This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences such as social media profiles (hereinafter collectively referred to as the “online offering”). With regard to the terminology used, such as “processing” or “controller,” the definitions in Article 4 of the General Data Protection Regulation (GDPR) apply.
Responsible Party
Bugra Yüksel
Kolpingstraße 13
74831 Gundelsheim
Germany
Owner: Bugra Yüksel
Email: info@buraweddingcontent.com
Types of Data Processed
The following types of personal data may be processed:
– Inventory data (e.g. names, addresses)
– Contact data (e.g. email addresses, telephone numbers)
– Content data (e.g. text entries, photographs, videos)
– Contract data (e.g. subject matter of the contract, duration, customer category)
– Payment data (e.g. bank details, payment history)
– Usage data (e.g. visited websites, interests, access times)
– Meta and communication data (e.g. device information, IP addresses)
Processing of Special Categories of Personal Data
Special categories of personal data pursuant to Article 9(1) GDPR are not processed.
Categories of Data Subjects
The data subjects include customers, prospective customers, business partners, visitors, and users of the online offering. Hereinafter, all data subjects are collectively referred to as “users.”
Purpose of Data Processing
Personal data is processed for the following purposes:
– Providing the online offering and its content
– Providing contractual services, customer service, and communication
– Responding to contact inquiries
– Marketing, advertising, and market research
– Security measures
Legal Basis for Processing
In accordance with Article 13 GDPR, the legal bases for processing personal data are:
– Consent pursuant to Article 6(1)(a) and Article 7 GDPR
– Performance of a contract or pre-contractual measures pursuant to Article 6(1)(b) GDPR
– Compliance with legal obligations pursuant to Article 6(1)(c) GDPR
– Legitimate interests pursuant to Article 6(1)(f) GDPR
– Protection of vital interests pursuant to Article 6(1)(d) GDPR
Changes and Updates
We regularly review and update this privacy policy to ensure it reflects current legal requirements and changes in our data processing activities. Users will be informed if changes require their involvement or consent.
Security Measures
Appropriate technical and organizational measures are implemented to ensure the security, confidentiality, integrity, and availability of personal data. These measures include, among others, encrypted data transmission between browser and server and internal procedures for exercising data subject rights.
Disclosure and Transfer of Data
Personal data is disclosed to third parties only where permitted by law, based on user consent, for the fulfillment of contractual obligations, or due to legitimate interests. This may include hosting providers, analytics services, payment processors, or legal and tax advisors.
Transfer to Third Countries
Data may be transferred to countries outside the European Union or the European Economic Area only if this is necessary for contractual purposes, required by law, based on user consent, or justified by legitimate interests, and only in compliance with the requirements of the GDPR.
Rights of Data Subjects
Users have the following rights under the GDPR:
– Right of access pursuant to Article 15 GDPR
– Right to rectification pursuant to Article 16 GDPR
– Right to erasure pursuant to Article 17 GDPR
– Right to restriction of processing pursuant to Article 18 GDPR
– Right to data portability pursuant to Article 20 GDPR
– Right to withdraw consent at any time pursuant to Article 7(3) GDPR
– Right to lodge a complaint with a supervisory authority
Cookies and Right to Object
Cookies may be used for technical, statistical, and marketing purposes. Users can manage or restrict the use of cookies through their browser settings. Permanent cookies can be deleted or blocked via browser settings or industry opt-out tools.
Data Deletion
Personal data is deleted as soon as it is no longer required for the purpose for which it was collected, provided that no statutory retention obligations prevent deletion.
Processing of Shop and Account Data
Personal data of customers and users of the online shop is processed for order processing, payment handling, delivery, and customer support in accordance with contractual and legal requirements.
Analysis and Marketing
Data may be analyzed for business evaluation and marketing purposes based on legitimate interests pursuant to Article 6(1)(f) GDPR. Where possible, data is anonymized, and personally identifiable information is deleted in accordance with legal requirements.
Communication
When users contact us via email or contact forms, the transmitted data is processed solely for the purpose of handling the inquiry and communication, pursuant to Article 6(1)(b) and Article 6(1)(f) GDPR.
Third-Party Services
This website may use third-party services such as analytics tools or embedded content from providers like Google, YouTube, or Instagram. These providers may process personal data in accordance with their own privacy policies.