Privacy Policy
Last updated: 7 October 2026
1. Overview
This policy explains how Hefmen UG (haftungsbeschränkt) (“we”, “us”) processes personal data when you visit hefmen.com or contact us, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This website does not use cookies, analytics, tracking or advertising tools, and it does not load fonts or other content from third-party servers.
This policy covers hefmen.com only. Our product SceneLingo has its own privacy policy at scenelingo.com/privacy.
2. Controller
Walter-Paetzmann-Str. 36 a
82008 Unterhaching
Germany
Email: contact@hefmen.com
3. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser automatically transmits technical data that is processed in server log files:
- IP address
- date and time of the request
- requested page and HTTP status
- referrer URL
- browser type, version and operating system (user agent)
We use this data only to deliver the website and to keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. The data is not combined with other sources and is kept only as long as needed for these purposes.
We have concluded a data processing agreement with Vercel (Art. 28 GDPR). Data may be processed in the USA. Vercel is certified under the EU-U.S. Data Privacy Framework, and transfers are additionally covered by the EU Standard Contractual Clauses.
4. Contacting us by email
If you email us, we process your email address, name (if given) and the content of your message to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR otherwise; our legitimate interest is responding to enquiries.
Emails to @hefmen.com addresses are received and forwarded by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Email Routing). Cloudflare is certified under the EU-U.S. Data Privacy Framework.
We delete your message once your request has been dealt with, unless statutory retention obligations (for example under commercial or tax law) require us to keep it longer.
5. Links to other websites
This website links to other websites, such as scenelingo.com. Data is only transmitted to them when you follow such a link. Their own privacy policies apply there.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- have processing restricted (Art. 18)
- receive your data in a portable format (Art. 20)
- object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21)
To exercise these rights, email contact@hefmen.com. We respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
7. Changes to this policy
We update this policy when our website or the law changes. The date at the top shows when it was last revised.