Privacy.
In short: very little.

Jonas Heider
Heider Dynamics
Haverkamp 1
24238 Selent
Email: info@heiderdynamics.de

When you visit the website, the web server processes the connection data needed for the transfer, in particular your IP address. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR).

The access log contains the time, the page requested, the status code, the amount of data transferred and the browser identifier, but no IP address. It has a fixed size, and older entries are continuously overwritten. Technical errors may also appear in the server’s error log.

The website runs on a server of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the connection data mentioned above on our behalf under a data processing agreement in accordance with Art. 28 GDPR.

Fonts, scripts and graphics come from our own server. The only exception is the audience measurement script, which is loaded from bunc.ocean-forest.de (see below). The website uses no advertising services, sets no cookies and stores nothing in your browser’s storage. Your browser also calculates the sculpture on the home page itself.

We use Umami on the server of our technical service provider Ocean Forest IT at bunc.ocean-forest.de. It lets us analyse page views, referring websites, browsers, operating systems, device types, language and approximate origin, so we can understand how our website is used. The IP address is processed for the technical transfer and to form an identifier that changes daily, but it is not stored as an IP address in the analytics database. No cookies, persistent device identifiers or cross-site user profiles are used.

The legal basis is our legitimate interest in improving the website (Art. 6 (1) (f) GDPR). URL query parameters and the part of the address after the # sign are not sent to Umami. Your browser’s Do Not Track setting is respected. This self-hosted installation has no automatic deletion period set for the statistics data.

The diagnosis on the “What we solve” page and the project brief on the contact page evaluate your input only in your browser. None of it is stored, and nothing is sent to us unless you send the brief.

If you take the diagnosis to the brief, the ticked items appear as short codes after the # sign in the address. Your browser does not send that part of the address to the server, and the contact page removes it as soon as it has filled in the form. You send the finished brief through the form, download it as a text file or copy it.

When you send the brief, your browser transfers your name, your email address and the text of the brief to the server this website runs on (see Hosting). The server forwards everything as an email to our mailbox at STRATO GmbH and stores none of it itself. It keeps your IP address in memory for up to one hour to limit mass submissions, then discards it. If it concerns a possible contract, the legal basis is Art. 6 (1) (b) GDPR; otherwise it is our legitimate interest in replying (Art. 6 (1) (f) GDPR). For the email itself, the section “Contact by email” applies.

If you write to us, we process your details to answer your enquiry. If it concerns a possible contract, the legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures); otherwise it is our legitimate interest in replying (Art. 6 (1) (f) GDPR). Your message is held by our email provider STRATO GmbH. We keep messages for as long as handling them and statutory retention obligations require.

Within the statutory requirements, you can request access, rectification, erasure and restriction of processing and, depending on the legal basis, receive your data in a common format. To do so, write to the email address above. You can also lodge a complaint with a data protection supervisory authority, for example where you live or work.

Right to object: You can object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).