Privacy Policy

1. Controller

The controller for data processing in the sense of the GDPR is:

For questions regarding data protection, you can reach us at info@profsaracoglu.de.

2. Collection of Personal Data

Personal data is any information relating to an identified or identifiable natural person. We collect personal data only within the scope of legal provisions and only to the extent necessary for the use of our online shop and the provision of our services.

Legal Basis

The processing of personal data is carried out on the basis of the following legal grounds:

• Art. 6 (1) (a) GDPR — Consent of the data subject
• Art. 6 (1) (b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6 (1) (c) GDPR — Compliance with a legal obligation
• Art. 6 (1) (f) GDPR — Legitimate interests

3. Data Collection When Visiting Our Website

When you access our website, the following information is automatically sent by the browser used on your device to our website server:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer
• Name of your access provider

This data is evaluated exclusively to ensure the smooth operation of the website and to improve our offer. It is not possible to assign this data to a specific person. The legal basis is Art. 6 (1) (f) GDPR.

4. Customer Account & Order Process

Customer Account

When registering a customer account, we collect the following data: name, email address, and a password chosen by you. Processing is based on Art. 6 (1) (b) GDPR for the implementation of pre-contractual measures.

Order Process

During the order process, we collect the following data:

• First and last name
• Billing and delivery address
• Email address
• Phone number (optional, for delivery inquiries and, at your request, for WhatsApp communication)
• Payment information

The processing of this data is necessary for the fulfillment of the sales contract (Art. 6 (1) (b) GDPR). Furthermore, we are legally obliged to store order data for commercial and tax retention periods (6 or 10 years) (Art. 6 (1) (c) GDPR).

5. Payment Service Providers

We offer various payment methods. The data required for payment processing is transmitted directly to the respective payment service provider:

Klarna

Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. If a Klarna payment method is selected, the data required for processing is transmitted to Klarna. Privacy policy: www.klarna.com/de/datenschutz

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: www.paypal.com/de/privacy

Credit Card Payment

Credit card data is processed via the payment service provider Shopify Payments. The data is transmitted encrypted and not stored on our servers.

The legal basis for the transfer of data is Art. 6 (1) (b) GDPR (contract fulfillment).

6. Shipping Service Providers

We pass on your name and delivery address to the commissioned shipping service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn) for the purpose of goods delivery. The transfer takes place exclusively for the purpose of goods delivery on the basis of Art. 6 (1) (b) GDPR.

Your email address is transmitted to DHL so that you can be informed about the shipping status and estimated delivery via email. You can object to the transmission at any time.

7. Newsletter

If you subscribe to the newsletter offered on our website, the email address you provide will be stored for sending the newsletter. The legal basis is your consent according to Art. 6 (1) (a) GDPR.

You can revoke your consent at any time and unsubscribe from the newsletter via the unsubscribe link included in every email. The legality of the data processing already carried out remains unaffected by the revocation.

8. WhatsApp Communication and WhatsApp Marketing

We offer you the option of contacting us via the messenger service WhatsApp and, if you wish, of receiving information about your order as well as offers and news via WhatsApp. Use of this service is voluntary.

Data Processed

When communicating via WhatsApp, we process your mobile phone number, the profile name you have provided, the content and time of the messages exchanged, and the delivery status of those messages. If you have placed an order with us, we assign this information to your customer account and your order data.

Purposes and Legal Basis

Service messages and customer communication: Responding to your enquiries as well as messages regarding your order, payment and shipping. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in efficient customer communication).

Promotional messages: We send offers, discounts and news about our own products only if you have expressly given us your consent to do so. The legal basis is Art. 6 (1) (a) GDPR in conjunction with Section 7 (2) of the German Act Against Unfair Competition (UWG). You give your consent by sending us a corresponding message via WhatsApp; we document the time, the phone number and the wording of that message as evidence in accordance with Art. 7 (1) GDPR.

Withdrawal and Objection

You can withdraw your consent at any time, free of charge and with effect for the future. Simply send the word STOP via WhatsApp to +49 1515 0678910 or an email to info@profsaracoglu.de. After withdrawal you will no longer receive promotional messages. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Recipients and Data Transfers

The provider of the service is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We use the WhatsApp Business Platform. Message contents are end-to-end encrypted; however, connection and usage data (so-called metadata) are processed by WhatsApp and the affiliated Meta companies and may also be transferred to servers outside the European Union, in particular in the USA. The transfer is based on the EU-US Data Privacy Framework and, additionally, on the standard contractual clauses of the EU Commission pursuant to Art. 46 (2) (c) GDPR.

WhatsApp privacy policy: www.whatsapp.com/legal/privacy-policy-eea

Storage Period

We store your messages and your phone number for as long as this is necessary to process your request. Records of consent given and withdrawn are retained for three years after the end of the calendar year in which the consent was withdrawn, in order to fulfil our accountability obligation. Statutory retention periods remain unaffected.

9. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and contain certain information.

Technically Necessary Cookies

These cookies are necessary for the operation of the online shop (e.g., shopping cart function, login). They are set on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing a functional online shop.

Analysis and Marketing Cookies

If we use analysis or marketing cookies, they will only be activated with your explicit consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time via the cookie settings.

10. Hosting & Order Processing

Our online shop is operated on the Shopify platform (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes all data generated in connection with the use of the online shop on our behalf.

We have concluded an order processing agreement (AVV) with Shopify in accordance with Art. 28 GDPR. Shopify stores your data on servers in Canada and the USA. The transfer is based on standard contractual clauses of the EU Commission.

Shopify's privacy policy: www.shopify.com/de/legal/datenschutz

11. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — You have the right to request information about your personal data stored by us.
• Right to rectification (Art. 16 GDPR) — You can request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR) — You can request the erasure of your data, provided there is no legal retention obligation.
• Right to restriction of processing (Art. 18 GDPR) — You can request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR) — You can request to receive your data in a common, machine-readable format.
• Right to object (Art. 21 GDPR) — You can object to the processing of your data at any time.
• Right to withdraw consent (Art. 7 (3) GDPR) — You can withdraw a given consent at any time with effect for the future.
• Right to lodge a complaint (Art. 77 GDPR) — You have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority is:

12. Up-to-dateness & Changes

This privacy policy is currently valid. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current version will always be available on our website.

Status: September 2026

Note: This text is an English translation of the German privacy policy, provided for information purposes only. Legally, only the German version is binding.