Privacy & Confidentiality

1. Controller and privacy contact

The controller is AFS Consulting Berlin GmbH, represented by Managing Director Sharoon Yaqub. For privacy questions or requests concerning your information, use the contact details below.

2. Website access and hosting

The site is published through ChatGPT Sites (OpenAI). Hosting and security services may process IP addresses, request times, visited URLs, browser/device information and error records to deliver and protect the site. The relevant basis is Article 6(1)(f) GDPR: the legitimate interest in a reliable, secure website. Exact provider entities, processing locations and log-retention settings have not yet been confirmed.

3. Enquiry form and email

The form uses your name, email, service, message and any optional planning or phone details to prepare a draft in your email app. It does not submit or store enquiry entries on the website server or in browser storage. You review and send the message yourself to hello@afs-consultancy.com. Once sent, AFS staff handling your enquiry and the email providers process it to respond. Article 6(1)(b) GDPR applies to steps you request before entering a contract; Article 6(1)(f) applies to other correspondence, based on our legitimate interest in responding to enquiries. Mobile and WhatsApp numbers are optional. Omitting them does not prevent an email reply. Supplying a number does not subscribe you to marketing.

Optional WhatsApp replies

AFS replies via WhatsApp only when you separately opt in or initiate a WhatsApp conversation. For the form opt-in, the basis is Article 6(1)(a) GDPR. The email draft includes your choice, the consent wording, notice version and draft preparation time so AFS can retain evidence with the enquiry. Withdraw by emailing hello@afs-consultancy.com or replying STOP on WhatsApp; withdrawal does not affect earlier lawful processing. Email remains available. WhatsApp/Meta processes contact, account and usage information and may process data outside the EEA, including in the United States. The applicable business account, provider terms and transfer safeguards are still being confirmed. This choice covers replies to your enquiry, not promotional messages. Do not send passports, financial records or health information through WhatsApp.

WhatsApp privacy policy · WhatsApp Business data processing terms

4. Cookies, media and external links

AFS has not added advertising trackers, analytics, newsletters, user accounts or checkout tools. Fonts, translations and videos load from this site; videos do not load an external player. Language selection uses the page URL, not a tracking cookie. Hosting-related cookies or technical storage remain subject to provider confirmation.

5. Recipients, confidentiality and international access

The website prepares an email draft locally. When you send it, the chosen email providers and AFS staff handling your request receive the enquiry, including any optional phone details and WhatsApp choice. WhatsApp receives communication data when that channel is used, not when you simply fill in this form. Hosting, email and messaging services, and any AFS access from outside the EEA, require applicable international-transfer arrangements; exact recipients, locations and safeguards are still being confirmed. Please do not enter passports, health records or bank documents in the initial enquiry.

6. Retention

Enquiry records are retained for handling your request and any continuing relationship, then deleted when no longer needed unless a legal retention duty or a justified legal-claims need applies. Contract and accounting records follow applicable statutory duties (Article 6(1)(c)). These are retention criteria, not a verified fixed schedule. Exact mailbox, backup and hosting-log deletion periods are still being confirmed.

7. Your rights

Subject to the GDPR conditions, you may request access, correction, deletion, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent at any time for processing based on consent; withdrawal does not affect earlier lawful processing. This website does not make automated decisions with legal or similarly significant effects. Contact AFS using the details below to exercise your rights.

8. Complaints

You may complain to a data protection supervisory authority, including in the EU country of your habitual residence, workplace or alleged infringement. For the Berlin-based company, you can contact the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Berlin supervisory authority and complaint information

9. Information to be completed

The appointed DPO, if one is required, has not been confirmed. Until that is clarified, direct privacy enquiries to AFS through the contact below. We will update this statement when the hosting and email providers, recipients, retention settings and international-transfer arrangements are confirmed, or the website changes.

Privacy questions? Contact AFS.