1. General Information

This Privacy Policy explains how we collect, use, and protect your personal data when you visit and use this website in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Ömer Mutlu
Paulstr. 14
50676 Köln, Germany
Email: oemermutlu@googlemail.com

2. What Personal Data We Collect and Legal Basis

When you use our shop, we collect the following data with the corresponding legal basis under GDPR Article 6:

Order Processing Data:

- Name and address (Legal basis: Art. 6(1)(b) GDPR - contract performance)

- Email address (Legal basis: Art. 6(1)(b) GDPR - contract performance)

- Shipping and billing information (Legal basis: Art. 6(1)(b) GDPR - contract performance)

- Payment details (processed via Stripe - Legal basis: Art. 6(1)(b) GDPR - contract performance)

Technical Data:

IP address and device/browser information (Legal basis: Art. 6(1)(f) GDPR - legitimate interest for security, fraud prevention, and essential website functionality).

Legal Compliance Data:

Order and tax records (Legal basis: Art. 6(1)(c) GDPR - legal obligation under German commercial and tax law).

3. Purposes of Data Processing

We use your personal data for the following purposes:

Contract Performance:

- Processing and fulfilling your orders

- Managing payments and refunds

- Providing customer service and responding to inquiries

Legal Compliance:

- Maintaining records for tax and commercial law requirements

- Compliance with consumer protection laws

Legitimate Interests:

- Website security and fraud prevention

- Essential website functionality and performance

- Improving our products and services based on technical performance data

4. Payment Processing with Stripe

We use Stripe Inc. (510 Townsend Street, San Francisco, CA 94103, USA) as our secure payment processor.

Data Processing: When you make a purchase, your payment information is transmitted directly to Stripe. We do not store any credit card data on our servers.

Legal Basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in secure payment processing).

Data Transfers: Stripe may transfer and process your data in the United States and other countries outside the EU. These transfers are protected by the EU-U.S. Data Privacy Framework adequacy decision and Standard Contractual Clauses (SCCs) approved by the European Commission.

Stripe's Privacy Policy: For detailed information about Stripe's data handling practices, please refer to: https://stripe.com/privacy.

5. Data Storage and Retention

We retain your personal data only as long as necessary for the purposes outlined above or as required by law:

Order Data: 10 years (German Commercial Code § 257 and Tax Code § 147).

Customer Service Communications: 3 years after last contact Technical.

Logs: 12 months maximum

Marketing Consent: Until consent is withdrawn.

After these periods, data is either deleted or anonymized unless longer retention is required by law.

6. Hosting and Technical Service Providers

Website Hosting: This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA).

Data Collected by Vercel:

- IP addresses

- Browser type and version

- Operating system information

- Access times and referring URLs

- Technical performance data

Purpose: Security (DDoS protection), performance monitoring, error tracking, and technical optimization.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).

Data Transfers: Data may be transferred to and processed in the United States under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

7. Cookies and Tracking Technologies

Essential Cookies Only: We only use technically necessary cookies that are essential for the basic functionality of our website, including:

- Shopping cart functionality

- Session management

- Security features

- User preferences (language, etc.)

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in website functionality) - No consent required for essential cookies.

No Tracking or Analytics: We do not use any tracking cookies, analytics cookies (such as Google Analytics), advertising cookies, or other non-essential cookies that would require your consent.

Cookie Management: You can disable cookies in your browser settings, but this may affect essential website functions like maintaining your shopping cart.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

- Right of Access (Art. 15 GDPR): Request a copy of the personal data we hold about you

- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate personal data

- Right to Erasure (Art. 17 GDPR): Request deletion of your personal data in certain circumstances

- Right to Restrict Processing (Art. 18 GDPR): Request limitation of processing in certain situations

- Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format

- Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests

- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

How to Exercise Your Rights:

Ömer Mutlu
Paulstr. 14
50676 Köln, Germany
Email: oemermutlu@googlemail.com

We will respond to your request within one month

Right to Lodge a Complaint:

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence. In Germany, you can contact your local data protection authority (Landesdatenschutzbehörde).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

- Unauthorized access

- Alteration or destruction

- Accidental loss

- Unlawful processing

These measures include encryption, access controls, regular security assessments, and staff training.

10. Automated Decision-Making

We do not use automated decision-making or profiling that would significantly affect you.

13. Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

- Posting the updated policy on our website

- Sending an email notification for significant changes

- The "Last Updated" date at the bottom indicates when the policy was last revised.

15. Contact Information

For any questions about this Privacy Policy or our data processing practices, please contact us:

Ömer Mutlu
Paulstr. 14
50676 Köln, Germany
Email: oemermutlu@googlemail.com

Language:

This Privacy Policy is available in both English and German. In case of discrepancies, the German version is legally binding in accordance with applicable German law.