Privacy Notice
As of July 2026
Applies to shahriar-ghiassian.de including the German version. The binding version is the German original.
1. Controller
Art. 13 (1) (a) GDPR
Lepa & Ghiassian Holding GmbHBuckower Chaussee 100
12277 Berlin
Germany
Phone: +4930217999520
E-mail: info@lg-holding.de
Commercial register: HRB 250268 B, Amtsgericht Charlottenburg (Berlin)
Represented by: Shahriar Ghiassian Ghazwini, Carolin Lepa
2. Principle: what this website does not do
This website is static. Before publication it was verified that no content is loaded from third-party servers when the page is opened. Specifically:
- No cookies. No cookie is set — neither strictly necessary nor otherwise. That is why this site has no cookie banner and asks for no consent.
- No analytics or tracking tools. No Google Analytics, no Tag Manager, no Matomo, no pixel, no heatmap or session-recording service.
- No embedded third-party content. No maps, no videos, no embedded booking calendar, no social media widgets.
- Fonts served from our own server. The typefaces used are downloaded when the site is built and delivered from our own server. No request goes to Google when you open the page; your IP address is not transmitted to Google.
- No forms. No data can be entered or submitted on this website.
3. Processing activities
Art. 13 (1) (c) and (d) GDPR
3.1 Provision of the website and server log files
When you open the website, your browser transmits technically necessary data to the hosting provider’s server, which stores it in log files: the IP address of the requesting device, date and time of access, name and URL of the file retrieved, volume of data transferred, notification of successful retrieval, browser type and version, operating system, and the previously visited page (referrer).
Purpose: delivering the page to your browser, ensuring trouble-free operation, and detecting and defending against attacks.
Legal basis: Art. 6 (1) (f) GDPR
Legitimate interest:a website cannot technically be delivered without processing the visitor’s IP address. Short-term logging is also required to detect and trace attacks on the server. This data is not merged with other sources and is not evaluated for advertising purposes.
3.2 Storing the chosen appearance in your browser
If you switch between light and dark appearance, that choice is stored under the key themein your browser’s local storage, with the value light or dark. The entry remains exclusively on your device and is never transmitted to the server or to third parties.
Since this information never leaves the browser, no processing of personal data by the controller within the meaning of Art. 4 (1) GDPR takes place. Storage occurs expressly at your request and is permitted without consent under § 25 (2) no. 2 TDDDG. You can delete the entry at any time via your browser settings; the site then falls back to your operating system setting.
3.3 Contact by e-mail or telephone
This website provides no contact form. It only lists e-mail addresses and telephone numbers. If you use them, we process the details you provide — usually your name, contact details, and the content of your enquiry.
Purpose: handling and answering your enquiry.
Legal basis: Art. 6 (1) (b) GDPR where the enquiry is directed at concluding or performing a contract, otherwise Art. 6 (1) (f) GDPR.
Legitimate interest: anyone who writes or calls expects an answer, which is not possible without processing the details provided.
4. Recipients
Art. 13 (1) (e) GDPR
The website is hosted by [hosting provider, address]. The provider processes the data listed under 3.1 on our behalf and on our instructions. A data processing agreement under Art. 28 GDPR is in place.
Beyond this, no data is passed on to third parties. Disclosure occurs only where we are legally obliged to do so.
5. Retention periods
Art. 13 (2) (a) GDPR
- Server log files: 7 days, then deleted automatically. If entries are needed to investigate a specific attack, they are retained until that incident is resolved.
- Enquiries by e-mail or telephone: until the matter is concluded, then deleted after six months. Where commercial or tax retention obligations apply, the statutory periods of six years under § 257 HGB and ten years under § 147 AO apply.
- Appearance choice in your browser:until you clear your browser’s local storage. We have no access to it.
6. Your rights
Art. 13 (2) (b) GDPR
- Access Art. 15 GDPR — the right to learn whether and which data about you is processed.
- Rectification Art. 16 GDPR — the right to have inaccurate data corrected.
- Erasure Art. 17 GDPR — the right to have data deleted where no purpose remains.
- Restriction Art. 18 GDPR — the right to have processing restricted, for example where accuracy is disputed.
- Notification on disclosure Art. 19 GDPR — the right to have recipients informed about rectification or erasure.
- Data portability Art. 20 GDPR — the right to receive your data in a machine-readable format.
- Objection Art. 21 GDPR — you have the right to object at any time to processing based on Art. 6 (1) (f) GDPR. On this website that concerns the processing described under 3.1 and 3.3. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests.
An informal message to info@lg-holding.de is sufficient to exercise these rights.
7. Right to lodge a complaint
Art. 13 (2) (d) GDPR, Art. 77 GDPR
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority responsible at the controller’s seat is:
Berliner Beauftragte für Datenschutz und InformationsfreiheitAlt-Moabit 59–61
10555 Berlin, Germany
datenschutz-berlin.de
8. Obligation to provide data
Art. 13 (2) (e) GDPR
You are under no legal or contractual obligation to provide personal data. The data listed under 3.1 arises unavoidably when any website is opened; without it the page cannot be delivered. Whether you contact us beyond that is entirely up to you. Without contact details, however, we cannot answer an enquiry.
9. Links to external offerings
This website links to third-party offerings, including the websites of the companies named, the commercial register portal Northdata, and a booking calendar hosted by Cal.com. This content is not embedded — a connection to the respective provider is established only when you actively click such a link. From that point on, only the privacy terms of that provider apply, over whose processing we have no influence.