Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Marcel Heinz Ventures UG (haftungsbeschränkt)
Represented by the Managing Director: Marcel Heinz
Magdalenenstraße 6
04129 Leipzig
Deutschland
Phone: +49 172 5704217
Email: marcel.heinz@gmail.com

We have not appointed a data protection officer, as we are not legally required to do so.

2. Overview

This website is a static personal and company website. It has no user accounts, no contact forms, no newsletter and no comment function. It does not set cookies and does not store information on your device. Personal data is only processed to the extent described below.

3. Hosting and Server Log Files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"). When you visit the website, your browser automatically transmits the following data to Vercel's servers:

  • IP address
  • Date and time of the request
  • Requested page or file
  • Referrer URL (the page you came from)
  • Browser type and version, operating system

This data is processed to deliver the website to you and to ensure its stability and security, for example to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of the website. Log data is stored only for as long as necessary for these purposes and is then deleted automatically by Vercel.

Vercel processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may be transferred to the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). In addition, the transfer is covered by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information is available in Vercel's privacy policy at vercel.com/legal/privacy-policy.

4. Web Analytics

We use Vercel Web Analytics, a privacy-friendly analytics service provided by Vercel, to understand how this website is used and to improve it. Vercel Web Analytics does not use cookies and does not store any information on your device. It records page views, the referring website, the approximate country derived from your IP address, browser, operating system and device type.

Your IP address is not stored. To count visits, a hash is generated from the request data. This hash is discarded after 24 hours, so visitors cannot be recognised across days or across websites. We only see aggregated statistics and cannot identify individual visitors.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the statistical analysis of website usage to improve our content. The information on hosting, data processing agreement and transfer to the USA in section 3 applies accordingly. You can object to this processing at any time (see section 7).

5. Contact by Email or Phone

If you contact us by email or phone, we process the data you provide (for example your name, email address, phone number and the content of your message) in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or to pre-contractual measures, and Art. 6(1)(f) GDPR in all other cases, our legitimate interest being the effective handling of enquiries.

Emails are processed by our email provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations, in particular under commercial and tax law, require us to keep it for longer.

6. External Links

This website contains links to external websites, for example GitHub and LinkedIn. No data is transferred to these providers when you load our pages. Only when you click a link and visit the external website does the respective provider process your data, under its own responsibility and privacy policy.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Access to your data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, simply contact us using the details in section 1.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Sächsische Datenschutz- und Transparenzbeauftragte, Devrientstraße 5, 01067 Dresden, Deutschland.

8. Further Information

You are not legally or contractually obliged to provide personal data. Without the technical connection data described in section 3, however, the website cannot be delivered to you. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. This website uses TLS encryption to protect the transmission of data.

We may update this privacy policy when the website or the legal requirements change. The current version is always available on this page.

Last updated: October 2026