Datenschutzerklärung

This Privacy Policy applies to all users and customers of the Kara Korum official website. It is fully compliant with the EU General Data Protection Regulation (GDPR 2016/679) and the German Federal Data Protection Act (BDSG). This document transparently explains how we collect, use, store, protect and process your personal data, as well as your legal data rights. By accessing our website and placing orders, you explicitly accept the terms of this policy.

1. Data Controller

The entity responsible for processing your personal data (Data Controller) under GDPR Article 4(7) is:

Brand Name: Kara Korum

Address: Marzellenstraße 35-49, Cologne, 50668, Germany

Phone: +49 221 92296603

Email: info@kara-korum.com

Business Hours: Monday – Friday, 08:00 – 17:00 CET

The Data Controller undertakes lawful, transparent, secure and limited personal data processing in full compliance with EU and German data protection laws.

2. Personal Data We Collect

We only collect data that is strictly necessary for contractual, operational and legal purposes. No excessive or unnecessary personal data will be collected.

Customer & Order Data: Full name, billing and delivery address, email address, contact phone number, order records and purchase history.
Technical Website Data: IP address, browser type, device information, access time, visited pages and anonymous traffic data collected via cookies.
Communication Data: Information you provide when contacting our customer service, including consultation content and reply records.
Marketing Data: Newsletter subscription status and preference data, collected only with your explicit consent.

Important Note: We do not store any credit card, bank account or sensitive payment data. All payment transactions are securely processed by certified EU payment providers.

3. Legal Basis for Data Processing

All data processing activities comply with GDPR Article 6 legal bases:

Contract Performance (Art. 6(1)(b) GDPR): Processing data to complete order processing, product delivery, after-sales service and contract fulfillment.
Legal Obligation (Art. 6(1)(c) GDPR): Data retention to comply with German tax, commercial and legal record-keeping requirements.
Legitimate Interest (Art. 6(1)(f) GDPR): Website optimization, fraud prevention, service improvement and safe platform operation.
Explicit Consent (Art. 6(1)(a) GDPR): Sending marketing newsletters and enabling non-essential cookies, based on your voluntary approval.

4. How We Use Your Personal Data

Your data is only used for the following declared purposes:

Process, verify and deliver your orders efficiently
Provide after-sales support, return and refund services
Reply to customer inquiries and technical support requests
Maintain website stability, security and user experience
Comply with legal and tax retention obligations
Send promotional content only to users who have subscribed explicitly

5. Data Retention Periods

We store personal data only for the shortest necessary duration in accordance with German and EU legal rules:

Order & Invoice Data: Retained for 10 years as required by German commercial and tax law.
Customer Communication Data: Retained for 3 years after the last interaction.
Technical & Cookie Data: Maximum retention period of 26 months.
Marketing Data: Retained until you unsubscribe or withdraw your consent.

After the retention period expires, all personal data will be securely and permanently deleted or anonymized.

6. Data Sharing & Third Parties

Kara Korum never sells, trades or rents your personal data for commercial purposes.

We only share necessary data with GDPR-compliant third-party processors bound by data protection agreements, including:

Logistics and delivery service providers for order fulfillment
Authorized EU payment service providers for transaction processing
Website hosting and technical maintenance providers
Anonymous analytics tools for website optimization

All third parties are required to implement strict security measures and guarantee data confidentiality.

7. International Data Transfers

All personal data is primarily stored and processed within the European Union / European Economic Area (EU/EEA). If cross-border data transfer to non-EU countries occurs, we will ensure full compliance with GDPR by adopting EU Standard Contractual Clauses (SCCs) or relying on official adequacy decisions to guarantee equivalent data protection levels.

8. Your GDPR Legal Rights

As a data subject, you hold the following rights under GDPR Articles 15–22 and German BDSG:

Right of Access: Request a full copy of your stored personal data and processing details.
Right of Rectification: Correct inaccurate or incomplete personal information.
Right to Erasure (Right to be Forgotten): Request permanent data deletion when data is no longer necessary.
Right to Restriction of Processing: Suspend data processing under specific legal conditions.
Right to Data Portability: Obtain your data in a machine-readable transferable format.
Right to Object: Object to data processing for legitimate interest or marketing purposes.
Right to Withdraw Consent: Revoke any given consent at any time without affecting prior lawful processing.
Right to Complaint: Lodge a complaint with the competent German data protection authority if you believe your rights are violated.

9. Data Security Protection

We implement comprehensive technical and organizational security measures including SSL encryption, secure server storage, regular security updates, access permission control and data backup mechanisms. These measures effectively protect your personal data against unauthorized access, leakage, tampering, loss and illegal destruction, meeting German and EU high-standard data security requirements.

10. Cookie & Tracking Technologies

Our website uses essential and analytical cookies to ensure basic operation and user experience. Non-essential cookies are only activated with your explicit consent. Please refer to our independent Cookie Policy for full details.

11. Policy Updates

Kara Korum reserves the right to update this Privacy Policy to comply with changes in EU regulations, German laws or business operations. The latest version will be published on this page with an updated date. Continued use of the website after updates constitutes acceptance of the revised policy.