Privacy

Privacy Notice of SFJ Capital UG
Effective date: 11 October 2026
Last updated: 11 October 2026

The German version of this notice is the legally binding original. This translation is for convenience. If it differs from the German text, the German text prevails.

Right to object. Where we rely on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We then stop that processing unless we demonstrate compelling legitimate grounds, or the processing is for legal claims (Art. 21(1) GDPR). You may also object at any time to processing for direct marketing (Art. 21(2) GDPR). This website is not used for direct marketing. To object, email hello@hejsfj.com.

This privacy notice explains how SFJ Capital UG ("SFJ", "we", "us", or "our") processes personal data when you visit hejsfj.com (including www.hejsfj.com and the redirect domains sebastianjacobsen.eu and www.sebastianjacobsen.eu).

Processing is governed by the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR" / "DSGVO"), the German Federal Data Protection Act (BDSG), and — where terminal equipment is accessed — the German Telecommunications Digital Services Data Protection Act (TDDDG).

The HEJSFJ social media profiles, Fred, and Sunny Days Ahead each have their own privacy notice, linked at the top of this page. This page covers only the personal website at hejsfj.com.

1. Controller

SFJ Capital UG (haftungsbeschränkt)
Represented by: Sebastian Frederik Jacobsen (Managing Director)
Address: Dhauner Straße 42, 67067 Ludwigshafen am Rhein, Germany
Commercial register: HRB 67315, Amtsgericht Ludwigshafen am Rhein
Website: hejsfj.com
Email: hello@hejsfj.com

Please send privacy requests (access, rectification, erasure, restriction, objection, or portability) to the email address above.

2. Hosting and server log data

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"). When you visit the site, the hosting infrastructure automatically processes technical request data that is typically contained in server logs, for example:

  • IP address
  • Date and time of the request
  • Requested URL / path
  • HTTP status code
  • Referrer URL (if transmitted)
  • Browser type and version / user agent
  • Operating system information

Purpose: delivery and secure operation of the website, abuse prevention, and troubleshooting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website). Where terminal equipment access is strictly necessary to provide the telemedia service expressly requested by the user, § 25(2) No. 2 TDDDG also applies.

Vercel acts as a processor under Art. 28 GDPR. Where personal data is transferred to the United States, transfers are safeguarded by appropriate measures under Chapter V GDPR, in particular the EU Standard Contractual Clauses and — where applicable — Vercel's certification under the EU–U.S. Data Privacy Framework.

3. Reach measurement and performance (Vercel Analytics / Speed Insights)

We use Vercel Analytics and Vercel Speed Insights to understand aggregated page views, navigation patterns, and Core Web Vitals / performance metrics. These tools are intended to operate without advertising cookies and without cross-site tracking profiles.

Depending on configuration, technical data such as page path, referrer, approximate location derived from IP, device/browser category, and performance timings may be processed.

Purpose: measuring reach and improving the stability and usability of this website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving our online presence), provided no non-essential access to information stored on your terminal equipment takes place. If a tool stores or reads information on your device beyond what is strictly necessary to provide the service you requested, we will only do so on the basis of your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR.

4. Contact by email

If you contact us by email, we process the data you provide (at minimum your email address and message content, and any other details you include) in order to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to pre-contractual or contractual matters; otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to correspondence).

We delete correspondence when it is no longer required, unless statutory retention duties apply.

5. No account registration or payment processing on this website

hejsfj.com is an informational personal website. It does not offer user accounts, checkout, or payment forms. Payment processors such as Stripe, product analytics tools such as Amplitude, and advertising/analytics tools such as Google Analytics are not integrated on this website.

If you use other SFJ products or services, those services' own privacy notices apply to the processing carried out there.

6. Cookies and local storage

This website does not use advertising cookies or third-party marketing trackers. Strictly necessary technical storage may be used by the hosting platform to deliver the site securely and reliably. When you choose a language in the footer, that choice is stored in a first-party cookie so later visits keep it. Until you choose, the language follows your country.

Non-essential storage of or access to information on your terminal equipment is only permitted with consent under § 25(1) TDDDG, unless an exception under § 25(2) TDDDG applies.

7. Recipients and categories of recipients

  • Vercel Inc. — hosting, content delivery, Analytics, and Speed Insights (processor)
  • IT service providers and professional advisers bound by confidentiality, where required to operate or defend our services
  • Public authorities, where we are legally obliged to disclose data

We do not sell personal data and we do not share it with third parties for their own advertising purposes.

8. Retention

We retain personal data only for as long as necessary for the purposes described in this notice, or as required by law (for example commercial and tax retention periods under the German Commercial Code (HGB) and Fiscal Code (AO)). Server logs and analytics aggregates are typically retained only for short operational periods and then deleted or anonymised.

9. Your rights

Under the GDPR you have the right, subject to statutory conditions, to:

  • Access your personal data (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on Art. 6(1)(f) GDPR (Art. 21)
  • Withdraw consent at any time with future effect, where processing is based on consent (Art. 7(3))

To exercise these rights, contact hello@hejsfj.com.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. For SFJ Capital UG, the competent authority is typically:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
Germany
Website: https://www.datenschutz.rlp.de

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Transmission to this website is protected via HTTPS/TLS. Absolute security of internet transmission cannot be guaranteed.

11. No automated decision-making

We do not use personal data from this website for automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Children

This website is not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to this notice

We may update this notice to reflect legal, technical, or operational changes. The current version is always available on this page with the "Last updated" date above. Material changes will be indicated by updating that date; where required by law, we will provide additional notice.

14. Separate notices

This notice covers only hejsfj.com, including www.hejsfj.com and the redirect domains sebastianjacobsen.eu and www.sebastianjacobsen.eu. Our social media profiles, Fred, and Sunny Days Ahead each have their own privacy notice and their own terms of use, linked at the top of this page. Mateo (hellomateo.de) is an independent service and is not covered here.

15. No social plugins or advertising trackers

Social icons on this website are ordinary links. Opening this website does not send your IP address to Instagram, Threads, LinkedIn, TikTok, Unsplash, GitHub, or Pinterest. Those providers receive data only if you follow a link or use their service. Google Analytics, advertising pixels, and product-analytics tools such as Amplitude are not integrated on this website.

16. International transfers

Vercel may process personal data in the United States. Where Vercel is certified under the EU–U.S. Data Privacy Framework, the European Commission’s adequacy decision for that framework can apply. We also rely on the EU Standard Contractual Clauses and on supplementary measures where Chapter V GDPR requires them. You can ask hello@hejsfj.com for a copy or a summary of those safeguards (Art. 13(1)(f) and Art. 15 GDPR).

17. Whether you must provide data

You do not have to visit this website, and there is no account to register. If you email us, we need your email address and the content of the message in order to reply. You choose what else to include.

18. Personal-data breaches

If a breach of personal data that we must report occurs, we notify the competent supervisory authority under Art. 33 GDPR and, where the breach is likely to result in a high risk to you, we notify you under Art. 34 GDPR. We will not ask you by email for a password or a payment card number. Reports of security vulnerabilities can be sent to hello@hejsfj.com. Please do not access non-public areas or other people’s data while reporting.

19. No AI system on this website

This website does not deploy an AI system that interacts with visitors. Art. 50 of Regulation (EU) 2024/1689 (the AI Act) is therefore not triggered by browsing these pages. Fred’s optional AI suggestions are described in the Fred privacy notice and the Fred terms of use.

20. Data Act

Regulation (EU) 2023/2854 (the Data Act) has applied since 12 September 2025. This informational website is not a connected product and it is not a data processing service that holds a user database. Switching and portability for Fred, where that regulation applies to Fred, are described in the Fred privacy notice.