Privacy Policy

This page is a translation. The German version is legally authoritative.

1. Joint controllers (Art. 26 GDPR)

This website is operated jointly and on equal terms by the following two companies. Both are joint controllers within the meaning of Art. 26 GDPR for the processing of personal data that takes place on this website.

2. Overview of data processing

We process personal data only insofar as this is necessary to provide a functional website and our content and services. Personal data is generally processed only with the consent of the data subject, or in cases where prior consent cannot be obtained for factual reasons and processing is permitted by law.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit our website, the hosting provider automatically collects the following data in so-called server log files:

• IP address of the accessing device
• Date and time of access
• Name and URL of the retrieved page
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest is the stable and secure provision of our website.

Vercel operates a global edge network, so data may also be processed in the United States. Transfers to the United States are carried out on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information can be found in the Vercel Privacy Policy.

4. Contact form (Formspark)

If you use our contact form, the following data is collected and transmitted to the Formspark service:

• First name
• Last name
• Email address
• Company name
• Message content (optional)

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

The data is processed via Formspark (Formspark, Belgium) and forwarded to us by email. Your information is used solely to handle your inquiry and is deleted after it has been fully processed, unless statutory retention obligations prevent deletion. To protect against spam, we use Cloudflare Turnstile; details are in section 5. Further information can be found in the Formspark Privacy Policy.

5. Spam protection (Cloudflare Turnstile)

To protect the contact form against spam and automated requests, we use Cloudflare Turnstile from Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks whether the request comes from a human. The following technical data may be processed:

• IP address
• Verification token
• Technical browser and device data

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest is protection against abuse and spam.

In connection with Turnstile, data may be processed in the United States. Transfers to the United States are carried out on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information can be found in the Cloudflare Privacy Policy.

6. Web analytics (Vercel Analytics)

We use Vercel Analytics, a privacy-friendly web analytics tool from our hosting provider Vercel Inc. Vercel Analytics collects no personal data, sets no cookies, and uses no fingerprinting. Only anonymized, aggregated usage statistics are recorded, such as page views, time on site, and referrers.

Because Vercel Analytics does not process personal data and does not set cookies, no cookie banner and no separate consent are required.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the statistical analysis of website use to improve our offering). Further information can be found in the Vercel Privacy Policy.

7. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data. You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and by the lock icon in your browser bar.

8. Your rights as a data subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You may request information about the data we process.
• Right to rectification (Art. 16 GDPR) — You may request that inaccurate data be corrected.
• Right to erasure (Art. 17 GDPR) — You may request that your data be deleted, unless statutory retention obligations prevent this.
• Right to restriction of processing (Art. 18 GDPR) — You may request that processing of your data be restricted.
• Right to data portability (Art. 20 GDPR) — You may request that your data be provided to you in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR) — You may object at any time to processing of your data where processing is based on Art. 6(1)(f) GDPR.

To exercise your rights, please contact: info@hekner.com

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.

10. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to implement changes to our services in the privacy policy. The new privacy policy then applies to your next visit.

Last updated: September 2026