1. Data Controller
Name: Fatih Bayram
Company: Fatih Bayram – hhitxpress.de
Address: Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany
Email: info@hhitxpress.de
2. General Information on Data Processing
I take the protection of your personal data very seriously. Your data is processed in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable legal provisions.
2.1 Legal Bases for Processing
- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Contract performance / pre-contractual measures
- Art. 6(1)(c) GDPR – Legal obligation
- Art. 6(1)(f) GDPR – Legitimate interest (e.g., IT security, website optimization, economic operation)
3. Hosting & Server Log Files
This website is hosted by:
Strato AG
Pascalstraße 10
10587 Berlin
Germany
Privacy Policy: https://www.strato.de/datenschutz/
The following data is automatically processed when you access the website:
- Visited page
- Date and time
- Browser type and version
- Operating system
- Referrer URL
- IP address (anonymized)
Purpose: Website operation, IT security, error analysis
Legal basis: Art. 6(1)(f) GDPR
4. Contact Form for Requesting Ticket System Access
This form allows business customers to request access to my support and ticket system.
Processed data:
- First and last name
- Address
- Email address
- Phone number
- Optional: Company name
- Message
- Document upload (up to 30 MB)
Legal bases:
Art. 6(1)(a) GDPR (consent)
Art. 6(1)(b) GDPR (pre-contractual measures)
5. Quote / Cost Estimate Form
Processed data:
- Name, address
- Email address
- Phone number
- Optional: Company name
- Description of the request
- File uploads (up to 30 MB)
Purpose: Processing quote and cost estimate requests
Legal basis: Art. 6(1)(a), (b) GDPR
6. Ticket System (support.hhitxpress.de)
Processed data:
- Name
- Email address
- Ticket content
- IP address and timestamp
Purpose: Handling support requests
Legal basis: Art. 6(1)(b) GDPR
7. Website Analytics with WP Statistics
I use WP Statistics. This tool stores all data anonymously and exclusively on my own server. No personal data is transferred to third parties or to foreign countries. No cookies are set.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistical analysis)
8. Cookies & Cookie Policy
This website uses cookies. Technically necessary cookies are set without consent, while all other cookies are only activated after you provide consent.
8.1 Types of Cookies
- Necessary cookies: Required for basic website functionality.
- Functional cookies: e.g., language settings.
- Analytics cookies: Not used on this website.
- Marketing cookies: Google Ads / DoubleClick.
8.2 Functional Cookies Used
- language – Storage duration: 1 year – stores the selected website language.
The full list of cookies can be found in the cookie banner under “Cookie Settings”.
8.3 Cookie Consent Tool (CookieYes)
I use the consent management tool CookieYes to collect, store, and manage your cookie consent.
Provider:
CookieYes Limited
3 Warren Yard
Warren Park, Wolverton Mill
Milton Keynes, MK12 5NW
United Kingdom
Privacy Policy: https://www.cookieyes.com/privacy-policy/
Legal basis: Art. 6(1)(c) GDPR
9. Google Tag Manager
Google Tag Manager manages tracking and marketing scripts. The service does not set cookies itself but may process technical data (e.g., IP address).
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Privacy Policy: https://policies.google.com/privacy
Legal basis: Art. 6(1)(a) GDPR (consent)
10. Google Ads & Conversion Tracking (DoubleClick)
I use Google Ads to analyze advertising effectiveness and display personalized advertising. Cookies are used for this purpose.
Provider:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Ads Privacy Policy: https://policies.google.com/technologies/ads
Cookies used:
- _gcl_au – 3 months
- test_cookie – 15 minutes
- IDE – 1 year 24 days
Legal basis: Art. 6(1)(a) GDPR
Data transfer: Transfer to the USA is possible (Standard Contractual Clauses, Art. 46 GDPR).
Risk notice: U.S. authorities may access transferred data without effective legal remedies for EU citizens.
11. Your Rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority
Supervisory authority Hamburg:
The Hamburg Commissioner for Data Protection and Freedom of Information
Email: mailbox@datenschutz.hamburg.de
12. Storage Duration
Data is stored only as long as necessary to fulfill the respective purpose or as required by law.
13. Data Security
I use SSL/TLS encryption and other technical and organizational measures to protect your data.
14. Contract and Billing Processing
Provider:
Haufe-Lexware GmbH & Co. KG
Munzinger Straße 9
79111 Freiburg
Germany
Privacy Policy: https://www.lexware.de/datenschutz/
Retention period: 10 years (accounting records), 6 years (business correspondence)
15. Mobile App “Simple Browser”
This app does not process personal data. All data is stored locally and deleted when the app is closed.
16. Mobile App “Bar Manager”
All data is stored exclusively locally. No data is transferred to third parties.
17. Mobile App “Islamic Prayer Times”
Location data is processed only locally and is neither stored nor transmitted.
18. Mobile App “TimeTracker Ultimate”
This app does not process personal data. Time and project data is stored only locally on the device.
19. Changes to This Privacy Policy
I reserve the right to update this privacy policy as needed when legal or technical changes occur.
📅 Last updated: December 2025