Privacy
Controller
Heymeier Consulting GmbH, Heidenkampsweg 58, 20097 Hamburg, Germany. E-mail: kontakt@exead.ai.
No cookies, no tracking
This website sets no cookies and uses no analytics or tracking tools. Only when Cloudflare checks whether an unusual request comes from a human may Cloudflare set a security cookie for that purpose.
Visiting the website
The website is delivered via Cloudflare, Inc. (USA) as our processor. Cloudflare processes technically necessary data, in particular IP address, time, requested page, browser identifier and referrer, to deliver the site, protect it against attacks and limit abuse of the contact form (rate limit per IP address); this is our legitimate interest (Art. 6(1)(f) GDPR). We keep no access logs ourselves. In Cloudflare's overview we can currently see samples of this data for up to 31 days; beyond that, Cloudflare retains data according to its own criteria (Cloudflare privacy policy, section "Data retention").
Contact form and e-mail
When you use the form or write to us, we process your details (name, e-mail address, optionally company and topic, your message) to answer your enquiry; this is our legitimate interest in answering enquiries and initiating business contacts (Art. 6(1)(f) GDPR). The form stores nothing; a Cloudflare Worker forwards your message as an e-mail to our mailbox at Microsoft 365. The e-mail is processed by Microsoft Ireland Operations Limited (Dublin) as our processor.
Providing the details is voluntary. Without name, e-mail address and message we cannot reply. We delete your message once the enquiry is closed; if it leads to an engagement, the statutory retention periods apply (§ 257 HGB, § 147 AO).
Transfers to the US
Cloudflare and Microsoft may transfer data to the US. For Cloudflare the basis is the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795). For Microsoft it is the Commission's standard contractual clauses (Art. 46(2)(c) GDPR), in addition the Data Privacy Framework; the clauses also apply to Cloudflare should the decision fall away. They are part of the data processing agreements; we send you a copy on request.
Your rights
You have the right of access, rectification, erasure and restriction of processing (Art. 15–18 GDPR) and, where the conditions are met, the right to data portability (Art. 20 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Hamburg Commissioner for Data Protection and Freedom of Information.
Access to your data
If you wrote to us, by form or e-mail: write to kontakt@exead.ai from the address you used at that time. We reply to that address and tell you which data we hold about you.
If you only visited the website: we cannot link the access data held by Cloudflare (see "Visiting the website") to an e-mail address alone (Art. 11(2) GDPR). So tell us the IP address(es) and the approximate time period of your visit, and we check whether any data exists for them.
We reply without undue delay and within one month at the latest (Art. 12(3) GDPR). You can exercise your other rights the same way, by an informal e-mail to kontakt@exead.ai.
Right to object
Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal e-mail to kontakt@exead.ai is enough.