HEOS Finance

Privacy

Controller

HEOS Finance GmbH, Kornmarkt 6, 60311 Frankfurt am Main, Germany
Email: Email

Phone: Phone

Visiting the website

The website is delivered via the Cloudflare network (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare acts as our processor. When you visit, technically necessary data is processed: IP address, date and time, requested address, amount of data transferred, and browser and operating system. This serves the secure and stable delivery of the website, including protection against attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. We do not analyse this data ourselves or combine it with other data.

Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). The EU standard contractual clauses apply in addition.

We have not set up logging of individual requests at Cloudflare, so we do not store your IP address. Cloudflare processes connection data only for as long as necessary for delivery and protection against attacks. For details, see Cloudflare’s privacy policy at cloudflare.com/privacypolicy.

Contact by email or phone

If you write to us or call us, we process your details to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise our legitimate interest in responding under Art. 6(1)(f) GDPR. Our emails are processed by Microsoft (Microsoft Ireland Operations Limited, Dublin, Ireland) as a processor as part of Microsoft 365. We delete your data as soon as it is no longer required, at the latest when statutory retention periods expire.

Link to LinkedIn

Our LinkedIn profile is only linked, not embedded. LinkedIn only receives data if you follow the link. LinkedIn’s privacy policy then applies.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to Email is sufficient.

Right to object: where we process data on the basis of our legitimate interest, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint: you may lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Last updated

October 2026