1. Privacy at a glance

This notice explains how personal data is processed when you visit this website, contact us or place an order. Personal data is information that can identify you. Some information is provided by you; technical information such as browser, access time and IP address may be recorded when the website is used.

2. Controller

Ehsan Rakhshandeh
Sedanstraße 34
30161 Hannover, Germany
Email: hello@ehsanrakhshandeh.com
Website: ehsanrakhshandeh.com

The controller determines the purposes and means of processing personal data on this website.

3. Hosting

The hosting provider identified for this website is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Hosting involves processing technical access information, including server logs and IP addresses, to provide and protect the website. Further information is available in Strato’s privacy notice.

Processing necessary for reliable and secure website operation is based on our legitimate interests under Article 6(1)(f) GDPR. Where consent is requested for a particular processing activity, Article 6(1)(a) GDPR applies. Processing on our behalf is subject to the applicable data-processing arrangements.

4. Legal bases and retention

We process data needed to handle an enquiry, order or contract under Article 6(1)(b) GDPR. Legal obligations, including applicable record-retention duties, are addressed under Article 6(1)(c) GDPR. Where processing relies on consent, Article 6(1)(a) GDPR applies; consent can be withdrawn at any time for the future. Legitimate interests, where applicable, are assessed under Article 6(1)(f) GDPR.

Data is retained for the purpose for which it was collected and for any applicable legal retention period. It is then deleted unless another lawful reason for retention remains, such as establishing, exercising or defending legal claims.

We share data only where necessary for a contract, required by law, supported by a legitimate interest or another applicable legal basis. Where service providers act as processors, processing is governed by the relevant data-processing arrangements. International transfers require an applicable basis under the GDPR, such as an adequacy decision or appropriate safeguards.

5. Your rights

Subject to the legal requirements, you have the right to access your personal data, request its correction or deletion, restrict its processing and receive data you provided in a portable format. You may contact us using the details above.

You may request restriction, in particular while disputed accuracy is checked, where processing is unlawful and you prefer restriction to deletion, where you need data for legal claims that we no longer require, or while an objection is being assessed.

If processing is based on Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. We will stop the processing unless overriding compelling legitimate grounds or grounds relating to legal claims apply. You may object to processing for direct marketing at any time, including related profiling.

Withdrawing consent does not affect the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country of your habitual residence, place of work or the alleged infringement.

6. Cookies and enquiries

Cookies and similar technologies can store information on your device. Some are required for functions you request, such as the shopping basket and checkout. Others may require your consent. Necessary storage or access is assessed under Section 25(2) TDDDG; storage or access requiring consent is assessed under Section 25(1) TDDDG. Processing personal data additionally requires a GDPR legal basis.

You can manage available consent choices through the website’s privacy controls and change browser cookie settings. Blocking necessary cookies may affect website functions.

When you contact us, we use the details you provide to answer your enquiry and follow-up questions. For contractual enquiries this is based on Article 6(1)(b) GDPR; for other enquiries it is based on our legitimate interest in responding under Article 6(1)(f) GDPR or consent where applicable. Enquiry data is retained only as needed, subject to legal obligations.

7. External links and fonts

This website links to Instagram, provided by Meta Platforms Ireland Limited. Following that link takes you to an external service, where its own data processing applies. If you are signed in, the service may associate your visit with your account. See Meta’s privacy policy.

The website is configured to use locally hosted Google Fonts. Local font delivery does not require a connection to Google’s font servers. Information about Google Fonts is available in Google’s Fonts FAQ.

Internet communications, including email, cannot be guaranteed to be completely protected against access by third parties.