Data Protection
1. Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following section, we will provide information on how we process your personal data when you use our website. For the purposes of this policy, personal data is defined as any information that can be used to identify a person.
1.2 The controller responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is Berkant Toraman, Werbellinstr. 51, 12053 Berlin, Germany, tel.: Please contact us by telephone on +49 3043920192 or by email at info@toramanbikes.com. In this context, the controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This website utilises SSL or TLS encryption for security purposes and to safeguard the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). An encrypted connection is indicated by the presence of the 'https://' character string and the lock symbol in your browser line.
2. Data Collection When Visiting Our Website
If you are merely accessing our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we will only collect the data that your browser transmits to our server (so-called 'server log files'). When you visit our website, we collect the following data, which is necessary for us to display the website to you:
The following data is collected when you visit our website:
- Details of the website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently check the server log files in the event that there are concrete indications of unlawful use.
3. Cookies
In order to optimise the user experience and facilitate the use of certain functions on our website, we utilise cookies on various pages. These are small text files stored on your end device. Some of the cookies we use are deleted at the end of the browser session, which occurs when you close your browser. These are known as session cookies. Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.In certain instances, cookies are employed to streamline the ordering process by storing user preferences (e.g., retaining the contents of a virtual shopping cart for subsequent visits to the website). In the event that personal data is also processed by individual cookies implemented by us, such processing is carried out in accordance with Art. 6 Art. 1 lit. b GDPR, either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to ensure the optimal functionality of the website and a customer-centric, effective design of the page visit, in line with our legitimate interests.
We may collaborate with advertising partners to enhance the user experience on our website. In order to facilitate the aforementioned purposes, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). Should we collaborate with the aforementioned advertising partners, you will be informed separately and individually about the use of such cookies and the scope of the information collected in each case in the following paragraphs.
Please be advised that you can configure your browser to receive notifications about the use of cookies and to decide on a case-by-case basis whether to accept them or to disable their use in specific instances or in general. Please note that each browser has its own unique approach to managing cookie settings. Further details can be found in the help menu of each browser, which explains how you can change your cookie settings. Please refer to the following links for further information on how to manage cookies for the respective browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please be advised that if you do not accept cookies, the functionality of our website may be restricted.
4. Contact Us
We collect personal data from individuals who contact us, for example via a contact form or email. The specific data collected when you contact us via a contact form can be found on the relevant form itself. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. In the event that your contact is in relation to the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Once your enquiry has been fully processed, your data will be deleted. This will be the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5. Data processing when opening a customer account and for contract processing
In line with the provisions set out in Arti. 6 and in accordance with Art. 6 para. 1 lit. b of the GDPR, we will continue to collect and process your personal data if you provide it to us for the fulfilment of a contract or when opening a customer account. The specific data collected can be found on the relevant forms. You may delete your customer account at any time by sending a message to the controller at the address above. We will store and use the data provided by you in order to fulfil the terms of the contract. Once the contract has been completed or your customer account deleted, your data will be blocked in accordance with tax and commercial law retention periods. It will then be deleted after these periods have expired, unless you have consented to further use of your data or we have reserved a legally permitted further use of data, which we will inform you of below.
6. Comment Function
Please note that, as part of the comment function on this website, the details of when the comment was created and the name you have chosen will be saved and published on the website in addition to your comment. Please be advised that your IP address will also be logged and stored. The IP address is stored for security purposes and in the event that the user in question infringes the rights of third parties or posts illegal content by posting a comment. In the event that a third party objects to your published content as unlawful, we will require your email address in order to contact you. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. Should a third party object to a comment as unlawful, we reserve the right to delete it.
7. Data Processing for Order Processing
In order to process your order, we collaborate with the following service providers, who support us in whole or in part in the fulfilment of concluded contracts. Please be advised that certain personal data is transmitted to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. Your payment data is shared with the appointed credit institution for the purposes of processing payments, where necessary. Should payment service providers be engaged, we will provide explicit information regarding this below. The legal basis for the transfer of data is Art. 6, para. 1, lit. b GDPR.
8. Rights of the Data Subject
8.1 In accordance with the applicable data protection legislation, you are entitled to comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data. Please find details of this below:
- In accordance with Art. 15 GDPR, you have the right to information. 15 GDPR: In particular, you have the right to be informed about the processing of your personal data by us. This includes the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, and other relevant details. You have the right to object to processing, to lodge a complaint with a supervisory authority, to be informed about the origin of your data if it was not collected by us from you, to be informed about the existence of automated decision-making including profiling and, if applicable, to be informed about the logic involved and the scope and intended effects of such processing on you. You also have the right to be informed about the guarantees pursuant to Art. In the event that your data is transferred to a third country in accordance with Art. 46 GDPR, we will inform you accordingly;
- In accordance with Art. 16 GDPR, you have the right to request rectification. 16 GDPR: You are entitled to have any incorrect data concerning you rectified without delay and/or for incomplete data stored by us to be completed;
- In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
In accordance with Art. 18 GDPR, you have the right to restrict processing. 18 GDPR: You have the right to request the restriction of the processing of your personal data in the following circumstances:1. While the accuracy of your data is checked. 2. If you refuse to delete your data due to unauthorised data processing and instead request the restriction of the processing of your data. You may require your data for the assertion, exercise or defence of legal claims after we no longer require this data for the purpose for which it was originally collected or if you have lodged an objection for reasons related to your particular situation. This will be the case until it is determined whether our legitimate reasons for processing prevail;
- In accordance with Art. 19 GDPR, you have the right to access information. 19 GDPR: In the event that you have asserted your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You are entitled to be informed about the recipients;
- In accordance with Art. 20 GDPR, we hereby confirm our commitment to the right to data portability. 20 GDPR: You have the right to receive your personal data, provided to us by you, in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;
- In accordance with Art. 7 para. 3 GDPR, the right to withdraw consent is hereby granted. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time, with immediate effect. In the event of revocation, we will delete the data concerned immediately, unless further processing can be justified by a legal basis for processing without consent. Please note that the withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal;
- In accordance with Art. 77 GDPR, you are entitled to submit a complaint. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. This is without prejudice to any other administrative or judicial remedy that may be available.
8.2. Right of Objection
If we process your personal data as part of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing at any time, with effect for the future, on grounds relating to your particular situation.
Should you exercise your right to object, we will halt processing of the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.
Should you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
9. Duration of Storage of Personal Data
The period for which personal data is stored is determined by the applicable statutory retention period (e.g. retention periods under commercial and tax law). Once the specified period has elapsed, the relevant data is automatically deleted unless it is still needed to fulfil a contract, initiate a contract, or we have a legitimate interest in retaining it.
Please note that this website uses Google Analytics, a web analytics service provided by Google Ireland Limited. In the event that the controller responsible for data processing on this website is based outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. For the sake of brevity, Google LLC and Google Ireland Limited will henceforth be referred to as 'Google'.
Google Analytics employs the use of cookies, which are text files stored on the visitor's computer, to facilitate the analysis of the visitor's use of the website. The data generated by the cookie regarding the visitor's use of this website (including the shortened IP address) is typically transmitted to a Google server and stored there.
This website exclusively uses Google Analytics with the extension '_anonymizeIp()'. This extension ensures the anonymisation of IP addresses by shortening them and excludes the possibility of direct personal references. The extension shortens the IP address of Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. In the event of an exceptional circumstance, the full IP address may be transmitted to a Google server in the USA, where it will be truncated. The IP address transmitted by the corresponding browser as part of Google Analytics will not be merged with other Google data.
On behalf of the website operator, Google will use the information collected to analyse the use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage (Art. 6 para. 1 lit. f GDPR). The processing of data is carried out in the interest of optimising this website, analysing its use and adapting the content. The interests of users are safeguarded through the use of pseudonymisation.
Google LLC. guarantees that it will comply with an appropriate level of data protection in accordance with the standard contractual clauses. Any data sent and linked to cookies, user identifiers (e.g. user ID) or advertising IDs is automatically deleted after a period of 50 months. Once the retention period has elapsed, the data is automatically deleted on a monthly basis.
Should you wish to prevent the collection by Google Analytics, you may do so by adjusting the cookie settings for this website. Furthermore, the collection and storage of the IP address and data generated by cookies can be cancelled at any time, with immediate effect. The relevant browser plugin can be downloaded and installed via the following link: https://tools.google.com/dlpage/gaoptout.
Should you wish to prevent the collection of data by Google Analytics on this website, you may do so by clicking on the following link. An opt-out cookie will be set to prevent the future collection of data when visiting this website.
For further information on the use of data by Google, including details on how to set and object to the processing of your data, please refer to Google's privacy policy (https://policies.google.com/privacy) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).