Privacy Policy

1. Controller

alifzaal UG (haftungsbeschränkt)
c/o Zahab Ahmed Qureshi
Friedrichstraße 17
06844 Dessau-Roßlau
Germany

Represented by: Zahab Ahmed Qureshi (managing director)
Email: info@alifzaal.com
Phone: +49 176 77095739

2. Overview

We only process personal data where this is needed to run this website, handle your inquiries or meet legal obligations. This website does not use cookies for analytics or advertising.

The main legal bases are:

• Art. 6 (1)(a) GDPR (consent)
• Art. 6 (1)(b) GDPR (contract and pre-contractual steps)
• Art. 6 (1)(c) GDPR (legal obligation)
• Art. 6 (1)(f) GDPR (legitimate interest)

3. Hosting

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.

When you visit the website, Netlify automatically processes technical data sent by your browser: IP address, date and time of access, page visited, referrer URL, browser and operating system. This data is needed to deliver the website and keep it secure.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is providing the website securely and reliably. We have a data processing agreement with Netlify. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

4. Media storage and delivery (Cloudflare)

Photos and videos on this website are stored and delivered via Cloudflare R2. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Where Cloudflare also manages the domain, traffic to the website passes through Cloudflare’s network.

Cloudflare processes your IP address and technical connection data to deliver content quickly and securely.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is fast and secure delivery of our content. We have a data processing agreement with Cloudflare. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

5. Contact and booking form

When you contact us through the contact or booking form, we process the information you enter:

• Name
• Email address
• Phone number
• Project type
• Timeline
• Project description

We use this data only to answer your inquiry and, where relevant, prepare a quote.

The forms are processed via Netlify Forms (provider: see section 3). Incoming messages are automatically checked for spam and then forwarded to us by email.

The legal basis is Art. 6 (1)(b) GDPR where your inquiry relates to a contract, and otherwise Art. 6 (1)(f) GDPR. Our legitimate interest is handling your inquiry.

Retention: If no project results, we delete your inquiry no later than six months after our last contact. If a project results, we keep the correspondence for the statutory retention periods (six years under § 257 HGB, eight years for accounting records under § 147 AO).

The same applies if you contact us directly by email or phone.

6. Email (Google Workspace)

We use Google Workspace for email. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Messages you send us by email or through our forms are stored on Google’s servers. A transfer to the USA cannot be ruled out.

The legal basis is Art. 6 (1)(b) and (f) GDPR. We have a data processing agreement with Google. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

7. Web analytics (Umami)

We use Umami to understand how our website is used. The provider is Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, CA, USA. Data is processed in the EU (Germany).

Umami does not set cookies or store any information on your device. It records pages visited, referrer, browser, operating system, device type and country. Your IP address is not stored. No user profiles are created and no data is combined with other sources.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is improving our website based on anonymous usage statistics. We have a data processing agreement with the provider. As Umami is a US company, a transfer to the USA cannot be ruled out. Transfers to the USA are based on the EU Standard Contractual Clauses.

8. Fonts

All fonts on this website are hosted locally. No connection to third-party servers is made when the page loads.

9. Your rights

You have the right to:

• Access your stored data (Art. 15 GDPR)
• Correct inaccurate data (Art. 16 GDPR)
• Have your data deleted (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdraw consent at any time for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where we process data based on Art. 6 (1)(f) GDPR, you can object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can show compelling legitimate grounds.

For any of these requests, an email to info@alifzaal.com is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragter für den Datenschutz Sachsen-Anhalt.

10. SSL/TLS encryption

This website uses SSL/TLS encryption, so data you send us, for example through the contact form, cannot be read by third parties.

11. Changes

We update this privacy policy when the website or legal requirements change. The current version on this page applies.