Privacy Policy

1. Data Controller

Concept Stand
info@concepstand.com

2. Data Collection Purposes

Contract Performance (GDPR Art. 6(1b)): Processing inquiries and orders.
Legal Obligations (Art. 6(1c)): Tax and accounting records (German Commercial Code §257).
Legitimate Interests (Art. 6(1f)): Customer analysis and marketing.

3. International Data Transfers

EU-Turkey Transfers: Data may be transferred to Turkey (a third country without GDPR adequacy status). Transfers are safeguarded by EU Standard Contractual Clauses (SCCs).

4. Data Retention Periods

Contact form data: 2 years.

5. Your Rights

Under GDPR Articles 15-20, you may access, rectify, delete, or port your data.
Complaints may be filed with the Berlin Data Protection Authority (Berliner Beauftragte für Datenschutz).

6. Children’s Privacy

We do not collect data from users under 16 (GDPR Art. 8).