Privacy Policy
1. Privacy at a glance
The following information provides a simple overview of what happens to your personal data when you visit this website.
2. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.
Data controller
The data controller for data processing on this website is: Kirac Yildiray, Bayerstraße 15, 80335 Munich, Germany. Phone: +49 163 4595959, Email: info@handymuenchen.de. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Data collection on this website
Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits. These include: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. The collection is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website.
SSL/TLS encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. An encrypted connection is indicated by the browser address line changing from "http://" to "https://" and by the lock icon in your browser bar.
Cookies and consent management
This website uses necessary cookies to store your language preferences and maintain core site functionality. In addition, you may voluntarily consent to Google Analytics cookies and traffic measurement for website traffic analysis. The Google tag is loaded with denied consent by default so that analytics storage remains disabled until you choose to opt in. You can change or withdraw your choice at any time through the "Cookie settings" link in the footer.
Google Analytics
If you consent to analytics cookies, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, solely to measure website traffic and understand which pages are used. Google Analytics is not used for advertising, remarketing, or personalization. Analytics cookies and full traffic measurement are activated only after your explicit consent.
The legal basis for this processing is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by reopening the cookie settings in the footer. If you do not consent or withdraw consent, analytics storage remains disabled.
4. Hosting
This website is hosted by Railway (Railway Corporation). The servers are located in the Netherlands (EU). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website. The host is used in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with our host. Data processing takes place exclusively on servers within the European Union.
5. Contact
If you send us inquiries via the contact form or email, the information you provide including the contact details will be stored for the purpose of processing your request and in case of follow-up questions. We do not share this data without your consent. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). Data is deleted once your inquiry has been fully processed, unless statutory retention obligations apply.
WhatsApp Business
You can contact us via WhatsApp Business. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For specific business inquiries, your phone number and name (if provided) are stored under Art. 6(1)(b) GDPR. For general inquiries, processing is based on Art. 6(1)(f) GDPR (legitimate interest in efficient inquiry handling). WhatsApp Business accesses the address book of the device we use for this purpose and transmits phone numbers to servers of Meta Platforms Inc. in the USA. We only use contact data of persons who have contacted us via WhatsApp. Data transfers to the USA are conducted on the basis of the EU-US Data Privacy Framework. We have concluded a data processing agreement with the provider. The data is used exclusively to process your inquiry and is not shared with third parties.
6. Third-party services
Google Maps
This website uses the Google Maps mapping service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display interactive maps and location information. When you access pages with embedded maps, usage data and your IP address are transmitted to Google servers, which may also be located in the USA (Google LLC). Whether and how Google processes this data depends, among other things, on whether you are logged in to Google. Use is based on Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation of our online offering and easy findability of our location). Data transfers to the USA are conducted on the basis of the EU-US Data Privacy Framework. You can disable JavaScript in your browser settings, which will however prevent Google Maps from functioning.
7. Rights of the data subject
You have the following rights regarding your personal data: right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to notification (Art. 19 GDPR), right to data portability (Art. 20 GDPR), right to withdraw consent (Art. 7(3) GDPR), and right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA).
Right to object
Where the processing of your personal data is based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR, provided there are grounds relating to your particular situation. Upon objection, processing will cease unless there are compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise, or defense of legal claims. If your personal data is processed for direct marketing purposes, you may object at any time; processing will then be stopped immediately.
8. Duration of storage of personal data
The duration of storage depends on the respective legal basis, the processing purpose, and any applicable statutory retention period. Data processed on the basis of consent (Art. 6(1)(a) GDPR) is stored until withdrawal. Data processed for contract performance (Art. 6(1)(b) GDPR) is deleted after the end of the contract and expiry of statutory retention periods. Data processed on the basis of legitimate interests (Art. 6(1)(f) GDPR) is stored until objection. In general, personal data is deleted as soon as the purpose of collection no longer applies and no statutory retention obligations remain.