Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Thorsten Heinisch
TH Interim – Interim Management & Management Consulting
Liebenauer Straße 35
86343 Königsbrunn
Germany
Phone: +49 152 274 287 47
Email: t.heinisch@th-interim.de

2. Your rights

You have the right

• to confirmation as to whether data concerning you is processed, to access this data and to receive copies (Art. 15 GDPR);
• to rectification or completion of inaccurate or incomplete data (Art. 16 GDPR);
• to erasure of your data without undue delay (Art. 17 GDPR) or, where further processing is required under Art. 17 (3) GDPR, to restriction of processing (Art. 18 GDPR);
• to receive the data you provided in a common format and to have it transmitted to another controller (Art. 20 GDPR);
• to withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR);
• to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time under Art. 21 GDPR. You may object to processing for direct marketing purposes at any time without giving reasons.

If data is rectified, erased or restricted, we inform all recipients to whom we have disclosed data, unless this is impossible or disproportionate. You have the right to be informed about these recipients.

The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

To exercise your rights, an email to t.heinisch@th-interim.de is sufficient.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

For technical reasons, in particular secure and stable operation, your browser transmits data to the server when you visit the website, which is stored in server log files: browser type and version, operating system, the previously visited page (referrer URL), the pages and files accessed, date and time of access and the IP address. This data is not combined with other data.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the stability, functionality and security of the website. The data is deleted after seven days at the latest, unless further retention is required for evidence purposes; in that case until the incident has been finally resolved.

The website is accessible via an encrypted connection (TLS/HTTPS), so data you send to us cannot be read by third parties.

All fonts are hosted on our own server. No connection is made to Google Fonts or other font providers when you visit the website.

4. Cookies and local storage in your browser

We do not use cookies. Two functions store information exclusively locally in your browser; it is not transmitted to us:

• Progress of the Resilience Check (local storage): your answers, so that you can pause the check and continue later, and so that your analysis can be displayed after you click the confirmation link. Your progress is deleted automatically if you have not opened the check for 30 days.
• Book notice (session storage): the information that the notice has already been shown. It is deleted when you close the browser window.

This storage is strictly necessary for the functions you have explicitly requested (Section 25 (2) No. 2 TDDDG). You can delete the stored data at any time in your browser settings, and in the check via “Start over”.

5. Resilience Check

a) Answering the questions

Your answers to the 25 questions are evaluated exclusively in your browser. As long as you do not request an analysis, no data is transmitted.

b) Requesting the analysis

When you request your full analysis, we process the following data: first name, last name, company, position, business email address, revenue class of your company, your result (overall score, scores by area and the three most important fields of action) as well as date, time and IP address of registration and confirmation.

The purposes are sending you your analysis, confirming your email address via a confirmation link (double opt-in) and answering any questions about your result. The legal basis is Art. 6 (1) (b) GDPR, as you request the analysis from us. Logging registration and confirmation serves as proof of your registration (Art. 6 (1) (f) GDPR).

Your answers are evaluated automatically according to a fixed points scheme. This has no legal or similarly significant effect on you; no automated decision within the meaning of Art. 22 GDPR takes place.

Registration, confirmation, sending of the emails and storage take place exclusively on our web server at IONOS SE (see section 3), which processes the data on our behalf. No other email service provider is used.

We store this data until the purpose has been fulfilled, at most 24 months after your last interaction with us, unless a business relationship arises or statutory retention obligations apply. If you do not confirm your email address, we automatically delete the registration after 7 days.

c) Expert insights by email (optional)

If you additionally agree to receive expert insights on procurement and supply chain resilience, we use your email address and name for this purpose. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time, for example by replying “unsubscribe” to one of our emails or by writing to t.heinisch@th-interim.de. The data is deleted after withdrawal unless it is still required for another purpose described in this section.

d) Transfer to Omnichain Solutions GmbH (optional)

If your result is below 60 points, the analysis offers to pass your data on to Omnichain Solutions GmbH, Bürmoos, Austria. Thorsten Heinisch is co-founder of this company. Data is only passed on if you expressly agree; the box is not pre-ticked.

In that case, your name, company, email address and result are passed on so that Omnichain can contact you about its software for supply chain risk management. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time with effect for the future, either towards us or towards Omnichain Solutions GmbH. Omnichain Solutions GmbH is itself responsible for processing after the transfer.

6. Ordering a report

When you order a supplier report, we process the details from the order form: company, name, position, email address, phone number, billing address, VAT ID, purchase order number and comments. The purpose is processing the order, including order confirmation, performance and invoicing. The legal basis is Art. 6 (1) (b) GDPR.

The supplier list transmitted for the report contains company data and should not contain personal data. We use it exclusively for your report, do not pass it on and delete it 90 days after delivery. It is transmitted via an encrypted upload link.

We retain order and invoice data in accordance with commercial and tax retention periods (Section 257 HGB, Section 147 AO; generally 6 or 10 years). After that, it is deleted.

7. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process your details to handle your enquiry. Without this information, we cannot answer your enquiry or only to a limited extent. The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data once your enquiry has been fully answered and no statutory retention obligations apply, for example in the case of a subsequent contract.

Please note that transmission by unencrypted email may have security gaps.

WhatsApp: You can also message us via WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. WhatsApp only opens when you click the WhatsApp link; no data is transmitted beforehand. When you use it, WhatsApp processes your phone number, profile name, message content and metadata; data may also be transferred to the USA. We use the information only to answer your enquiry (Art. 6 (1) (b) or (f) GDPR). Please do not send confidential company data via WhatsApp. Further information: WhatsApp privacy policy.

8. External links, Amazon Associates and LinkedIn

This website contains links to other websites, for example to Piquano, to Omnichain Solutions GmbH and to Amazon (ordering the book). Only when you click such a link are you forwarded to the provider's website, which then processes data under its own responsibility. No data is transmitted to these providers beforehand.

Amazon Associates programme: Thorsten Heinisch is a participant in the affiliate programme of Amazon Europe S.à r.l. and Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg, which allows websites to earn advertising fees by linking to Amazon. As an Amazon Associate I earn from qualifying purchases. The links to the book on this website are such affiliate links and are marked as “advertising”. This website itself sets no cookies for this purpose and transmits no data to Amazon. Only when you click an affiliate link are you forwarded to Amazon; Amazon may then set cookies and record that you came from this website in order to attribute the commission. Amazon is responsible for this. Further information can be found in Amazon's privacy notice.

We maintain a presence on LinkedIn to present our services and communicate with customers and prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Data may also be processed outside the European Union, in particular in the USA. We have no access to this data. LinkedIn's privacy policy: linkedin.com/legal/privacy-policy.

9. Changes to this privacy policy

We adapt this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: October 2026. Parts of this privacy policy are based on the model privacy policy of the law firm Weiß & Partner.