Privacy Policy (Datenschutzerklärung)

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

KHRN Endüstriyel Tasarım Reklam Turizm Sanayi ve Ticaret Limited Şirketi
Cevizli Mah. Mustafa Kemal Cad. Hukukçular Towers A Blok 66 A 111
Kartal/İstanbul
Türkei
Email: info@kheironstand.com
Phone: +49 172 8794455 · +90 850 473 13 73

2. Overview

We process personal data only to the extent necessary to operate this website and to handle your enquiries. This notice describes which data arises when you visit the website and use the contact form, what we use it for, and which rights you have.

3. Legal bases

We base processing on the following legal bases:

• Art. 6(1)(b) GDPR: processing to take pre-contractual steps at your request or to perform a contract.
• Art. 6(1)(f) GDPR: processing based on our legitimate interest in a secure, functional and user-friendly website and in answering enquiries.
• Section 25(2) no. 2 TDDDG: storing or accessing information on your device where strictly necessary to provide a service you have expressly requested.

4. Hosting and server log files

This website is hosted by Vercel Inc. (USA). When pages are requested, the hosting provider processes technically necessary connection data, in particular IP address, date and time of the request, requested URL, referrer URL, browser type and version, and operating system. Content is delivered through a worldwide server network.

Purpose: delivering the website and ensuring stability and security. Legal basis: Art. 6(1)(f) GDPR. Retention: the data is stored only as long as necessary for operation and security; the exact period depends on the hosting provider’s settings. We do not merge log data with other data and do not use it to identify individual visitors.

5. Cookies and language choice

We set one cookie named “NEXT_LOCALE”. It stores your chosen language (Turkish, English or German) so that you get the matching language version on your next visit. It contains no identifier that personally identifies you and is not used for analytics or advertising. It is stored for a maximum of one year.

The cookie is technically necessary to provide the language function you chose (Section 25(2) no. 2 TDDDG); subsequent processing is based on Art. 6(1)(f) GDPR. No consent is required for it. You can delete or block cookies in your browser at any time; the website remains usable, but your language setting will not be remembered. We do not set any other cookies, in particular none for analytics or advertising.

6. Fonts

The fonts we use are bundled into our own delivery when the website is built and are served from our own hosting. No connection to the servers of font providers such as Google is made when a page is loaded.

7. Contact form

If you write to us through the contact form, we process the details you enter: name, email address, message, and optionally your phone number and the service you selected. The details are sent by email through the delivery service Resend (Resend, Inc., USA) to our mailbox (hello@ocekdigital.com). Nothing is stored in a database of our own; the enquiry then sits in our email mailbox.

Purpose: handling and answering your enquiry. Legal basis: Art. 6(1)(b) GDPR where your enquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR. Retention: we delete your enquiry once it has been fully handled and no statutory retention duties apply. If a contract results, commercial and tax retention periods apply. Name, email address and message are required so that we can reply; phone number and service are optional.

If you contact us directly by email or phone, we likewise process your details to handle your request, on the same legal basis and with the same deletion logic.

8. Recipients and third-country transfers

Recipients of your data are our technical service providers where they act as processors for us: Vercel Inc. (hosting, USA) and Resend, Inc. (email delivery of the contact form, USA). Data processing agreements under Art. 28 GDPR are in place with these providers.

This may involve a transfer of personal data to the USA. Where the respective provider is certified, the transfer relies on the European Commission’s adequacy decision on the EU-US Data Privacy Framework of 10 July 2023 (Art. 45 GDPR); otherwise it relies on EU standard contractual clauses (Art. 46(2)(c) GDPR).

9. Your rights

Under the GDPR you have the following rights:

• Access to your stored data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21)

To exercise your rights, an informal message to info@kheironstand.com is sufficient.

Right to lodge a complaint (Art. 77 GDPR): you may complain to a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen (Lower Saxony Commissioner for Data Protection), Prinzenstraße 5, 30159 Hannover, Germany.

10. No automated decision-making

No decision-making based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, takes place.