Privacy policy

Privacy Policy

 

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:


MM Concepts

Rolandstr. 14

45881 Gelsenkirchen

Germany


Phone: 0178 337 11 70 (No telephone customer service!)

Email: mert.mutlu@mmconcpts.com

 

2. General Information on Data Processing

We process the personal data of visitors to our website only to the extent necessary to provide a functional website, our content, and to handle inquiries. Personal data is generally processed only on the basis of a legal permission or your consent.


 

3. Data Collection When Visiting the Website

When you use our website for informational purposes only, meaning if you do not otherwise transmit information to us, we only collect the data that your browser automatically transmits to our server or hosting provider. This includes in particular:

 

  • visited website / page

  • date and time of access

  • amount of data transferred

  • source / reference from which you accessed the page

  • browser used

  • operating system used

  • IP address used

 


This data is technically necessary in order to display the website to you and to ensure the stability and security of the website. The legal basis is Art. 6 para. 1 lit. f GDPR.


 

4. Hosting via Shopify

Our website is hosted by Shopify. The provider for visitors from the European Economic Area (EEA), the United Kingdom, and Switzerland is Shopify International Limited, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify uses affiliated companies and subprocessors to provide its services. Shopify states that personal data of customers from the EEA, the United Kingdom, and Switzerland is initially processed by Shopify International Limited in Ireland.


All data collected on our website is processed on Shopify’s servers or on the servers of subprocessors used by Shopify. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR for the provision of a secure and functional online presence.


 

5. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” in your browser’s address bar.

 

6. Cookies and Consent Tool

Cookies and comparable technologies are used on our website. Technically necessary cookies serve the secure and functional operation of the website. Cookies or tracking technologies that are not technically necessary are only used after you have given your explicit consent.


We use a cookie consent tool to manage your consent. This tool stores your selection so that your privacy preferences can be documented and implemented in compliance with the law. The legal basis for this is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

 

7. Contact

If you contact us by email or via a contact form, we process the personal data you provide solely for the purpose of handling your inquiry and communicating with you.


The following data may be processed in particular:

 

  • name

  • email address

  • telephone number, if provided

  • content of your message

  • any other information you voluntarily provide

 


The legal basis is:

 

  • Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to the initiation or performance of a contract

  • Art. 6 para. 1 lit. f GDPR for other inquiries on the basis of our legitimate interest in appropriate handling

 


Your data will be deleted as soon as your inquiry has been fully processed and no statutory retention obligations prevent deletion.


 

8. Use of Meta Pixel

If you have given your consent via the consent tool, we use Meta Pixel on our website, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.


Meta Pixel allows us to track user behavior after users have been redirected to our website by clicking on a Facebook or Instagram advertisement. This serves to evaluate the effectiveness of our advertisements and to optimize future advertising measures.


The following data may be processed in particular:

 

  • pages visited

  • technical information about browser and device

  • referrer information

  • IP address

  • interactions on the website

  • conversions, if applicable

 


Processing is carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future via the consent tool.


 

9. Accounting with Lexoffice

For accounting and invoice processing, we use Lexoffice, a service provided by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany.


Insofar as personal data is processed in the context of accounting, this is done for the fulfillment of legal obligations and for the performance of the contract. The legal basis is Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. c GDPR.


 

10. Recipients of Personal Data

We only disclose personal data to third parties if:

 

  • this is necessary for the performance of the contract

  • we are legally obliged to do so

  • you have given your consent, or

  • the disclosure is permissible on the basis of legitimate interests

 


Recipients may include, in particular, hosting providers, technical service providers, software providers, and data processors that we use for the operation of the website and our business processes.


 

11. Storage Period

We store personal data only for as long as necessary for the respective processing purposes or as long as statutory retention obligations exist.

 

  • Data from contact inquiries will be deleted as soon as the inquiry has been conclusively processed and no statutory retention obligations prevent deletion.

  • Data that must be retained for commercial or tax law reasons will be deleted after the expiry of the statutory retention periods.

  • Data processed on the basis of consent will be deleted as soon as you withdraw your consent and no other legal basis applies.

 

 

12. Rights of Data Subjects

Under the GDPR, you have the following rights in particular:

 

  • right of access pursuant to Art. 15 GDPR

  • right to rectification pursuant to Art. 16 GDPR

  • right to erasure pursuant to Art. 17 GDPR

  • right to restriction of processing pursuant to Art. 18 GDPR

  • right to data portability pursuant to Art. 20 GDPR

  • right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR

  • right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

 

 

13. Right to Object

Insofar as we process personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing.


If personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes.

 

14. Current Version and Changes to This Privacy Policy

We reserve the right to adapt this privacy policy if the legal situation, our website, or the services used change.