Privacy Policy

1. Controller

The controller in the sense of the GDPR is:
Mehmet-Ali Bilen, Lorenz-Hagen-Straße 21, 90461 Nürnberg, Germany
Phone: +49 152 33803570
Email: mehmet-ali.bilen@basmaladesigns.com

2. General

We process personal data only to the extent necessary for the provision of a functional website as well as our content and services – regularly only with consent or if processing is legally permitted.

3. Hosting and Shop System (Shopify)

This website is operated on the platform of Shopify International Limited (Ireland) or Shopify Inc. (Canada). When you visit, Shopify collects data on our behalf (including IP address, browser/device information, pages accessed) that is necessary for secure operation. Legal basis: legitimate interest in error-free display (Art. 6 para. 1 lit. f GDPR) and contract fulfillment (Art. 6 para. 1 lit. b GDPR). A data processing agreement exists with Shopify. Transfer to third countries is secured by appropriate guarantees (EU standard contractual clauses).

4. Server Log Files

Each time you access the site, information is automatically stored in server log files (browser type/version, operating system, referrer URL, time, IP address). Legal basis: Art. 6 para. 1 lit. f GDPR.

5. Cookies

We use technically necessary cookies that are required for the operation of the shop (e.g. shopping cart). Basis: § 25 para. 2 TDDDG. We only set non-essential cookies (e.g. analytics/marketing) after your explicit consent (§ 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR), which you can revoke at any time.

6. Order Processing

When you place an order, we process your data (name, delivery/billing address, email, order data) for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR). Storage within the scope of contract processing and legal retention periods.

7. Payment Service Providers

Depending on the payment method, payment data is transmitted to the respective provider (Art. 6 para. 1 lit. b GDPR):

  • PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
  • Klarna – Klarna Bank AB, Sweden
  • Shopify Payments (Cards), processed via Stripe Payments Europe Ltd., Ireland

The providers process the data as independent controllers according to their own data protection policies.

8. Shipping

For delivery, we pass on your address data to the contracted shipping company to the extent necessary for delivery (Art. 6 para. 1 lit. b GDPR).

9. Contact

When contacting us by email or form, we process your information to process the request (Art. 6 para. 1 lit. b or lit. f GDPR).

10. Your Rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Granted consents can be revoked at any time for the future. Right to lodge a complaint with the competent supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

11. Topicality

As of May 2026. Adjustments are possible with further development of the shop or changed requirements.