Privacy Policy

The protection of your personal data is important to us. Below we inform you about which data is processed when visiting this website, for what purpose, and what rights you have under the General Data Protection Regulation (GDPR).

Personal data is all data with which you can be personally identified (e.g., name, e-mail address, IP address). All processing is carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

Responsible for data processing on this website is:

HWM Agentur – Heynhold Web & Media Sven Heynhold Humboldtstraße 24 42283 Wuppertal Phone: +49 (0) 163 5745562 E-Mail: info@hwm-agentur.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Where we obtain your consent for processing operations, Art. 6 Para. 1 lit. a GDPR serves as the legal basis.

Where processing is necessary for the performance of a contract or to carry out pre-contractual measures, Art. 6 Para. 1 lit. b GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis.

Where personal data is transferred to third countries (in particular the USA), this is done on the basis of appropriate safeguards such as standard contractual clauses pursuant to Art. 46 GDPR or an adequacy decision (EU-US Data Privacy Framework).

When visiting this website, information is automatically transmitted by your browser and stored in so-called server log files:

• Browser type and version • Operating system used • Referrer URL • Hostname of the accessing computer • Time of the server request • IP address (shortened or anonymized)

This data is not merged with other data sources and is used exclusively for the technically error-free operation and security of the website. The legal basis is Art. 6 Para. 1 lit. f GDPR.

For security reasons, this website uses SSL or TLS encryption, recognizable by the address bar of the browser (https://). This prevents transmitted data from being read by third parties.

This website uses cookies. Cookies are small text files that are stored on your device and cause no harm.

Technically necessary cookies are required to ensure the basic operation of the website. The legal basis is Art. 6 Para. 1 lit. f GDPR in conjunction with Sec. 25 Para. 2 TTDSG.

All non-essential cookies and analytics technologies are only set after your explicit consent via our cookie banner (Art. 6 Para. 1 lit. a GDPR, Sec. 25 Para. 1 TTDSG).

You can revoke any consent you have given at any time with effect for the future via the cookie settings.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

Personal data collected on this website is stored on the servers of the host. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the host is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR exists with the provider.

Vercel Privacy Policy: https://vercel.com/legal/privacy-policy

We use Vercel Web Analytics, a web analytics service provided by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

Vercel Analytics collects anonymized visitor data to analyze website usage and improve performance. No cookies are set and no personal data such as IP addresses are permanently stored or used to identify visitors.

Data processing is based exclusively on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time with effect for the future via the cookie settings.

If you contact us via the contact form or by e-mail, your details (in particular name, e-mail address, subject, and message) will be processed and stored for the purpose of handling your request.

The legal basis is Art. 6 Para. 1 lit. b GDPR, provided your request relates to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in responding to your request (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR).

Your data will not be passed on to third parties. Your data will remain with us until you ask us to delete it, withdraw your consent, or the purpose of storage no longer applies. Mandatory statutory retention periods remain unaffected.

If you subscribe to our newsletter, we process your email address, the time of registration, the time of confirmation, your consent statement, and technical proof data such as IP address and user agent. Subscription uses a double opt-in process: after signing up, you receive an email with a confirmation link. Newsletter delivery is activated only after clicking this link.

The legal basis for newsletter delivery is your consent pursuant to Art. 6 Para. 1 lit. a GDPR. Logging the registration and confirmation process is based on our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, so we can prove consent and prevent abuse.

Confirmation, management and newsletter emails are sent via our SMTP service using Nodemailer. Your data is shared only where technically required for email delivery. Your data is stored for as long as the newsletter subscription exists. After unsubscribing, the unsubscribe status and timestamp are stored to prove withdrawal and prevent further mailings.

You can withdraw your consent at any time with effect for the future by using the unsubscribe link in every newsletter email or by contacting us at info@hwm-agentur.de.

To protect against abusive entries and spam, we use the Google reCAPTCHA (v3) service on our contact form, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether an entry is made by a human or by an automated program. For this purpose, various information (including IP address, time spent, and usage behavior) is transmitted to Google and analyzed. This may involve a transfer of data to the USA.

The legal basis is our legitimate interest in defending against spam and abuse (Art. 6 Para. 1 lit. f GDPR) or your consent (Art. 6 Para. 1 lit. a GDPR).

For more information, see Google's privacy policy at https://policies.google.com/privacy and https://policies.google.com/terms.

We offer you the option to contact us via WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you use the WhatsApp link on our website, you leave our website and are redirected to WhatsApp. In this context, WhatsApp may process your phone number, profile information, communication content, communication timestamps, device information, and technical connection data.

Communication via WhatsApp takes place only if you actively choose this contact channel. The legal basis is Art. 6 Para. 1 lit. b GDPR where your inquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in simple and user-friendly communication. Where consent is required, processing is based on Art. 6 Para. 1 lit. a GDPR.

WhatsApp may also transfer data to affiliated companies and to third countries, in particular the USA. Further information is available in WhatsApp's privacy policy at https://www.whatsapp.com/legal/privacy-policy-eea.

For online appointment booking, we link to Calendly, a service provided by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. If you use the Calendly link, you leave our website and are redirected to Calendly. Calendly may process, in particular, your name, email address, selected appointment, messages you enter, time zone, IP address, and technical usage and connection data.

Calendly is used to plan and conduct consultations and appointments. The legal basis is Art. 6 Para. 1 lit. b GDPR where the appointment booking serves pre-contractual measures or contract performance. Otherwise, processing is based on our legitimate interest in efficient appointment scheduling pursuant to Art. 6 Para. 1 lit. f GDPR. Where consent is required, processing is based on Art. 6 Para. 1 lit. a GDPR.

Using Calendly may involve a transfer of personal data to the USA. Further information is available in Calendly's privacy policy at https://calendly.com/privacy.

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies.

If you assert a justified request for deletion or withdraw your consent, your data will be deleted, unless we have other legally permissible reasons for storing it (e.g., tax or commercial retention periods). In the latter case, deletion will take place once these reasons no longer apply.

Server log files are generally deleted or anonymized after no later than 30 days.

Within the scope of the applicable legal provisions, you have the following rights at any time:

• Right to information about the data stored about you (Art. 15 GDPR) • Right to rectification of incorrect data (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object to processing (Art. 21 GDPR) • Right to withdraw a given consent with effect for the future (Art. 7 Para. 3 GDPR)

To exercise your rights, an informal message to info@hwm-agentur.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf (https://www.ldi.nrw.de).