Privacy policy

This is a translation. In case of doubt, the German version applies.

1. Controller

Effinion Technology UG (haftungsbeschränkt), Uferweg 29, 48282 Emsdetten, Deutschland
Email: backoffice@theturkishmarket.com · Phone: +49 2572 9233344
Further details are given in our legal notice.

2. Hosting and server log files

This website is hosted by DigitalOcean, LLC (101 Avenue of the Americas, New York, NY 10013, USA) in a data centre in Frankfurt am Main. We have a data processing agreement with the provider (Art. 28 GDPR). Where data may be transferred to the USA, this is based on the EU-US Data Privacy Framework or the EU standard contractual clauses.

When you visit the website, the server automatically stores your IP address, the date and time, the page requested, the referrer URL and your browser identification. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR). The log files are deleted after 14 days at the latest unless they are needed to investigate a security incident.

3. Customer account and orders

For orders we process your name, email address, delivery and billing address, phone number, order contents and payment status. This processing is necessary to perform the purchase contract (Art. 6(1)(b) GDPR). We store the password of your customer account only in encrypted (hashed) form.

For delivery we pass your name, address and, where applicable, phone number to the shipping company we use (Art. 6(1)(b) GDPR).

4. Payment with Amazon Pay

If you pay with Amazon Pay, payment is processed by Amazon Payments Europe S.C.A., 38 avenue John F. Kennedy, L-1855 Luxembourg. We transmit the data required for the payment (order amount, order number) and receive from Amazon your name, email address and the delivery and billing address stored in your Amazon account. The legal basis is Art. 6(1)(b) GDPR. Amazon Payments Europe is an independent controller for the processing involved in handling the payment; details can be found in the Amazon Pay privacy notice.

5. Contact by email or phone

If you contact us, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that purpose and no statutory retention obligations apply.

6. Cookies and local storage

We use only strictly necessary storage technologies (§ 25(2) TDDDG): a session cookie that keeps you signed in after you log in, and your browser's local storage for the contents of your cart. Two further strictly necessary cookies (ttm_lang, ttm_currency) store the language and currency you have chosen for one year. We do not use analytics, advertising or tracking cookies. Fonts are loaded from our own server; no data is transferred to Google.

7. Retention period

We keep order and invoice data for up to ten years in accordance with commercial and tax law obligations (§ 257 HGB, § 147 AO). You can have your customer account deleted at any time by emailing us.

8. Your rights

You have the right to

• access to the data stored about you (Art. 15 GDPR),
• rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf.

9. Encryption

For security reasons this website uses SSL/TLS encryption. You can recognise it by “https://” in your browser's address bar.