Privacy Policy

Information pursuant to Art. 13 GDPR (General Data Protection Regulation)

1. Controller

The controller responsible for data processing on this website is:

Dr. Philip Heimann
Philip Heimann Investment and Advisory UG (haftungsbeschränkt)
Volpinistr. 3, 80638 Munich, Germany
Email: admin@philipheimann.com

2. Data we process when you use the contact form

When you submit the contact form, we process the information you provide — your name, email address, the option you select (mentorship or coaching), and the content of your message — solely to respond to and process your inquiry. The form is processed by Formspree, a third-party form service; see their privacy policy at formspree.io/legal/privacy-policy for how they handle submitted data.

3. Legal basis

Processing is based on Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and, where applicable, Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries directed to us).

4. Server log files

Like most websites, our hosting provider automatically collects and stores information in server log files that your browser transmits, including IP address, date and time of access, and browser type and version. This data is processed to ensure the stable and secure operation of the website (Art. 6(1)(f) GDPR) and is not merged with other data sources. Hosting provider: IONOS.

5. Cookies and tracking

This website does not currently use cookies or analytics/tracking tools. Should this change in the future, this policy will be updated and, where legally required, your consent will be requested beforehand.

6. Storage duration

Data submitted via the contact form is retained only for as long as necessary to process your request, unless a longer retention period is required by statutory obligations.

7. Your rights

Under the GDPR, you have the right to:

access the personal data we hold about you (Art. 15)
request rectification of inaccurate data (Art. 16)
request erasure of your data (Art. 17)
request restriction of processing (Art. 18)
data portability (Art. 20)
object to processing based on legitimate interest (Art. 21)

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for this location is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).