Privacy Policy

1. Controller

Hellwig, Paul und Oreshin, Platon und Scheffler, Daniel GbR

Ludwig-Erhard-Straße 12

34131 Kassel

Email: [email protected]

2. Collection and Storage of Personal Data and the Nature and Purpose of Its Use

a) When Visiting the Website

When you access our website, information is automatically sent by the browser used on your device to the server of our website. This information is temporarily stored in log files. The following information is collected automatically and stored until automated deletion:

  • IP address of the requesting computer,

  • Date and time of access,

  • Name and URL of the retrieved file,

  • Website from which the access occurs (referrer URL),

  • Browser used, operating system of your computer, and the name of your access provider.


This data is processed for the following purposes:

  • Ensuring a smooth connection to the website,

  • Ensuring convenient use of our website,

  • Evaluation of system security and stability, and

  • Other administrative purposes.


Legal basis: Art. 6 para. 1 lit. f GDPR.

b) Use of the Contact Form

If you contact us via the form provided on the website, the following details are required: name, email address, and your request. Additional details (phone, company, website, interests) are optional.

Processing of this data is for the purpose of responding to your inquiry.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest).

c) Newsletter

If we offer a newsletter in the future, it will only be sent after your explicit consent (double opt-in procedure). Legal basis: Art. 6 para. 1 lit. a GDPR.

d) Analytics / Tracking

We use – if you have consented – Google Analytics (Google Ireland Limited) to analyze the use of our website. Cookies are used for this purpose. The collected information is usually transferred to Google servers in the USA and stored there. We use IP anonymization so that your IP address is shortened within the EU before transfer.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

e) Cookies

We use cookies. These are small files automatically created by your browser and stored on your device when you visit our site. We distinguish between technically necessary cookies and cookies used for statistics and marketing.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. Statistics and marketing cookies are only set with your consent (Art. 6 para. 1 lit. a GDPR).

f) Social Media Links

Our footer contains icons linking to our social media accounts (X, Instagram, TikTok, YouTube). These are pure links. Only when you click the link will data (e.g., your IP address, referrer) be transmitted to the respective platform.

3. Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only share your personal data with third parties if:

  • You have given your explicit consent (Art. 6 para. 1 lit. a GDPR),

  • Disclosure is necessary for the establishment, exercise, or defense of legal claims (Art. 6 para. 1 lit. f GDPR) and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

  • There is a legal obligation (Art. 6 para. 1 lit. c GDPR), or

  • It is legally permissible and necessary for the performance of contractual relationships with you (Art. 6 para. 1 lit. b GDPR).


Recipients may include: hosting provider (Hostinger), web service provider (Framer), or analytics provider (Google).

4. Data Transfers to Third Countries

Some data processing takes place on servers in the USA (Framer, Google). We ensure an adequate level of data protection through the use of EU standard contractual clauses.

5. Storage Periods

  • Server log files: max. 30 days

  • Contact form data: until your inquiry has been fully processed, maximum 1 year

  • Cookies: depending on type, can be stored for up to two years

  • Newsletter data (if applicable): until consent is withdrawn

6. Rights of Data Subjects

You have the right to:

  • Obtain information about your personal data stored with us (Art. 15 GDPR),

  • Rectification of inaccurate or completion of incomplete data (Art. 16 GDPR),

  • Erasure of your data (Art. 17 GDPR),

  • Restriction of processing (Art. 18 GDPR),

  • Data portability (Art. 20 GDPR),

  • Object to processing (Art. 21 GDPR),

  • Withdraw consent at any time (Art. 7 para. 3 GDPR),

  • Lodge a complaint with a supervisory authority (Art. 77 GDPR).


Competent authority in Hesse: The Hessian Commissioner for Data Protection and Freedom of Information.

7. Data Security

We use SSL/TLS encryption on our website. In addition, we implement suitable technical and organizational security measures (e.g., access restrictions, backups, monitoring) to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

8. Currentness and Changes to This Privacy Policy

This privacy policy is currently valid and was last updated in September 2025.

Due to further development of our website or changes in legal requirements, it may become necessary to amend this privacy policy.