Controller

HEWO Internetmarketing UG (haftungsbeschränkt), Funkerberg 16d, 15711 Königs Wusterhausen, Germany. Represented by Hendrik Henze. Contact: mail@hendrikhenze.de, phone: +49 (0)30 6 09 84 99 70.

Overview

This website uses no analytics or tracking services, no advertising trackers and no social media plugins. It does not embed any external services: fonts, scripts and images are loaded exclusively from our own server, and text is rendered using the system fonts installed on your device. External links, for example to LinkedIn, are only accessed when you follow them.

Hosting & operation

The website runs on a dedicated cloud server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany (Falkenstein data center). The website runs there in a Docker container; a reverse proxy (Caddy) on the same server accepts the encrypted connections and forwards them to the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When you access the website, the server processes the technically necessary connection data, in particular your IP address, the time, the requested address and the information transmitted by your browser, in order to deliver the page. The reverse proxy keeps no access log for this website. The website application writes only operational and error messages; error messages may contain the requested address, but neither IP addresses nor form contents. These messages are deleted after 7 days at the latest. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

Encryption & certificates

Connections to this website are encrypted via TLS. The certificates are issued by Let's Encrypt. When certificates are issued and renewed, only the website's domain names are transmitted, no visitor data.

DNS

Name resolution (DNS) for the domain is provided by Cloudflare, Inc. Cloudflare acts solely as DNS provider ("DNS only"): traffic when you visit the website does not pass through Cloudflare. Cloudflare only receives DNS queries, which usually do not originate from your device but from the DNS resolver of your internet provider or a resolver you have chosen. The legal basis is our legitimate interest in reliable availability of the website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare (Data Processing Addendum as part of the terms of service). Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the U.S. are based on the European Commission's adequacy decision.

Contacting us

When you send an inquiry via the contact form, your information is transmitted in encrypted form to the website server and forwarded from there by email to Hendrik Henze. This includes your name, email address and message and, if you provide them, company, subject, preferred format, topic, package, preferred date and budget range. Your email address is set as the reply-to address of the email. The form does not offer file uploads. Inquiries are not stored in a database or otherwise on the web server. If you contact us directly by email, your information is likewise processed to handle your inquiry.

Email delivery via Google Workspace

Form inquiries are sent in encrypted form via the Google Workspace SMTP service to a mailbox of Hendrik Henze that is also hosted on Google Workspace. Emails you send to us directly are processed there as well. For customers in the European Economic Area, the provider is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland.

A transfer of personal data to Google LLC in the U.S. cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists; in addition, Google has agreed to the European Commission's standard contractual clauses.

Legal bases & retention

We process inquiries aimed at an engagement or collaboration in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). We answer general inquiries on the basis of our legitimate interest in communicating with prospective clients (Art. 6(1)(f) GDPR). Where statutory retention obligations apply, the legal basis is Art. 6(1)(c) GDPR.

We delete your inquiry as soon as its purpose no longer applies; completed inquiries that do not lead to an engagement are deleted after 6 months at the latest. If your inquiry leads to a contract, we retain the relevant correspondence within the statutory retention periods, in particular under the German Commercial Code (HGB) and the German Fiscal Code (AO).

Providing your information is voluntary

You decide whether to contact us. To assign and answer your inquiry, we need the information marked as required in the form. Please do not send confidential documents with your first inquiry.

Contact form protection

To limit automated requests, the server creates a hash value from your IP address using a random key that exists only in the running process. The IP address itself is not stored. The hash value and a request counter are kept in memory only and apply to a 15-minute time window; after that they are no longer used and are removed at the latest with the next request or a restart. The legal basis is our legitimate interest in protection against abuse (Art. 6(1)(f) GDPR).

Cookies & local storage

After your inquiry has been successfully handed over to the mail server, the website sets the cookie hh-contact-receipt. It confirms to the thank-you page (/danke/, or /en/thank-you/ for English inquiries) that your inquiry was accepted. The cookie is technically necessary, applies only to the path of that thank-you page, is valid for 120 seconds, is not accessible to JavaScript (HttpOnly) and is signed. It contains only an expiry time and a signature, no form contents, and is deleted when the confirmation page is loaded. No consent is required for this (§ 25(2) no. 2 TDDDG).

If you switch between the light and dark color scheme, your choice is stored in your browser's local storage under the key hh-theme. This value stays on your device and is not transmitted to the server. You can delete it at any time via your browser settings. No other cookies are set.

Local demos

The knowledge terminal and the interactive examples run in your browser. Your demo inputs are not sent to a language model provider or to our server. The answers come from an editorially maintained knowledge base.

Your rights

Subject to the statutory requirements, you have the right to access your personal data, and to rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You can withdraw any consent you have given at any time with effect for the future; this does not affect the lawfulness of processing carried out before the withdrawal. No automated decision-making, including profiling, takes place.

To exercise your rights or for questions about data protection, you can reach us at mail@hendrikhenze.de or at the postal address above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular at the place of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg Commissioner for Data Protection and Access to Information), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

Changes to this notice

If our services or the services we use change, we will update this privacy notice accordingly.

Last updated: October 2026