Privacy Policy

Secure website operation

Server logs and technical connection data

When the website is accessed, the web server processes technically necessary data. This may include the IP address, date and time, requested address, data volume, status code, referring page, browser and operating system information.

Processing is carried out to deliver the website, defend against attacks, analyse errors and ensure stable operation on the basis of Article 6(1)(f) GDPR. Our legitimate interest is a secure and functional online presence.

Log data are deleted or anonymised once they are no longer required for these purposes. The specific period depends on the security and server configuration and any statutory retention obligations.

Communication

Contact form, email, telephone and press enquiries

When you contact us, we process the information you provide, in particular your name, contact details, organisation, subject, message and preferred response channel. Mandatory fields are marked in the form.

Processing is carried out to handle the enquiry. Article 6(1)(b) GDPR applies to pre-contractual or contractual matters; Article 6(1)(f) GDPR applies to general, political, business or press enquiries. Where consent is expressly obtained, Article 6(1)(a) GDPR also applies.

Enquiry data are deleted when processing is complete and no statutory retention, evidence or limitation periods require continued storage.

Local settings

Language selection, cookies and external links

Language cookie

German is the default language. Only after you actively select English or Turkish does the website store the selected language code in a technically necessary cookie. It is used solely to retain the language you explicitly requested. The legal basis is Section 25(2)(2) TDDDG and, where personal data are involved, Article 6(1)(f) GDPR.

Analytics and advertising services

The theme itself does not load analytics, profiling or advertising services. If such services are later added through WordPress plugins, they may be loaded only after valid consent where required by law and must be specifically described in this policy.

WhatsApp, LinkedIn and external websites

External services are generally integrated as ordinary links. Only when you click such a link is the destination opened and the respective provider may receive connection data. The external provider’s privacy information then applies; transfers to third countries cannot be ruled out for international providers.

Data subject rights

Your rights under the GDPR

• Access to personal data processed (Article 15 GDPR)
• Rectification of inaccurate or incomplete data (Article 16 GDPR)
• Erasure where no overriding reasons prevent it (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability where the conditions are met (Article 20 GDPR)
• Objection to processing based on legitimate interests (Article 21 GDPR)
• Withdrawal of consent with effect for the future (Article 7(3) GDPR)

To exercise your rights, send a message to the privacy contact named above. The theme does not carry out solely automated decision-making, including profiling.

Security and updates

Encryption and changes to this policy

Transmission between your browser and the website is encrypted via HTTPS. We use appropriate technical and organisational measures to protect data against loss, manipulation and unauthorised access.

This privacy policy is updated when functions, service providers or legal requirements change. The version published on this page is authoritative.