Privacy Policy

Datenschutzerklärung pursuant to the GDPR. Effective April 2026


§1: Data Controller

The data controller responsible for data processing on this website is:

Aliaa El Shoubaki

Circle on Point

Südtiroler Platz 9, 1040 Vienna, Austria

Email: office@aliaaelshoubaki.com

§2: Types of Data Collected

When you use this website or contact the Service Provider, the following personal data may be collected:

  • Contact form submissions: Name, email address, and any information you voluntarily provide in your message.
  • Email correspondence: Name, email address, and message content when you contact us directly via email.
  • Technical data: Your IP address, browser type, operating system, and access times are automatically collected by the web server for security and operational purposes (server log files).

§3: Purpose of Data Processing

Your personal data is processed for the following purposes:

  • Responding to your inquiries and communication requests
  • Providing and delivering the requested services
  • Contract administration and invoicing
  • Ensuring the security and functionality of the website
  • Compliance with legal obligations

§4: Legal Basis (Art. 6 GDPR)

Data processing is carried out on the following legal bases:

  • Art. 6(1)(a) GDPR: Consent: When you voluntarily submit your data through the contact form or email.
  • Art. 6(1)(b) GDPR: Contract performance: When processing is necessary for the performance of a contract or pre-contractual measures.
  • Art. 6(1)(c) GDPR: Legal obligation: When processing is required to comply with legal requirements (e.g., tax and accounting obligations).
  • Art. 6(1)(f) GDPR: Legitimate interest: For ensuring website security and functionality through server log files.

§5: Data Storage and Retention

Personal data is stored only for as long as necessary to fulfil the purposes described above, or as required by law. Specifically:

  • Contact form and email data: Retained for the duration of the business relationship and deleted thereafter, unless longer retention is required by law.
  • Contractual and invoicing data: Retained for 7 years in accordance with Austrian tax law (§132 BAO).
  • Server log files: Automatically deleted after 30 days.

§6: Third-Party Services

This website may use the following third-party services that process personal data:

  • Web hosting provider: The website is hosted by a professional hosting provider. Server log files (IP address, browser type, access times) are processed for security purposes based on Art. 6(1)(f) GDPR.

No analytics tools, advertising trackers, or social media plugins are currently used on this website. Should this change, this privacy policy will be updated accordingly.

§7: Cookies

This website uses only essential (functional) cookies that are strictly necessary for the operation of the website. These cookies do not collect personal data and do not require consent under the GDPR and the Austrian Telecommunications Act (TKG 2021).

No tracking, analytics, or marketing cookies are used.

§8: Data Transfers

Personal data is not transferred to countries outside the European Economic Area (EEA) unless adequate safeguards are in place in accordance with Chapter V of the GDPR (e.g., EU Standard Contractual Clauses or an adequacy decision by the European Commission).

§9: Your Rights under the GDPR

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR): You may request information about the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction of processing (Art. 18 GDPR): You may request that processing of your data be restricted under certain conditions.
  • Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest at any time.
  • Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

§10: Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde

Barichgasse 40-42, 1030 Vienna, Austria

Website: www.dsb.gv.at

Email: dsb@dsb.gv.at

§11: Contact for Data Protection Requests

For any questions regarding data protection or to exercise your rights, please contact:

Aliaa El Shoubaki

Email: office@aliaaelshoubaki.com

§12: Changes to This Privacy Policy

This privacy policy may be updated from time to time to reflect changes in legal requirements or data processing practices. The current version is always available on this website. Material changes will be communicated appropriately.


Last updated: April 2026