Privacy policy
This is a translation for convenience. The German version is legally binding.
This policy applies to the website https://himmelhaus.solutions. For the product SORQA, the privacy policy at sorqa.de applies.
1. Controller
Himmelhaus Solutions
Inh. Patrick Romuald Himmelhaus
Georg-Fendt-Straße 28
86316 Friedberg
Germany
Email: datenschutz@himmelhaus.solutions
2. Visiting the site
When you open the site, the web server processes technically necessary data: IP address, time, requested address, amount of data transferred, browser identifier and the previously visited page. Purpose: delivering the site and detecting attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Retention: for a short time as set by the host; I do not analyse the logs or combine them with other data.
Hosting: ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, data centres in Germany, as my processor (Art. 28 GDPR).
No cookies, no tracking, no third-party content: This site sets no cookies, does not count visitors and loads no fonts, scripts, videos, maps or counters from third parties. The IBM Plex Sans font is served from this server. Links to LinkedIn or sorqa.de are plain links; you only leave this site when you click them.
Browser storage: If you choose the light or dark theme with the button at the top, your browser remembers this choice (entry “hs-thema” in local storage). The short call hint remembers for the current session that it has already been shown (entry “hs-gespraech-hinweis” in session storage). Both entries stay on your device, are not sent to me and contain no personal data. They only serve the display you chose yourself (§ 25(2) no. 2 TDDDG). You can delete them in your browser at any time.
3. Contact form and email
What: If you write to me via the contact form or by email, I process your name, company, email address, message and, if you provide them, your job title and phone number. Purpose: answering your enquiry and arranging a call. Legal basis: Art. 6(1)(b) GDPR if your enquiry aims at a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering business enquiries).
The form data is sent as an email to my mailbox; nothing is stored on the site itself. To prevent abuse, the server counts enquiries per sender; for this the IP address is only used as a daily changing, non-reversible check value in a short-lived file (two days at most).
Retention: as long as needed to answer and for a possible collaboration; after that I delete the message unless statutory retention obligations apply (e.g. 6 years for business letters under § 257 HGB, § 147 AO). Recipients: my host and email provider as processors.
4. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21). An email to datenschutz@himmelhaus.solutions is enough.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for me: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
Obligation to provide data: You do not have to give me any data. Without name, company and email address, however, I cannot answer an enquiry. There is no automated decision-making or profiling.
Last updated: November 2026