Last updated: April 24, 2026
Privacy Policy
1. Introduction
Prometheus ("we", "us", "our") takes the protection of your personal data seriously. This Privacy Policy explains what data we collect when you visit this website or place a lead research order, how we use it, and what rights you have. Where applicable, this policy is designed to comply with the EU General Data Protection Regulation (GDPR).
2. Responsible Party
Prometheus
E-Mail: info@oryendigital.com
Built and operated by Oryen Digital (Luca Möller & Loukas Demertzis), Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany.
3. Data We Collect
a) Order & Research Brief Form
When you place a lead research order through our checkout form, we collect:
- Your full name
- Your email address
- Your company name
- Target industry and location (your research brief)
This data is used exclusively to fulfil your order — to research and deliver the lead batch you have commissioned. The legal basis for processing is Art. 6(1)(b) GDPR (performance of a contract).
b) Payment Data
Payment card data (card number, expiry, CVC) is processed exclusively by our payment processor and is never stored on our servers. We receive only a payment confirmation token. The payment processor acts as an independent data controller for payment-related data.
c) Server Logs
Our hosting infrastructure may automatically collect standard server log data, including IP address, browser type, referring page, time of access, and operating system. This data is used solely for ensuring the security and functionality of the service and is not linked to other personal data. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in website security).
4. Lead Research Data
As part of our core service, Prometheus researches publicly available business information (business names, phone numbers, websites, addresses) from public directories and online sources to fulfil your research brief. This data relates to businesses (B2B), not to private individuals, and is sourced exclusively from publicly accessible sources.
Each research batch is compiled for one client only and is not shared with or resold to other parties. Batches are deleted from active production systems after delivery and the conclusion of any dispute or support period.
5. Cookies
This website does not use cookies for tracking, analytics, or advertising purposes. No third-party tracking scripts or advertising pixels are deployed.
6. Third-Party Services
We use the following third-party services:
- Payment Processor — for secure payment handling. Card data never touches our servers.
- Hosting Provider — our infrastructure provider may process server log data as described in Section 3c.
- Google Fonts — for loading web fonts. Your browser may connect to Google servers, transmitting your IP address. See Google's Privacy Policy.
7. Data Retention
Order data (name, email, company, research brief) is retained for as long as necessary to fulfil your order and handle any subsequent support or dispute, and thereafter for the period required by applicable commercial and tax law (typically 7 years under German law). If no order is placed, any inquiry data is deleted within 6 months.
Server log data is deleted after a maximum of 30 days unless a security incident requires longer retention.
8. Your Rights Under GDPR
If you are located in the EU/EEA, you have the following rights:
- Right of access (Art. 15 GDPR) — request information about your stored data
- Right to rectification (Art. 16 GDPR) — request correction of inaccurate data
- Right to erasure (Art. 17 GDPR) — request deletion of your data
- Right to restriction (Art. 18 GDPR) — request restricted processing
- Right to data portability (Art. 20 GDPR) — receive your data in a portable format
- Right to object (Art. 21 GDPR) — object to processing based on legitimate interests
To exercise any of these rights, contact us at info@oryendigital.com.
9. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority — in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. The competent authority in Germany is the Hamburg Commissioner for Data Protection and Freedom of Information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.
11. Contact
For any questions about this Privacy Policy or your data, please contact us at: info@oryendigital.com