Privacy Policy

1. Controller

The controller for data processing on this website is:

Heinrich Ventures GmbH Evereststraße 6
81825 Munich
Germany
Represented by: Oliver Heinrich
Phone: +49 173 894 21 36
Email: info@heinrich.biz

2. General information on data processing

We take the protection of personal data seriously. Personal data is any information that can be used to identify a natural person directly or indirectly.

We process personal data only to the extent necessary to provide this website, to communicate with prospects and clients and to deliver our services, or where a legal basis exists.

Processing is based in particular on the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG), where applicable.

3. Hosting and server log files

When you access this website, the hosting provider automatically processes information transmitted by your browser. This may include:

• IP address
• date and time of access
• page or file requested
• referrer URL
• browser used
• operating system used
• volume of data transferred

Processing this data is necessary to provide the website technically, to ensure stability and security and to prevent misuse.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing our website securely and reliably.

Server log files are stored only as long as necessary for the purposes stated and are then deleted or anonymised, unless a statutory retention obligation applies.

4. Contacting us

If you contact us by email, by phone or via a contact form, we process the data you provide in order to handle your enquiry. This may include:

• name
• email address
• phone number
• company
• the content of your message
• the time of contact

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to pre-contractual measures or an existing contractual relationship. In all other cases, processing is based on our legitimate interest in handling your enquiry pursuant to Art. 6 (1) (f) GDPR.

The data is deleted as soon as it is no longer required to handle your enquiry, unless statutory retention obligations apply.

5. Contractual and business communication

If you enter into a business relationship with us or request services, we process personal data required for preparing quotes, performing contracts, project communication, invoicing and documentation. This may include in particular:

• name and contact details
• company data
• communication content
• contract and project data
• invoicing and payment information

The legal basis is Art. 6 (1) (b) GDPR. Where statutory retention obligations apply, processing is additionally based on Art. 6 (1) (c) GDPR.

6. Use of cookies and comparable technologies

This website uses technically necessary cookies or comparable technologies to the extent required to operate the website.

Technically necessary cookies serve, for example, to provide the website securely, to store language settings or to enable form functionality.

The legal basis for accessing or storing information on your device is § 25 (2) TDDDG, where such storage or access is strictly necessary. Any subsequent processing of personal data is based on Art. 6 (1) (f) GDPR.

Where non-essential cookies or tracking or marketing technologies are used on this website, this only takes place on the basis of your prior consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You may withdraw consent at any time with effect for the future.

7. Web analytics and tracking

We currently do not use any web analytics or tracking services that evaluate visitor behaviour for marketing or profiling purposes.

Should services such as Google Analytics, Matomo, the LinkedIn Insight Tag or comparable technologies be used in the future, this privacy policy will be extended accordingly and – where required – prior consent will be obtained.

8. External content and services

External content or services may be embedded on this website, for example maps, videos, appointment booking tools, fonts or third-party content.

When such content is accessed, personal data – in particular your IP address and technical information – may be transmitted to the respective provider.

Where external services are used, this takes place either on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, or on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR where no consent is required.

If no external content is embedded, no such transmission takes place.

9. Fonts

Where fonts are embedded locally on this website, no connection to external font provider servers is established.

If external fonts, for example Google Fonts, are loaded directly from third-party servers, your IP address may be transmitted to the respective provider. In that case, this privacy policy will be supplemented accordingly.

10. Recipients of personal data

Personal data may be transmitted to service providers that support us in operating the website, with IT services, hosting, email communication or business processes.

Where these service providers process personal data on our behalf, we conclude corresponding data processing agreements pursuant to Art. 28 GDPR.

Data is only passed on to third parties where this is permitted by law, necessary to perform a contract, required by a legal obligation, or where you have given your consent.

11. Transfers to third countries

Personal data is only transferred to countries outside the European Union or the European Economic Area where an appropriate legal basis exists, in particular an adequacy decision of the European Commission, EU standard contractual clauses or your explicit consent.

12. Retention period

We store personal data only for as long as necessary for the respective purposes.

Where statutory retention obligations apply, in particular under commercial or tax law, the data concerned is stored for the legally prescribed period and deleted thereafter.

13. Your rights

Subject to the statutory requirements, you have the following rights:

• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent given pursuant to Art. 7 (3) GDPR

If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority.

14. Right to object

Where we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing, or the processing serves to establish, exercise or defend legal claims.

15. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

This website uses an encrypted connection via HTTPS where this is technically provided.

16. Validity of this privacy policy

This privacy policy is currently valid.

Last updated: June 2026

17. Language

This is a translation provided for convenience. Only the German version is legally binding.