Dr. Oliver Heiland

Capital for Resilience Advisors

Technology Park Heidelberg

Im Neuenheimer Feld 582

69120 Heidelberg

Phone: +49 152 37158467

E-Mail: info@cfr-advisors.com

VAT-ID: DE 453 785 961

Legally responsible person:

Dr. Oliver Heiland

Legal Notice regarding regulated services:

Please note that Capital for Resilience Advisors does not provide any of the following regulated services:

• financial advice

• investment advice

• investment brokerage

Capital for Resilience Advisors does not provide any legal services under German law. Legal advice may be offered separately through Heiland Legal. Dr. Oliver Heiland is admitted to practice as an attorney (Rechtsanwalt) in the Federal Republic of Germany. He is a member of the Karlsruhe Bar Association (Rechtsanwaltskammer Karlsruhe), Reinhold-Frank-Straße 72, 76133 Karlsruhe, Germany.

Contact: heiland@heiland-legal.com

Photo Credit:

• Home: Photo by Austin Mann on Unsplash

• About: Photo by Adam Niron Unsplash

• Services (image 1): Photo by Chris Barbalis on Unsplash

• Services (image 2):Photo by Getty Images on Unsplash+

• Services (image 3):Photo by Getty Images on Unsplash+

• Services (image 4):Photo by Getty Images on Unsplash+

• Contact: Photo by Brillux

• Legal Section: Photo by Getty Images on Unsplash+

Limitation of Liability:

We regularly check and update the information on our website. Despite all due care, data may have changed. Therefore, no liability or guarantee can be assumed for the accuracy and completeness of the information provided. The same applies to all websites referred to via hyperlinks. The content and structure of this website are protected by copyright.

Data Protection Notice (Privacy Policy)

Controller
Dr. Oliver Heiland

Capital for Resilience Advisors
Im Neuenheimer Feld 582, 69120 Heidelberg, Germany
Email: privacy@cfr-advisors.com (or heiland@cfr-advisors.com)
Telephone: +49 152 3715 8467

Applies to:www.cfr-advisors.com (“Website”) and any forms or email addresses published on it.
Last updated: 25.09.2025

1) Scope

This notice explains what personal data we process when you visit our Website, use the contact form, or email us, and how we use cookies placed by Squarespace (our website provider). The Website is hosted by Squarespace; the domain and DNS are provided via IONOS (domain connected).

2) Data we process

• Contact data you provide (name, organisation, email, phone, message content).

• Communication data (emails/metadata, meeting notes).

• Technical/usage data: IP address, device/browser, pages viewed, timestamps, referrers; cookie IDs used for security, performance and basic analytics (by Squarespace).

  We do not knowingly collect special categories of data and we do not conduct automated decision-making or profiling.

3) Purposes and legal bases (Art. 6 GDPR)

• Responding to enquiries and pre-contract communication: We process contact-form messages and emails and schedule calls to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract) or Art. 6(1)(f) GDPR (legitimate interest in effective communication).

• Operating and securing the Website: We ensure hosting, availability, load balancing, spam/fraud prevention, and maintain security logs (via Squarespace). Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure, reliable operation).

• Domain & DNS resolution: We route traffic to our site and handle DNS queries/logs (via IONOS as registrar/DNS). Legal basis: Art. 6(1)(f) GDPR (legitimate interests in providing the Website).

• Basic performance/aggregated web analytics (Squarespace): We use non-marketing metrics such as page performance and visit counts. Legal basis: Art. 6(1)(f) GDPR.

• Optional, non-essential cookies/analytics (if enabled): Any marketing or third-party tools beyond Squarespace essentials run only with consent obtained via the cookie banner. Legal basis: Art. 6(1)(a) GDPR (consent).

• Legal compliance and defence of claims: We retain records as required by law and for the establishment, exercise, or defence of legal claims. Legal basis: Art. 6(1)(c) GDPR; Art. 6(1)(f) GDPR.

4) Cookies

Squarespace sets essential cookies required for site functionality and security (e.g., to prevent CSRF, remember preferences, basic performance analytics).

• Essential cookies run on Art. 6(1)(f).

If we enable any non-essential cookies (e.g., additional analytics, embeds), we will ask for your consent via a cookie banner (Art. 6(1)(a)). You can withdraw consent at any time via our cookie settings (if shown) and through your browser settings.

5) Recipients and international transfers

• Website hosting & platform:Squarespace (EU entity with global infrastructure). Data may be transferred outside the EEA (e.g., USA) with Standard Contractual Clauses and other safeguards applied by Squarespace.

• Domain/DNS provider: IONOS (registrar/DNS for the connected domain). Processes technical identifiers (e.g., IP addresses in DNS logs) to route traffic; data centres primarily in the EU; IONOS acts as an independent controller for these operations.

• Email & productivity:Microsoft 365 (EU/EEA data centres where available; transfers outside the EEA protected by Standard Contractual Clauses).

• Advisers/service providers: IT, legal, accounting under confidentiality and data-processing agreements where appropriate.

We do not sell personal data.

6) Retention

• Enquiries (contact form/email): up to 24 months after last contact, or longer if needed to establish/defend legal claims.

• Contract-related records: per statutory requirements.

• Technical logs: kept by Squarespace/IONOS for operational/security timeframes.

7) Your rights (Arts. 15–21 GDPR)

You can access, rectify, erase, restrict, object to processing based on legitimate interests, and request data portability where applicable. Where processing relies on consent, you may withdraw consent at any time with future effect.
Contact: info@cfr-advisors.com.
You may also lodge a complaint with your supervisory authority, e.g.:
LfDI Baden-Württemberg, Königstr. 10a, 70173 Stuttgart – www.baden-wuerttemberg.datenschutz.de.

8) Security

We apply appropriate technical and organisational measures (HTTPS, access controls, least-privilege, vendor due diligence). No method of transmission or storage is 100% secure.

9) Do you need to provide data?

Providing contact details is voluntary. Without minimum details (e.g., email), we may be unable to respond. Essential cookies are necessary for the site to function.

10) Changes to this notice

We may update this notice to reflect legal, technical, or business developments. The “Last updated” date indicates the most recent changes.

“Our knowledge… finite; our ignorance… infinite.” — Karl Popper. We help journalists and hosts bring clarity to complex private-markets topics with board-level perspectives. Contact us for interviews, expert comment, or keynotes—prompt response with insights and availability.

info@cfr-advisors.com