Privacy Policy

Protecting your personal data matters to us. The following informs you, pursuant to Art. 13 GDPR, about which data we process when you visit this website and use the waitlist form, for what purpose and on what legal basis. This is a translation for convenience; the German version is legally authoritative.

1. Controller

The controller for data processing on this website is Hielscher Consulting GmbH, Leonie-Ossowski-Promenade 11, 68309 Mannheim, Germany, represented by its Managing Director Tom Hielscher, email: info@tomhielscher.de. Full contact details are in the legal notice.

2. Hosting and server log files

This website is server-side rendered (SSR) and operated on a root server of netcup GmbH in a data centre in Germany. When you access the website, the server automatically collects information transmitted by your browser and stores it in log files: IP address, date and time of access, page requested, volume of data transferred, browser and operating system, and the previously visited page (referrer). This processing is necessary for the secure and stable operation of the website. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted after a short period unless needed to investigate misuse or faults.

3. Waitlist form

When you sign up via the waitlist form we process the email address you provide and, optionally, your name and company. We use this data solely to inform you about the product launch and to contact you when it is your turn. The legal basis is your consent and the performance of pre-contractual measures at your request (Art. 6(1)(a) and (b) GDPR). The data is stored in a MariaDB database on the same server in Germany and deleted once the purpose no longer applies or you withdraw your consent. You may withdraw at any time by email to info@tomhielscher.de.

4. Google reCAPTCHA

To protect the waitlist form against automated misuse (bots/spam), we use Google reCAPTCHA v3, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyses user behaviour based on various characteristics (including IP address, dwell time, mouse movements) and transmits this data to Google. A transfer to the USA may occur; Google is certified under the EU-US Data Privacy Framework and/or relies on EU standard contractual clauses. The legal basis is our legitimate interest in preventing spam and misuse (Art. 6(1)(f) GDPR). See Google's privacy policy (https://policies.google.com/privacy) and https://policies.google.com/terms.

5. Google Tag Manager

We use Google Tag Manager (Google Ireland Limited) to centrally manage tags (small pieces of code) on the website. The Tag Manager itself does not set cookies and does not collect personal data; it only serves and controls other tags. Only the tools embedded via the Tag Manager may process data — the tools actually active and their processing will be disclosed here once enabled. Loading the Tag Manager may transmit your IP address to Google. The legal basis is our legitimate interest in efficient management of website technologies (Art. 6(1)(f) GDPR); where consent-requiring tools are loaded via the Tag Manager, this occurs only on the basis of the relevant consent (Art. 6(1)(a) GDPR).

6. Fonts (self-hosted)

This website uses the fonts Space Grotesk, Manrope and JetBrains Mono. The fonts are served locally from our own server (self-hosted) and are not loaded from an external content delivery network. No connection to Google Fonts is established and no transfer of your IP address to third parties takes place.

7. Cookies

We set a technically necessary cookie to store your chosen language. It is required for the proper operation of the website (Art. 6(1)(f) GDPR) and contains no personal profile data. Further cookies are only set where you have consented to tools loaded via the Tag Manager.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. To exercise your rights, an email to info@tomhielscher.de suffices. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection of Baden-Württemberg.

9. Currency of this policy

This privacy policy is currently valid. As the website evolves or legal requirements change, it may become necessary to amend it.