Privacy

Privacy policy

Last updated: 21 August 2026

Controller

Max Heichling · Agentic Enterprise Architecture

Glaspalast 1 · 86152 Augsburg · Germany

Email: max [at] heichling [dot] xyz

Hosting and delivery

This website is delivered through Cloudflare. Cloudflare processes technically necessary connection data, including the IP address, requested URL, time, browser, and device information. This processing provides the website securely, reliably, and quickly and is based on Article 6(1)(f) GDPR.

Cloudflare may also process data in the United States. Cloudflare identifies the EU-US Data Privacy Framework and Standard Contractual Clauses as safeguards for international transfers. Log data is retained only as long as required for operations, security, and legal obligations.

Contact form

When you submit the contact form, I process your name, work email address, organization, the decision you describe, and the intended timing to answer the request and prepare a potential engagement. The legal basis is Article 6(1)(b) GDPR for pre-contractual communication and otherwise Article 6(1)(f) GDPR based on the legitimate interest in responding to enquiries.

The form data is sent to Formspark, operated by Trampoline Software SRL in Belgium, and according to the provider is stored in Ireland. Formspark uses additional processors for infrastructure, email delivery, spam detection, and error reporting. I delete contact enquiries no later than six months after processing is complete unless a contractual relationship or statutory retention obligation requires longer storage.

Cloudflare Turnstile

Cloudflare Turnstile protects the contact form against automated submissions and is loaded only when the contact section approaches the visible area. Turnstile processes signals including the IP address, TLS fingerprint, user agent, sitekey, and origin to distinguish people from bots. The legal basis is Article 6(1)(f) GDPR based on the legitimate interest in the security and availability of the form.

Cloudflare Web Analytics

This website uses Cloudflare Web Analytics to measure page views, load times, and Core Web Vitals. The measurement uses neither cookies nor local storage and does not create profiles across websites. It collects technical usage and performance data such as the requested path, browser, operating system, country, and loading metrics.

This processing serves the legitimate interest in understanding and improving the reach and technical quality of the website under Article 6(1)(f) GDPR. The provider is Cloudflare, Inc.; processing may also take place in the United States. Cloudflare relies on safeguards including the EU-US Data Privacy Framework and standard contractual clauses for international transfers.

Audience measurement with GoatCounter

This website uses GoatCounter to measure page views and selected clicks on contact and onward links. GoatCounter does not set cookies or create profiles across websites. Data sent includes the requested page, referrer, browser and device information, and the IP address; GoatCounter uses the IP address to associate a visit and states that it does not retain it permanently.

This processing serves the legitimate interest in understanding the reach and use of the content and improving the website under Article 6(1)(f) GDPR. GoatCounter is operated by Martin Tournoij in Ireland. According to the provider, the data is stored on servers in Finland and Germany.

External websites are contacted only when you open the relevant link. After loading, the DeepSWE explorer requests current benchmark data through an API on this website. Cloudflare processes this request; your browser data is not forwarded to the external benchmark source.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability, and objection. You may withdraw consent at any time with future effect. You also have the right to lodge a complaint with a data protection authority. The competent authority in Bavaria is generally the Bavarian State Office for Data Protection Supervision.