Name and Contact of the Controller info@itsnotaboutthename.com Ali Cengiz If you have a data protection officer, provide their contact details here: Ali Cengiz info@itsnotaboutthename.com 2. Collection and Processing of Personal Data We process personal data only in accordance with the General Data Protection Regulation (GDPR) and applicable German laws (BDSG - Bundesdatenschutzgesetz). 2.1 What Personal Data Do We Collect? When using our website, the following types of data may be collected: Contact Information: Name, email address, phone number (when filling out a contact form or subscribing to newsletters). Technical Data: IP address, browser type, device information, operating system, and referring URLs (collected via cookies and analytics tools). Usage Data: Pages visited, time spent on pages, and interactions with the website. 3. Purposes of Data Processing & Legal Basis We process your personal data for the following purposes: Purpose Legal Basis (Art. 6 GDPR) Responding to inquiries Legitimate interest (Art. 6(1)(f) GDPR) or contract initiation (Art. 6(1)(b) GDPR) Newsletter & marketing communication Consent (Art. 6(1)(a) GDPR) Website optimization & analytics Legitimate interest (Art. 6(1)(f) GDPR) Contract processing (e.g., payments) Contract fulfillment (Art. 6(1)(b) GDPR) 4. Data Sharing and Third-Party Services We do not sell your personal data. However, we may share data with: Service providers (e.g., hosting, email services, payment providers) Analytics providers (e.g., Google Analytics) Legal authorities (only when required by law) Third-Party Tools We Use: Google Analytics – for website analytics (Privacy Policy) Mailchimp – for newsletters (Privacy Policy) Stripe/PayPal – for payment processing 5. Cookies and Tracking Technologies Our website uses cookies to enhance your experience. These include: Essential Cookies (Required for site functionality) Performance Cookies (Analytics and site usage tracking) Marketing Cookies (Personalized ads and social media integration) Managing Cookies You can disable cookies via your browser settings or adjust preferences in our cookie banner. 6. Data Retention Period We retain your personal data only as long as necessary: Contact inquiries: Deleted after 6 months unless further communication is needed. Newsletter data: Retained until you unsubscribe. Analytics data: Retained for 14 months. Contract-related data: Stored as per German tax & commercial law (usually 6–10 years). 7. Your Rights Under GDPR You have the following rights regarding your personal data: Right to access (Art. 15 GDPR) – Request a copy of your stored data. Right to rectification (Art. 16 GDPR) – Correct inaccurate data. Right to erasure (Art. 17 GDPR) – Request deletion of your data. Right to restrict processing (Art. 18 GDPR) – Limit how your data is processed. Right to object (Art. 21 GDPR) – Stop certain types of processing. Right to data portability (Art. 20 GDPR) – Receive your data in a portable format. Right to withdraw consent (Art. 7(3) GDPR) – Withdraw consent at any time. How to Exercise Your Rights: Email us at info@itsnotaboutthename.com with your request. We will respond within 30 days. 8. Security Measures We implement technical and organizational security measures to protect your data against unauthorized access, loss, or misuse. 9. Data Transfers Outside the EU If we transfer data to non-EU countries (e.g., through third-party services), we ensure compliance with GDPR using: EU Standard Contractual Clauses (SCCs) Adequacy decisions by the EU Commission Explicit consent where applicable 10. Changes to This Privacy Policy We may update this privacy policy from time to time. The latest version is always available on our website. Last updated: March 2025 11. Contact & Complaints If you have any concerns, you can contact us at: 📧 info@itsnotaboutthename.com