Legal information
Privacy and professional boundaries
This notice covers manual enquiry handling at Decision Office. It explains what data is stored in the account, why it is needed, and how the client and operator use it when reviewing an enquiry.
1. Data controller
Controller: EM Consulting, Inhaber Elshan Musayev.
The postal and email addresses for privacy questions and exercising your rights are listed in the contact section on this page.
2. Data collected
When you create an account and use a case, we store account details, the enquiry content, conversations and files you add.
- account email, password hash, session data and the name provided in the enquiry;
- the enquiry area and information needed for a manual review;
- the decision, deadline, reason for urgency, participants, options considered and practical cost of a mistake;
- acknowledgements about professional and emergency boundaries, involvement of a minor, the legal representative’s authority and respect for the child’s own views;
- messages between the client and operator, and uploaded PDF, DOCX, JPG or PNG files;
- notice version, operation times and minimal technical records needed for security, rate limiting and action auditing.
3. Information not to provide
Do not enter diagnoses, detailed medical or other special-category data, full names of children or third parties, documents, account numbers, identity-document details or other identifiers unnecessary for assessing suitability.
The service’s professional boundaries do not make accidentally supplied special-category data safe or necessary. If such information has entered a case, contact the operator through your account or the privacy email address to agree on next steps.
4. Purposes and preliminary legal bases
Data is used to review an enquiry at the applicant’s request, assess whether the situation fits Decision Office, communicate through the specified secure channel, take steps before a possible contract, protect the form against abuse and maintain minimal operational records.
The enquiry is processed to take steps at the client’s request before a possible contract and provide a substantive response. Account protection, abuse prevention and minimal auditing support the security of the service and its users.
The checkbox confirms that you have read this notice and request processing of the data necessary to review your enquiry. It is not unconditional consent to any future purpose.
5. Required and optional information
Fields marked as required are needed for the initial suitability assessment and response. Without them, the enquiry cannot be meaningfully reviewed. Optional technical and contextual information is used only for the stated purposes; omitting optional information should not, in itself, disadvantage the review.
6. Access, recipients and international transfers
Case content is accessible to the client who owns it and the operator through a protected account. The application and database are hosted by Hetzner; Resend is used for transactional account emails, such as email verification and access recovery.
In manual mode, enquiry, message and file content is not automatically sent to Azure or third-party generative AI services. Submitting an enquiry neither enables nor authorises AI analysis.
7. Security and human decisions
Contact information and enquiry content are stored encrypted; decryption access is separate from the public form. Logs and notifications should not contain situation details or contact information.
Elshan Musayev reads and handles the enquiry; replies are posted by a person in the case conversation. This mode does not perform automated decision-making, analysis or AI-report generation.
8. Retention periods
The current policy provides for deletion of identifiable working and enquiry materials 90 calendar days after a case is completed. A subsequent legal hold or obligation to retain contractual, tax or accounting records takes precedence.
For incomplete, declined or abandoned enquiries, retention depends on the case status, the need to continue correspondence, a client deletion request and applicable retention obligations. Technical hashes are pseudonymised, not anonymous.
9. Your rights
Depending on the circumstances, rights to information, access, rectification, erasure, restriction, portability and objection may apply. Where particular processing relies on consent, it can be withdrawn for the future without affecting the lawfulness of processing before withdrawal.
Send requests to consulting@elshanmusayev.com. We respond without undue delay and usually within one month; complex requests may require an extension under GDPR rules, with notice during the first month. Reasonable identity verification may be necessary to protect your data.
You can also complain to a data protection supervisory authority. The official online channel for Baden-Württemberg is listed in the sources below.
10. Children’s and third parties’ data
Share only the minimum necessary information about others, without full names where possible. A situation involving a child requires confirmation of the legal representative’s authority, age-appropriate participation and respect for the child’s own views; that confirmation alone is not a universal legal basis for all processing.
The permissibility of handling minors’ and third parties’ data is assessed separately. Do not attach their documents or full identifiers; the operator may request minimal proof of authority or decline to review such materials.
11. Professional boundaries
Decision Office does not replace medical, psychotherapeutic, psychiatric, legal, tax or investment advice. Crisis, emergency and dangerous situations are not accepted; contact local emergency services or an appropriate licensed professional immediately.
A recommendation does not guarantee an outcome. The final decision, consent to actions and responsibility remain with the client who has legal capacity or their legal representative. Where there is a conflict of interest, work does not begin or is discontinued.