Privacy Policy
Datenschutzerklärung pursuant to the GDPR. Effective April 2026
§1: Data Controller
The data controller responsible for data processing on this website is:
Aliaa El Shoubaki
Circle on Point
Südtiroler Platz 9, 1040 Vienna, Austria
Email: office@aliaaelshoubaki.com
§2: Types of Data Collected
When you use this website or contact the Service Provider, the following personal data may be collected:
- Contact form submissions: Name, email address, and any information you voluntarily provide in your message.
- Email correspondence: Name, email address, and message content when you contact us directly via email.
- Technical data: Your IP address, browser type, operating system, and access times are automatically collected by the web server for security and operational purposes (server log files).
§3: Purpose of Data Processing
Your personal data is processed for the following purposes:
- Responding to your inquiries and communication requests
- Providing and delivering the requested services
- Contract administration and invoicing
- Ensuring the security and functionality of the website
- Compliance with legal obligations
§4: Legal Basis (Art. 6 GDPR)
Data processing is carried out on the following legal bases:
- Art. 6(1)(a) GDPR: Consent: When you voluntarily submit your data through the contact form or email.
- Art. 6(1)(b) GDPR: Contract performance: When processing is necessary for the performance of a contract or pre-contractual measures.
- Art. 6(1)(c) GDPR: Legal obligation: When processing is required to comply with legal requirements (e.g., tax and accounting obligations).
- Art. 6(1)(f) GDPR: Legitimate interest: For ensuring website security and functionality through server log files.
§5: Data Storage and Retention
Personal data is stored only for as long as necessary to fulfil the purposes described above, or as required by law. Specifically:
- Contact form and email data: Retained for the duration of the business relationship and deleted thereafter, unless longer retention is required by law.
- Contractual and invoicing data: Retained for 7 years in accordance with Austrian tax law (§132 BAO).
- Server log files: Automatically deleted after 30 days.
§6: Third-Party Services
This website may use the following third-party services that process personal data:
- Web hosting provider: The website is hosted by a professional hosting provider. Server log files (IP address, browser type, access times) are processed for security purposes based on Art. 6(1)(f) GDPR.
No analytics tools, advertising trackers, or social media plugins are currently used on this website. Should this change, this privacy policy will be updated accordingly.
§7: Cookies
This website uses only essential (functional) cookies that are strictly necessary for the operation of the website. These cookies do not collect personal data and do not require consent under the GDPR and the Austrian Telecommunications Act (TKG 2021).
No tracking, analytics, or marketing cookies are used.
§8: Data Transfers
Personal data is not transferred to countries outside the European Economic Area (EEA) unless adequate safeguards are in place in accordance with Chapter V of the GDPR (e.g., EU Standard Contractual Clauses or an adequacy decision by the European Commission).
§9: Your Rights under the GDPR
As a data subject, you have the following rights under the GDPR:
- Right of access (Art. 15 GDPR): You may request information about the personal data we hold about you.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to legal retention obligations.
- Right to restriction of processing (Art. 18 GDPR): You may request that processing of your data be restricted under certain conditions.
- Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used, machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest at any time.
- Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
§10: Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna, Austria
Website: www.dsb.gv.at
Email: dsb@dsb.gv.at
§11: Contact for Data Protection Requests
For any questions regarding data protection or to exercise your rights, please contact:
Aliaa El Shoubaki
Email: office@aliaaelshoubaki.com
§12: Changes to This Privacy Policy
This privacy policy may be updated from time to time to reflect changes in legal requirements or data processing practices. The current version is always available on this website. Material changes will be communicated appropriately.
Last updated: April 2026