Privacy policy
Last updated: 5 October 2026
This privacy policy explains how personal data is processed when you visit the Heynook website or contact us. It covers this website, not data processing on a Heynook device.
1. Controller
Nicolas Krauter
KI Lösungen – Nicolas Krauter
Hellmundstraße 33
65183 Wiesbaden
Germany
Email: info@heynook.de. You can also use this address to exercise your data protection rights.
2. Website and hosting
The website is hosted by Render Services, Inc., San Francisco, USA. Render uses a content delivery network. Providing the website involves processing technical connection and access data, in particular your IP address, the requested page or file, the date and time, status information and browser-supplied details about your browser, operating system and, where provided, the referring page.
The purposes are website delivery, stability, troubleshooting and protection against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of this website. The website cannot be delivered without the necessary connection data.
Render and its infrastructure providers receive this data as part of the hosting service. Under Render's terms, processing is partly performed on behalf of customers; Render also acts as a separate controller for certain operational and security data. Render lists Cloudflare among its infrastructure providers. See Render's privacy policy and its list of subprocessors.
Data may be processed in the USA. Render's Data Processing Addendum provides for transfers under the EU-US Data Privacy Framework and, where it does not apply, EU Standard Contractual Clauses. You can consult the terms and safeguards at that link or request them from us.
Retention of technical operational and security data depends on what is required for service delivery, troubleshooting, abuse prevention and applicable legal obligations. We do not maintain an additional visitor database or conduct our own audience measurement.
3. Email enquiries
When you email us, we process your email address, your name and business contact details where supplied, and the message and attachments to respond to your enquiry. Our email provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes messages and connection data needed for delivery, operation and security. We have a data processing agreement with IONOS. Further information: IONOS privacy policy.
For enquiries concerning a contract with you or pre-contractual steps at your request, the legal basis is Article 6(1)(b) GDPR. Other enquiries, including correspondence with representatives of a business, are processed under Article 6(1)(f) GDPR. Our legitimate interest is responding to business enquiries.
We retain correspondence for as long as needed to handle the enquiry and necessary follow-up questions. We then delete it unless statutory retention requirements or legitimate reasons for establishing, exercising or defending legal claims require further retention. Where business records must be retained by law, further storage is based on that legal obligation (Article 6(1)(c) GDPR).
Contacting us is voluntary. Without a reply address and sufficient information about your enquiry, we may be unable to respond. The email link opens your email application; clicking it alone does not send us a message.
4. Domain
Our domain is managed by IONOS. Where IONOS provides DNS resolution for the domain, it processes the technical DNS queries required to connect the domain name to the hosting service. The purpose is to make the website reachable; the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the reliable provision of our internet address. Render delivers the website's content.
5. Language preference and browser storage
When you select DE or EN, the website saves only the value de or en under the key heynook-language in your browser's local storage. It reads this preference on later visits to retain your selected language. The preference contains no identifier to recognise individual people and is not used for advertising or analytics.
The preference remains until you delete the website's data in your browser or select another language. Storage and access serve the language feature you selected (Section 25(2)(2) TDDDG). To the extent personal data is processed, the legal basis is Article 6(1)(f) GDPR and our interest in displaying the website in your chosen language. You can block browser storage; the website remains usable.
6. Fonts, tracking and other services
DM Sans is served through our hosting service with the other website files. Loading the font does not establish a connection to Google Fonts.
We do not use analytics tools, advertising pixels or marketing cookies on this website. There is currently no newsletter signup, contact form, user account or active checkout. Emailing us does not subscribe you to a newsletter. These notices will be updated before new processing activities are introduced.
7. Your rights
Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing relies on consent, you can withdraw it at any time with future effect. This does not affect the lawfulness of earlier processing.
Right to object: Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. We will stop processing that data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is needed for legal claims. You may object to processing for direct marketing at any time without giving reasons.
You can lodge a complaint with a data protection authority under Article 77 GDPR, particularly in the country of your habitual residence, place of work or the alleged infringement. The authority responsible for our place of business is the Hessian Commissioner for Data Protection and Freedom of Information: Postfach 3163, 65021 Wiesbaden, Germany; datenschutz.hessen.de.
This website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.