Privacy Policy

1. Controller

The controller responsible for data processing on worldbits.net is:

Oliver Heidorn
Flottbeker Drift 18
22607 Hamburg

Phone: +49 40 82244484
Email: work@oliverheidorn.de

A data protection officer is not legally required.

2. Server logs

When you visit worldbits.net, your browser transmits technically necessary data, including the requested page, date and time, referrer, browser type and version, operating system and your IP address. This data is processed to deliver the website.

Technically necessary error logs are kept for secure and stable operation. These may contain the time, error details and information about the affected request. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure and stable operation of the website. The system journal is retained for no more than seven days. Data is not merged with other data sources.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider. No data is transferred to third countries.

4. Reach measurement with Umami

When reach measurement is enabled, I use Umami for statistical evaluation of usage – open-source analytics software that I run on my own server in Germany at tracking.oliverheidorn.de. No cookies are set and no data is written to localStorage. What is recorded: page visited, referrer, approximate origin (country), device type, browser, screen size and triggered interactions, such as a click on the booking link.

The IP address is not stored; visits are distinguished using a server-side hash value that changes daily and allows no inference back to your identity. Data is not shared with third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a needs-appropriate design of the website). Since no information is stored on or retrieved from your device, no consent under § 25 TDDDG is required.

If your browser signals Do Not Track or Global Privacy Control, the analytics script is not loaded at all. The exclusion is applied server-side; Do Not Track is also respected by the script. No analytics script is included on the imprint or privacy-policy pages.

5. Appointment booking

When enabled, appointment booking leads to a Nextcloud instance at cloud.oliverheidorn.de, which I operate myself. Data entered there (name, email address, requested time, optional message) is used exclusively to carry out the appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Data is deleted once the exchange is concluded, unless statutory retention periods require otherwise.

6. Contact by email and phone

If you contact me by email or phone, I store your details to process the request and in case of follow-up questions. The legal basis is Art. 6(1)(b) or (f) GDPR. This data is not passed on without your consent.

7. Fonts, libraries and content

All assets (libraries, fonts, content) are served directly by worldbits.net. No external content delivery networks, third-party social media plugins, maps or embedded videos are loaded.

8. Retention period

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations (in particular under the German Commercial Code and Fiscal Code) stand in the way.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Please contact me at the address given above.

10. Right to complain

You may lodge a complaint with a data protection supervisory authority; the competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg.