Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Heureka is a development project of this company and not a separate company. No data protection officer has been appointed, as there is no legal obligation to do so. The German version of this privacy policy is legally binding.

2. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

3. Server logs when visiting the website

When you visit the website, the web server automatically processes technical data transmitted by your browser, in particular: IP address, date and time of access, page or file requested, amount of data transferred, referrer URL, and browser type and operating system.

This data is technically necessary to deliver the website and to ensure its security and stability (e.g. to fend off attacks). The legal basis is Art. 6 (1) (f) GDPR. This data is not combined with other data sources. The logs are deleted automatically after a short period unless they are exceptionally needed to investigate a security incident.

4. Cookies, tracking and external content

The public Heureka pages do not set cookies and do not use any analytics, tracking or advertising services. No fonts, scripts, videos or maps are loaded from third parties.

This website contains links to other websites, such as brandschutz-im-fokus.de. Data is only transferred to the respective provider once you click such a link; that provider is responsible for its own data processing.

5. Contact by email

If you contact us by email – including via buttons such as “Book a conversation” or “Become a partner” that open your email program – we process your details (e.g. name, email address, content of your message) in order to answer your request.

The legal basis is Art. 6 (1) (b) GDPR where your request aims at a contract or collaboration, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data is deleted once it is no longer needed, unless statutory retention obligations apply.

6. “Heureka OS” login area

The Heureka OS application (accessible via “Experience Heureka”) is a separate area that requires login. Separate privacy information applies there and is provided before use. This policy covers only the public information pages.

7. Your rights

You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). An informal message to the address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

8. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise it by the padlock symbol and “https://” in the address bar.