1) Information on the Collection of Personal Data and Contact Details of the
Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In
the following, we inform you about the handling of your personal data when using our
website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge for data processing on this website within the meaning of
the General Data Protection Regulation (GDPR) is Bilge Yurttas, Henna Bilge,
Königsteiner Straße 29, 65929 Frankfurt, Deutschland, Tel.: 01703569266, E-Mail:
info@hennabilge.com. The controller in charge of the processing of personal data is the
natural or legal person who alone or jointly with others determines the purposes and
means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the
transmission of personal data and other confidential content (e.g. orders or inquiries to
the controller). You can recognize an encrypted connection by the character string
https:// and the lock symbol in your browser line.
2) Data Collection When You Visit Our Website
When using our website for information only, i.e. if you do not register or otherwise
provide us with information, we only collect data that your browser transmits to our
server (so-called “server log files”). When you visit our website, we collect the following
data that is technically necessary for us to display the website to you:
– Our visited website
– Date and time at the moment of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of
our legitimate interest in improving the stability and functionality of our website. The
data will not be passed on or used in any other way. However, we reserve the right to
check the server log files subsequently, if there are any concrete indications of illegal
use.
3) Contacting
In the context of contacting us (e.g. via contact form or e-mail), personal data is
collected. Which data is collected in the case of a contact form can be seen from the
respective contact form. These data are stored and used exclusively for the purpose of
Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 München
Tel: +49 (0)89 / 130 1433 – 0· Fax: +49 (0)89 / 130 1433 – 60
responding to your request or for establishing contact and for the associated technical
administration. The legal basis for processing data is our legitimate interest in
responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is
aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1)
point b GDPR. Your data will be deleted after final processing of your enquiry; this is the
case if it can be inferred from the circumstances that the facts in question have been
finally clarified, provided that there are no legal storage obligations to the contrary.
4) Data Processing When Opening a Customer Account and for Contract
Processing
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and
processed if you provide them to us for the execution of a contract or when opening a
customer account. Which data is collected can be seen from the respective input forms.
It is possible to delete your customer account at any time. This can be done by sending
a message to the above-mentioned address of the controller. We store and use the data
provided by you for contract processing. After complete processing of the contract or
deletion of your customer account, your data will be blocked in consideration of tax and
commercial retention periods and deleted after expiry of these periods, unless you have
expressly consented to further use of your data or a legally permitted further use of data
has been reserved by our site, about which we will inform you accordingly below.
5) Commentary Function
Within the scope of the commentary function on this website, in addition to your
comment, information on the time of writing the comment and the name of the
commentator you have chosen are stored and published on the website. Furthermore,
your IP address is logged and stored. This IP address is stored for security reasons, in
case the person concerned violates the rights of third parties or posts illegal content by
submitting a comment. We need your e-mail address to contact you if a third party
should object to your published content as unlawful. The legal basis for the storage of
your data is Art. 6 (1) point b and f GDPR. We reserve the right to delete comments if
they are objected to as unlawful by third parties.
6) Use of Your Data for Direct Advertising
6.1 If you subscribe to our e-mail newsletter, we will send you regular information about
our offers. The only mandatory information for sending the newsletter is your e-mail
address. The indication of additional possible data is voluntary and is used to be able to
address you personally. We use the so-called double opt-in procedure for sending the
newsletter. This means that we will not send you an e-mail newsletter, unless you have
expressly confirmed to us that you agree to the sending of the newsletter. We will then
send you a confirmation e-mail asking you to confirm that you wish to receive future
newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to the use of your personal
data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter,
Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 München
Tel: +49 (0)89 / 130 1433 – 0· Fax: +49 (0)89 / 130 1433 – 60
we store your IP address entered by the Internet Service Provider (ISP) as well as the
date and time of registration so that we can trace any possible misuse of your e-mail
address at a later time. The data collected by us when registering for the newsletter will
be used exclusively for the purpose of advertising by means of the newsletter. You can
unsubscribe from the newsletter at any time via the link provided in the newsletter or by
sending a message to the responsible person named above. After your cancellation,
your e-mail address will immediately be deleted from our newsletter distribution list,
unless you have expressly consented to further use of your data or we reserve the right
to use data in excess thereof, which is permitted by law and about which we inform you
in this declaration.
6.2 If you have provided us with your e-mail address when purchasing products, we
reserve the right to regularly send you offers for products similar to those already
purchased from our range by e-mail. Pursuant to Section 7 (3) German law against
unfair competition, we do not need to obtain separate consent from you for this. In this
respect, data processing is carried out solely on the basis of our legitimate interest in
personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially
objected to the use of your e-mail address for this purpose, we will not send you an
e-mail. You are entitled to object to the use of your e-mail address for the
aforementioned advertising purpose at any time with effect for the future by notifying
the controller named at the beginning. In this regard, you only have to pay the
transmission costs according to the basic tariffs. Upon receipt of your objection, the use
of your e-mail address for advertising purposes will cease immediately.
7) Processing of Data for the Purpose of Order Handling
7.1 To process your order, we work together with the following service provider(s),
which support us wholly or partially in the execution of concluded contracts. Certain
personal data is transferred to these service providers in accordance with the following
information.
The personal data collected by us will be passed on to the transport company
commissioned with the delivery within the scope of contract processing, insofar as this is
necessary for the delivery of the goods. We will pass on your payment data to the
commissioned credit institution within the framework of payment processing, if this is
necessary for payment handling. If payment service providers are used, we explicitly
inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b
GDPR.
7.2 Use of Payment Service Providers
– Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered –
“purchase on account” or “payment by instalments” via PayPal, we transmit your
payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449
Luxembourg (hereinafter “PayPal”). The transfer takes place in accordance with Art. 6
(1) point b GDPR and only insofar as this is necessary for payment processing.
Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 München
Tel: +49 (0)89 / 130 1433 – 0· Fax: +49 (0)89 / 130 1433 – 60
PayPal reserves the right to carry out credit checks for the payment methods credit card
via PayPal, direct debit via PayPal or, if offered, “purchase on account” or “payment by
installments” via PayPal. For this purpose, your payment data may be passed on to
credit agencies on the basis of PayPal’s legitimate interest in determining your solvency
pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in
relation to the statistical probability of non-payment for the purpose of deciding on the
provision of the respective payment method. The credit report can contain probability
values (so-called score values). If score values are included in the result of the credit
report, they are based on recognized scientific, mathematical-statistical methods. The
calculation of the score values includes, but is not limited to, address data. For further
information on data protection law, including the credit agencies used, please refer to
PayPal’s data protection declaration at:
https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to
PayPal. However, PayPal may still be entitled to process your personal data if this is
necessary for contractual payment processing.
8) Rights of the Data Subject
8.1 The applicable data protection law grants you comprehensive rights of data subjects
(rights of information and intervention) vis-à-vis the data controller with regard to the
processing of your personal data, about which we inform you below :
– Right of access by the data subject pursuant to Art. 15 GDPR
– Right to rectification pursuant to Art. 16 GDPR
– Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR
– Right to restriction of processing pursuant to Art. 18 GDPR
– Right to be informed pursuant to Art. 19 GDPR
– Right to data portability pursuant to Art. 20 GDPR
– Right to withdraw a given consent pursuant to Art. 7 (3) GDPR
– Right to lodge a complaint pursuant to Art. 77 GDPR
8.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR
PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU
HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE
FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN
PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH
OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE
PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE
THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA
Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 München
Tel: +49 (0)89 / 130 1433 – 0· Fax: +49 (0)89 / 130 1433 – 60
WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE
OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED FOR DIRECT ADVERTISING PURPOSES.
9) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal
retention period (e.g. commercial and tax retention periods). After expiry of this period,
the corresponding data will be routinely deleted, provided they are no longer necessary
for the performance or initiation of the contract and/or there is no longer any legitimate
interest on our part in the further storage.
Copyright © 2018, IT-Recht-Kanzlei · Alter Messeplatz 2 · 80339 München
Tel: +49 (0)89 / 130 1433 – 0· Fax: +49 (0)89 / 130 1433 – 60