Privacy Policy

1. Controller and Contact Details

The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Ghakleoneph
Grunerstraße 20
10179 Berlin, Germany

Email: relations@ghakleoneph.world
Phone: +49 30 27581640

2. Overview of Data Processing

We process personal data only to the extent necessary to provide our services, fulfil contractual and legal obligations, and protect our legitimate interests. The following overview describes the types of data we process, the purposes of processing, the legal bases, and retention periods.

3. Data We Collect

3.1 Data Provided by You

• Contact and identification data: Name, email address, telephone number (optional), postal address
• Order data: Order details, payment information, shipping preferences
• Communication data: Content of messages, enquiries, and correspondence
• Consent data: Records of your consent to data processing, terms of service, and marketing communications

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type, referring URL
• Usage data: Pages visited, time and date of access, duration of visit, interaction with website elements
• Cookie data: Information stored in cookies as described in our Cookie Policy

4. Purposes and Legal Bases for Processing

4.1 Contract Performance

We process your name, email, address, phone number, and order details to process orders, deliver products, and provide customer support. Legal basis: Article 6(1)(b) GDPR (performance of a contract).

4.2 Legitimate Interests

We process technical and usage data to ensure website security, prevent fraud, improve our services, and analyse website performance. Legal basis: Article 6(1)(f) GDPR (legitimate interests).

4.3 Legal Obligations

We retain and process data as required by German and EU law, including tax regulations, commercial law, and consumer protection. Legal basis: Article 6(1)(c) GDPR (legal obligation).

4.4 Consent

Where we process data based on your consent (e.g. marketing emails, non-essential cookies), we do so only after you have given explicit, informed consent. Legal basis: Article 6(1)(a) GDPR. You may withdraw consent at any time with future effect.

5. Retention Periods

• Contract and order data: 10 years after the end of the contractual relationship (German commercial and tax law)
• Customer enquiries: 3 years from resolution of the enquiry
• Marketing consent and preferences: Until consent is withdrawn, plus 3 years for proof of consent
• Server logs and technical data: 7 to 90 days, unless longer retention is required for security or legal purposes
• Cookie data: As specified in our Cookie Policy

After the retention period ends, data is deleted or anonymised unless further retention is required by law.

6. Recipients and Transfers

We may share your data with:

• Service providers: Payment processors, shipping companies, IT and hosting providers, email service providers, acting as processors under data processing agreements
• Legal and regulatory authorities: When required by law or to protect our rights

Data may be transferred to countries outside the European Economic Area (EEA). In such cases we ensure adequate safeguards (e.g. Standard Contractual Clauses, adequacy decisions) as required by GDPR Article 44 et seq.

7. Security Measures

We implement technical and organisational measures to protect your data, including:

• SSL/TLS encryption for data transmission
• Secure access controls and authentication
• Regular security assessments and updates
• Employee training on data protection
• Data minimisation and purpose limitation

8. Your Rights

Under the GDPR you have the following rights:

• Right of access (Article 15): Obtain confirmation as to whether we process your data and receive a copy
• Right to rectification (Article 16): Request correction of inaccurate or incomplete data
• Right to erasure (Article 17): Request deletion of your data where legally permissible
• Right to restriction (Article 18): Request limited processing in certain circumstances
• Right to data portability (Article 20): Receive your data in a structured, machine-readable format
• Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent
• Right to lodge a complaint: Lodge a complaint with a supervisory authority

To exercise your rights, contact us at relations@ghakleoneph.world or by post at the address above.

Supervisory authority in Germany: Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

9. Children

Our services are not directed at persons under 16. We do not knowingly collect data from children. If you become aware that a child has provided us with personal data, please contact us so we can delete it.

10. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated version on our website and updating the date above. We encourage you to review this policy periodically.

11. Contact

For questions about this Privacy Policy or our data practices:

Ghakleoneph
Grunerstraße 20, 10179 Berlin, Germany
Email: relations@ghakleoneph.world
Phone: +49 30 27581640