Heinrich VenturesAI & IT Delivery Consulting
DE EN

Legal

Privacy Policy

Last updated: October 2026

1. Controller

The controller for data processing on this website is:

Heinrich Ventures GmbH Evereststraße 6
81825 Munich
Germany
Represented by: Oliver Heinrich
Phone: +49 173 894 21 36
Email: info@heinrich.biz

2. General information on data processing

We take the protection of personal data seriously. Personal data is any information that can be used to identify a natural person directly or indirectly.

We process personal data only to the extent necessary to provide this website, to communicate with prospects and clients and to deliver our services, or where a legal basis exists.

Processing is based in particular on the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG), where applicable.

3. Hosting and server log files

This website is hosted by 1blu AG, Riedemannweg 60, 13627 Berlin, Germany. When you access this website, the hosting provider automatically processes information transmitted by your browser. This may include:

  • IP address
  • date and time of access
  • page or file requested
  • referrer URL
  • browser used
  • operating system used
  • volume of data transferred

Processing this data is necessary to provide the website technically, to ensure stability and security and to prevent misuse.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing our website securely and reliably.

Server log files are stored only as long as necessary for the purposes stated and are then deleted or anonymised, unless a statutory retention obligation applies.

4. Contacting us

If you contact us by email or by phone, we process the data you provide in order to handle your enquiry. This may include:

  • name
  • email address
  • phone number
  • company
  • the content of your message
  • the time of contact

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to pre-contractual measures or an existing contractual relationship. In all other cases, processing is based on our legitimate interest in handling your enquiry pursuant to Art. 6 (1) (f) GDPR.

The data is deleted as soon as it is no longer required to handle your enquiry, unless statutory retention obligations apply.

5. Contractual and business communication

If you enter into a business relationship with us or request services, we process personal data required for preparing quotes, performing contracts, project communication, invoicing and documentation. This may include in particular:

  • name and contact details
  • company data
  • communication content
  • contract and project data
  • invoicing and payment information

The legal basis is Art. 6 (1) (b) GDPR. Where statutory retention obligations apply, processing is additionally based on Art. 6 (1) (c) GDPR.

5a. Media Thresher beta programme

For the beta phase of our Mac app Media Thresher (see Media Thresher), we process personal data to give you access, to communicate with you and to evaluate your feedback. This may include:

  • Name and email address
  • The optional details in your request, such as Mac model, macOS version, where your photos are stored and the approximate size of your collection
  • The content of your feedback, including attachments such as screenshots
  • Video and audio during a video call, as well as scheduling and connection data

Purposes and legal bases. Handling your request, sending the download link, informing you about new beta versions and arranging and holding the feedback call serve to carry out your beta participation under our beta terms (Art. 6(1)(b) GDPR). Evaluating your feedback to fix bugs and develop Media Thresher further is based on our legitimate interest in improving our product (Art. 6(1)(f) GDPR).

Screenshots and attachments. Screenshots may show photos, file and folder names or places, including those of other people. Please only send what you want to share and black out anything we should not see. We use attachments solely to analyse errors; we do not publish or pass them on.

Video calls. For the feedback call we use a video conferencing service that we name in the invitation. Its provider processes the data as a processor under Art. 28 GDPR. If the provider is based outside the EU or EEA, the transfer is based on an adequacy decision, such as the EU-US Data Privacy Framework, or on EU standard contractual clauses. We do not record video calls. You may keep your camera switched off at any time.

Retention. We delete your participation data no later than six months after the end of the beta phase, or earlier if you end your participation. We delete feedback and attachments once they have been evaluated, no later than twelve months after receipt; we only keep insights from them without reference to you. Statutory retention obligations remain unaffected.

5b. The Media Thresher app

Media Thresher analyses your photos and videos exclusively on your Mac. Photos, videos and analysis results are not transferred to us. The app contains no usage statistics, no crash reports and no automatic update check; we receive no data from the app.

Only for the Places feature does the app query Apple’s map search, using folder and album names that you select for this purpose and coordinates to determine place names and time zones. These requests go directly from your Mac to Apple; Apple’s privacy policy applies to the processing there. You can leave the Places feature unused.

6. Cookies and comparable technologies

This website does not set any cookies and does not store any other information on your device, for example in your browser's local storage. It contains no forms.

As usual, your browser keeps pages, images and fonts in its cache so that they load faster next time. You can clear this cache in your browser at any time.

Should we use cookies or comparable technologies in the future that are not strictly necessary, we will update this privacy policy and obtain your prior consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You may withdraw consent at any time with effect for the future.

7. Web analytics and tracking

We currently do not use any web analytics or tracking services that evaluate visitor behaviour for marketing or profiling purposes.

Should services such as Google Analytics, Matomo, the LinkedIn Insight Tag or comparable technologies be used in the future, this privacy policy will be extended accordingly and – where required – prior consent will be obtained.

8. External content and services

This website does not embed any third-party content or services. Text, images, videos, fonts, stylesheets and scripts are delivered exclusively from our own web space at the hosting provider named above. No data is therefore transmitted to third parties when you open these pages.

Links to other websites, for example among our references, are plain links. Only when you click such a link does your browser connect to the other website; its own privacy policy applies there.

9. Fonts

The fonts used on this website (Archivo, IBM Plex Sans and IBM Plex Mono) are stored on our own web space and loaded from there. No connection is made to the servers of font providers such as Google Fonts.

10. Recipients of personal data

Personal data may be transmitted to service providers that support us in operating the website, with IT services, hosting, email communication or business processes.

Where these service providers process personal data on our behalf, we conclude corresponding data processing agreements pursuant to Art. 28 GDPR.

Data is only passed on to third parties where this is permitted by law, necessary to perform a contract, required by a legal obligation, or where you have given your consent.

11. Transfers to third countries

Personal data is only transferred to countries outside the European Union or the European Economic Area where an appropriate legal basis exists, in particular an adequacy decision of the European Commission, EU standard contractual clauses or your explicit consent.

12. Retention period

We store personal data only for as long as necessary for the respective purposes.

Where statutory retention obligations apply, in particular under commercial or tax law, the data concerned is stored for the legally prescribed period and deleted thereafter.

13. Your rights

Subject to the statutory requirements, you have the following rights:

  • right of access pursuant to Art. 15 GDPR
  • right to rectification pursuant to Art. 16 GDPR
  • right to erasure pursuant to Art. 17 GDPR
  • right to restriction of processing pursuant to Art. 18 GDPR
  • right to data portability pursuant to Art. 20 GDPR
  • right to object pursuant to Art. 21 GDPR
  • right to withdraw consent given pursuant to Art. 7 (3) GDPR

If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority.

14. Right to object

Where we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing, or the processing serves to establish, exercise or defend legal claims.

15. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

This website is only available via an encrypted connection (HTTPS). Requests over an unencrypted connection are redirected to HTTPS.

16. Validity of this privacy policy

This privacy policy is currently valid.

Last updated: October 2026

17. Language

This is a translation provided for convenience. Only the German version is legally binding.