Privacy Policy (Datenschutzerklärung)
This privacy notice explains what personal data is processed when you visit this website, in accordance with Art. 12 ff. GDPR.
Controller
Nick Heller
Heimerstraße 65
41748 Viersen, Germany
E-mail: gdpr@nickheller.de
Hosting
This static website is hosted using Cloudflare Pages and delivered through Cloudflare's network. Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, provides these services. When you access the site, Cloudflare processes technical request and connection data, which may include your IP address, requested URL, request time, browser and operating system information, referrer URL (if transmitted), and security or error information. This processing is necessary to deliver the content, diagnose faults, and protect the website against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in the secure and reliable provision of this website).
Cloudflare Processing and International Transfers
Cloudflare may process technical data in logs and security statistics. Cloudflare acts as a processor for customer logs and content delivered through its network, and as a controller for certain network and service data, as described in its privacy policy. Processing may take place outside the European Economic Area, including in the United States. Cloudflare describes the applicable transfer safeguards, including EU Standard Contractual Clauses where required, in its Data Processing Addendum. Further information is available in Cloudflare's privacy policy and its Data Processing Addendum.
Contact
If you contact me by e-mail, your details (e-mail address, content of the message, and associated metadata) will be processed to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). E-mail communication is processed through the e-mail service providers involved. Providing information by e-mail is voluntary; without the information needed to answer your inquiry, I may be unable to respond.
Analytics and Cookies
The website itself does not integrate visitor analytics, advertising trackers, or non-essential cookies, and does not use local storage for visitor profiling. Cloudflare processes technical traffic and security information as described above. Depending on the security checks applied to a request, Cloudflare may use security cookies; these are distinct from advertising cookies. Details are available in Cloudflare's cookie documentation. If optional technologies requiring consent are introduced, consent will be requested before they are used.
Fonts and Third-Party Content
The site uses system fonts and does not load web fonts, social media widgets, videos, or certification widgets from third parties. Links to GitHub, LinkedIn, X, and Credly are ordinary external links. When you follow a link, the destination provider receives your request and processes data under its own privacy policy.
Your Rights
Subject to the applicable legal conditions, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. To exercise your rights, contact me using the details above.
You have the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). In that case, the processing will stop unless there are compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU Member State of your habitual residence, place of work, or the alleged infringement. The authority in North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Data Retention
E-mail inquiries are retained for as long as needed to answer the inquiry and any related follow-up questions. Longer retention may be necessary to comply with legal obligations or to establish, exercise, or defend legal claims. Cloudflare's retention of technical data depends on the data category, the service involved, and the operational or security purpose. Its privacy policy and Data Processing Addendum linked above describe the retention criteria. Data is deleted when the relevant purpose and any applicable retention requirements no longer apply.
Changes to This Policy
I may update this privacy policy from time to time. The current version is always available on this page.
Last updated: 15 October 2026.