Privacy
1. Controller
Dr Tobias Heinemann
Altvaterstrasse 12
14129 Berlin, Germany
Email: office@tobiasheinemann.berlin
2. Visiting this website
This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. According to Mittwald, it operates a data centre in Espelkamp, Germany. When you visit the site, technically necessary connection data is processed to deliver the pages and ensure secure operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and functional operation of the website.
According to Mittwald’s information, web-server access logs contain the IP address, any password-protected-directory user name, date, time, requested pages, protocol, status code, data volume, referrer, user agent and requested host name. IP addresses are stored in truncated form in these logs; the anonymised access logs are retained for 60 days. Directory user names are anonymised after one day. Error logs for failed page requests may contain the IP address and requested page and are deleted after seven days.
3. Contact by email
When you contact us by email, we process your email address and the information in your message to respond to your enquiry and communicate with you. Depending on the enquiry, the legal basis is Article 6(1)(b) GDPR (pre-contractual or contractual communication) or Article 6(1)(f) GDPR (our legitimate interest in responding to other enquiries). We delete the information when it is no longer needed for this purpose, unless legal retention obligations or legitimate reasons require further storage.
When you use the contact form, your name, email address and message are transmitted to the web server hosted by Mittwald. The information is then emailed to us to handle your enquiry. The form entries are not additionally stored in a website database. The criteria described above apply to handling and deleting the resulting message.
To protect the contact form against automated and abusive submissions, we use a hidden verification field, a submission-time check and server-side request-rate limiting without involving external services. For this purpose, the IP address is processed only in hashed form in a temporary server directory; expired entries are cleared automatically. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting the contact form and our technical systems against spam and misuse.
Technical email logs may be created at Mittwald when messages are sent from the web environment. According to Mittwald, such logs are anonymised after one day and then retained for 60 days.
Our email mailboxes are also hosted by Mittwald. Mittwald processes technical email transport logs to ensure the functioning of its services and to combat spam. According to the provider, logs for email sent through its mail servers are deleted after four weeks. This period concerns transport logs, not the contents of received or sent messages.
We do not use an additional email archiving service. Mittwald does not state a general automatic deletion period for messages stored in mailboxes; the four-week period applies only to email transport logs. Enquiries and messages are deleted according to the purpose-based and, where applicable, legal criteria described above.
4. Fonts, cookies and external links
The fonts used on this website are served from our own web server; displaying them does not connect to an external font provider. This website does not use cookies or comparable storage technologies, and no analytics, marketing or other third-party services are embedded. The contact form also works without cookies or additional third-party services.
This website links to LinkedIn. Merely visiting our site does not establish a connection to LinkedIn through that link. If you click it, you leave our website; the operator of the linked site is responsible for subsequent processing.
5. Recipients and international transfers
Service providers involved in technical hosting and email communication may have access to personal data where necessary to provide their services. We disclose data to other parties only where a legal basis permits this.
The hosting and email provider is Mittwald CM Service GmbH & Co. KG in Germany. No other services are embedded on this website.
6. Your rights
Under the GDPR, you may have the right to access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). To exercise your rights, contact us at the email address above.
You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular the Berlin Commissioner for Data Protection and Freedom of Information.