Privacy Policy

**The controller for this processing is:** - **Company:** Çamlica Döner - **Managing director:** Abdullah Kayran - **Address:** G5 10, 68159 Mannheim - **Telephone:** —

Orders and customer management

We collect and process your personal data (name, email address, phone number, delivery address) solely for processing your orders and providing our services. The legal basis is Art. 6(1)(b) GDPR (contract performance).

Payment processing

For payment processing, your payment data is transmitted to our payment service provider. We do not store credit card or bank details on our servers.

Website use

When you use our website, technical data (IP address, browser type, access time) is collected automatically. This data is used for the technical provision and security of our website.

Retention period

Your order data is stored for the statutory retention periods (generally 6 years after the end of the contract). Customer data is deleted once it is no longer required for contract performance.

Data deletion

You have the right to request deletion of your personal data at any time, unless statutory retention periods apply.

Data subject rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to the processing of your personal data. Please contact us to exercise your rights.

Right to complain

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

Product analytics (PostHog)

With your consent we use PostHog (PostHog Inc., EU Cloud) as a processor to understand how this website is used — which pages are viewed and where an order is abandoned. Processing is based on Art. 6(1)(a) GDPR (consent) and happens only after you accept analytics in the cookie banner; you can withdraw at any time via the cookie settings, which stops it immediately. What we collect is deliberately narrow: page views and interactions, with all text and all form fields masked before anything leaves your device, so the words on the page and what you enter are not transmitted. If you are signed in, PostHog receives an internal customer reference so your visits can be linked — not your name, e-mail address or telephone number. We do not record your screen. Payment card details are entered in a separate frame belonging to our payment provider and never reach us or PostHog.