Personal data (“data”) is processed only as necessary to provide a functional, user-friendly website, its contents, and the services offered.

Under Art. 4 No. 1 GDPR, “processing” means any operation performed on personal data, whether automated or not (e.g. collection, storage, use, disclosure, deletion).

This policy explains the type, scope, purpose, duration and legal basis of data processing under our control and by third-party tools we use.

I. Controller

The party responsible for this website (the “controller”) is:

Saideh Khanberay
c/o COCENTER
Koppoldstraße 1
86551 Aichach, Germany
Phone: +49 157 566 830 37
E-mail: info@yaserkhanbaray.online

(No separate data protection officer is appointed; please contact the controller for privacy matters.)

II. Your Rights

You have the right to:

• Access to information on data processed about you (Art. 15 GDPR).

• Rectification of inaccurate or incomplete data (Art. 16 GDPR).

• Erasure of your data or restriction of processing (Art. 17 & 18 GDPR).

• Portability of data you provided (Art. 20 GDPR).

• Lodge a complaint with a supervisory authority (Art. 77 GDPR).

• Object to future processing based on Art. 6(1)(f) GDPR, especially for direct marketing (Art. 21 GDPR).

III. Data Processing Details

1. Storage & Deletion
Data is erased or blocked once its purpose ends, unless statutory retention requires otherwise.

2. Cookie Manager
We use a consent banner to store a consent cookie so you are not asked again on subsequent visits. This is necessary for GDPR-compliant consent. You can disable cookies at any time via your browser.

3. Cookies
a) Session cookies
These improve functionality (e.g., language, shopping cart). The legal basis is Art. 6(1)(b) or (f) GDPR. They are deleted when your browser closes.

b) Third-party cookies
These are used for advertising, analytics, or other features. See below for details.

c) Disabling cookies
Browser settings let you refuse or delete cookies; however, some site functions may not work correctly as a result.

4. Contact Requests
Data you send via a contact form or e-mail is processed to answer your inquiry (Art. 6(1)(b) GDPR) and is deleted once the matter is resolved.

5. Customer Account
Data entered upon registration is processed to create and manage your account and fulfill your orders (Art. 6(1)(b) GDPR). Your IP address and timestamp are stored for security purposes. You can revoke your consent at any time.

6. Newsletter
If you subscribe to our newsletter, we use your email address and, optionally, your name to send you information about our products and offers. Subscription is based on a double opt-in process. The legal basis is your consent per Art. 6(1)(a) GDPR. You can withdraw your consent and unsubscribe at any time via the link at the bottom of each newsletter. The newsletter is sent via the technical services of Systeme.io.

7. Posts & Comments
If you post comments, we publish your post, a timestamp, and your chosen name (Art. 6(1)(a) GDPR). Your IP and email address are stored for our legal defense (Art. 6(1)(f) GDPR).

8. Facebook (Meta) Pixel
We use the visitor action pixel by Meta Platforms Ireland Ltd. for analytics and advertising purposes. The legal basis is your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA under the EU-US Data Privacy Framework. You can revoke your consent at any time via the cookie banner. Details: https://www.facebook.com/policy.php

9. Google Analytics
We use this web analysis service by Google Ireland Ltd. (legal basis: Art. 6(1)(a) GDPR). IP anonymization is active. Data is stored for a maximum of 2 months and may be transferred to the USA under the Data Privacy Framework. You can opt-out via a browser add-on or your cookie settings. Details: https://policies.google.com/privacy

10. Payments
a) PayPal
Data required for payment is sent to PayPal (Europe) S.à r.l., Luxembourg, for contract fulfillment (Art. 6(1)(b) GDPR). PayPal may transmit data to subcontractors or credit agencies. Privacy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

b) Stripe
For credit card payments and other methods offered by Stripe, your data is sent to Stripe Payments Europe Ltd., Dublin (Art. 6(1)(b) GDPR). Stripe processes device and payment data under its own responsibility. Privacy: https://stripe.com/privacy

Model Data Protection Statement by Anwaltskanzlei Weiß & Partner – adapted for Saideh Khanberay