Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Aslantas E-Commerce Limited Unit 18, 8/F, Peter Leung Industrial Building 103 Wai Yip Street, Kwun Tong Hong Kong
Represented by its director: Bedirhan Aslantas Email: radio.hasanat@gmail.com
2. General Information on Data Processing
We process personal data only to the extent necessary to provide a functional online shop and our content and services. Processing is carried out either with the user's consent or where permitted by law.
3. Hosting and Shop Platform (Shopify)
Our online shop is operated using the Shopify platform. The provider is:
Shopify International Ltd. Victoria Buildings, 2nd Floor 1–2 Haddington Road Dublin 4, D04 XN32 Ireland
Shopify provides the technical platform, hosting and shop infrastructure, and in doing so processes personal data including IP addresses, device and access data, and order and payment information.
Data transfers to third countries (in particular Canada and the USA) cannot be excluded. Shopify bases such transfers on appropriate safeguards pursuant to Art. 46 GDPR (e.g. Standard Contractual Clauses).
Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy
Legal basis: Art. 6(1)(b) and (f) GDPR
4. Collection and Processing of Personal Data
We process personal data that you provide to us when placing an order, contacting us, or using our shop. This includes in particular:
- Name and address
- Email address and phone number
- Order and delivery information
- Payment information (depending on the payment method)
Processing is carried out for the performance of the contract and for pre-contractual measures.
Legal basis: Art. 6(1)(b) GDPR
5. Payment Service Providers
To process payments, we share personal data with payment service providers.
a) Shopify Payments Shopify Payments is provided by Shopify. Shopify's privacy provisions apply (see Section 3).
b) PayPal Where payment is made via PayPal, payment processing is carried out by:
PayPal (Europe) S.à r.l. et Cie, S.C.A. 22–24 Boulevard Royal L-2449 Luxembourg
Privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full
Legal basis: Art. 6(1)(b) GDPR
6. Shipping, Fulfillment and Third-Country Transfers
For the purpose of delivery, we share necessary personal data (name, address, and where applicable email and phone number) with shipping and logistics providers.
Goods may be shipped directly from a warehouse located outside the European Union. In this context, personal data may be transferred to logistics and fulfillment partners in third countries, including China. Such transfers are carried out solely for the performance of the purchase contract, and where these transfers are regular or ongoing, we work to ensure appropriate safeguards are in place with the relevant partners.
Legal basis: Art. 6(1)(b) GDPR; Art. 49(1)(b) GDPR
7. Cookies and Consent Management
Our website uses cookies. Cookies are small text files stored on your device.
- Strictly necessary cookies are required for the operation of the shop.
- Analytics or marketing cookies are only set if you have given your consent.
Consent is obtained via a cookie banner and can be withdrawn at any time.
Legal basis: storage of and access to information on your device is governed by the applicable ePrivacy rules; consent-based cookies are processed under Art. 6(1)(a) GDPR.
8. Server Log Files
When you visit our website, Shopify automatically collects data in server log files, such as:
- IP address
- Browser type and version
- Operating system
- Date and time of access
This data is used for technical security and system stability.
Legal basis: Art. 6(1)(f) GDPR
9. Data Retention
Personal data is stored only for as long as necessary to fulfill the respective purposes or as required by statutory retention periods. After that, it is deleted.
10. Your Rights
You have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority.
11. Contact
If you have any questions regarding data protection, please contact us using the details provided in Section 1.