Privacy policy

Privacy Policy

  1. General Information

The protection of your personal data is an important concern for us. We process personal data exclusively within the framework of the applicable legal data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

In this Privacy Policy, we inform you about which personal data we collect, for what purposes we use this data, on which legal basis the processing takes place, and what rights you have as a data subject.

  1. Controller

The controller responsible for data processing on this website is:

BySukranCaliskan
Westfleth 27
21614 Buxtehude
Germany

Email:
suekran5257@icloud.com

Additional contact and shipping address in Turkey

BySukranCaliskan
Karadolap Mahallesi Saya Yokuşu Fulya Sokak No: 42
34065 Eyüpsultan / Istanbul
Turkey

Phone / WhatsApp:
+90 536 410 23 80

  1. Collection and Processing of Personal Data

We collect and process personal data when you visit our website, place an order, create a customer account, contact us, or use our offered services.

The data processed may include in particular:

Name and surname
Billing and delivery address
Email address
Phone number, if provided
Order data
Payment information
IP address
Device and browser information
Communication content when you contact us

  1. Purposes of Data Processing

We process personal data for the following purposes:

Providing and operating our online shop
Processing and handling orders
Payment processing
Shipping and delivery of goods
Customer service and communication
Processing returns, withdrawals, and complaints
Fulfilling statutory retention obligations
Improving our website and our services
Protection against misuse, fraud, and security risks
Marketing and newsletter distribution, provided that you have given your consent

  1. Legal Bases for Processing

The processing of personal data is carried out on the basis of the following legal grounds:

Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.
Art. 6(1)(c) GDPR, where we are legally obliged to process the data.
Art. 6(1)(f) GDPR, where processing is necessary to protect our legitimate interests.
Art. 6(1)(a) GDPR, where you have given us your explicit consent.

  1. Hosting and Shopify Shop System

Our online shop is operated via Shopify.

Shopify provides us with the technical platform through which we offer our goods and process orders. When using our online shop, personal data may be processed by Shopify.

Shopify processes data in particular for the provision of the shop system, order processing, payment processing, shop security, and the technical provision of the website.

  1. Payment Processing

To process payments, we use the payment service providers offered in the online shop.

Depending on the selected payment method, the data required for payment processing is transmitted to the respective payment service provider. This may include in particular name, billing address, order amount, payment data, and other transaction-related information.

The processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR and for the fulfilment of legal obligations pursuant to Art. 6(1)(c) GDPR.

  1. Shipping Service Providers

For the delivery of your order, we transmit the necessary data to the respective shipping service provider. This includes in particular name, delivery address, and, where applicable, email address or phone number, if required for delivery or shipment tracking.

The processing is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.

Depending on the country of delivery, processing and shipping may take place from Germany, the European Union, or Turkey.

  1. Contacting Us

If you contact us by email, phone, WhatsApp, Instagram, or via social media, we process the data you provide in order to handle your inquiry.

Depending on the nature of the inquiry, processing is carried out on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Your inquiry will be deleted once it has been fully processed, provided that no statutory retention obligations prevent deletion.

  1. Customer Account

If you create a customer account, we store the data you provide so that you can place future orders more quickly and view your order history.

Processing is carried out on the basis of Art. 6(1)(b) GDPR. You may request deletion of your customer account at any time, provided that no statutory retention obligations prevent deletion.

  1. Cookies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device.

Some cookies are technically necessary for our website to function properly. Other cookies are used for analysis, personalization, or marketing purposes.

Technically necessary cookies are processed on the basis of Art. 6(1)(f) GDPR. Cookies that are not technically necessary are used only with your consent pursuant to Art. 6(1)(a) GDPR.

You can change your cookie settings or withdraw your consent at any time.

  1. Analytics and Marketing Tools

If we use analytics or marketing tools, this is done only within the framework of legal requirements and, where necessary, on the basis of your consent.

Possible services may include analytics and marketing services such as Google Analytics, Meta Pixel, or comparable tools, provided that they are actively used in the shop.

  1. Newsletter

If you subscribe to our newsletter, we use your email address to regularly send you information about products, offers, and news.

Subscription to the newsletter takes place only with your explicit consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending us a message.

  1. Disclosure of Data to Third Parties

Personal data is disclosed to third parties only if this is necessary for contract processing, if we are legally obliged to do so, if you have given your consent, or if there is a legitimate interest.

Recipients of personal data may include in particular:

Shopify as the shop system provider
Payment service providers
Shipping service providers
Tax advisors and accounting service providers
IT and hosting service providers
Marketing and analytics service providers, if used

  1. Transfer to Third Countries

As part of the use of certain service providers or in connection with orders related to Turkey, personal data may be transferred to countries outside the European Union or the European Economic Area.

In such cases, we ensure that appropriate safeguards are in place to protect your personal data, for example through adequacy decisions by the European Commission, standard contractual clauses, or other legally provided protection mechanisms.

  1. Storage Duration

We store personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations exist.

Order and invoice data are generally stored for the legally prescribed period due to statutory commercial and tax retention obligations.

  1. Your Rights

Within the framework of the applicable legal provisions, you have the following rights:

Right of access to your stored personal data
Right to rectification of inaccurate data
Right to deletion of your data
Right to restriction of processing
Right to data portability
Right to object to certain processing activities
Right to withdraw consent given with effect for the future
Right to lodge a complaint with a data protection supervisory authority

  1. Withdrawal of Your Consent

If data processing is based on your consent, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing carried out before the withdrawal remains unaffected.

  1. Data Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, and unauthorized disclosure.

Our website uses SSL or TLS encryption to protect the transmission of confidential content.

  1. Validity of this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary, in particular if legal requirements, technical processes, or the service providers used change.