Privacy Policy

1. Who is responsible

Contact for data protection matters: same as above. As a sole practitioner, no separate Data Protection Officer (DPO) is appointed; this is permitted under Art. 37 GDPR for organisations of this size.

2. Data this site processes itself

While browsing

This is a static website. It does not set cookies, does not run analytics or tracking scripts, and does not store any data about visitors on its own servers.

The hosting provider may automatically log standard server-access information (IP address, browser type, time of access) for the operational purpose of serving pages and security. This is the standard behaviour of any web server and is the legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the site securely). These logs are not analysed for marketing or tracking purposes.

The "First Mapping" form on the contact page

The mapping is processed entirely in your browser. The answers you provide are not submitted to any server. When you click "Send the mapping by email", your answers are formatted into a draft email that opens in your local mail client — at which point the data is in your hands until you choose to send it. If you don't send the email, no data leaves your device.

3. Third-party services this site connects to

Email (mailto)

The "Send the mapping by email" button uses the standard mailto: protocol. Your local mail client opens with a draft. No third-party server is involved in this step. Once you send the email, your email provider and Ayham's email provider (Google Workspace / Gmail) handle the message according to their respective privacy policies.

Google Calendar — Appointment Schedule (booking page)

The "Schedule a first call" button links to a public Google Calendar appointment scheduling page. When you click it, you leave this site and arrive at a Google-operated page. Any data you enter there (name, email, time selected, optional intake answers) is processed by Google according to Google's privacy policy: https://policies.google.com/privacy. This site does not transmit any data to Google on your behalf.

Fonts

This site uses two fonts (Cormorant Garamond and DM Sans). Both are self-hosted on the same domain — no requests to Google's font CDN or any other third-party server are made for fonts. This avoids the GDPR concerns associated with loading Google Fonts via CDN (cf. LG München I, 20 Jan 2022, Az. 3 O 17493/20).

External links

This site contains links to external websites — for example, the Holistic Dialogue Manifesto on Google Drive, the Substack article, and LinkedIn. We have no control over the content or privacy practices of these external sites.

4. Your rights under GDPR

You have the following rights regarding any personal data we hold (essentially: any data contained in correspondence you've initiated with us by email or by booking a call):

• Right of access (Art. 15 GDPR) — to know what data we hold
• Right to rectification (Art. 16 GDPR) — to correct inaccurate data
• Right to erasure (Art. 17 GDPR) — to have your data deleted
• Right to restriction (Art. 18 GDPR) — to limit how data is used
• Right to data portability (Art. 20 GDPR) — to receive your data in a portable format
• Right to object (Art. 21 GDPR) — to object to certain processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority. In Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (www.datenschutz-berlin.de).

To exercise any of these rights, please contact ayham.shk@gmail.com.

5. Retention

Correspondence and records of professional engagements are retained as long as is reasonable for the working relationship and to comply with legal obligations (typically at least 6 years for invoicing-related correspondence under § 147 AO). After this period, data is deleted unless its retention is required by law.

6. Updates to this policy

This policy may be updated when the technical implementation of the site changes (for example, if analytics are added). The current version is always available at this URL.

Last updated: 8 May 2026

Datenschutzerklärung (auf Deutsch)

Eine vollständige deutsche Übersetzung dieser Datenschutzerklärung sollte für die rechtliche Verbindlichkeit in Deutschland von einem Übersetzer oder einer Anwältin erstellt werden. Die englische Fassung oben beschreibt die tatsächliche technische Umsetzung dieser Website wahrheitsgemäß.

[An dieser Stelle sollte eine professionell übersetzte deutsche Fassung eingefügt werden, oder ein Verweis auf eine externe rechtsverbindliche deutsche Datenschutzerklärung. Empfehlung: Vor dem Launch durch eine Anwältin / einen Anwalt prüfen lassen.]