Privacy policy

 

Thank you for your interest in our online offering. Below we inform you about the collection, processing and use of your personal data.
Personal data is all data that relates to you as a person, such as name, address, e-mail address or user behavior on a website.

1. Name and contact details of the controller

The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is:
Burak Yildirim, Pfannkuchstraße 5, 76185 Karlsruhe. E-mail: m.burak.yildirim@outlook.com

2. Collection of personal data when visiting our website

a. Collection of access data and log files

You can use our online offering without providing any personal information, i.e. without registering or otherwise transmitting information to us. In that case, we only collect the personal data that your browser transmits to our server and that is technically required for us to display our website and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
–IP address
–Date and time of the request
–Time zone difference to Greenwich Mean Time (GMT)
–Content of the request (specific page)
–Access status/HTTP status code
–Volume of data transmitted in each case
–Website from which the request originates
–Browser
–Operating system and its interface
–Language and version of the browser software.
This log file information is stored for security reasons (e.g. misuse and fraud) for a maximum period of 7 days and then deleted. Excluded from this are data whose further retention is necessary for evidentiary purposes. These are not deleted until the security-relevant incident has been conclusively resolved.

b. Cookies

Our website uses cookies to enable you to use certain functions and to make visiting our website as convenient and secure as possible. At the same time, with your consent, we use third-party cookies in order to offer our services as efficiently and relevantly as possible and to operate our offering as economically as possible.
Cookies are small text files that are placed and stored on your computer.
We use the following cookie categories:
Session cookies: We use so-called session cookies. These cookies store information about your visit to our website on your PC, such as information about the website visitor's shopping cart, to enable purchases via this online shop, or your cookie settings.
The use of these cookies serves our legitimate interest, which prevails within the framework of a balancing of interests, in an optimized presentation and functionality of our offering in accordance with Art. 6 para. 1 lit. f GDPR.
Statistics/marketing/personalization cookies: By law, we may store cookies on your device if they are strictly technically necessary for the operation of this site. For all other types of cookies, we require your permission or a legitimate interest for their use.
To the extent that you have given us your consent, we use cookies in accordance with Art. 6 para. 1 lit. a GDPR to personalize content and advertisements, to provide social media features and to analyze access to our website.
When you visit our website for the first time, you will be informed in a pop-up window about the use of cookies on our website, to the extent that we use any. You then have the option of clicking on the arrows next to the respective cookie category for further details. There you will receive information on the category, provider, purpose and storage duration of the cookies we use. Under the "Performance" tab, you can then activate the toggle for the types of cookies whose use you consent to. If you then confirm this selection with "Accept all" or "Accept selection only", you thereby grant us consent to the use of these cookies on our website.
You can change or withdraw your consent at any time in the cookie declaration on our website.
To the extent that we use cookies without your consent, their use serves our legitimate interest, which prevails within the framework of a balancing of interests, in an optimized presentation and economical operation of our online offering in accordance with Art. 6 para. 1 lit. f GDPR.
If you do not want cookies from our website to be stored on your computer, you can prevent this by adjusting the appropriate settings in your browser. There you can generally disable the setting of cookies and delete cookies already stored. However, individual functions of our website may then not be fully usable.
The procedure for adjusting cookie settings differs depending on the browser used. The help menu of each browser describes how you can change your cookie settings.
Further information on general objection to the use of cookies for tracking or online marketing purposes can be found at http://www.aboutads.info/choices/ or the website https://www.youronlinechoices.com.

 

c. Hosting of the website by a third-party provider

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and presenting the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. In the context of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. within the framework of further processing on behalf. In the event of data transfers to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. When personal data is then sent to a country outside Canada (e.g. to our sub-processors), that data is protected by contractual obligations comparable to those in standard contractual clauses. Further information on data protection at Shopify can be found at the following website: https://www.shopify.de/legal/datenschutz
In this context, we or our hosting provider process all data that is generated in the course of using our website. These are inventory data, content data, contract data, usage data, meta and communication data of customers, prospective customers and visitors to our online offering.
Processing is carried out on the basis of our legitimate interest in the efficient and secure provision of this online offering (Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR).

3. Collection and use of personal data when making contact

We process inventory data (e.g. names, addresses and contact details) that you have provided to us in the course of contacting us (e.g. via contact form, by e-mail or by telephone), for the performance of contractual obligations or for responding to your inquiries in accordance with Art. 6 para. 1 lit. b GDPR. The data collected can be seen from the respective input forms. Information that is absolutely necessary for processing your request is marked as mandatory fields.
For inquiries via our website, we store the IP address and the time of the respective user action. This is done on the basis of our legitimate interests, as well as the interests of users in protection against misuse and unauthorized use of their data. We do not pass this data on to third parties, unless this is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c GDPR.
We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations exist. We review the necessity of data storage every two years.

4. Administration and financial accounting

We process your data within the framework of organizing our operations for the purposes of office administration, financial accounting and compliance with statutory archiving obligations, as well as general payment processing. The same data that is processed for the performance of contractual services is processed here. The legal bases for processing are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing the data lies in maintaining our business operations. The deletion of data required for the performance of contracts is carried out as specified for this processing activity. In this context, we transmit data to advisors, such as tax consultants or auditors, to the tax authorities, and to payment service providers.

5. Deletion of data

In accordance with Art. 17 and Art. 18 GDPR, data processed by us is deleted or its processing restricted. Unless otherwise stated, data is deleted when it is no longer required for its intended purpose. However, if statutory retention obligations preclude deletion, the processing of the data is merely restricted, meaning it is blocked for further use and cannot be processed for other purposes either.
The most relevant retention obligations are retention for 6 years pursuant to § 257 para. 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years pursuant to § 147 para. 1 AO (books, records, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

6. Integration of third-party services and content

Within the framework of our online offering, we use content and service offerings from third-party providers. This occurs, for example, when embedding videos, maps and fonts. The use is carried out on the basis of our legitimate interest in the analysis, optimization, security and economical operation of our online offering in accordance with Art. 6 para. 1 lit. f GDPR.
A prerequisite for the integration of content from these third-party providers is that they receive your IP address, as they would otherwise be unable to deliver the content to your browser. Transmission of the IP address is therefore necessary for the display of the content.
Third-party providers may use "counting pixels" or "web beacons", i.e. small invisible graphics, for statistical or marketing purposes. This enables the evaluation of visitor traffic and access figures on this website. In doing so, pseudonymous information may be stored in cookies on your end device and linked with technical information on the browser, operating system, referring website, time of visit, pages accessed, and information from other sources.
Font Awesome: Display of fonts and icons; service provider: Font Awesome icons are hosted on our server; no data is transmitted to the provider of Font Awesome; legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR);

7. Notice of your rights

You have the right to request confirmation from us as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to the information specified in detail in Art. 15 GDPR.
You have the right to demand from us the immediate correction of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
You have the right to demand from us that personal data concerning you be deleted without delay, provided one of the reasons specified in detail in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).
You have the right to demand from us the restriction of processing where one of the conditions set out in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the review by the controller.
You also have the right pursuant to Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. As a rule, you can contact the supervisory authority of your habitual place of residence or workplace or our company's registered office for this purpose.

8. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (Art. 21 GDPR).
This does not apply if the processing is carried out for the purposes of direct marketing (by e-mail or by post). We will then no longer process your data for this purpose.

9. Changes to the privacy policy

We may amend the privacy policy in order to adapt it to a changed legal situation or changes to our service or data processing. However, this only applies with regard to declarations on data processing. Where the consent of users is affected, changes will only be made with your approval.
You are therefore requested to inform yourself regularly about the content of our privacy policy.