Privacy Policy

Last updated: April 2026

1. Controller

Moussa Sheikh Akriem MSA DataX KuglerstraĂźe 17 10439 Berlin Email: info@msadatax.com

2. Legal Basis of Processing

We process personal data in accordance with Art. 6 GDPR, in particular for contract performance (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), legitimate interests such as secure and reliable website operation (Art. 6(1)(f) GDPR), and where applicable, your consent (Art. 6(1)(a) GDPR).

3. Collection and Processing of Personal Data

When visiting this website, technically necessary information is processed, including server log data such as IP address, browser type, request time, and visited pages. This processing is required for secure and stable delivery of our online services. Log files are automatically deleted after a maximum of 14 days. The legal basis is Art. 6(1)(f) GDPR.

If you contact us via forms or email, we process the data you provide (e.g. name, email address, message content) to handle your request and, where applicable, to initiate a contract. Data is stored on our email servers. The legal basis is Art. 6(1)(b) GDPR (contract initiation/performance) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

We use HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA) as a processor for contact and lead handling. In this context, data such as name, email address, phone number, company details, and the content of your request may be processed. HubSpot may use its own cookies and tracking technologies to analyze interactions with our forms. Data stored in HubSpot is retained for the duration of the business relationship or until deletion is requested.

A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot. Where data is transferred to third countries (in particular the United States), such transfers are based on appropriate safeguards, in particular the EU Standard Contractual Clauses pursuant to Art. 46 GDPR and, where applicable, the EU-US Data Privacy Framework (DPF) pursuant to Art. 45 GDPR, provided HubSpot is certified under the DPF.

Data transmission is protected via SSL/TLS encryption.

4. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

Vercel provides the infrastructure for hosting, deployment, and content delivery (CDN). In this context, technical data such as IP address, browser information, and access times may be processed to ensure the delivery and performance of the website.

A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.

Any transfer of personal data to third countries, in particular to the United States, is based on appropriate safeguards, in particular the EU Standard Contractual Clauses pursuant to Art. 46 GDPR and, where applicable, the EU-US Data Privacy Framework (DPF) pursuant to Art. 45 GDPR, provided Vercel is certified under the DPF.

We note that data transfers to the United States may involve risks, as an equivalent level of data protection to that in the European Union cannot be fully guaranteed in all cases. The safeguards mentioned are intended to minimize these risks as far as possible.

5. Cookies and Similar Technologies

This website uses cookies and similar technologies. Cookies are small text files stored on your device.

We distinguish between the following categories:

a) Technically Necessary Cookies Technically necessary cookies are required to ensure the operation and security of the website. This may include, in particular, session cookies and technically necessary storage mechanisms. The legal basis is Art. 6(1)(f) GDPR in conjunction with Section 25(2) TTDSG.

b) Optional Cookies and Analytics Services Optional technologies are used exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG. Where you grant consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used, for example through page views, interactions, and aggregated usage statistics. IP anonymization is enabled; IP addresses are not stored permanently and are truncated or anonymized prior to any further processing. Analytics data is retained for a standard period of 14 months. Data may be transferred to the United States; Google Ireland Limited acts as a data processor and transfers are based on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR and, where applicable, the EU-US Data Privacy Framework (DPF) pursuant to Art. 45 GDPR, provided Google is certified under the DPF. Processing begins only after your active consent via our consent banner. You can withdraw or adjust your consent at any time with effect for the future through the cookie settings. You may also prevent data collection by Google Analytics by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

c) Local Storage Technologies In addition, technically necessary storage mechanisms such as local storage or session storage may be used where required for the functionality of the website. Legally, these are treated similarly to necessary cookies.

Consent Management Where legally required, we use a consent management tool (cookie banner) to manage your choices. You can withdraw or adjust your consent at any time with effect for the future.

Disabling Cookies You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, or exclude them altogether. Please note that disabling technically necessary cookies may limit the functionality of the website.

6. Google Ads and Conversion Tracking

Where you have given your consent, we use Google Ads and Google Ads Conversion Tracking, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in cooperation with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Conversion tracking allows us to measure which actions users take on our website after interacting with our advertisements. This may include actions such as contact requests or page visits.

In this context, personal data may be processed by Google not only on our behalf but also for its own purposes. Therefore, Google may act as an independent controller or joint controller in certain processing operations.

The collected data may be used by Google to create usage profiles and for personalized advertising (remarketing), even if we do not actively use remarketing features.

Data may be transferred to the United States. Transfers are based on the EU Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU-US Data Privacy Framework (Art. 45 GDPR), provided Google is certified under the DPF.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG.

You may withdraw your consent at any time via the cookie settings.

7. Communication via WhatsApp

We offer the option to contact us via the messaging service WhatsApp.

If you contact us via WhatsApp, your phone number and any data you provide in the message (e.g. name, request content) will be processed for the purpose of handling your inquiry.

Please note that WhatsApp is a service provided by WhatsApp Ireland Limited (for users in the EEA) and Meta Platforms Inc., USA. Personal data may therefore be transferred to servers in third countries, in particular the United States. We have no influence over the extent of data processing by WhatsApp. Further information can be found in WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

The legal basis for processing is Art. 6(1)(b) GDPR (contract initiation) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

The use of WhatsApp is voluntary. Alternatively, you can contact us via email.

8. Storage Period

Personal data is stored only as long as necessary for the relevant purpose or as required by statutory retention obligations. Server log files are deleted after a maximum of 14 days. Google Analytics data is automatically deleted after 14 months. HubSpot data is retained for the duration of the business relationship or until a deletion request is made.

9. Your Rights

Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority.

10. Supervisory Authority

Berlin Commissioner for Data Protection and Freedom of Information Alt-Moabit 59–61 10555 Berlin Website: https://www.datenschutz-berlin.de

11. Updates

We reserve the right to update this privacy policy in case of legal or technical changes.