Privacy policy

Thank you for your interest in our online offer. Below we inform you about the collection, processing and use of your personal data.
Personal data is all data that relates to you as a person, e.g. name, address, e-mail address or user behavior on a website.

1. Name and contact details of the controller

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:
Burak Yildirim, Ettlinger Str. 13, 76137 Karlsruhe. E-mail: m.burak.yildirim@outlook.com

2. Collection of personal data when visiting our website

a. Collection of access data and log files

You can use our website without providing any personal data, i.e. without registering or otherwise providing us with information. In this case, we only collect the personal data that your browser transmits to our server and that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
-IP address
-date and time of the request
-time zone difference to Greenwich Mean Time (GMT)
-content of the request (specific page)
-access status/HTTP status code
-amount of data transferred
-website from which the request originates
-browser
-operating system and its interface
-language and version of the browser software.
This log file information is stored for a maximum of 7 days for security reasons (e.g. misuse and fraud) and then deleted. This does not apply to data whose further storage is necessary for evidence purposes. These will only be deleted after final clarification of the security-relevant incident.

b. Cookies

Cookies are used on our website to enable you to use certain functions and to make your visit to our website as convenient and secure as possible. At the same time, with your consent, we use cookies from third-party providers in order to be able to offer you our services as efficiently and in line with your interests as possible and to make our offer as economical as possible.
Cookies are small text files that are stored on your computer.
We use the following cookie categories:
Session cookies: We use so-called session cookies. These cookies store information about your visit to our website on your PC, such as information about the website visitor's shopping cart to enable purchases via this online store or your cookie settings.
The use of these cookies serves our legitimate interest in an optimized presentation and functionality of our offer in accordance with Art. 6 para. 1 lit. f DSGVO.
Statistics/marketing/personalization cookies: According to the law, we can store cookies on your device if they are absolutely technically necessary for the operation of this site. For all other cookie types, we require your consent or a legitimate interest in their use.
If you have given us your consent, we use cookies in accordance with Art. 6 para. 1 lit. a GDPR to personalize content and advertisements, to offer functions for social media and to analyze access to our website.
When you visit our website for the first time, you will be informed in a pop-up window about the use of cookies on our website, if we use any. You then have the option of clicking on the arrows behind the respective cookie category for further details. There you will find information on the category, provider, purpose and storage duration of the cookies we use. Under the "Performance" tab, you can then activate the switch for the types of cookies whose use you consent to. If you then confirm this selection with "Accept all" or "Accept selection only", you are giving us your consent to the use of these cookies on our website.
You can change or withdraw your consent at any time in the cookie declaration on our website.
If we use cookies without your consent, their use serves our predominantly legitimate interest in an optimized presentation and economic operation of our online offer in accordance with Art. 6 para. 1 lit. f GDPR.
If you do not want cookies from our website to be stored on your computer, you can prevent this by making the appropriate settings in your browser. There you can generally deactivate the setting of cookies and delete cookies that have already been saved. However, individual functions of our website may then not be fully usable.
The settings for cookies differ depending on the browser you are using. The help menu of each browser describes how you can change your cookie settings.
Further information on the general objection to the use of cookies for tracking or online marketing purposes can be found at http://www.aboutads.info/choices/ or on the website https://www.youronlinechoices.com.

c. Hosting of the website by a third-party provider

We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. If personal data is then sent to a country outside Canada (e.g. to our sub-processors), this data is protected by contractual obligations comparable to those in standard contractual clauses. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
We or our hosting provider process all data that is generated in the course of using our website. These are inventory data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to our online offer.
The processing takes place on the basis of our legitimate interest in an efficient and secure provision of this online offer (Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR).

3. Collection and use of personal data when contacting us

We process inventory data (e.g. names, addresses and contact details) that you have provided to us when contacting us (e.g. via contact form, by e-mail or by telephone) in order to fulfill contractual obligations or to answer your inquiries in accordance with Art. 6 Para. 1 lit. b GDPR. Which data is collected can be seen from the respective input forms. Information that is absolutely necessary to process your inquiry is marked as mandatory fields.
For inquiries via our website, we store the IP address and the time of the respective user action. This is done on the basis of our legitimate interests and the interests of users in protecting their data from misuse and unauthorized use. We do not pass this data on to third parties unless this is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.
We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. We review the necessity of data storage every two years.

4. Administration and financial accounting

We process your data as part of the organization of our business for the purposes of office organization, financial accounting and compliance with statutory archiving obligations as well as the general processing of payment transactions. The same data is processed here as is processed for the provision of contractual services. The legal basis for processing is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing the data lies in maintaining our business operations. The deletion of the data required to fulfill the contract takes place as specified in this processing activity. We transmit data to consultants, such as tax consultants or auditors, the tax authorities and payment service providers.

5. Deletion of data

In accordance with Art. 17 and Art. 18 GDPR, data processed by us will be deleted or its processing restricted. Unless otherwise stated, data is erased when it is no longer required for its intended purpose. However, if the deletion conflicts with statutory retention obligations, the processing of the data is merely restricted, i.e. it is blocked for further use and cannot be processed for other purposes.
The most relevant retention obligations are retention for 6 years in accordance with § 257 para. 1 HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

6. Integration of third-party services and content

We use content and service offerings from third-party providers as part of our online offering. This occurs, for example, when integrating videos, maps and fonts. The use is based on our legitimate interest in the analysis, optimization, security and economic operation of our online offer in accordance with Art. 6 para. 1 lit. f GDPR.
A prerequisite for the integration of the content of these third-party providers is that they receive your IP address, otherwise they would not be able to deliver the content to your browser. The transmission of the IP address is therefore necessary to display the content.
Third-party providers may use "tracking pixels" or "web beacons", i.e. small invisible graphics, for statistical or marketing purposes. This makes it possible to analyze the number of hits and visitor traffic on this website. Pseudonymous information may be stored in cookies on your end device and linked to technical information about the browser, operating system, referring website, time of visit, pages accessed and information from other sources.
Font Awesome: Display of fonts and symbols; service provider: The Font Awesome icons are hosted on our server, no data is transmitted to the provider of Font Awesome; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR);

7. Reference to your rights

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds specified in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).
You have the right to obtain from us restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to processing, for the duration of the verification by the controller.
You also have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

8. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims (Art. 21 GDPR).
This does not apply if the processing is for direct marketing purposes (by email or post). We will then no longer process your data for this purpose.

9. Changes to the privacy policy

We may change the privacy policy in order to adapt it to a changed legal situation or changes to our service or data processing. However, this only applies to declarations on data processing. Where user consents are affected, changes will only be made with your consent.
You are therefore requested to inform yourself regularly about the content of our privacy policy.