Privacy Policy

1. Controller

The controller for data processing in the sense of the GDPR is:

For questions regarding data protection, you can reach us at info@profsaracoglu.de.

2. Collection of Personal Data

Personal data is any information relating to an identified or identifiable natural person. We collect personal data only within the scope of legal provisions and only to the extent necessary for the use of our online shop and the provision of our services.

Legal Basis

The processing of personal data is carried out on the basis of the following legal grounds:

• Art. 6 (1) (a) GDPR — Consent of the data subject
• Art. 6 (1) (b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6 (1) (c) GDPR — Compliance with a legal obligation
• Art. 6 (1) (f) GDPR — Legitimate interests

3. Data Collection When Visiting Our Website

When you access our website, the following information is automatically sent by the browser used on your device to our website server:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer
• Name of your access provider

This data is evaluated exclusively to ensure the smooth operation of the website and to improve our offer. It is not possible to assign this data to a specific person. The legal basis is Art. 6 (1) (f) GDPR.

4. Customer Account & Order Process

Customer Account

When registering a customer account, we collect the following data: name, email address, and a password chosen by you. Processing is based on Art. 6 (1) (b) GDPR for the implementation of pre-contractual measures.

Order Process

During the order process, we collect the following data:

• First and last name
• Billing and delivery address
• Email address
• Phone number (optional, for delivery inquiries)
• Payment information

The processing of this data is necessary for the fulfillment of the sales contract (Art. 6 (1) (b) GDPR). Furthermore, we are legally obliged to store order data for commercial and tax retention periods (6 or 10 years) (Art. 6 (1) (c) GDPR).

5. Payment Service Providers

We offer various payment methods. The data required for payment processing is transmitted directly to the respective payment service provider:

Klarna

Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. If a Klarna payment method is selected, the data required for processing is transmitted to Klarna. Privacy policy: www.klarna.com/de/datenschutz

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: www.paypal.com/de/privacy

Credit Card Payment

Credit card data is processed via the payment service provider Shopify Payments. The data is transmitted encrypted and not stored on our servers.

The legal basis for the transfer of data is Art. 6 (1) (b) GDPR (contract fulfillment).

6. Shipping Service Providers

We pass on your name and delivery address to the commissioned shipping service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn) for the purpose of goods delivery. The transfer takes place exclusively for the purpose of goods delivery on the basis of Art. 6 (1) (b) GDPR.

Your email address is transmitted to DHL so that you can be informed about the shipping status and estimated delivery via email. You can object to the transmission at any time.

7. Newsletter

If you subscribe to the newsletter offered on our website, the email address you provide will be stored for sending the newsletter. The legal basis is your consent according to Art. 6 (1) (a) GDPR.

You can revoke your consent at any time and unsubscribe from the newsletter via the unsubscribe link included in every email. The legality of the data processing already carried out remains unaffected by the revocation.

8. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and contain certain information.

Technically Necessary Cookies

These cookies are necessary for the operation of the online shop (e.g., shopping cart function, login). They are set on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing a functional online shop.

Analysis and Marketing Cookies

If we use analysis or marketing cookies, they will only be activated with your explicit consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time via the cookie settings.

9. Hosting & Order Processing

Our online shop is operated on the Shopify platform (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes all data generated in connection with the use of the online shop on our behalf.

We have concluded an order processing agreement (AVV) with Shopify in accordance with Art. 28 GDPR. Shopify stores your data on servers in Canada and the USA. The transfer is based on standard contractual clauses of the EU Commission.

Shopify's privacy policy: www.shopify.com/de/legal/datenschutz

10. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — You have the right to request information about your personal data stored by us.
• Right to rectification (Art. 16 GDPR) — You can request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR) — You can request the erasure of your data, provided there is no legal retention obligation.
• Right to restriction of processing (Art. 18 GDPR) — You can request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR) — You can request to receive your data in a common, machine-readable format.
• Right to object (Art. 21 GDPR) — You can object to the processing of your data at any time.
• Right to withdraw consent (Art. 7 (3) GDPR) — You can withdraw a given consent at any time with effect for the future.
• Right to lodge a complaint (Art. 77 GDPR) — You have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority is:

11. Up-to-dateness & Changes

This privacy policy is currently valid. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current version will always be available on our website.

Status: July 2026