Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data refers to any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:

Cüneyt Hizli
Freibühlstraße 15
78224 Singen
Germany
Email: info@cueneyt-hizli.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary to display the website:

The website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you came to the site
Browser used
Operating system used
IP address used (if applicable, anonymized)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used in any other way. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries). You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser address bar.

3) Hosting & Content Delivery Network

3.1 For hosting our website and displaying the content, we use a provider whose services are provided solely on servers located within the European Union, either directly or via selected subcontractors.

All data collected via our website is processed on these servers.

We have concluded a data processing agreement with the provider to ensure the protection of our site visitors’ data and to prohibit unauthorized disclosure to third parties.

3.2 AWS-CloudFront

We use the Content Delivery Network (CDN) provided by:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

This service allows us to deliver large media files such as graphics, content, or scripts faster via a network of regionally distributed servers. Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interest in improving website stability and functionality.

We have signed a data processing agreement with the provider that ensures the protection of data and prohibits unauthorized sharing with third parties.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with EU data protection levels based on an adequacy decision of the European Commission.

3.3 Fastly

We use the Content Delivery Network provided by:
Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA

This service enables faster delivery of large media files like graphics, site content, or scripts via a network of regionally distributed servers. The processing is based on our legitimate interest in ensuring the functionality and performance of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have entered into a data processing agreement with the provider to ensure data protection and prevent unauthorized sharing.

The provider is also certified under the EU-U.S. Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are deleted automatically after closing your browser (so-called “session cookies”), while others remain stored on your device for a longer period and allow us to save your site settings (so-called “persistent cookies”). The duration of storage can be found in your browser’s cookie settings overview.

If any of the cookies we use also process personal data, the processing takes place either based on Art. 6 para. 1 lit. b GDPR for the performance of a contract, based on Art. 6 para. 1 lit. a GDPR if consent has been given, or based on Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interest in ensuring the best possible functionality of the website and a user-friendly and effective site visit.

You can configure your browser to notify you about the setting of cookies and to decide individually whether to accept them, to accept cookies in certain cases only, or to generally exclude them.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

When contacting us (e.g. via contact form or email), personal data is collected. The specific data collected when using a contact form is visible on the respective form. This data is stored and used solely for the purpose of responding to your request and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at entering into a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted after the final processing of your inquiry—provided it can be inferred from the circumstances that the relevant matter has been conclusively resolved and that there are no legal retention obligations.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory detail for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For newsletter distribution, we use the so-called double opt-in process. This means we will only send you a newsletter once you have explicitly confirmed that you want to receive it. You will then receive a confirmation email asking you to confirm your subscription by clicking a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When subscribing to the newsletter, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of your registration, to detect any possible misuse of your email address at a later date. The data collected when registering for the newsletter will be used exclusively for promotional communication via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in each email or by contacting us directly. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data, or we reserve the right to use your data in a manner permitted by law, which we inform you of in this policy.

6.2 Brevo

Our email newsletters are sent using the following provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (now operating as Brevo).

Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provided during registration to this provider in accordance with Art. 6(1)(f) GDPR, so they can send newsletters on our behalf.

Subject to your explicit consent under Art. 6(1)(a) GDPR, the provider also performs a statistical analysis of newsletter campaigns using web beacons or tracking pixels in the emails. These allow us to measure open rates and specific user interactions with newsletter content. Device-related data such as access time, IP address, browser type, and operating system may also be collected and analyzed, but they are not merged with other data sets.
You may withdraw your consent to newsletter tracking at any time with future effect.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

7) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, cookies are set by Google Analytics 4 when you visit the website. These cookies are small text files stored on your device that collect certain information. This includes your IP address, which, however, is truncated by Google to prevent any direct personal identification.

The information is transmitted to and processed on servers operated by Google. Data transfers to Google LLC based in the United States may also occur.

Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected through Google Analytics 4 is stored for two months and then deleted.

All processing described above, including the setting of cookies on your device, only takes place if you have given us your explicit consent pursuant to Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors’ data and to prohibit unauthorized sharing with third parties.

Further legal information about Google Analytics 4 is available at:
https://business.safety.google/intl/en/privacy/
https://policies.google.com/privacy
https://policies.google.com/technologies/partner-sites

Demographics

Google Analytics 4 includes the “Demographics” feature, which enables the generation of statistics about the age, gender, and interests of site visitors. This is done through the analysis of advertising and third-party data. These statistics help identify target groups for marketing purposes. However, the collected data cannot be assigned to specific individuals and will be deleted after two months of storage.

Google Signals

As an extension of Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can—subject to your consent to Google Analytics pursuant to Art. 6 (1) lit. a GDPR—analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only aggregated statistics. If you want to stop the cross-device analysis, you can disable the “Personalized Advertising” feature in your Google account settings. Instructions can be found here:
https://support.google.com/ads/answer/2662922?hl=en
More information on Google Signals:
https://support.google.com/analytics/answer/7532985?hl=en

UserIDs

As another extension of Google Analytics 4, this website may use the “UserIDs” feature. If you have given consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR and created an account on this website, and if you log in with that account on different devices, your activities—including conversions—can be analyzed across devices.

For data transfers to the USA, Google is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

8) Retargeting/Remarketing and Conversion Tracking

8.1 Meta Pixel with Enhanced Data Matching

Within our online offering, we use the service “Meta Pixel” from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) in enhanced data matching mode.

When a user clicks on an advertisement we have placed on Facebook or Instagram, the URL of our linked page is extended with a parameter using “Meta Pixel.” This URL parameter is then entered into the user’s browser via a cookie set by our linked site. This cookie also collects specific customer data, such as the email address, which we collect on our website linked with the Facebook or Instagram ad during processes like purchases, account logins, or registrations (enhanced data matching). The cookie is then read and enables the transmission of this data, including the specific customer data, to Meta.

We use “Meta Pixel” with enhanced data matching to make our advertisements (“ads”) on Facebook and/or Instagram more effective and to ensure that they match the interests of users or display certain characteristics (e.g., interest in specific topics or products identified by visited websites), which we share with Meta (“Custom Audiences”).

In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of “Meta Pixel,” the enhanced data matching function helps us measure the effectiveness of our advertising campaigns more accurately by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, allowing it to be linked to the respective user profile and used by Meta for its own advertising purposes in accordance with Meta’s data usage policy (https://www.facebook.com/about/privacy/). This data may enable Meta and its partners to display ads on and off Facebook.

All of the processing described above, particularly the setting of cookies to read information from the user’s device, is carried out only if you have given us your explicit consent pursuant to Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on our website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transferred to a Meta server and stored there; this may also involve a transfer to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

8.2 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, within the scope of Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites through advertising materials (known as Google AdWords). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our goal is to show you advertisements that are of interest to you, to make our website more interesting to you, and to achieve a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies generally expire after 30 days and do not serve to personally identify the user. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different Ads customers. The information collected with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. As part of the use of Google Ads, it is also possible that personal data is transmitted to servers operated by Google LLC in the United States.

Details about the data processing triggered by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here:
https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading information from the device you are using, is only carried out if you have given us your explicit consent pursuant to Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with future effect by disabling this service in the “cookie consent tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be available or may be limited if you disable the use of cookies.

Google’s privacy policies can be viewed here:
https://business.safety.google/intl/en/privacy/
https://www.google.com/policies/privacy/

9) Website Features

9.1 Vimeo

This website uses plugins for displaying and playing videos from the following provider:
Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. During this process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not want this association with your account, you must log out before activating the play button.

All of the above-mentioned processing, particularly the setting of cookies to read information from the device you are using, will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You may revoke your consent at any time with future effect by deactivating this service via the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on a European Commission adequacy decision.

9.2 Google reCAPTCHA

We use the CAPTCHA service from the following provider on this website:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA.

For visual design of the CAPTCHA window, the provider uses “Google Fonts,” which are fonts loaded from the internet by Google. No additional data is processed beyond what is already transmitted via the reCAPTCHA functionality.

This service checks whether an input is made by a natural person or is being abused by automated or mechanical processing, helping to block spam, DDoS attacks, and similar threats. To verify that the action is performed by a human, the provider collects the IP address of the device used, identifying data about the browser and operating system type, the date and duration of the visit, and transmits this data to the provider’s servers for evaluation. Cookies may also be used during this process.

If this processing is based on cookies, they will only be set with your express consent according to Art. 6 (1) lit. a GDPR. You may revoke your consent at any time with future effect by deactivating the service using the cookie consent tool provided on the website.

If the above-mentioned processing is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual responsibility on the Internet and preventing abuse and spam, pursuant to Art. 6 (1) lit. f GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about Google’s privacy policies can be found here:
https://business.safety.google/intl/en/privacy/

10) Tools and Miscellaneous

Cookie Consent Tool

This website uses a “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The cookie consent tool is presented to users as an interactive interface when the site is accessed, allowing them to give consent for specific cookies and/or cookie-based applications by checking boxes. Only if the respective user provides consent by checking the boxes will those cookies/services be activated. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool uses technically necessary cookies to store your cookie preferences. No personal user data is processed as part of this.

If personal data (such as the IP address) is processed in individual cases for the purpose of saving, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Additionally, Art. 6 (1)(c) GDPR serves as a legal basis for the processing, as we are legally obligated as the data controller to make the use of non-essential cookies dependent on user consent.

Where required, we have concluded a data processing agreement with the provider, ensuring the protection of visitor data and prohibiting unauthorized data disclosure to third parties.

Further information about the provider and the cookie consent tool settings can be found directly in the corresponding user interface on our website.

11) Data Subject Rights

11.1 Under applicable data protection law, you have the following rights regarding the processing of your personal data (referred to as “data subject rights”). The applicable legal basis is also referenced:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to notification pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION.
HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and—if applicable—according to the statutory retention periods (e.g. commercial and tax retention obligations).

If the processing of personal data is based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the scope of contractual or quasi-contractual obligations based on Art. 6(1)(b) GDPR, this data will be routinely deleted after the expiration of the retention periods, unless it is still required for contract fulfillment or initiation, or unless there is a legitimate interest on our part to continue storing the data.

When personal data is processed based on Art. 6(1)(f) GDPR, it will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

When personal data is processed for direct marketing purposes based on Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in this privacy policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.