Privacy policy
Last updated: November 2026
Controller
Pascal Heynol
Eicher Ringweg 49a
87435 Kempten (Allgäu)
Germany
Email: pascal@heynol.com
In short
This website sets no cookies and embeds no third-party content. Fonts, images and videos come from its own server. I only process personal data where running the site requires it or when you write to me.
Hosting and server logs
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes technically necessary data such as IP address, date and time, the requested address, browser and operating system to deliver the page and protect it from attacks. The legal basis is my legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). A data processing agreement with Vercel is in place. Transfers to the US rely on appropriate safeguards under Art. 44 et seq. GDPR (EU-US Data Privacy Framework or EU Standard Contractual Clauses). More: vercel.com/legal/privacy-policy.
Visitor statistics with Vercel Web Analytics
To see which pages are visited and how often, I use Vercel Web Analytics. It sets no cookies and stores nothing on your device. Visits are counted with a hash derived from the request, which is discarded after 24 hours, so you cannot be recognized across days or websites. It records aggregated data such as page, referrer, country, browser and device type. The legal basis is my legitimate interest in improving the website (Art. 6(1)(f) GDPR).
Contact form
If you use the contact form, your name, email address and message are sent to me through Formspree (Formspree Inc., USA) and stored there until I delete them. I only use them to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry aims at a contract, otherwise my legitimate interest in answering it (Art. 6(1)(f) GDPR). Transfers to the US rely on appropriate safeguards under Art. 44 et seq. GDPR. More: formspree.io/legal/privacy-policy.
Contact by email
If you email me, I process your address and message to reply. The legal basis is the same as for the contact form: Art. 6(1)(b) or (f) GDPR.
Booking a call
The "Book a call" buttons lead to TidyCal, an external booking service. TidyCal only processes the details you enter once you book a slot there, under its own privacy policy: tidycal.com/privacy.
Settings stored in your browser
Your language, color scheme and a device performance tier (used to reduce animations on slower devices) are kept in your browser's local storage. They never leave your device and only serve to show the site the way you set it up (Section 25(2) no. 2 TDDDG). You can delete them at any time in your browser settings.
Links to other websites
Links to LinkedIn, YouTube, Medium, GitHub, app stores and project websites are plain links. No data is transferred until you click one; from then on, that provider's privacy policy applies.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Just write to pascal@heynol.com. You can also lodge a complaint with a data protection authority; the one responsible for me is the Bavarian Data Protection Authority (BayLDA) in Ansbach.