WESTAVA DIGITAL / INFORMATION

Privacy notice

1. Controller and contact

Mahmoud Hussein
WESTAVA Digital
Lipper Weg 197
45772 Marl
Germany

For questions about the processing of your personal data, contact: mahmoud423694@gmail.com.

2. Visiting this website

This website is hosted through OpenAI Sites on Cloudflare infrastructure. Delivering and protecting the site involves technical connection data, such as IP address, requested page, time and browser information. The purpose is reliable and secure operation. Where we determine this processing, the basis is our legitimate interest in secure website operation under Article 6(1)(f) GDPR.

You can browse the public website, use the concept demos and send a project enquiry without creating an account. Sign-in is required only for the protected site administration area. The platform’s own privacy terms also apply to that administration account and access process. Depending on the service, processing may occur outside the EEA. Provider information about safeguards and data handling is available in the linked policies. OpenAI · Cloudflare.

3. Project brief and email

When you send the project form, we receive your name, email, optional company, chosen budget, project description and language. The enquiry is stored in the website’s Cloudflare D1 database with a reference and timestamp, and can be read and handled only through the protected administration area. The reference confirms storage of the enquiry; it does not create a contract. The copy button uses your clipboard when supported. An optional email alternative opens your configured email application and is sent only when you send the draft.

When you send an enquiry, we use the information to assess and answer it. For enquiries about a potential contract, the basis is Article 6(1)(b) GDPR; for other business correspondence, Article 6(1)(f) GDPR. Providing information is voluntary, but we need a reply address and sufficient project details to respond. Do not include passwords or other sensitive credentials.

To prevent abusive submissions, the form checks input, limits request volume and compares a daily-changing keyed hash derived from the connection address. The address is not stored in plain text in the enquiry database. Hashes on enquiries older than 24 hours are removed when the next enquiry is submitted or the administration list is accessed. This security processing serves the legitimate interest in reliable service under Article 6(1)(f) GDPR. No tracking across websites is used for this purpose.

For administration alerts, the project reference and service category are sent through our n8n automation to the administration’s Telegram channel. Your name, email address and project description are not included in these alerts. They remain in the protected enquiry system. This routing helps us handle enquiries promptly; the information about hosting, recipients and safeguards also applies.

4. Interactive demos, fonts and tracking

The demos use fictional data and browser memory. New sample quotes, searches and workflow simulations are not saved to a server; they reset on reload. CSV exports are generated locally in your browser. Use fictional information only. Fonts and illustration files are served with this website. We have not installed advertising pixels, analytics, external font requests or embedded social-media feeds. The hosting and sign-in platform may use technically necessary storage for access and security.

5. Recipients and retention

Technical service providers handle connection and access data as part of hosting. The site database is provided by Cloudflare; email correspondence is handled through our email service. We retain received enquiries as long as required to handle them, protect legitimate interests or meet legal recordkeeping obligations, then delete them. We do not sell enquiry data. Enquiries are reviewed and deleted by the site administration when they are no longer required; there is no fixed automatic deletion schedule.

6. Your rights

Subject to the relevant legal conditions, you can request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your situation. You can complain to a supervisory authority, including the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. Contact the authority.

This site does not make automated decisions about you with legal or similarly significant effects.

Version: 9 November 2026