Privacy Policy

1. Controller

The controller responsible for processing personal data is:

Saiga Abbasova
ABBA-Sprachendienste
Mooskamp 50
32547 Bad Oeynhausen
Telephone: +49 176 80468176
Email: info@abba-sprachendienste.de

2. Hosting and server logs

The website is hosted on a server operated by Hetzner Online GmbH in Germany. Technically necessary error and connection data may be processed during operation. Regular access logging is disabled for this static website; technical error logs are rotated with size limits. This supports the secure and stable provision of the website. The legal basis is the legitimate interest in providing a secure website (Article 6(1)(f) GDPR).

3. Contact, telephone, email and WhatsApp

When you contact ABBA-Sprachendienste, the information you provide is processed to handle your enquiry. Depending on the matter, the legal basis is taking steps prior to entering into a contract (Article 6(1)(b) GDPR) or the legitimate interest in handling general enquiries (Article 6(1)(f) GDPR). The website does not embed a WhatsApp service; it contains only an external link. WhatsApp opens only when you actively select this link. For persons in the European Economic Area, the provider is WhatsApp Ireland Limited. WhatsApp processes data including telephone numbers, profile, device and usage data, communication metadata and the content you submit. Processing may also take place in countries outside the European Economic Area.

Using WhatsApp is voluntary. Alternatively, you can use telephone, email or the secure enquiry form. Do not send particularly sensitive documents via WhatsApp. Contact and enquiry data received by ABBA-Sprachendienste via WhatsApp are deleted once the enquiry has been completed, unless a statutory retention obligation requires longer storage.

4. Enquiry forms and documents

General enquiries and interpreting enquiries are processed on a web server operated in Germany and then sent by email to ABBA-Sprachendienste’s business inbox. Only the contact details and enquiry information entered in the form are processed. Email delivery and the receiving inbox are provided through Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The purpose and legal basis are the same as those described in Section 3 for handling your enquiry. No content log of form submissions is stored.

When you submit the Document Compass, the information entered in the form and the selected documents are processed so that we can review your enquiry. PDF, PNG and JPG/JPEG files are accepted, with a maximum of five files, 10 MB per file and 30 MB in total. Files are transferred in encrypted form. The server checks each file’s type and size and scans it for malware. If an error occurs or a document cannot be verified conclusively, the submission will be rejected. Photos taken with a camera may contain technical image metadata, including location data where present.

Processing takes place on a web server operated in Germany. Your information and uploaded files are stored there in encrypted form (AES-256) and made available for processing by being sent by email to ABBA-Sprachendienste’s business inbox, both as attachments and through a secure, time-limited download link to the server. Private cloud storage, such as Google Drive, is not used for this purpose. The only recipients are the persons at ABBA-Sprachendienste assigned to handle the enquiry. Email delivery and the receiving inbox are provided through Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

The encrypted server copy of the files and the associated download link are automatically deleted after no more than 30 days. This automatic deletion does not include the email and its attachments delivered to the business inbox for processing. These are retained only for as long as necessary to handle your enquiry and, where applicable, to comply with statutory documentation or retention obligations, and are then deleted.

The legal basis is taking steps prior to entering into a contract (Art. 6 Abs. 1 lit. b DSGVO). Where documents contain health data or other special categories of personal data, processing is additionally based on your explicit consent (Art. 9 Abs. 2 lit. a in Verbindung mit Art. 6 Abs. 1 lit. a DSGVO). You also confirm that you are the data subject or are authorised to submit the documents. Consent is voluntary and may be withdrawn with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal. Documents concerning criminal convictions, criminal offences or related preventive measures must not be submitted through the standard upload without prior consultation.

5. Newsletter

When you request the newsletter, we first send a confirmation email to the address provided. Registration is complete only after you open the link in that email (double opt-in). Your email address, registration status, language, source, the version of the consent wording used and the required timestamps are stored in an access-restricted database on a web server operated in Germany. Confirmation and newsletter emails are sent through Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

The legal basis is your consent (Art. 6 Abs. 1 lit. a DSGVO). Unconfirmed registrations are deleted after seven days. After you unsubscribe, the address is retained on a suppression list with the status “unsubscribed” to prevent any further emails from being sent. You may withdraw your consent with effect for the future at any time by using the unsubscribe link in each newsletter email or by contacting the email address given above.

6. Cookieless web analytics with Plausible

Plausible is integrated to provide aggregated, cookie-free audience measurement. This measurement uses no cookies or persistent browser identifier.

7. Google and Meta marketing services

Google Ads, Google Analytics and Meta Pixel are not configured for production use. The website contains a technical loader that can load these scripts only if marketing consent has been stored and the relevant account IDs are present. Without consent, no Google or Meta marketing requests are triggered. Any later activation requires an updated policy, a consent review and the relevant contractual and account settings.

You can change your selection at any time via “Privacy settings” in the footer.

8. Local settings

The website stores your marketing selection locally under the key abba-consent-v1, so that it can be taken into account on subsequent visits. This storage is necessary to manage the setting as requested. You can delete it in your browser settings and then make a new selection.

9. Your rights

Under the GDPR, you have rights to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, particularly the State Commissioner for Data Protection and Freedom of Information responsible for North Rhine-Westphalia.

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia