Back
Legal

Privacy Policy

In short

This website works without cookies and without embedded third-party services. Fonts, images and scripts are all served from its own web space, and so is the visitor statistics tool. Personal data is processed in three places: when the page is technically delivered (server logs), in the visitor statistics with a shortened IP address, and when you write to me via the contact form or by email.

1. Controller

Edgar Heinz
Am Schilfpark 12g
21029 Hamburg
Email: hi@edgarheinz.com

2. Hosting and server logs

This website is hosted by ALL-INKL.COM - Neue Medien Münnich, Inhaber René Münnich, Hauptstraße 68, 02742 Friedersdorf (Germany). The servers are located in Germany. Whenever a page is requested, the provider processes the data that is technically required to deliver it, including your IP address. The following is stored in log files:

  • your IP address, but only in shortened form (11.22.33.44 becomes 11.22.0.0)
  • date and time of the request
  • page or file requested, amount of data transferred and status code
  • previously visited page (referrer)
  • browser and operating system

This is necessary to deliver the website and to keep it stable and secure. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is the secure and trouble-free operation of this website. Because the IP address is shortened, the log files cannot be traced back to you. I do not combine this data with other data.

The log files are deleted automatically after 7 days. I have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.

3. Contact form and email

You can write to me using the contact form on the home page or by email. In both cases I process your name, your email address and the content of your message in order to answer your enquiry. The form asks for nothing else.

What you enter in the form is transmitted in encrypted form to my web space at ALL-INKL.COM (see section 2) and sent from there as an email to my mailbox. It is not stored on the web space.

If your message is about a quote or a commission, the legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract and performance of a contract). In all other cases it is Art. 6 (1) (f) GDPR. My legitimate interest is to answer enquiries addressed to me.

My mailbox is run by Google Workspace, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. I have concluded a data processing agreement with Google in accordance with Art. 28 GDPR. In the process, data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

I delete enquiries as soon as they have been dealt with and no statutory retention periods apply. Messages that belong to a commission are kept for the retention periods under tax law (§ 147 of the German Fiscal Code), usually six years for business correspondence.

4. Visitor statistics

To understand which pages and projects are read and how visitors find this website, I use Matomo. Matomo is open-source software that I run myself on my web space at ALL-INKL.COM (see section 2). The data does not leave this server and is not passed on to anyone.

Matomo does not set any cookies and does not evaluate features of your device such as screen size or installed plugins. With every page view it records:

  • your IP address, which is shortened immediately (11.22.33.44 becomes 11.22.0.0)
  • date and time, the page requested and its title
  • the page you came from (referrer)
  • browser, operating system, device type and language setting
  • clicks on links to other websites and on email addresses, and whether the contact form was sent (without its content)

To group several page views into one visit, Matomo creates an identifier from this information that is valid for 24 hours at most. So Matomo does not recognise you across several days, and I do not create profiles.

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is to improve this website on the basis of anonymous figures. I delete the raw data of the page views after six months. After that, only summarised reports without reference to individual visits remain.

You can switch the statistics off at any time. If your browser sends a Do Not Track or Global Privacy Control signal, your visit is not counted. You can also switch the statistics off for this browser here. An entry is then stored in your browser (see section 5).

Statistics are switched on for this browser.

5. Cookies and storage in your browser

This website does not set any cookies. So that your settings are kept, it stores a few entries in your browser's local storage:

  • permanently, until you delete them: the language you chose, whether you chose the light or dark design and, if you have done so, that you switched off the statistics
  • until you close the tab: your scroll position when switching pages, the project filter you selected and whether the project list is expanded

These entries stay on your device. They are not transmitted to me or to third parties and are not used to recognise you. They are strictly necessary for functions you have asked for yourself, which is why no consent is required (§ 25 (2) no. 2 TDDDG) and why there is no cookie banner. You can delete them at any time in your browser settings.

6. Links to other websites

The links to LinkedIn and to client websites are plain links. Nothing is loaded from there in advance. Only when you click one does the respective provider learn about it. From then on, that provider's privacy policy applies.

7. Recipients

Your data is only received by the service providers named above (hosting and email). I do not sell data, I do not create profiles and there is no automated decision-making.

8. Your rights

With regard to your personal data, you have the right to

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent you have given, with effect for the future (Art. 7 (3) GDPR)

An email to the address above is all it takes.

Right to object

Where I process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example with the one responsible for me: the Hamburg Commissioner for Data Protection and Freedom of Information, datenschutz-hamburg.de.

9. Do you have to provide data?

No. You can read this website without telling me anything about yourself. If you write to me, I need at least a way to reply to you.

Last updated: November 2026. If the technology of this website changes, I will update this policy. This is a translation for your convenience. The German version is the legally binding one. Provider details: legal notice.