Privacy Policy

1. Controller

• [Company name]
• [Address]
• E-mail: [e-mail address]
• Phone: [phone number]
• Data protection officer: [name and contact if appointed — otherwise delete this line]

2. Our principle

We only collect the data we genuinely need in order to provide the service. We do not sell your data and do not pass it on to third parties for advertising purposes.

All traffic between you and this site is encrypted with TLS, which you can verify by the padlock icon in your browser.

3. When you visit the site (server logs and hosting)

Our website is hosted on the infrastructure of Vercel Inc. When you open a page, the server records technically necessary information: IP address, time of the request, the address requested, browser and operating system details and the referring page.

This processing is based on our legitimate interest in operating the site securely and without errors (Art. 6(1)(f) GDPR). Logs are deleted automatically after a short period and are not used to build profiles.

4. When you send a rental request

The order form collects your name, phone number, e-mail address, delivery address, set-up and return dates and any note you add. We process this data to assess your request, contact you and conclude and perform the rental contract.

The legal basis is the conclusion and performance of a contract (Art. 6(1)(b) GDPR). Confirmation and rejection notices are sent by e-mail; we use the service Resend to deliver them.

Order records are stored in our database; the database and product images are hosted on Supabase.

5. Stock enquiry / contact form

When you submit the form, your e-mail address, the item you asked about and your message are sent to us. We use this data solely to answer your question (Art. 6(1)(b) and 6(1)(f) GDPR).

To prevent abuse, form submissions are subject to temporary rate limiting, during which your IP address is briefly evaluated.

6. Cookies and browser storage

This site uses no advertising or tracking cookies. Your shopping cart is stored only in your own browser (localStorage); it is never sent to the server and disappears when you clear your browser data.

When the administrator signs in to the management panel, strictly necessary cookies are used for the session and two-factor authentication. These concern the site owner only and are never set for visitors.

No analytics tool is currently loaded. Should we add one such as Google Analytics in the future, it will only run after you give explicit consent in the cookie banner (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG).

7. Exchange rates

To display prices in Turkish lira we retrieve the current euro rate from the open data of the European Central Bank. This request is made by our server; your browser never connects to that service and none of your personal data is transferred.

8. Processors

We conclude data processing agreements with the service providers that process data on our behalf. The providers we use are:

• Vercel Inc. — hosting and content delivery
• Supabase Inc. — database and image storage
• Resend (Plus Five Five, Inc.) — delivery of order and contact e-mails

9. Transfers outside the EEA

These providers may also process data outside the European Economic Area. Where that happens, the transfer is based on the European Commission's standard contractual clauses or a valid adequacy decision. You may request a copy of the relevant safeguards from us.

10. Retention periods

• Order and invoice records: for as long as commercial and tax law require ([6-10 years depending on your country])
• Contact and stock enquiry messages: [retention period, e.g. 12 months] after the request has been settled
• Server logs: [retention period, e.g. 30 days]

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Details and how to exercise them are set out on our GDPR page.

You also have the right to lodge a complaint with the competent supervisory authority: [name and address of the supervisory authority].

12. Changes to this notice

We update this notice whenever our services or the legal requirements change. The current version is always published on this page; the date at the end shows the last update.