Privacy Policy

§ 1 General Information

Your personal data (e.g. title, name, address, email address, telephone number) will only be processed by us in accordance with the provisions of German data protection law, European Union (EU) data protection law (GDPR), and Turkish data protection law (KVKK – Law No. 6698). The following provisions inform you about the purposes of processing, legal bases, recipients, storage periods, as well as your rights and the controller responsible for your data processing. This privacy policy only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself about their respective handling of your data.

🇹🇷 Note for Turkish customers: As a business based in Turkey, we also comply with the Turkish Personal Data Protection Law (KVKK – Kişisel Verilerin Korunması Kanunu, Law No. 6698).

§ 2 Contact

(1) Processing Purpose

We process your personal data that you provide to us via email, contact form, etc., to answer and handle your inquiries. You are not obliged to provide us with your personal data. However, without providing your email address, we cannot respond to you via email.

(2) Legal Bases

a) If you have given us explicit consent to process your data, Art. 6(1)(a) GDPR is the legal basis for this processing.

b) If we process your data to carry out pre-contractual measures, Art. 6(1)(b) GDPR is the legal basis.

c) In all other cases (particularly when using a contact form), Art. 6(1)(f) GDPR is the legal basis.

RIGHT TO OBJECT: You have the right to object at any time to the data processing based on Art. 6(1)(f) GDPR that does not serve direct marketing, for reasons arising from your particular situation.

In the case of direct marketing, you can object to the processing at any time without giving reasons.

(3) Legitimate Interest

Our legitimate interest in processing is to communicate with you quickly and answer your inquiries cost-effectively. If you provide us with your address, we reserve the right to use it for postal direct marketing. You can protect your interest in data protection through limited data disclosure (e.g., using a pseudonym).

(4) Recipient Categories

Hosting providers, shipping service providers for direct marketing

(5) Storage Period

Your data will be deleted when it can be inferred from the circumstances that your inquiry or the matter in question has been conclusively resolved.

However, if a contract is concluded, the data required under commercial and tax law will be retained by us for the legally prescribed periods, which is usually ten years (see § 257 HGB, § 147 AO).

(6) Right of Withdrawal

If processing is based on your consent, you have the right to withdraw your consent at any time.

§ 3 Your Rights as a Data Subject

If personal data is processed from you, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

1. Right to Information

You can request information about your personal data processed by us within the scope of Art. 15 GDPR.

2. Right to Rectification

If the information concerning you is not (no longer) accurate, you can request rectification according to Art. 16 GDPR. If your data is incomplete, you can request completion.

3. Right to Erasure

You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

4. Right to Restriction of Processing

Within the scope of Art. 18 GDPR, you have the right to request restriction of the processing of data concerning you.

5. Right to Data Portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller.

6. Right to Withdraw Data Protection Consent

According to Art. 7(3) GDPR, you have the right to withdraw your data protection consent at any time. The lawfulness of the processing carried out on the basis of consent until withdrawal is not affected.

7. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (particularly in the member state of your residence, workplace, or the place of the alleged violation) according to Art. 77 GDPR.

🇹🇷 For Turkish customers: You can also lodge complaints with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu – KVKK): https://www.kvkk.gov.tr

Please also note your right to object according to Art. 21 GDPR:

a) General: justified objection required

If personal data concerning you is processed:

• to safeguard our overriding legitimate interest (legal basis according to Art. 6(1)(f) GDPR) or
• in the public interest (legal basis according to Art. 6(1)(e) GDPR),

you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In case of objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

b) Special case direct marketing: simple objection is sufficient

If personal data concerning you is processed for direct marketing purposes, you have the right to object to this processing at any time without giving reasons; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Controller for Data Processing