Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Bahar Dogan, la profondeur, Karl-Marx-Ring 42, 81735 München, Germany, Tel.: +498921529133, email: info@laprofondeur.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 When you use our website solely for information, without registering or otherwise providing us with information, we collect only the data your browser transmits to the website server (“server log files”). When you access our website, we collect the following data, which is technically necessary to display the website:

The website visited
Date and time of access
Volume of data transmitted in bytes
The source or referring page from which you arrived
Browser used
Operating system used
IP address used (where applicable, in anonymised form)

Processing is based on Article 6(1)(f) GDPR and our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for other purposes. We reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser's address bar.

3) Cookies

To make visiting our website attractive and enable certain functions, we use cookies: small text files stored on your device. Some are deleted automatically when the browser closes (“session cookies”), while others remain longer and allow website preferences to be stored (“persistent cookies”). For persistent cookies, the storage period is shown in your browser's cookie settings.

If individual cookies we use also process personal data, processing takes place under Article 6(1)(b) GDPR to perform a contract, under Article 6(1)(a) GDPR where consent has been given, or under Article 6(1)(f) GDPR to safeguard our legitimate interests in optimal website functionality and a user-friendly, effective browsing experience.

You can configure your browser to notify you when cookies are set, decide individually whether to accept them, or reject cookies in particular cases or generally.

Please note that rejecting cookies may restrict the functionality of our website.

4) Contacting us

When you contact us (e.g. using a contact form or email), we process personal data solely to handle and respond to your enquiry and only to the extent necessary for that purpose.

The legal basis is our legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR. If your enquiry concerns a contract, Article 6(1)(b) GDPR is an additional legal basis. Your data is deleted once the circumstances indicate that the matter has been finally resolved, provided no statutory retention obligations prevent deletion.

5) Data processing when opening a customer account

Under Article 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to open a customer account. The relevant form on our website shows which information is required.

You may request deletion of your account at any time by contacting the controller at the address above. Following account deletion, your data will be deleted if all contracts concluded through it have been fully performed, no statutory retention periods prevent deletion and we have no continuing legitimate interest in retaining the data.

6) Data processing for order fulfilment

6.1 Where necessary to perform the contract for delivery and payment, personal data we collect is passed to the commissioned transport company and financial institution under Article 6(1)(b) GDPR.

If a contract requires us to provide updates for goods with digital elements or digital products, we process the contact details you supplied when ordering to inform you personally under our statutory information obligations pursuant to Article 6(1)(c) GDPR. Your contact details are used strictly for notifications about updates we are required to provide and are processed only to the extent necessary for each notification.

6.2 Use of payment service providers

Apple Pay

If you choose Apple Pay from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed using Apple Pay on your iOS, watchOS or macOS device by charging a payment card stored in Apple Pay. Apple Pay uses security functions integrated into your device's hardware and software to protect transactions. Authorisation requires entering a code you previously set and verification using your device's Face ID or Touch ID function.

To process payment, the information you provide during checkout and details of your order are transmitted to Apple in encrypted form. Apple encrypts the data again with a developer-specific key before forwarding it to the payment service provider for the card stored in Apple Pay. Encryption ensures that only the website where the purchase was made can access the payment data. After payment, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

Any personal data processed in these transmissions is processed solely to handle payment under Article 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time and whether the transaction was completed successfully. Anonymisation fully excludes identification of an individual. Apple uses this anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase initiated in Safari on a Mac, the Mac and authorising device communicate through an encrypted channel on Apple's servers. Apple does not process or store this information in a form that can identify you. You can disable Apple Pay on your Mac through your iPhone settings: go to “Wallet & Apple Pay” and turn off “Allow Payments on Mac”.

Further information on privacy with Apple Pay is available at https://support.apple.com/de-de/HT203027.

Klarna

This website offers one or more online payment methods from Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you choose a payment method where you pay in advance (e.g. credit card), the payment data provided during checkout (including name, address, bank and payment card information, currency and transaction number) and information about your order are passed to the provider under Article 6(1)(b) GDPR. Data is disclosed solely to process payment with that provider and only to the extent necessary.

If you choose a method where the provider pays in advance (e.g. invoice, instalments or direct debit), you will also be asked during checkout to provide certain personal details (first and last name, street, house number, postcode, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in establishing our customers' ability to pay, we forward this data to the provider for a credit check under Article 6(1)(f) GDPR. Based on your personal data and other information (e.g. shopping cart, invoice amount, order history and payment experience), the provider assesses whether your selected payment method can be offered in view of payment default and/or bad debt risks.

In addition to the provider's own criteria, identity and credit information from the following credit agencies may be used in assessing the application under Article 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may include probability values (“scores”). Where scores inform the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other information, is used to calculate these scores.

You may object to this processing at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data where necessary to handle payment in accordance with the contract.

PayPal

This website offers one or more online payment methods from PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method where you pay in advance, the payment data provided during checkout (including name, address, bank and payment card information, currency and transaction number) and information about your order are passed to the provider under Article 6(1)(b) GDPR. Data is disclosed solely to process payment with that provider and only to the extent necessary.

If you choose a payment method where we provide goods or services before payment, you will also be asked during checkout to provide certain personal details (first and last name, street, house number, postcode, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in establishing your ability to pay in such cases, we forward this data to the provider for a credit check under Article 6(1)(f) GDPR. Based on your personal data and other information (e.g. shopping cart, invoice amount, order history and payment experience), the provider assesses whether your selected payment method can be offered in view of payment default and/or bad debt risks.

SOFORT bank transfer

This website offers one or more online payment methods from Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

Stripe

This website offers one or more online payment methods from Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you choose one of the provider's payment methods, the payment data provided during checkout (including name, address, bank and payment card information, currency and transaction number) and information about your order are passed to the provider under Article 6(1)(b) GDPR. Data is disclosed solely to process payment with that provider and only to the extent necessary.

7) Website functionality

Google Web Fonts

To display fonts consistently, this website uses web fonts from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When a page is accessed, your browser loads the required fonts into its cache to display text and fonts correctly and connects directly to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to Google LLC, USA.

Personal data is processed when connecting to the font provider only if you have given your express consent under Article 6(1)(a) GDPR. You may withdraw consent at any time with future effect by disabling this service through the website's cookie consent tool. If your browser does not support web fonts, a standard font from your computer is used.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

Further information on Google's privacy provisions is available at https://business.safety.google/intl/de/privacy/.

8) Rights of the data subject

8.1 Applicable data protection law grants you the following rights against the controller in relation to the processing of your personal data (rights of access and intervention). The conditions for exercising each right are set out in the cited legal provisions:

Right of access under Article 15 GDPR;
Right to rectification under Article 16 GDPR;
Right to erasure under Article 17 GDPR;
Right to restriction of processing under Article 18 GDPR;
Right to notification under Article 19 GDPR;
Right to data portability under Article 20 GDPR;
Right to withdraw consent under Article 7(3) GDPR;
Right to lodge a complaint under Article 77 GDPR.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, WITH FUTURE EFFECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE MAY CONTINUE PROCESSING IF WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE THIS RIGHT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of storage of personal data

The duration of storage depends on the relevant legal basis, purpose of processing and, where applicable, the statutory retention period (e.g. under commercial and tax law).

Personal data processed on the basis of express consent under Article 6(1)(a) GDPR is stored until you withdraw that consent.

If statutory retention periods apply to data processed in connection with contractual or similar obligations under Article 6(1)(b) GDPR, the data is routinely deleted after those periods expire, provided it is no longer needed for performance or initiation of a contract and/or we have no continuing legitimate interest in retaining it.

Personal data processed under Article 6(1)(f) GDPR is stored until you exercise your right to object under Article 21(1) GDPR, unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.

Personal data processed for direct marketing under Article 6(1)(f) GDPR is stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated elsewhere in this policy for specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 19.10.2026, 03:56:59