Legal

Privacy policy

We take the protection of your personal data seriously. We process your data exclusively on the basis of the applicable law, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains the key aspects of data processing on this website.

1. Controller

Khaled Asef EPU (ROOX Advisory)
Schönbrunner Allee 23, 1130 Vienna, Austria
Email: info@rooxadvisory.com

2. Hosting and server log files

This website runs on WordPress.com. For users in the EU, the provider is Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland, part of the Automattic group (USA).

When you visit the website, technical data is processed automatically, such as your IP address, date and time of access, the page requested, browser type and operating system. This data is required for the secure and stable operation of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.

Data may be transferred to the USA in this context. According to the provider, Automattic is certified under the EU-US Data Privacy Framework and additionally uses EU Standard Contractual Clauses. More information: automattic.com/privacy

3. Contact form and email enquiries

If you contact us via the contact form or by email, we process the data you provide (e.g. name, email address, company, industry, message) in order to handle your enquiry and respond to you.

The legal basis is the performance of pre-contractual measures or of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Form data is transmitted and stored via the Jetpack form feature (Automattic). To protect against spam, form entries are checked by the Akismet service (Automattic).

4. Email communication

We use Microsoft 365 for email communication. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Processing in third countries cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) and (f) GDPR.

5. Disclosure to acquiring partners

Our service consists of introducing merchants to suitable acquiring partners. We only pass on data from your enquiry, and documents you provide to us during preparation (KYC), to selected acquiring partners if you have instructed us to do so or have expressly consented (Art. 6(1)(a) and (b) GDPR). We will inform you in advance which partner will receive your data. Your data is never passed on for advertising purposes.

6. Visitor statistics

This website uses the statistics feature of WordPress.com and Jetpack (Automattic) to analyse website usage in aggregated form, such as the number of page views. According to the provider, IP addresses are not stored permanently. The legal basis is our legitimate interest in improving our services (Art. 6(1)(f) GDPR).

7. Cookies

This website only uses technically necessary cookies required for the operation and security of the website. We do not use advertising or marketing cookies. You can delete or block cookies at any time in your browser settings.

8. Fonts

The fonts used on this website are hosted locally on our server. No connection to Google or other font providers is established when you visit the website.

9. Storage period

We only store your data for as long as necessary to handle your enquiry and provide our service, or as long as statutory retention periods apply, for example under the Austrian Federal Fiscal Code (generally seven years). Enquiries that do not lead to a collaboration are deleted after three years at the latest.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent at any time with effect for the future. Simply contact us at info@rooxadvisory.com.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, http://www.dsb.gv.at.

Last updated: November 2026