Lars Heppert

01 / IMPRINT

Site information

Electronic contact: impressum@heppert.com

Responsible for editorial content: Lars Heppert, address as above.

02 / PRIVACY

Hosting and server log files

The website is hosted on a server of NyxAI GmbH (Reiterkasernstraße 2a, 85049 Ingolstadt, Germany), which acts as our processor under Art. 28 GDPR. The server is located in a data centre of Hetzner Online GmbH in Germany, which NyxAI GmbH has engaged as a sub-processor. Whenever you access the website, your browser necessarily transmits data to this server, which is stored in server log files: IP address, date and time, requested page or file, referrer (the previously visited page), browser identifier (user agent), status code and amount of data transferred. Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website and the detection and prevention of abuse. The server log files are deleted automatically after 14 days at the latest.

Audience measurement from server log files (Matomo, no cookies)

To understand how our website is used and to improve it, we analyse the server log files statistically with the open-source software Matomo.

• No cookies, no access to your device: For this analysis we set no cookies and run no JavaScript. We neither store information on your device nor read any from it. We only evaluate the data that your browser transmits to our server anyway when it requests a page. Consent under Section 25(1) TDDDG (German Telecommunications and Digital Services Data Protection Act) is therefore not required.
• Truncated IP address: We truncate the IP address before the data is passed to Matomo. The last two bytes are removed for IPv4 (e.g. 203.0.x.x), and only the first 32 bits are kept for IPv6. Matomo never receives your full IP address. From the truncated address, Matomo derives only the approximate country (IP Geolocation by DB-IP, https://db-ip.com, "IP to Country Lite" database, licensed under CC BY 4.0); region and city are not determined.
• Data processed:
  • truncated IP address
  • date and time
  • requested page; of the URL parameters we keep only language and campaign parameters such as "utm_campaign"
  • referrer, domain and path only
  • browser identifier and the browser, operating system and device class derived from it
  Requests from search engines, bots and our own technical monitoring are filtered out.
• No profiles, no combination: We group page views into visits, for example several pages within 30 minutes. For this we use a checksum of the truncated IP address and browser characteristics that does not allow individuals to be identified. We do not create user profiles, do not combine the statistics with other data and make no attempt to identify visitors.
• Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to measure the reach of the website and its content, to understand the effectiveness of links and campaigns, and to improve our offering. The IP address is truncated, and we do without cookies and access to your device. In our assessment, your interests therefore do not override ours.
• Retention: We delete the individual statistical records (visits and page views) after 13 months. Aggregated reports derived from them, which no longer relate to individuals, may be kept longer. The underlying server log files are deleted after 14 days at the latest.
• Where the data is processed: Matomo runs on a server of NyxAI GmbH (Reiterkasernstraße 2a, 85049 Ingolstadt, Germany), which acts as our processor under Art. 28 GDPR. The server is located at Hetzner Online GmbH in Germany (sub-processor). The data is not transmitted to the maker of Matomo or to any other third party, and it is not transferred to third countries.
• Right to object: You may object to this processing at any time (Art. 21 GDPR); we honour your objection without requiring reasons. The easiest way is to enable the "Global Privacy Control" (GPC) or "Do Not Track" signal in your browser. We automatically exclude requests that send either signal (Art. 21(5) GDPR). You can also send your objection informally to impressum@heppert.com.

Purpose-limited analytics

Only with your consent, this site uses self-hosted Matomo and its Tag Manager on a server in Germany. It records source, visited sections, interactions, time on site, returning visits, approximate country, browser, operating system and device class. IP addresses are shortened before storage. Matomo uses first-party cookies; no advertising trackers are used.

No analytics data is sent before consent. You can change or withdraw your choice at any time through “analytics settings” in the footer. The contact form processes the details you submit and limited technical data for delivery and abuse prevention. Spam protection through a short computation in your browser (no third parties, no cookies): while you fill in the contact form, your browser solves a small computational puzzle in the background, and our server checks the result. Nothing is stored in your browser. Only if that is not possible do we show a short arithmetic question.

The audience measurement from server log files described above is separate from this web analytics, which is active only with your consent and uses cookies. The audience measurement takes place regardless of your choice in the consent dialog. It uses neither cookies nor JavaScript and is evaluated in a separate Matomo area. You can object to it at any time as described above.

Newsletter (Entscheidungsbrief)

The newsletter you can subscribe to on this website is sent by NyxAI GmbH, Reiterkasernstraße 2 a, 85049 Ingolstadt, Germany, which is responsible for it. The operator of this website is not. When you submit the sign-up form, your browser sends your details directly to NyxAI GmbH (nyxai.com); the operator of this website does not receive them. The following information from NyxAI GmbH applies to this processing:

• Controller: NyxAI GmbH, Reiterkasernstraße 2 a, 85049 Ingolstadt, Germany, email: impressum@nyxai.com, is responsible for the newsletter.
• The newsletter: Entscheidungsbrief by Lars Heppert (German): once a month, one idea, one case study, one chart and a personal note on decisions under uncertainty and AI in mid-sized companies. It contains no investment recommendations. Sender: news@nyxai.com. Subscribing is voluntary. It is not a condition for using this website.
• Sign-up with confirmation (double opt-in): After you submit the form, you receive an email with a confirmation link. We only add you to the list once you open this link and confirm. This makes sure nobody signs up someone else's address. The link is valid for 48 hours. Unconfirmed sign-ups are deleted automatically after 48 hours.
• Data processed: Your email address and the newsletter you chose; your language; the website and form you used. To prove your consent we also log the time of sign-up and of confirmation, the truncated IP address in each case (IPv4 without the last two bytes, IPv6 only the first 32 bits; for IPv6 connections our server currently cannot see the address and then stores none) and the version of the consent text you agreed to. Sending creates technical data: delivery status, delivery errors, complaints and unsubscribes.
• Legal bases: Sending the newsletter: your consent (Art. 6(1)(a) GDPR in conjunction with Section 7(2) no. 2 UWG, the German Act against Unfair Competition). The sign-up log: our obligation to be able to prove consent (Art. 7(1) with Art. 6(1)(c) GDPR), and our legitimate interest in being able to defend against claims (Art. 6(1)(f) GDPR). Abuse protection and the suppression entry (see below): our legitimate interest in secure and lawful sending (Art. 6(1)(f) GDPR).
• Abuse protection: The form contains a field that is invisible to people and detects automated sign-ups. The number of sign-ups per connection and per email address is limited. For this we only use non-reversible hashes of these values. They are held only in memory and are deleted after 24 hours at the latest. Spam protection through a short computation in your browser (no third parties, no cookies): while you fill in the form, your browser solves a small computational puzzle in the background, and our server checks the result when you submit. Nothing is stored in your browser. Without JavaScript, we ask a short arithmetic question instead.
• No tracking: The newsletter contains no tracking pixels. Links are not redirected through tracking addresses. We do not analyse whether or when you open a newsletter or which links you click. Links to our own websites may carry campaign parameters such as "utm_source=newsletter". There they only feed into the aggregated audience measurement from server log files and are not linked to your subscription.
• Newsletter system and hosting: We manage the newsletter with the open-source software listmonk. It runs on our own server at Hetzner Online GmbH in Germany; Hetzner acts as our processor (Art. 28 GDPR). The data is not passed to the maker of listmonk, or to anyone else for advertising.
• Sending: We send the newsletter ourselves through our own mail server at Hetzner Online GmbH in Germany (processor, see above). We do not use an external mail provider. Where the recipient's mail server supports it, the transfer to your email provider is encrypted (TLS). We process delivery failure notices automatically, so that permanently undeliverable addresses are not mailed again.
• Retention: We keep your data for as long as you are subscribed. After you unsubscribe you receive no further newsletters, and we delete your address from the newsletter system within 30 days at the latest. The log of your sign-up and confirmation is kept for three more years after the subscription ends. That is the regular limitation period, during which we must be able to prove consent. It is deleted afterwards. Addresses that are permanently undeliverable, or for which a spam complaint was received, are kept as a suppression entry (address and status only). This prevents further sending. You may object. Backup copies are overwritten after 14 days.
• Withdrawal: You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR): via the unsubscribe link at the end of every email, with one click; via your email program's unsubscribe function; or informally by email to impressum@nyxai.com. This does not affect the lawfulness of processing before the withdrawal. You can assert your other rights (access, rectification, erasure, restriction, portability, objection, complaint to a supervisory authority) against NyxAI GmbH at impressum@nyxai.com; see also its privacy policy at nyxai.com/en/privacy/.

Feedback box

The feedback box on this website is operated by NyxAI GmbH, Reiterkasernstraße 2 a, 85049 Ingolstadt, Germany, email: impressum@nyxai.com. When you send a rating or a text, your browser transmits it directly to NyxAI GmbH (nyxai.com), which is responsible for this processing:

Feedback: If you send a rating (1 to 5 stars) and, optionally, a short text through the feedback box, we store it together with the page, the language and the time on our server at Hetzner Online GmbH in Germany in order to improve our services (Art. 6(1)(f) GDPR). We store neither your IP address nor cookies for this. To prevent abuse, your browser solves a short computation (no third party), and the number of submissions per connection is limited using non-reversible hashes held in memory for at most 24 hours. Once a day we receive a summary of new entries by email. Entries are deleted after 12 months at the latest. Please do not include personal data in the text field.

Privacy enquiries: impressum@heppert.com