your inquiry and in case of follow-up questions. The contact form transmits your details via a server-side script by email to our inbox; no further storage in a database takes place. The legal basis is Art. 6(1)(b) GDPR where the inquiry serves to prepare a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

We do not pass on this data without your consent. It is deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations apply.

The contact form contains an additional field that is not visible to you, as well as a simple timing check, to help prevent automated spam submissions (a so-called honeypot method). No personal data of real visitors is processed or stored in this process.

AI-assisted writing tools may occasionally be used to support the handling of inquiries (e.g. to help draft reply text). No automated decision-making within the meaning of Art. 22 GDPR takes place in this process; the substantive review and decision is always made by us personally.

5. Server log files

When this website is accessed, information is automatically processed in so-called server log files, which your browser automatically transmits. These are, in particular: browser type and version, operating system used, referrer URL, host name of the accessing device, time of the server request, and IP address. This data is not combined with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and technically error-free operation of the website.

6. Storage duration

Unless a more specific storage duration has been stated in this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. Statutory retention periods (e.g. under commercial or tax law) remain unaffected.

7. Your rights as a data subject

You have the right at any time to obtain information about the data stored about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16 GDPR), to have it erased (Art. 17 GDPR), to restrict processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), and to object to the processing of your personal data (Art. 21 GDPR). If processing is based on consent, you may revoke it at any time with effect for the future.

Please direct any such request to the contact address given in section 1.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. As a rule, the competent authority is that of the German state in which you have your habitual residence, your place of work, or the place of the alleged infringement.

9. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock icon in your browser's address bar.

10. Currency and amendment of this privacy policy

This privacy policy is currently valid. Further development of our website and offerings, or changes to statutory requirements, may make it necessary to amend this privacy policy.