Thomas L. A. Heil Home

Privacy Policy

(Klicke hier für die (originale) deutsche Version der Datenschutzerklärung)

This website is intended for personal and academic information. Protecting your data is an important concern for me. Below, I inform you, pursuant to the Datenschutz-Grundverordnung (DSGVO), about the type, scope, and purpose of the processing of personal data on this site. The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on data protection can be found in the privacy policy below this text.

1. Data Protection at a Glance

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact information in the “Hinweis zur Verantwortlichen Stelle” section of this privacy policy.

How do we collect your data?

Your data is collected in part when you provide it to us, for example, by entering it into a contact form. Other data is automatically collected by our IT systems when you visit the website or upon your consent. This mainly includes technical data (e.g., internet browser, operating system, or time of the page access). This data is collected automatically as soon as you enter the website.

What do we use your data for?

Part of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior. If contracts are concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other business inquiries.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you may revoke this consent at any time with future effect. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the responsible supervisory authority. You can contact us at any time for these purposes or with further questions about data protection.

2. Hosting

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access logs, and other data generated via the website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 Abs. 1 lit. b DSGVO) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 Abs. 1 lit. f DSGVO). If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TDDDG. The consent can be revoked at any time.

Our host(s) will process your data only as necessary to fulfill their service obligations and in accordance with our instructions.

We use the following host:

Automattic Inc.
60 29th Street #343
San Francisco, CA 94110, USA

3. General Information and Mandatory Disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., communication by email) can have security vulnerabilities. Complete protection of the data from access by third parties is not possible.

Hinweis zur verantwortlichen Stelle

Responsible party for data processing on this website:


Thomas L.A. Heil
Karlstraße 22
88045 Friedrichshafen
Email: Thomas.l.a.heil@gmail.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Data retention period

Unless a more specific retention period is mentioned in this privacy policy, your personal data remains with us until the purpose for the data processing ceases to apply. If you assert a legitimate deletion request or revoke your consent, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion takes place after these reasons cease to apply.

Legal basis for data processing

If you have consented to data processing, we process your personal data based on Art. 6 Abs. 1 lit. a DSGVO or Art. 9 Abs. 2 lit. a DSGVO (if special categories of data are processed under Art. 9 Abs. 1 DSGVO). In case of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49 Abs. 1 lit. a DSGVO. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), processing is also based on § 25 Abs. 1 TDDDG. Consent is revocable at any time.

If your data is required to fulfill a contract or to carry out pre-contractual measures, we process it based on Art. 6 Abs. 1 lit. b DSGVO. If the processing is necessary to fulfill a legal obligation, we process your data based on Art. 6 Abs. 1 lit. c DSGVO. Data may also be processed based on our legitimate interest under Art. 6 Abs. 1 lit. f DSGVO.

Recipients of personal data

In the course of our business activities, we work with various external parties. This may include the transfer of personal data. We only share personal data if:

  • it is necessary for contract fulfillment,
  • we are legally obligated to do so,
  • we have a legitimate interest under Art. 6 Abs. 1 lit. f DSGVO, or
  • another legal basis permits it.

Where we use processors, we only share personal data under a valid data processing agreement. In cases of joint processing, a joint processing agreement is established.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke your consent at any time. The legality of the data processing carried out up until the revocation remains unaffected.

Right to object (Art. 21 DSGVO)

IF DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (Art. 21 Abs. 1 DSGVO).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME. THIS ALSO APPLIES TO PROFILING LINKED TO DIRECT MARKETING.
If you object, your personal data will no longer be used for direct advertising purposes (Art. 21 Abs. 2 DSGVO).

Right to lodge a complaint with the supervisory authority

In the event of violations of the DSGVO, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract in a commonly used, machine-readable format. If you request direct transfer to another controller, this will only occur where technically feasible.

Access, rectification, and deletion

You have the right to receive free information at any time about your stored personal data, its origin and recipients, and the purpose of processing. You also have the right to request correction or deletion of this data. You can contact us at any time for this and other questions regarding personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data in the following cases:

  • If you dispute the accuracy of the personal data stored by us, we usually need time to verify this. You have the right to request restriction while we verify.
  • If the processing of your data is unlawful, you can request restriction instead of deletion.
  • If we no longer need your data but you need it to establish, exercise, or defend legal claims.
  • If you have objected pursuant to Art. 21 Abs. 1 DSGVO, pending the balance of interests.

Where processing has been restricted, such data may only be processed, with the exception of storage, with your consent or for legal claims or the protection of rights of another person or for reasons of important public interest of the EU or a member state.

SSL or TLS encryption

For security and to protect confidential content such as orders or inquiries, this site uses SSL or TLS encryption. You can recognize this when the address bar changes from “http://” to “https://” and the lock icon appears.

When SSL/TLS encryption is active, data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Contact form

If you send inquiries via the contact form, your input and contact details are stored to process the request and for follow-up questions. This data is not shared without your consent.

Processing is based on:

  • Art. 6 Abs. 1 lit. b DSGVO if related to contract performance or pre-contractual measures,
  • Art. 6 Abs. 1 lit. f DSGVO (legitimate interest), or
  • Art. 6 Abs. 1 lit. a DSGVO (if consent was given).

Data remains with us until you request deletion, revoke your consent, or the purpose ceases. Legal obligations (e.g., retention periods) remain unaffected.

Inquiries by email, phone, or fax

If you contact us this way, your message and personal data (e.g., name, inquiry) will be stored and processed. We do not share this data without your consent.

The legal basis is the same as for the contact form.

Data is retained until deletion is requested, consent is revoked, or the purpose no longer applies. Statutory retention obligations remain unaffected.

5. Download and Media Content

You can view my CV as a PDF. No personal data is collected unless you use browser functions (e.g., save, share) that may trigger such collection.

Images on this website are created solely by me. No third-party services (e.g., image CDNs or tracking tools) are used.