Privacy information

As of 26 October 2026. This is a translation for convenience; the German version is legally binding.

1. Controller

Mirko Heidel · HIGHDEL
Borrenstraße 28
41352 Korschenbroich · Germany
Email: contact@high-del.com

2. When you visit this website

This website is hosted by Vercel Inc. When a page is requested, technical connection data is processed, in particular IP address, time, requested address and information sent by the browser. This serves to deliver the website, keep it stable and protect it against misuse. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is a secure, functioning website.

3. Hosting provider and international processing

The hosting provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the data listed under section 2 as a processor on the basis of its Data Processing Addendum. For transfers to the USA, this agreement provides for EU Standard Contractual Clauses. Further information: Vercel privacy policy and Vercel Data Processing Addendum.

Vercel keeps runtime logs only briefly depending on the plan (according to Vercel, between one hour and one day). Beyond that, Vercel processes data for security and abuse prevention in line with its privacy policy. I do not analyse access logs myself.

4. Cookies and local storage

The site's own code does not use analytics or advertising cookies and does not store entries in the browser on the information pages (for the app, see section 7). No analytics tools, tracking pixels or external font services are loaded. Should the hosting set technically necessary cookies, this is based on § 25 (2) TDDDG; non-essential storage access would require prior consent.

5. Contact by email

If you write to me, I process your email address, the content of your message and any details you provide voluntarily in order to answer your request. For pre-contractual requests by the data subject, Art. 6 (1) (b) GDPR applies; for general requests or contact persons of a company, Art. 6 (1) (f) GDPR. The interest lies in handling your request.

The mailbox is operated by IONOS SE; the message is processed by the email service. Clicking an email link opens your email program; the website does not send anything by itself. Please do not send sensitive or confidential business data unencrypted. Further information: IONOS privacy information.

6. Contact form via Formspree

When you submit the form, your name, company, email address and your message are transmitted via an encrypted connection to Formspree, Inc. The topic of the page from which you opened the form and the language version are sent as well. Formspree processes the request and forwards it to the recipient set in the form account. Technical data such as IP address and browser information may also be processed for delivery and abuse detection.

Processing serves to answer your request; the legal bases described in section 5 apply accordingly. A connection to Formspree is only established on submission; no Formspree script is loaded when the page is opened.

According to its own information, Formspree operates its service on Amazon Web Services in the USA and uses Standard Contractual Clauses for its processing as a processor. Information on processing and retention can be found in the Formspree privacy policy. A copy of the relevant transfer safeguards can be requested at contact@high-del.com.

Please do not submit sensitive personal data or confidential business data. Alternatively, you can contact me directly by email.

7. The H·DELTA app

At high-del.com/app I provide the H·DELTA app (Business and Personal) as a beta. The app works without signing in. Your entries (for example goals, tasks, KPIs, improvements, check-ins and settings) are then stored only in your browser's storage on your device (localStorage and IndexedDB). I do not receive this data. You can export it at any time in the settings or remove it by deleting the site data in your browser. This storage access is strictly necessary for the function you requested (§ 25 (2) no. 2 TDDDG).

Optional account and sync. If you sign in, your email address, a technical user ID and your app entries are stored on a server so they can sync across your devices. To sign in you receive a code by email; no password is stored. If you create or join a team, all members of that team see the entries in the Business area and your email address in the member list. Your personal area and your Daily Kaizen check-ins stay private. For team participation, only whether a random identifier that is not linked to your account chose “Yes” is stored per day; only totals are shown, and only from five team members. These daily values are deleted after about two months. The legal basis is Art. 6 (1) (b) GDPR (providing the function you use).

Service provider. Accounts, sign-in and storage are run on Supabase (Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513), acting as processor. The database is located in a data centre in Frankfurt am Main, Germany (region eu-central-1). Any access or transfers outside the EU, for example by Supabase support or sub-processors, are covered by the EU Standard Contractual Clauses (Decision (EU) 2021/914) in Supabase's Data Processing Addendum. More information: Supabase privacy policy.

Deletion. After signing out, your data stays on the device. If you want your account and stored data deleted, write to contact@high-del.com. Please do not store particularly sensitive personal data of third parties in the app.

Reminders. Browser notifications are shown only with your permission and only on your device. A calendar export (.ics) is created locally; no data is sent to me in the process.

8. External links and scheduling

LinkedIn is included as a normal link. No LinkedIn plugin is loaded when the page loads; only by clicking do you visit LinkedIn, where the LinkedIn privacy policy applies. Contact via LinkedIn is used to handle your request.

No external booking calendar is currently integrated; appointments are arranged by email. Before a booking service is activated, this information will be updated.

9. Retention period

For requests, the retention period depends on how long the correspondence is needed for handling, a subsequent collaboration or to protect legal claims. Statutory retention obligations remain unaffected.

10. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction and data portability. You can withdraw consent with effect for the future. You can object to processing based on legitimate interests on grounds relating to your particular situation. To do so, please contact the email address above.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement. The competent authority in North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (www.ldi.nrw.de).

12. Other functions and updates

This website does not include newsletters, payment services, analytics tools or tracking pixels. User accounts exist only optionally in the H·DELTA app (section 7). There is no automated decision-making with legal or similarly significant effects. If functions change, this information will be updated.