Privacy policy

Privacy Policy

1. Data Controller

The data controller within the meaning of the GDPR is: Mehmet-Ali Bilen, Lorenz-Hagen-Straße 21, 90461 Nuremberg, Germany. Phone: +49 152 33803570. Email: mehmet-ali.bilen@basmaladesigns.com

2. General Information

We only process personal data to the extent necessary to provide a functional website and our content and services - as a rule, only with consent or where processing is permitted by law.

3. Hosting and Shop System (Shopify)

This website is operated on the platform of Shopify International Limited (Ireland) and/or Shopify Inc. (Canada). When you visit the site, Shopify collects data on our behalf (including IP address, browser/device information, pages accessed) that is necessary for secure operation. Legal basis: legitimate interest in error-free presentation (Art. 6(1)(f) GDPR) and contract performance (Art. 6(1)(b) GDPR). We have a data processing agreement with Shopify. Any transfer to third countries is safeguarded by appropriate guarantees (EU Standard Contractual Clauses).

4. Server Log Files

Every visit automatically stores information in server log files (browser type/version, operating system, referrer URL, time, IP address). Legal basis: Art. 6(1)(f) GDPR.

5. Cookies

We use technically necessary cookies required to operate the shop (e.g. shopping cart). Basis: Section 25(2) TDDDG (German Telecommunications-Digital-Services-Data-Protection Act). We only use non-essential cookies (e.g. analytics/marketing) with your express consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time.

6. Order Processing

When you place an order, we process your details (name, shipping/billing address, email, order data) to perform the contract (Art. 6(1)(b) GDPR). Data is stored for the duration of the contract and the statutory retention periods.

7. Payment Service Providers

Depending on the payment method chosen, payment data is transmitted to the relevant provider (Art. 6(1)(b) GDPR):

  • PayPal - PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
  • Klarna - Klarna Bank AB, Sweden
  • Shopify Payments (cards), processed via Stripe Payments Europe Ltd., Ireland

These providers process the data as independent controllers under their own privacy policies.

8. Shipping

For delivery, we pass your address data on to the shipping company commissioned, insofar as this is necessary for delivery (Art. 6(1)(b) GDPR).

9. Contacting Us

When you contact us by email or contact form, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).

10. Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). Any consent given can be withdrawn at any time with future effect. You have the right to lodge a complaint with the competent supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

11. Currency

As of May 2026. Updates may be made as the shop develops further or requirements change.