Privacy Policy

The protection of your personal data is important to me. I treat your data confidentially and in accordance with applicable data protection laws (in particular the General Data Protection Regulation, GDPR) and this privacy policy.

1. Controller

The controller responsible for data processing on this website is:

Mag. Sermet Karshon-Haider
Oberer Schlossberg 20
4224 Wartberg ob der Aist, Austria
Email: sermet@karshon-haider.com
Phone: +43 650 990 9908

2. Hosting

This website is hosted with Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via the "Cloudflare Pages" service. When you access the site, the server automatically processes the following data (so-called server log files):

• IP address of the requesting device
• Date and time of the request
• Time zone difference from Greenwich Mean Time
• URL requested and amount of data transferred
• Notification of successful retrieval (HTTP status code)
• Browser and operating system used (user agent)
• Referrer URL (the previously visited page)

This data is technically necessary to deliver the website and ensure its security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the proper technical operation of the website).

Cloudflare may transfer data to the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework. For more information, see www.cloudflare.com/privacypolicy/.

3. Contact by email and phone

When you contact me by email or phone, the data you provide (name, email address, phone number, subject matter) is processed exclusively for the purpose of handling your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures / initiation of a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

The data is deleted as soon as it is no longer needed for the processing of your request, at the latest after the expiry of statutory retention periods (in particular §132 Austrian Federal Fiscal Code: 7 years for business correspondence).

4. Fonts (Google Fonts)

This website loads the DM Sans font family from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Your IP address is transmitted to Google so that the fonts can be displayed correctly in your browser. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the website).

Further information: policies.google.com/privacy.

5. Liability seal by Exali AG

This website embeds the liability insurance seal of Exali AG. The graphic element of the seal is loaded from the servers of Exali AG. Due to the technical design of the internet, your IP address is processed in this context so that the graphic can be transmitted to your browser.

If you click on the seal, you will leave this website and be redirected to the servers of Exali AG.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The purpose of the processing is to provide proof of the statutory mandatory information on professional liability insurance (§ 2(11) DL-InfoV) in a visually appealing manner.

Further information can be found in the Exali privacy policy.

6. Cookies

This website does not set any cookies for analytics, marketing, or tracking purposes. No cookies are stored that would require consent under §165(3) of the Austrian Telecommunications Act 2021.

7. Your rights as a data subject

Under the GDPR, you have the following rights:

• Access to the personal data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Complaint to the supervisory authority

To exercise your rights, please contact me using the contact details above.

8. Right to complain

You have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at

9. Changes to this privacy policy

I reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to implement changes to my services.

Last updated: June 2026