How we handle your data.

Last updated: 4 October 2026

1. Who is responsible

Ali Afandi, trading as Afandi Pharma, Bahnhofstraße 10/9, 6300 Wörgl, Austria. Email: ali@afandipharma.com.

2. What we collect, and why

• Enquiry form: name, company, country, role, email, phone (optional) and your project details. We use them to answer your enquiry, arrange the call and prepare a quotation. Legal basis: steps before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
• Email and WhatsApp: what you send us, for the same purpose and on the same basis. WhatsApp is run by Meta, and its own privacy terms apply.
• Visiting the site: our host processes technical data (IP address, browser, time of the visit) to deliver and protect the site. We count visits with Cloudflare Web Analytics, which uses no cookies. Legal basis: Art. 6(1)(f) GDPR.

We use no cookies, no advertising and no cross-site tracking. Our fonts are stored on this site, so no request goes to Google. Your language choice is saved only in your own browser.

3. Who receives your data

• Cloudflare, Inc. (USA): hosting, security, visit statistics and email forwarding.
• Web3Forms (Web3Creative, India): receives the form and forwards it to our email. It keeps submissions for up to three years under its own terms.
• Google (Gmail): our email inbox.
• European suppliers: only when you ask for a quotation, and only the technical details they need. We share your company name only with your agreement.

Where data leaves the EU, it is protected by the EU Standard Contractual Clauses in each provider's data processing terms.

4. How long we keep it

If no business follows, we delete your enquiry within two years of our last contact. If we do business together, we keep business records for seven years, as Austrian tax law requires.

5. Your rights

You can ask us for access to your data, and to correct, delete, restrict or transfer it, and you can object to its use. Write to ali@afandipharma.com. You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at) or to the authority in your country.

6. Good to know

Giving us your details is voluntary, but without an email address we cannot reply. We make no automated decisions about you.