Privacy Policy

Soapna d’Alep e.K. Website: https://soapnadalep.com

1. Introduction

Soapna d’Alep e.K. respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws. This Privacy Policy explains how we collect, process, and protect your personal data when you use our website and services.

2. Data Controller

Soapna d’Alep e.K. Lübecker Straße 5 65760 Eschborn Germany Email: info@soapnadalep.com Website: https://soapnadalep.com

3. Hosting and Server Log Files

Our website is hosted within the European Union. The hosting provider processes personal data on our behalf under a Data Processing Agreement pursuant to Art. 28 GDPR. Hosting provider: Synetrix Holdings Limited (servers located in Frankfurt, Germany) When you visit our website, the following data may be collected automatically:

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Date and time of access
• Pages visited

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation)

4. Account Registration

When creating an account, we collect:

• Name
• Email address
• Billing and shipping address
• Phone number (optional)

Legal basis: Art. 6(1)(b) GDPR (contract performance)

5. Orders and Payments

When you place an order, we process personal data necessary to fulfill the contract. Data includes:

• Name
• Billing and shipping address
• Email address
• Order details
• Payment information (processed via third-party providers)

Payment is processed by external providers such as PayPal, Stripe, or Klarna. We do not store full payment card details. Legal basis: Art. 6(1)(b) GDPR (contract performance)

6. Contact Requests

When you contact us via email or contact form, we store your message and contact details to respond to your inquiry. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR

7. Marketing Communications (if applicable)

If you subscribe to our newsletter or marketing communications, we process your email address based on your consent. You may withdraw your consent at any time. Legal basis: Art. 6(1)(a) GDPR (consent)

8. Analytics and Tracking

We may use analytics tools such as Google Analytics to understand website usage. Data collected may include:

• Pages visited
• Time spent on website
• Device type
• Browser information
• Approximate location

Google may process data outside the European Union (including the United States). Appropriate safeguards such as Standard Contractual Clauses are used where required. Legal basis: Art. 6(1)(a) GDPR (consent)

9. Cookies

Information about cookies and tracking technologies is available in our Cookie Policy: View Cookie Policy

10. Embedded Content

Our website may include embedded content (e.g. YouTube videos, Instagram posts, Facebook content). These third-party services may collect data when loaded.

11. Data Sharing

We do not sell personal data. We may share data with:

• Payment providers (PayPal, Stripe, Klarna)
• Shipping companies (DHL, Hermes)
• Hosting and IT providers
• Analytics providers (e.g. Google)
• Authorities if legally required

12. Legal Compliance

We process and store personal data where required by German commercial and tax law (including retention obligations under the German Commercial Code and Fiscal Code).

13. Data Retention

• Customer accounts: until deletion request
• Invoices: 10 years (legal obligation)
• Contact requests: up to 12 months

14. Security

We use SSL encryption and appropriate technical and organizational measures to protect your personal data.

15. Your Rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

You may contact your local data protection authority if you believe your rights have been violated.

16. Updates

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.