Legal
Privacy Policy
Last updated: 22 May 2026
1. Data Controller
The controller responsible for data processing on this website is:
Ahmad Mukhtar Sabri (Sabri Consulting)Daubhausstraße 29
55283 Nierstein
Germany
Email: mukhtar.sabri@sabri-consulting.com
2. Overview
Sabri Consulting respects your privacy. This website is an informational site for an advisory practice. It does not host user accounts, does not sell anything, and does not process payments. We collect personal data in three limited ways: information you send us through the contact form, standard technical information needed to serve the website securely, and — only with your consent — analytics data that helps us understand how the site is used.
3. Information We Collect
3.1 Contact form
When you use the contact form, you provide information such as your name, email address, organization, and the content of your message. We use this solely to respond to your enquiry.
3.2 Server log data
When you visit the website, our hosting provider automatically processes standard technical data — including your IP address, browser type, device information, and the time of access. This is necessary to deliver the website reliably and securely.
3.3 Analytics data
If you accept analytics cookies via our cookie banner, we use a web-analytics service to collect aggregated, statistical information about how visitors use the site — such as pages viewed, approximate location, device and browser type, and referring sources. This data helps us improve the website. Analytics are loaded only after you give consent, and you can decline or withdraw consent at any time (see Section 6).
4. How We Use Your Information & Legal Bases
- To respond to enquiries — processing is necessary to take steps at your request prior to, or in the course of, a possible engagement (Art. 6(1)(b) GDPR), and is in our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
- To operate the website securely — processing of server log data is based on our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR).
- To understand and improve the website — analytics processing is carried out only on the basis of your consent (Art. 6(1)(a) GDPR), given through our cookie banner, and can be withdrawn at any time.
5. Service Providers (Processors)
We rely on the following providers to operate this website. Each processes data only as needed to provide its service:
- Vercel — website hosting and delivery, including server log data.
- Webweezl Connect — the contact form embedded on the Contact page.
- Google — website analytics, used only if you accept analytics cookies.
Where a provider processes data outside the European Union, appropriate safeguards (such as EU Standard Contractual Clauses) are applied.
6. Cookies & Analytics
This website uses two categories of cookies and similar technologies. When you first visit the site, a cookie banner lets you accept or decline each category. Your choice is stored in your browser and can be changed at any time using the "Cookie settings" link in the site footer.
6.1 Essential (always active)
Required for the site to function and to remember your privacy choices. These do not require consent under Art. 6(1)(f) GDPR / § 25(2) TTDSG.
- sabri-consulting.com — stores your cookie-consent choice. Storage: sc-cookie-consent-v2 (browser localStorage, persistent until you clear site data). Provider: this website.
6.2 Analytics (consent required)
Help us understand how visitors use the website so we can improve it. These are loaded only if you give consent via the cookie banner or the Cookie settings link. If you decline, no analytics cookies are set and no analytics data is sent. Legal basis: your consent under Art. 6(1)(a) GDPR / § 25(1) TTDSG.
- Google Tag Manager — loads and manages other analytics tags on the site. GTM itself does not set tracking cookies. Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
- Google Analytics 4 — aggregated usage analytics (pages viewed, device type, approximate location, referring source). Cookies: _ga, _ga_<container> with a two-year retention. Provider: Google Ireland Ltd. Data may be transferred to Google LLC in the United States under EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
Consent Mode. Even when analytics is enabled, we use Google's Consent Mode v2 — Google services receive a signal reflecting your choice, and tags that require consent only fire after you have granted it.
Contact form. Any cookies set by the embedded contact form on the Contact page are governed by Webweezl Connect, the provider of that tool.
7. Data Retention
We keep enquiry data only as long as necessary to respond to you and to manage any resulting engagement, and thereafter only as required by applicable legal retention obligations. Server log data is retained only for as long as needed for security and operational purposes.
8. Your Rights Under the GDPR
As a data subject in the European Union, you have the following rights:
- Right of access (Art. 15 GDPR) — to request a copy of the personal data we hold about you.
- Right to rectification (Art. 16 GDPR) — to request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR) — to request deletion of your personal data.
- Right to restriction (Art. 18 GDPR) — to request that we limit how we process your data.
- Right to data portability (Art. 20 GDPR) — to receive your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR) — to object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at mukhtar.sabri@sabri-consulting.com.
9. Supervisory Authority
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority — in particular:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP)https://www.datenschutz.rlp.de
10. Data Security
This website is served over an encrypted connection (TLS/SSL). We and our providers apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
11. Children's Privacy
This website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when it was last revised.
13. Contact
For any questions or requests regarding this Privacy Policy or your personal data, contact:
Ahmad Mukhtar Sabri (Sabri Consulting)Daubhausstraße 29, 55283 Nierstein, Germany
Email: mukhtar.sabri@sabri-consulting.com