Privacy Policy
Last updated: October 29, 2026
1. Controllers
Diana Baichurina & Daria Koseniuk
c/o Startup Colors UG (haftungsbeschränkt)
Pettenkoferstr. 4c
10247 Berlin
Germany
Email: info@helthea.de
2. Overview
We collect as little personal data as possible. This website sets no cookies and uses no tracking or analytics tools. We only process personal data:
- technically when you visit the website (hosting),
- when you sign up for the download instructions and news,
- when you email us.
3. Visiting the website (hosting)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered from servers in the EU (Frankfurt am Main). When you visit, Vercel automatically processes technical data: IP address, date and time, page requested, referrer and browser information.
- Purpose: delivering the website and keeping it stable and secure.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
- Retention: Vercel keeps server logs only briefly and then deletes them automatically.
- Third country: Vercel is based in the USA. Transfers are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on Standard Contractual Clauses. We have a data processing agreement with Vercel.
Fonts and images are loaded directly from this website. No data is sent to Google or other third parties.
4. Signing up for the download instructions and news (Brevo)
When you sign up through the form, we process your email address, the page language and your consent including its time. After submitting, you receive an email to confirm your sign-up (double opt-in). The time and IP address of this confirmation are stored as proof.
- Purpose: sending the download instructions at launch and occasional news about Helthea.
- Legal basis: your consent, Art. 6(1)(a) GDPR.
- Email analytics: our emails contain small tracking pixels and links that let Brevo record whether an email was opened and which links were clicked. We use this to improve our emails. The legal basis is also your consent; withdrawing it ends this measurement too.
- Withdrawal: at any time via the unsubscribe link in every email or by writing to info@helthea.de. Processing before withdrawal remains lawful.
- Service provider: Sendinblue GmbH (Brevo), Köpenicker Straße 126, 10179 Berlin, Germany. Data is stored in the EU. We have a data processing agreement with Brevo.
- Retention: until you withdraw your consent. We then delete your email address and keep only the proof of your consent for up to three years (Art. 6(1)(f) GDPR, duty to prove consent).
- Providing your email is voluntary. Without your email address and consent we can't send you the instructions.
5. Contacting us by email
If you write to info@helthea.de, we process your email address and your message to answer your request (Art. 6(1)(f) GDPR; Art. 6(1)(b) GDPR for contract-related requests). We delete the message once your request is resolved, unless we are legally required to keep it. Our email is managed by the provider Neo (neo.space). Processing may take place outside the EU; this is based on Standard Contractual Clauses.
6. Links to social networks
We link to our profiles on Instagram and LinkedIn. No plugins are embedded: no data is transferred unless you click a link. The privacy policy of the respective network then applies.
7. Recipients
We don't sell personal data or share it for advertising. Recipients are only the service providers named above, who process data on our behalf, and authorities where we are legally required to disclose data. Transfers to countries outside the EU only take place with appropriate safeguards under Art. 44 et seq. GDPR.
8. Your rights
You have the right to:
- access (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw consent at any time with effect for the future (Art. 7(3) GDPR),
- object to processing based on legitimate interests (Art. 21 GDPR),
- lodge a complaint with a data protection authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.
To exercise your rights, simply email info@helthea.de.
9. No automated decisions
We don't make automated decisions or create profiles.
10. Changes
We update this privacy policy when our website or services change. The version published on this page applies.
11. Other provisions
In case of any discrepancy or ambiguity in interpretation, the English version of this privacy policy prevails.