Конфиденциальность

Controller and hosting

Elshan Musayev trading as EM Consulting is the controller. Contact details appear above. The website and its separate application database and private document directory are hosted on the existing Hetzner server in Germany. Baden-Baden accounts and documents are separate from Vienna SOS accounts and documents. Requests necessarily transmit IP address and technical connection data to the hosting infrastructure.

Account and private cases

The application processes your account name, email, password authentication records, verification status and sessions to provide an account. For cases it processes questions, selected documents, extracted text, messages, reports and processing records. Provide only information you are entitled to share and remove unnecessary third-party and sensitive information. Documents are not public website files. Private access is checked against the signed-in account.

Processing necessary to provide the requested account and case service is based on Article 6(1)(b) GDPR. Security, abuse prevention and operational diagnostics rely on legitimate interests under Article 6(1)(f). Where a legal retention obligation applies, Article 6(1)(c) applies. Separate explicit consent is required for health information; withdrawing it stops further consent-based processing, without changing the lawfulness of earlier processing.

Service providers and email

Transactional email uses Resend. During setup messages use the verified no-reply@viennasos.at sender address with the Baden-Baden SOS display name; this does not share the two applications’ accounts. Email verification and reset links are sent for requested account operations, not unsolicited marketing. See https://resend.com/legal/privacy-policy for provider processing information.

AI processing is performed through the existing Microsoft Azure OpenAI resource when enabled for the requested case. Relevant questions and extracted text are sent for processing. Private documents are not sent to public web search. The service does not promise that every provider operation occurs exclusively within Germany; provider processing and applicable transfer arrangements must be checked for the enabled configuration. New payments are disabled during launch preparation; no card details are collected by this application.

Cookies, location and photographs

Necessary authentication cookies protect account sessions. The signed baden_free cookie supports anonymous usage limits and lasts up to 24 hours. Where proxy handling is enabled, a changing pseudonymous network identifier supports abuse controls. The account session is configured for seven days with renewal.

The public report-preparation form currently keeps selected photos and entered location in your browser. Location is requested only after you activate the location button and grant permission. Downloading a report does not send it to the city or to EM Consulting. A future submission or publication workflow will require a separate clear action and notice; private case documents are never treated as public community contributions. External links open services operated by third parties.

Retention and deletion

You can delete a history or account through the application. Deletion clears case content and queues file removal; failed removals can be retried using the separate deletion journal. Unattached documents are eligible for removal after 24 hours. Original documents linked to inactive histories become eligible after 12 months, a recorded warning and at least 30 further days. Background cleanup may run later than the eligibility time. A recorded warning does not prove email delivery. Reports remain available until the related history or account is deleted.

No new payment records are created during launch preparation. Security, consent, entitlement and deletion records can remain where necessary for access control, resolving an outstanding issue or proving deletion. An operational record is not a reason to retain full private documents indefinitely. The controller reviews residual records when their purpose ends. No claim of an already operational scheduled backup service is made in this version.

Your rights

You may request access, correction, deletion, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw consent without retroactive effect. Contact consulting@elshanmusayev.com. You may complain to a supervisory authority, including the Baden-Württemberg data protection authority: https://www.baden-wuerttemberg.datenschutz.de/.