Privacy Policy
Effective date: 16 July 2026
1. Controller
The controller responsible for processing personal data through this website and in connection with the services of Business-Alignment is:
Seifallah Adnan Ishak Elguindy
trading under the business designation “Business-Alignment”
Oststr. 38
42651 Solingen
Germany
Email: support@business-alignment.com
Telephone: +49 172 241 8581
Website: https://www.business-alignment.com/
In this Privacy Policy, “Business-Alignment”, “we”, “us” and “our” refer to the controller identified above.
2. Scope of this Privacy Policy
This Privacy Policy explains how personal data is processed when you:
• visit this website;
• use the contact form;
• communicate with us by email or telephone;
• request information, a proposal or a quotation;
• enter into negotiations with us;
• become a client, prospective client or other business contact.
We process personal data in accordance with the General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”), the German Telecommunications Digital Services Data Protection Act (“TDDDG”) and other applicable data-protection laws.
Personal data means any information relating to an identified or identifiable natural person. This may include names, professional contact details, email addresses, telephone numbers, IP addresses and information concerning the use of this website.
3. Website hosting through Squarespace
This website is created and hosted using Squarespace.
For customers established outside the United States, the relevant Squarespace entity is:
Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8, D08 N12C
Ireland
When you access this website, Squarespace and its technical service providers may process technical information required to make the website available and to maintain its security, stability and functionality.
This information may include:
• your IP address;
• the date and time of access;
• the requested pages and files;
• the amount of data transferred;
• the website or source from which you accessed this website;
• browser type and browser version;
• operating system;
• device information;
• language and regional settings;
• error, diagnostic and security information.
The purposes of this processing are:
• displaying and delivering the website;
• establishing a secure connection;
• identifying and resolving technical faults;
• preventing misuse and cyberattacks;
• maintaining the security and stability of the website.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically efficient operation of this website.
Where cookies or similar technologies are strictly necessary to provide the website or a function expressly requested by the visitor, Section 25(2) TDDDG also applies.
Further information is available at:
https://www.squarespace.com/privacy/
https://www.squarespace.com/dpa
4. Cookies and similar technologies
This website uses cookies and similar technologies.
Necessary technologies are used to operate, display and secure the website, protect the contact form, and remember visitors’ cookie preferences.
With your consent, Squarespace Analytics and performance cookies may also be used to understand how visitors interact with the website.
The legal bases are:
• Article 6(1)(f) GDPR and Section 25(2) TDDDG for strictly necessary technologies; and
• Article 6(1)(a) GDPR and Section 25(1) TDDDG for optional analytics and performance technologies.
Optional cookies remain restricted until you give consent through the cookie banner.
You can accept, reject or manage optional cookies through the cookie banner. You may change or withdraw your selection at any time through the “Cookie Preferences” control displayed on the website.
Withdrawal of consent applies with effect for the future and does not affect the lawfulness of processing carried out before the withdrawal.
Further information is provided in our Cookie Policy.
5. Squarespace Analytics
Subject to your consent, this website uses Squarespace Analytics to obtain statistical information concerning website use.
Squarespace Analytics may process information such as:
• pages viewed;
• approximate visitor numbers;
• visitor sessions;
• visit duration;
• referring websites and traffic sources;
• general browser and device information;
• repeated visits;
• interactions with website pages and content.
The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Squarespace Analytics and performance cookies remain restricted unless you accept the relevant cookie category or select “Accept all”.
The Squarespace Activity Log has been disabled. We therefore do not use the Activity Log to view identifiable visitor IP-address information.
We do not currently use:
• Google Analytics;
• Meta Pixel;
• LinkedIn Insight Tag;
• Google Ads conversion tracking;
• third-party behavioural-advertising technologies;
• cross-site marketing profiles.
6. Contact form
You may contact Business-Alignment through the contact form available on this website.
Depending on the information entered into the form, we may process:
• your full name;
• your business email address;
• your company or organisation;
• your position or professional role;
• your telephone number;
• your country;
• the subject and content of your inquiry;
• project, commercial or service requirements;
• the date and time of submission;
• technical information required to transmit and protect the submission.
The purposes of processing are:
• receiving and reviewing your inquiry;
• communicating with you;
• responding to questions about our services;
• assessing a possible engagement;
• preparing a proposal or quotation;
• taking steps requested by you before entering into a contract;
• documenting relevant business communications;
• preventing spam, automated submissions and misuse.
Where your inquiry concerns a possible quotation, engagement, contract or other pre-contractual matter, the legal basis is Article 6(1)(b) GDPR.
For general professional inquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interests are receiving, managing, documenting and responding to professional communications and developing legitimate business relationships.
Where processing is required to comply with tax, accounting, commercial or other legal obligations, the legal basis is Article 6(1)(c) GDPR.
The contact form is provided through Squarespace. Squarespace processes the information insofar as this is technically necessary to operate the form and transmit the submission to the selected storage destinations.
7. Contact-form storage through Google Drive
Contact-form submissions are connected to Google Drive and are stored in a spreadsheet associated with the Business-Alignment Google Workspace account.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
The Google Drive spreadsheet may contain the information entered in the contact form, including:
• name;
• email address;
• company or organisation;
• telephone number;
• country;
• inquiry or message;
• project requirements;
• date and time of submission;
• any other information voluntarily included in the form.
The purposes of storing submissions in Google Drive are:
• receiving and organising inquiries;
• maintaining an overview of prospective business opportunities;
• responding to the submitter;
• preparing proposals and quotations;
• documenting relevant business communications;
• monitoring the status of inquiries;
• preventing loss of contact-form submissions.
The legal bases are Article 6(1)(b) GDPR for pre-contractual inquiries and Article 6(1)(f) GDPR for general business communications and organised inquiry management.
Our legitimate interests are the reliable administration, documentation and follow-up of legitimate business inquiries.
Access to the spreadsheet is restricted to the controller and any specifically authorised persons or professional service providers who require access for the relevant business purpose.
The Google Drive spreadsheet is not used to register visitors for newsletters, advertising lists or marketing campaigns.
8. Squarespace Contacts and Form Submitters
Where the contact form includes a required email-address field, Squarespace may also display the submitter and the submitted information in the Squarespace Contacts, Lists and Segments, or Form Submitters area.
This processing helps us:
• identify the person who submitted the form;
• review the relevant form details;
• manage and respond to the inquiry;
• maintain a record of the communication.
The legal bases are Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
The contact form is not connected to a Squarespace newsletter or mailing list. Submitting the form does not constitute consent to receive newsletters or unrelated promotional emails.
9. Contact-form notifications and Google Workspace email
Contact-form submissions are also configured to be forwarded to:
support@business-alignment.com
Business-Alignment uses Google Workspace to provide and manage its business email communications.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When you contact us by email, or when a contact-form submission is forwarded to our email account, Google Workspace may process:
• your name;
• your email address;
• your company or organisation;
• the subject and content of the communication;
• attachments;
• technical email metadata;
• the date and time of communication;
• subsequent correspondence.
Where the communication concerns a quotation, possible engagement, contract or other pre-contractual request, the legal basis is Article 6(1)(b) GDPR.
For general professional communications, the legal basis is Article 6(1)(f) GDPR. Our legitimate interests are maintaining reliable business communications, responding to inquiries and documenting relevant correspondence.
Where retention is required under tax, accounting or commercial law, the legal basis is Article 6(1)(c) GDPR.
Further information about Google’s processing and data-protection terms is available at:
https://policies.google.com/privacy
https://cloud.google.com/terms/data-processing-addendum
10. Google reCAPTCHA
The contact form uses Google reCAPTCHA to protect the website and contact form against spam, automated submissions, fraudulent activity and misuse.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google reCAPTCHA assesses whether an interaction with the contact form is likely to originate from a human visitor or an automated system.
For this purpose, Google may process technical and usage information including:
• IP address;
• browser and device information;
• operating-system information;
• date and time of access;
• referring website;
• language settings;
• mouse, keyboard and other interaction information;
• cookies, browser storage or similar identifiers;
• information concerning whether the visitor is signed into a Google account;
• the reCAPTCHA response and security risk assessment.
The purpose of the processing is to protect the contact form, website, systems and business communications against automated attacks, fraudulent submissions, spam and other misuse.
The legal basis for the processing of personal data is Article 6(1)(f) GDPR. Our legitimate interests are the security, availability and reliable operation of the website and contact form.
To the extent that reCAPTCHA stores information on, or accesses information from, the visitor’s device, we rely on Section 25(2) TDDDG insofar as the technology is strictly necessary to securely provide and protect the contact form requested by the visitor.
Visitors who do not wish to use the reCAPTCHA-protected contact form may contact us directly by email at:
support@business-alignment.com
Google may process information outside the European Economic Area, including in the United States. Where legally required, transfers are based on an applicable adequacy decision or appropriate safeguards.
Further information is available at:
https://policies.google.com/privacy
https://policies.google.com/terms
11. Contact by telephone
When you contact us by telephone, we may process:
• your name;
• your company and position;
• your telephone number;
• the date and time of the call;
• notes concerning your inquiry or project;
• information required to respond or follow up.
Where the call concerns a possible contract, quotation or engagement, the legal basis is Article 6(1)(b) GDPR.
For general professional communications, the legal basis is Article 6(1)(f) GDPR.
Telephone calls are not routinely recorded.
12. Retention of contact-form submissions and communications
Contact-form submissions and general inquiries that do not result in a business relationship are normally deleted no later than 12 months after the inquiry has been fully resolved.
This applies to relevant copies stored in:
• Google Drive;
• Google Workspace email;
• Squarespace Contacts or Form Submitters;
• other internal business records.
Irrelevant, unsolicited or spam submissions may be deleted earlier.
Where an inquiry results in negotiations, a proposal, a contractual relationship or another continuing business matter, relevant information may be retained for the duration of that matter and thereafter for the applicable statutory retention periods.
Information may be retained for a longer period where necessary to:
• comply with tax, accounting, commercial or other legal obligations;
• establish, exercise or defend legal claims;
• document contractual or commercial decisions;
• investigate fraud, misuse or security incidents;
• comply with a binding request from a court or public authority.
When the relevant purpose and retention obligations no longer apply, the information will be deleted or anonymised.
13. Clients, prospective clients and business contacts
Where you request a quotation, enter into negotiations or conclude an agreement with us, we may process personal and professional information necessary to prepare, manage and perform the business relationship.
This may include:
• name and professional contact details;
• employer or represented organisation;
• position and responsibilities;
• project and commercial requirements;
• contract and quotation information;
• meeting and correspondence records;
• billing and payment information;
• information required for tax and accounting purposes;
• travel and project-coordination information;
• records concerning agreed deliverables and project milestones.
The legal bases are Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR.
Our legitimate interests include proper project management, business administration, documenting commercial decisions, protecting legal rights and maintaining professional business relationships.
14. Recipients of personal data
Where necessary for the relevant purpose, personal data may be disclosed or made accessible to:
• Squarespace as website and form platform provider;
• Google Workspace, Gmail and Google Drive;
• accountants and tax advisers;
• legal advisers;
• banks and payment service providers;
• IT, cybersecurity, email, hosting and cloud-service providers;
• authorised professional advisers and service providers;
• courts, tax authorities, law-enforcement bodies or other public authorities where legally required.
Recipients receive personal data only to the extent necessary for the relevant purpose.
We do not sell personal data.
We do not disclose contact-form information to other clients for their own purposes.
15. International data transfers
Squarespace and Google may use affiliated companies, data centres, subprocessors or technical service providers located outside the European Economic Area, including in the United States.
Where personal data is transferred to a country for which the European Commission has issued an adequacy decision, the transfer may be based on that decision.
Where no adequacy decision applies, the relevant provider may use appropriate safeguards, including the European Commission’s Standard Contractual Clauses and supplementary technical or organisational measures where required.
Information about the safeguards used by Squarespace and Google is available at:
https://www.squarespace.com/dpa
https://cloud.google.com/terms/data-processing-addendum
16. Website functions currently provided
This website currently provides a contact form through which prospective clients and other business contacts may submit inquiries.
The website does not currently provide:
• newsletter registration;
• user or customer accounts;
• online purchasing;
• online payment processing;
• automated appointment booking;
• public comments or discussion functions;
• job applications;
• file-upload functionality;
• behavioural advertising;
• third-party advertising profiles.
If additional website functions or service providers are introduced, this Privacy Policy will be updated before or when the associated processing begins.
17. External links
This website may contain links to websites operated by third parties.
When you follow an external link, you leave our website. The operator of the external website is independently responsible for the processing of personal data on that website.
Please review the privacy information provided by the relevant third party.
18. Legal obligations and protection of rights
We may process or disclose personal data where necessary to:
• comply with applicable laws and binding official requests;
• fulfil tax, accounting and commercial-law obligations;
• respond to courts, public authorities or law-enforcement bodies;
• prevent or investigate fraud, misuse or security incidents;
• establish, exercise or defend legal claims;
• protect our rights, systems, clients or other persons.
Depending on the circumstances, the legal basis is Article 6(1)(c) GDPR or Article 6(1)(f) GDPR.
19. Data security
We use appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.
The website uses encrypted transmission through TLS/SSL.
Access to Google Drive, Google Workspace and Squarespace is protected through account-access controls.
Nevertheless, communication through the internet and ordinary email cannot be guaranteed to be completely secure.
Please do not submit special categories of personal data, passport or identification documents, payment-card information, medical information or unnecessary confidential third-party information through the contact form.
Where confidential business documents are required, an appropriate transmission method can be agreed separately.
20. Obligation to provide personal data
You are not legally required to provide personal data merely to visit the publicly available parts of this website.
Certain information may, however, be necessary for us to respond to an inquiry, prepare a quotation, enter into an agreement or perform a contract.
Without the required information, we may be unable to process the relevant request.
21. Automated decision-making and profiling
We do not use personal data collected through this website for automated decision-making that produces legal effects or similarly significantly affects the person concerned within the meaning of Article 22 GDPR.
Google reCAPTCHA generates a security assessment for the limited purpose of identifying spam and automated form submissions. It is not used by Business-Alignment to assess a person’s eligibility for services, creditworthiness, employment or contractual rights.
We do not use the website for advertising profiling or behavioural advertising.
22. Your data-protection rights
Subject to the applicable legal requirements, you have the following rights:
• the right of access under Article 15 GDPR;
• the right to rectification under Article 16 GDPR;
• the right to erasure under Article 17 GDPR;
• the right to restriction of processing under Article 18 GDPR;
• the right to data portability under Article 20 GDPR;
• the right to object under Article 21 GDPR;
• the right to withdraw consent under Article 7(3) GDPR;
• the right to lodge a complaint with a supervisory authority under Article 77 GDPR.
Where processing is based on Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Where personal data is processed for direct-marketing purposes, you have the right to object to such processing at any time without providing reasons.
To exercise your rights, contact:
support@business-alignment.com
We may request appropriate information where necessary to verify your identity before acting on a request.
23. Right to lodge a complaint
You have the right to lodge a complaint with a competent data-protection supervisory authority.
The supervisory authority responsible for the controller’s establishment in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Telephone: +49 211 38424-0
Website: https://www.ldi.nrw.de/
You may also contact the supervisory authority at your habitual residence, place of work or the place of the alleged infringement.
24. Changes to this Privacy Policy
We may update this Privacy Policy where the website, our services, service providers, applicable legal requirements or data-processing activities change.
The current version will be published on this website. The effective date displayed at the beginning identifies the most recent version.