Legal
Privacy Policy
What data we process, for what purpose, and what rights you have. Last updated: October 2026.
Protecting your data matters to us. We process personal data only in accordance with the General Data Protection Regulation (GDPR; German: DSGVO) and the Austrian Data Protection Act (Datenschutzgesetz, DSG).
1. Controller
Hassan Zanjirani Farahani, MMA (operator of SilkDanube)
Lustkandlgasse 3/1/1-2a, 1090 Vienna, Austria
Email: [email protected] · Phone: +43 660 444 4422
If you commission paid services, Luxonaria GmbH (FN 474934h, same address) is the controller for the contract, invoice and client file.
2. What data we process and why
2.1 Visiting the website
When you access the pages, our server processes technical data (IP address, date and time, page accessed, browser and operating system). We need this data to provide the website securely and reliably. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). We delete server logs after 14 days at the latest, except in the event of a security incident.
2.2 Quick-Check, forms and email
When you complete the Quick-Check or a form, or write to us, we process the details you provide: name, email, phone, language, nationality, current place of residence, your concern (for example study, work, family, company formation, investment), and where applicable education, language skills, budget and timeline, as well as your message. Purpose: to answer your enquiry, assess the suitable path and prepare a consultation. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). We store form entries in our website database on our own server. Please do not send us any health data or information about criminal proceedings.
2.3 Disclosure to partners – only with your consent
For legal, tax and financial matters, we work with independent professionals (lawyers, notaries, tax advisers, financial service providers). We only pass on your data if you expressly consent to this in the form, and only to the party responsible for your concern. These partners are controllers in their own right. Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future.
2.4 Client support
If you use our services, we keep a client file with contact details, your concern, agreed services, appointments, payments and correspondence. Legal basis: contract (Art. 6(1)(b) GDPR) and statutory retention obligations (Art. 6(1)(c) GDPR, § 132 BAO: 7 years).
2.5 Newsletter
You will only receive our newsletter if you subscribe and confirm your subscription via a link in a confirmation email (double opt-in). You can unsubscribe at any time via the link in every issue. Legal basis: consent (Art. 6(1)(a) GDPR).
2.6 Checks for investments
If you wish to found a company or invest with us, we first verify your identity and the source of funds and check international sanctions lists. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and, where applicable, legal obligations (Art. 6(1)(c) GDPR).
3. Service providers
| Service | Purpose | Registered office | Transfer |
|---|---|---|---|
| Hetzner Online GmbH | Server and hosting | Germany | EU |
| Cloudflare, Inc. | Protection against attacks, fast delivery, email forwarding | USA | EU-US Data Privacy Framework, standard contractual clauses |
| Sendinblue SAS (Brevo) | Sending confirmation emails and newsletters | France | EU |
| Google LLC (Gmail) | Receiving forwarded emails | USA | EU-US Data Privacy Framework |
We have data processing agreements in place with these service providers (Art. 28 GDPR). We load fonts from our own server, not from Google.
4. Cookies
We do not use statistics, marketing or advertising cookies, and we do not embed content from Google, Facebook or other advertising networks. That is why we do not need a cookie banner. The only technically necessary cookie is a security cookie set by our protection service Cloudflare (__cf_bm), which fends off attacks by automated programs and expires after 30 minutes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and § 165(3) TKG 2021. Should we use analytics in the future, we will do so only without cookies or with your consent.
5. Links to other services
Links to WhatsApp, LinkedIn or authorities are simple links. No data is transferred until you click on them. The rules of the respective provider then apply.
6. Retention period
- Enquiries without an engagement: 24 months after the last contact, after which we delete them
- Client files and invoices: 7 years (statutory retention obligation)
- Newsletter: until you unsubscribe
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent you have given. To exercise these rights, write to [email protected]. If you believe that we are not processing your data lawfully, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
8. Security
The website is encrypted throughout (HTTPS). Access to form entries and client files is restricted to the founders. We make backup copies regularly.