Privacy policy
What personal data this website processes, why and for how long. Last updated: October 2026.
The German version of this privacy policy is the legally binding one. This English version is provided for convenience.
Controller
The controller responsible for processing personal data on this website is:
- Name
- GHO Solutions, owner Flemon Ghobrial
- Address
- see the legal notice
- Telephone
- +43 670 352 17 33
- office@ghosolutions.com
The legal bases are the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Last updated: October 2026.
In short
This website sets no cookies, uses no analytics or tracking services and loads no fonts from third-party servers. I process personal data only when you contact me, and in the server log files that are technically necessary.
Hosting and server log files
The website runs on a server I rent from Hetzner Online GmbH (Industriestrasse 25, 91710 Gunzenhausen, Germany). The data centre is located in the EU. The web server software is nginx.
On every request the server automatically records: IP address, date and time, requested URL, amount of data transferred and status code, browser and operating system (user agent), and the page you came from (referrer). I use this data to run the site securely and reliably and to defend against attacks. The legal basis is my legitimate interest under Art. 6(1)(f) GDPR. The log files are kept for usually 14 days and then deleted. They are kept longer only if a specific security incident has to be investigated.
A data processing agreement under Art. 28 GDPR is in place with Hetzner.
Contact form
If you use the contact form, I process your name, your email address, your message and the topic you chose in order to answer your inquiry. The form sends this information by email to office@ghosolutions.com. I use the email delivery service Resend (Resend, Inc., USA) to send it. Resend processes the data on my behalf.
The transfer to the USA relies on the adequacy decision for the EU-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses. [please verify: confirm Resend's certification and the data processing agreement]
The legal basis is Art. 6(1)(b) GDPR if your inquiry aims at a contract or concerns an existing one, and otherwise my legitimate interest in answering inquiries under Art. 6(1)(f) GDPR. Providing the data is voluntary, but without your name, email address and message I cannot answer your inquiry.
I keep your inquiry for as long as it takes to deal with it and delete it afterwards. If a contract follows, I keep the business records for the statutory retention periods (currently seven years under the UGB and the BAO).
Contact by email or telephone
If you write or call, I process what you tell me (for example name, contact details and the content of your inquiry) to deal with it. The legal bases are Art. 6(1)(b) and (f) GDPR. The same retention rules apply as for the contact form. I do not pass this data on without your consent unless the law requires me to.
Fonts
All fonts are stored on my own server. Loading a page does not open a connection to Google Fonts or any other font provider.
Cookies, analytics and tracking
This website sets no cookies. I use no web analytics, advertising or tracking services and embed no third-party content such as maps or videos. A cookie banner is therefore not needed.
Storing your theme choice
You can switch between a light and a dark theme. Your browser keeps your choice in local storage (localStorage) under the key "gho-theme" so that it is still there on your next visit. This value never leaves your device and is not sent to the server. It is stored at your explicit request, because you trigger the setting yourself, and under section 165(3) TKG 2021 this does not require consent. You can delete the value at any time in your browser settings.
Your rights
Under the GDPR you have the right to:
- access your stored data (Art. 15)
- have inaccurate data rectified (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw consent you have given, with effect for the future (Art. 7(3))
Just write to office@ghosolutions.com. I usually reply within one month.
If you believe I process your data unlawfully, you can lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
Changes
If the website or the legal situation changes, I update this policy. The version published here applies.