Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Niels Hegmans
heimseiten.de – Web Design from Cologne
Johannes-Dech-Str. 49
50737 Köln
Phone: 0157 7191 7470
Email: info@heimseiten.de

2. The Essentials in Brief

• This website loads no external services: no Google Fonts, no analytics or advertising trackers, no social media plugins, no embedded videos or maps. All fonts, images and scripts are hosted on my own server. That is why this website does not need a cookie banner.
• I process personal data only if you provide it to me yourself — via a form, by email or over the phone — and exclusively to handle your inquiry.
• Your data is neither sold nor passed on for advertising purposes; it is not transferred to countries outside the EU.

3. Hosting and Server Log Files

When you visit this website, the web server automatically processes technical access data (server logs): the IP address of your device, the date and time of access, the page requested, the amount of data transferred, the previously visited page (referrer), and browser and operating system identifiers. This data is required for the technical operation, stability and security of the website (e.g. to fend off attacks and analyze errors) and is neither merged with other data sources nor evaluated to identify individual visitors. The legal basis is Art. 6(1)(f) GDPR (DSGVO) (legitimate interest in the secure and stable operation of the website). The website is hosted by a hosting provider that processes this data on my behalf (commissioned data processing pursuant to Art. 28 GDPR).

4. Cookies and Local Storage

This website does not set any tracking, analytics or advertising cookies. Only when you use a form does the content management system set technically necessary cookies (a session cookie and CSRF protection) so that the form works securely. Such strictly necessary cookies do not require consent under § 25 Abs. 2 Nr. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); they expire at the latest when you close your browser.

5. Contact Form and Quote Form

If you write to me via the contact form or the quote form (“Request a quote”), I process the details you enter — at minimum your email address, optionally your name, phone number and information about your project — solely to handle your inquiry and for follow-up questions. The legal basis is Art. 6(1)(b) GDPR (implementation of pre-contractual measures at your request).

Your details are stored in the website’s content management system and additionally delivered to me by email. I delete them as soon as they are no longer required for processing and no statutory retention obligations stand in the way (for instance, if the inquiry turns into an order).

Spam protection: The forms use a security check (Altcha) that runs entirely on my own server. Unlike external captcha services (e.g. Google reCAPTCHA), no data is transferred to third parties. The legal basis is Art. 6(1)(f) GDPR (protecting the forms against abusive use).

6. Anonymous Form Statistics

To improve the quote form, I count anonymously how often it is started and up to which step it is completed. No personal data is collected in the process: no IP address, no device identifier, no cookies and no permanent storage in your browser — only a random identifier that exists solely in the memory of the open page, the step reached and the answer chosen for the first question. It is impossible to identify you from this. If your browser sends the “Do Not Track” or “Global Privacy Control” signal, even this anonymous counting does not take place at all.

7. Contact by Email or Phone

If you contact me by email or phone, I process your contact details and the content of your message in order to handle your request (Art. 6(1)(b) GDPR for pre-contractual inquiries, otherwise Art. 6(1)(f) GDPR).

8. Encryption

This website is accessible via TLS encryption throughout (recognizable by the padlock icon and “https” in the address bar). Data you transmit cannot be read by third parties in transit.

9. Your Rights

You have the following rights with regard to your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). To exercise these rights, simply contact me informally using the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), www.ldi.nrw.de.

10. No Automated Decision-Making

Neither profiling nor automated decision-making takes place.

11. Updates to This Privacy Policy

I will update this privacy policy whenever the website or the legal situation changes. Last updated: July 10, 2026.

Questions about web development or web design: heimseiten.de - Web Design from Cologne