Data protection
The person responsible within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

CHAOS NARGILE SANAYI VE LIMITED ŞIRKETI

Your data subject rights
You can exercise the following rights at any time using the contact details provided for our data protection officer:

Information about your data stored by us and their processing (Article 15 GDPR),
Correction of incorrect personal data (Article 16 GDPR),
Deletion of your data stored by us (Article 17 GDPR),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Article 18 GDPR),
Objection to the processing of your data by us (Article 21 GDPR) and
Data transferability if you have consented to data processing or have concluded a contract with us (Article 20 GDPR).
If you have given us your consent, you can revoke this at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. B. to the competent supervisory authority of the federal state of your place of residence or to the authority responsible for us as the responsible body.

A list of the supervisory authorities (for the non-public area) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are anonymized so that it is no longer possible to assign the calling client.

Newsletter
Type and purpose of processing:
For the delivery of our newsletter, we collect personal data that is transmitted to us via an input mask.

For an effective registration we need a valid e-mail address. In order to check that the owner of an e-mail address is actually registering, we use the "double opt-in" procedure. To do this, we log the registration for the newsletter, the sending of a confirmation email and the receipt of the response requested here. Further data is not collected.

Legal basis:
On the basis of your expressly given consent (Art. 6 Para. 1 lit. a DSGVO), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option given at the end of this data protection notice.

Recipient:
Recipients of the data may be processors.

Storage duration:
The data will only be processed in this context as long as the corresponding consent has been given. After that they will be deleted.

Provision prescribed or required:
The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Withdrawal of consent:
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. Unsubscribing can be requested via the link contained in each e-mail or to the data protection officer listed below or the person responsible for data protection.

contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid email address and your name. This is used to allocate the request and then to answer it. Providing further data is optional.

Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Article 6 (1) (f) GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

Recipient:
Recipients of the data may be processors.

Storage duration:
Data will be deleted no later than 6 months after processing the request.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code and delete your data after these periods have expired.

Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

Embedded YouTube videos
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheater Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy) .

Withdrawal of consent:
The provider currently offers no option for a simple opt-out or blocking of data transmission. If you want to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or only to a limited extent.

SSL encryption
In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Information about your right of objection according to Art. 21 GDPR
Individual right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based on Article 6 (1) (f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of an objection
CHAOS NARGILE SANAYI VE LIMITED ŞIRKETI