**Privacy Policy**
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data refers to any data that can be used to personally identify you.
1.2 The data controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
**Azad Tarkocin**
Schloßberg 1
63688 Gedern
Germany
Phone: +49 1575 8168104
E-Mail: kiromeni@web.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for purely informational purposes — that is, without registering or otherwise transmitting information to us — we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary to display the website:
– The website visited
– Date and time of access
– Amount of data sent in bytes
– Referring URL (the page from which you accessed ours)
– Browser used
– Operating system used
– IP address (possibly in anonymized form)
The processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of the website. This data is not shared or used in any other way. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to us as the site operator), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.
3) Hosting & Content Delivery Network (CDN)
3.1 We use a hosting provider to operate our website and display its content. This provider renders its services either directly or via selected subcontractors exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prevent unauthorized disclosure to third parties.
3.2 **Bunny CDN**
We use a content delivery network (CDN) provided by the following service provider:
**BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia**
This service enables us to deliver large media files (such as graphics, page content, or scripts) faster via a network of regionally distributed servers.
Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1)(f) GDPR.
We have entered into a data processing agreement with the provider to ensure that our visitors’ data is protected and not unlawfully disclosed to third parties.
3.3 **IONOS CDN**
We use a content delivery network (CDN) provided by the following service provider:
**1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany**
This service allows us to deliver large media files (e.g., graphics, page content, or scripts) more quickly through a network of distributed servers.
Processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in ensuring stability and performance of the website.
We have concluded a data processing agreement with the provider, ensuring the protection of data and preventing unauthorized transmission to third parties.
4) Cookies
To make visiting our website attractive and to enable the use of certain features, we use so-called “cookies” — small text files that are stored on your device. Some of these cookies are deleted automatically when you close your browser (so-called “session cookies”), while others remain on your device longer and allow us to save page settings (so-called “persistent cookies”). You can find the exact storage duration in your browser’s cookie settings.
If personal data is processed through individual cookies implemented by us, this is done either in accordance with Art. 6 (1)(b) GDPR for contract execution, in accordance with Art. 6 (1)(a) GDPR in case of given consent, or pursuant to Art. 6 (1)(f) GDPR to safeguard our legitimate interest in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can configure your browser settings so that you are informed about the setting of cookies and can decide individually whether to accept them, or to exclude the acceptance of cookies for specific cases or in general.
Please note that disabling cookies may limit the functionality of our website.
5) Contacting Us
When you contact us (e.g., via contact form or email), personal data will be collected. The data collected in the case of a contact form is visible in the respective form. This data is stored and used solely for the purpose of responding to your inquiry and for the related technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1)(f) GDPR.
If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1)(b) GDPR.
Your data will be deleted once your inquiry has been conclusively answered, provided that there are no legal retention obligations preventing deletion.
6) Comment Function
When using the comment function on this website, in addition to your comment, the time the comment was created and the username you have chosen will be stored and published on the website. Additionally, your IP address is logged and stored.
The storage of the IP address is for security reasons and in case the user violates the rights of third parties or posts illegal content. We require your email address in order to contact you in case a third party objects to your published content as unlawful.
The legal bases for the storage of your data are Art. 6 (1)(b) and (f) GDPR.
We reserve the right to delete comments if they are objected to as unlawful by third parties.
7.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your website usage.
By default, Google (Universal) Analytics sets cookies when the website is visited, which are small text files stored on your device that collect certain information. This includes your IP address, which, however, is shortened by Google before storage in order to prevent direct personal identification.
The information is transmitted to and processed on Google servers. Data may also be transferred to Google LLC, located in the USA.
Google processes the collected information on our behalf to evaluate your use of the website, compile reports on website activities, and provide additional services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The data collected through Google (Universal) Analytics is stored for two months and then deleted.
All the aforementioned processing operations — especially setting cookies — are carried out only if you have given your explicit consent in accordance with Art. 6 (1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your website visit. You may withdraw your consent at any time with future effect by disabling the service via the “Cookie Consent Tool” available on the website.
We have concluded a data processing agreement with Google to ensure the protection of our visitors’ data and to prevent unauthorized disclosure.
Further legal information on Google (Universal) Analytics can be found at:
– https://business.safety.google/intl/en/privacy/
– https://policies.google.com/privacy
– https://policies.google.com/technologies/partner-sites
**Demographic Features**
Google (Universal) Analytics uses the special “Demographics” feature, which allows the creation of statistics about the age, gender, and interests of site visitors based on the evaluation of advertising and information from third-party providers. These datasets cannot be linked to a specific individual and are deleted after two months.
**Google Signals**
As an extension of Google (Universal) Analytics, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, with your consent to use Google Analytics under Art. 6 (1)(a) GDPR, analyze your usage behavior across devices and create models, including for cross-device conversions. We do not receive any personal data from Google, only statistical summaries.
You can deactivate cross-device analysis by disabling “Personalized Ads” in your Google account settings.
Learn more: https://support.google.com/analytics/answer/7532985?hl=en
**UserIDs**
As an additional feature, this website may use the “UserIDs” function of Google (Universal) Analytics. If you have consented to its use, created an account on our site, and logged in on multiple devices, your activities (including conversions) can be analyzed across devices.
**Data Transfers to the USA**
Google LLC is certified under the EU-U.S. Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.
7.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your website usage.
By default, cookies are set when you visit the site, which collect information such as your IP address (shortened by Google to prevent direct personal identification). This data is transmitted to Google servers and may also be transferred to Google LLC in the USA.
Google processes this information on our behalf to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser is not merged with other Google data. Data collected by Google Analytics 4 is retained for two months and then deleted.
All processing described above, including setting cookies, occurs only if you have given your explicit consent per Art. 6 (1)(a) GDPR.
You can withdraw your consent at any time with future effect by disabling the service via the “Cookie Consent Tool” on our website.
We have entered into a data processing agreement with Google to protect visitor data and prevent unauthorized disclosure.
Further legal information can be found at:
– https://business.safety.google/intl/en/privacy/
– https://policies.google.com/privacy
– https://policies.google.com/technologies/partner-sites
**Demographic Features**
Google Analytics 4 uses the “Demographics” feature to provide statistics on users’ age, gender, and interests. This information is aggregated and not personally identifiable. It is deleted after two months.
**Google Signals**
As an extension, Google Signals can be used to generate cross-device reports if you have personalized ads enabled and devices linked to your Google account. With your consent (Art. 6 (1)(a) GDPR), Google may analyze your behavior across devices and generate models for conversions.
You can disable cross-device analysis in your Google account settings under “Personalized Ads”.
More info: https://support.google.com/ads/answer/2662922?hl=en
**UserIDs**
If you have a user account and log in on multiple devices, and have consented to the use of Google Analytics 4, this website may analyze your cross-device behavior using the UserIDs feature.
**Data Transfers to the USA**
Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
7.3 IONOS WebAnalytics
This website uses the web analytics service provided by:
**1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany**
Using cookies and/or similar technologies (e.g., tracking pixels, web beacons, algorithms that analyze device and browser information), the service collects and stores pseudonymized visitor data, including device-related information such as IP addresses and browser data. The goal is to conduct statistical analysis of user behavior and create pseudonymized usage profiles.
Among other things, this enables the evaluation of user movement patterns (so-called “heatmaps”) that illustrate how long visitors stay on pages and how they interact with content (e.g., form inputs, scrolling, clicks, and mouseovers). Pseudonymization fundamentally prevents personal identification. The collected data is not merged with any other personally identifiable data.
All of the processing described above, particularly the reading or storage of information on the user’s device, takes place only if you have provided your express consent pursuant to Art. 6 (1)(a) GDPR.
You can withdraw your consent at any time with future effect by disabling this service via the “Cookie Consent Tool” provided on our website.
We have signed a data processing agreement with the provider to ensure the protection of visitor data and to prohibit unauthorized third-party access or transfer.
8.1 X Plugins (formerly Twitter)
Our website uses plugins of the social network provided by:
**Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland**
These plugins allow direct interaction with content on the social network.
To protect your data when visiting our website, the plugins are initially disabled and embedded via a so-called “2-click” or “Shariff” solution. This setup ensures that no connection to the provider’s servers is established when a page containing such plugins is loaded.
Only when you activate the plugin and thereby give consent in accordance with Art. 6 (1)(a) GDPR, will your browser establish a direct connection to the provider’s servers. Information including your IP address, browser type, and browsing behavior may be transmitted — regardless of whether you are logged into an account on the social network.
If you are logged into your account, interactions via the plugin may also be associated with your user profile and visible to your contacts.
You may withdraw your consent at any time by deactivating the plugin again. Please note that revoking consent does not affect any data already transmitted to the provider.
**Data may also be transferred to:** X Corp., USA
We have concluded a data processing agreement with the provider to ensure the protection of visitor data. For data transfers to the USA, the provider relies on Standard Contractual Clauses approved by the European Commission.
8.2 Bunny Video Plugin
This website uses plugins to display and play videos from:
**BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia**
When you visit a page containing such a plugin, your browser connects directly to the provider’s servers to load the plugin. This may involve the transmission of certain data, including your IP address.
If video playback is initiated, the provider may also use cookies to collect user behavior data, create viewing statistics, and prevent misuse.
All of the above-mentioned processing operations, particularly setting cookies, occur only with your explicit consent in accordance with Art. 6 (1)(a) GDPR.
You may revoke your consent at any time by disabling the plugin via the “Cookie Consent Tool” on our website.
8.3 Google Web Fonts
This site uses web fonts provided by:
**Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland**
When you access a page, your browser loads the necessary web fonts into your browser cache to display text and fonts properly. This involves establishing a connection to the provider’s servers, which may transmit browser data including your IP address.
**Data may also be transferred to:** Google LLC, USA
The processing of personal data in connection with font delivery occurs only with your explicit consent under Art. 6 (1)(a) GDPR. You can revoke your consent at any time using the “Cookie Consent Tool.” If your browser does not support web fonts, a standard font will be used instead.
Google LLC is certified under the EU-U.S. Data Privacy Framework, ensuring compliance with EU data protection laws.
More information on Google’s privacy practices:
– https://business.safety.google/intl/en/privacy/
9) Cookie Consent Tool
This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent.
When the site is loaded, users are presented with an interactive interface (usually a banner or pop-up), where they can grant consent for specific categories of cookies or services by checking the appropriate boxes.
Cookies or services that require consent are only activated once the user has given their explicit permission.
This ensures that such cookies are only stored on the user’s device if the corresponding consent has been provided.
The tool sets technically necessary cookies to store your cookie preferences. In general, no personal data is processed during this.
If, in individual cases, personal data is processed (such as IP addresses) for storage, assignment, or logging of cookie preferences, this is done on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie management pursuant to Art. 6 (1)(f) GDPR.
Another legal basis is Art. 6 (1)(c) GDPR, as we are legally required to document and respect users’ cookie preferences.
If necessary, we have concluded a data processing agreement with the provider to ensure that your data is protected and not passed on to unauthorized third parties.
Further details about the cookie consent tool and customization options can be found in the tool’s interface on our website.
10) Rights of the Data Subject
10.1 Under applicable data protection law, you have the following rights regarding the processing of your personal data by the controller:
– Right of access pursuant to Art. 15 GDPR
– Right to rectification pursuant to Art. 16 GDPR
– Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR
– Right to restriction of processing pursuant to Art. 18 GDPR
– Right to notification pursuant to Art. 19 GDPR
– Right to data portability pursuant to Art. 20 GDPR
– Right to withdraw consent pursuant to Art. 7 (3) GDPR
– Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
10.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS UNDER ART. 6 (1)(f) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.
11) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the applicable legal basis, the purpose of processing, and—if relevant—any statutory retention periods (e.g., under commercial or tax law).
If the processing is based on explicit consent under Art. 6 (1)(a) GDPR, the data will be stored until the consent is withdrawn.
If statutory retention periods apply to data processed under Art. 6 (1)(b) GDPR (e.g., for the performance of a contract), such data will be deleted routinely after the retention periods expire, provided the data is no longer necessary for contract fulfillment or initiation, and no legitimate interest in continued storage exists.
If the processing is based on Art. 6 (1)(f) GDPR, the data will be stored as long as necessary to fulfill our legitimate interests, or until you exercise your right to object under Art. 21 (1) GDPR—unless we can demonstrate compelling legitimate grounds for the processing.
If data is processed for direct marketing purposes under Art. 6 (1)(f) GDPR, it will be stored until you exercise your right to object under Art. 21 (2) GDPR.
Unless otherwise specified in this privacy policy, personal data will be deleted when it is no longer required for the purposes for which it was collected or otherwise processed.