Privacy policy

1. Controller and Contact Details

The controller responsible for the processing of personal data on this website and in our online shop is:

Dila Alkan
Kneinstr.4
47807 Krefeld
Germany

Email: hello@hoscaceramics.com


2. General Information on Data Processing

We process personal data only where this is necessary to operate our online shop, process and fulfil orders, communicate with customers, and provide and secure our website, or where another legal basis permits or requires the processing.

Depending on how you use our website and online shop, the following categories of personal data may in particular be processed:

  • name and contact details
  • email address and, where applicable, telephone number
  • billing and delivery address
  • order, product and contract data
  • payment and transaction data
  • communication and enquiry content
  • technical data such as IP address, browser type, operating system, device information and information about the use of our website
  • information about consent and privacy settings
  • where applicable, marketing and communication data if corresponding functions are used

Depending on the purpose, processing is based in particular on Article 6(1)(b) GDPR where necessary for the performance of a contract or pre-contractual measures, Article 6(1)(c) GDPR where processing is required by law, Article 6(1)(f) GDPR where processing is necessary for our legitimate interests, and Article 6(1)(a) GDPR where we obtain consent.


3. Data Collection When Visiting Our Website

When you visit our website, technically necessary information may be processed to provide, secure and operate our online shop.

This may include, in particular:

  • IP address
  • date and time of access
  • browser and operating system information
  • device type and technical device information
  • language settings
  • information about the use of and interaction with our website
  • other technical information required to provide the online shop securely and reliably

This data is processed in particular to technically provide our website, ensure its security and stability, and identify and resolve errors.

Where processing is necessary for the operation of the website, it is based on Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and functional online shop.


4. Hosting and Operation of the Online Shop – Shopify

Our online shop is operated using Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify hosts and operates our website and provides the technical infrastructure for our online shop.

In connection with the operation of our shop, the following data may in particular be processed:

  • name and contact details
  • email address and, where applicable, telephone number
  • billing and delivery address
  • order and contract data
  • payment and transaction data
  • IP address
  • browser and device data
  • information about the use of and interaction with our online shop
  • information about consent and privacy settings

The specific processing depends on which functions you use on our website and whether, for example, you place an order, submit a form or make a payment.

The data storage location configured in our Shopify account is the European Union. Depending on the Shopify services used and the technical processes involved, personal data may nevertheless be transferred to or processed in other countries.

Where necessary for the operation and provision of our online shop, processing is based in particular on Article 6(1)(b) and Article 6(1)(f) GDPR and, where required, on consent pursuant to Article 6(1)(a) GDPR.

Further information about Shopify’s processing of personal data can be found in the Shopify – Consumer Privacy Policy

 

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies. We distinguish between technically necessary technologies and, where used, non-essential technologies.

Technically necessary cookies and similar technologies may, for example, be used to provide the shopping cart and checkout, remember your settings, maintain shop security and enable basic website functions.

Depending on the function used, the following data may in particular be processed:

  • IP address
  • device and browser information
  • session and cookie information
  • information about your privacy settings
  • information about the use of specific shop functions

We use Shopify’s cookie banner and related privacy settings. Through the cookie banner, visitors can provide or refuse consent to non-essential cookies and similar technologies.

Where consent is required, processing is based on Article 6(1)(a) GDPR. Technically necessary processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR, where applicable.


6. Contact

If you contact us by email or another means, we process the personal data you provide.

This may include:

  • name
  • email address
  • telephone number, if you provide it
  • the content of your message
  • other personal information you voluntarily provide

We use this data only to the extent necessary to process your enquiry and communicate with you.

Depending on the nature of the enquiry, processing is based on Article 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, or Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.


7. Orders and Contract Fulfilment

When you place an order in our online shop, we process the personal data required to process and fulfil the order.

This includes, in particular:

  • first and last name
  • email address
  • billing address
  • delivery address
  • telephone number, where applicable
  • order details and products ordered
  • price and shipping information
  • payment and transaction data
  • communications relating to the order

We use this data in particular to receive and process your order, fulfil the contract, process payment, ship the goods and provide you with information about your order.

The legal basis is Article 6(1)(b) GDPR.

We also process certain data where this is necessary to comply with statutory retention, documentation, accounting and tax requirements. The legal basis for this processing is Article 6(1)(c) GDPR.


8. Customer Accounts

Where our online shop allows customers to create or use a customer account, we process the data required to create and manage the account.

This may include, in particular:

  • first and last name
  • email address
  • billing and delivery address
  • telephone number, where applicable
  • login details or account-related information
  • order history
  • other data you store in your customer account

The data is processed to provide and manage the customer account and to display and manage your orders.

The legal basis is Article 6(1)(b) GDPR.

If no customer account is created or used, this processing does not apply.


9. Payment Processing

For payment processing, we use the payment services provided by Shopify as well as other payment providers activated in our shop.

Depending on the payment method selected, the following payment methods or providers may be used:

  • credit and debit cards, including Visa, Mastercard and American Express
  • Shop Pay
  • Apple Pay
  • Google Pay
  • Klarna
  • PayPal
  • bank transfer / SEPA transfer
  • other payment methods actually offered at checkout

In connection with payment processing, the following data may in particular be processed or transmitted to the relevant payment provider:

  • name
  • billing address
  • email address
  • order number and order amount
  • payment and transaction data
  • payment information required for the selected payment method
  • other information required for payment verification and processing, where applicable

When you select a payment method, the data required to process the payment may be transmitted to the relevant payment provider.

Processing is carried out for the performance of the contract pursuant to Article 6(1)(b) GDPR and, where applicable, to comply with legal obligations pursuant to Article 6(1)(c) GDPR.

For processing by PayPal and Klarna, the respective privacy policies of these providers also apply.


10. Shipping and Delivery

For shipping and delivery, we transmit the data required for this purpose to the relevant shipping provider.

This may include:

  • first and last name
  • delivery address
  • email address, where applicable
  • telephone number, where applicable
  • order and shipping information

We use DHL / Deutsche Post in particular, including the Shopify app “Post and DHL Shipping”.

The transfer is necessary for the fulfilment of the purchase contract and is therefore based on Article 6(1)(b) GDPR.


11. Email Communication and Marketing

For email communication and, where applicable, marketing communications, we use Shopify features, in particular Shopify Messaging.

 

Transactional Emails

In connection with an order, we may send transactional emails, including:

  • order confirmations
  • payment information
  • shipping confirmations
  • order status information
  • other messages necessary for contract fulfilment

For this purpose, we may process name, email address, order information and shipping information.

Processing is based on Article 6(1)(b) GDPR where the communication is necessary for contract fulfilment.


Marketing Emails and Newsletters

If we offer a newsletter or other marketing emails in the future and you expressly subscribe to them, the following data may in particular be processed:

  • name
  • email address
  • information about your marketing consent
  • where applicable, information about the delivery and use of marketing emails

Double opt-in is used where provided for by the relevant marketing function.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link contained in a marketing email.

A newsletter is currently only processed if a corresponding newsletter function is actually activated and used.


Abandoned Cart and Checkout Reminders

Shopify provides automated messaging features, including reminders relating to an abandoned checkout or shopping cart.

Such functions are only processed if they are actually activated in our shop.

If we activate such a function in the future, the following data may in particular be processed: email address, name, information about the abandoned checkout or shopping cart and the products contained in it, as well as technical and transaction-related information.

Where consent is required for such processing, it is based on Article 6(1)(a) GDPR.


12. Shopify Network Intelligence

Shopify Network Intelligence is enabled in our Shopify shop.

Shopify may process personal data and information about interactions with our shop together with information from other Shopify contexts in order to provide so-called “Enhanced Services”.

This may include information about the use of and interaction with our shop. Depending on the service used, this information may be used to improve shopping experiences and personalization, optimize shop performance and, where legally permitted and subject to applicable consent and privacy settings, enable more relevant advertising or marketing.

Shopify may share information about visitors’ and customers’ activities in our shop with Shopify and with third parties that may be located in other countries where this is necessary to provide these services. This may include information from interactions with our shop, other Shopify merchants and Shopify.

In connection with Enhanced Services, Shopify may process certain data as an independent controller/business, as described in the applicable Shopify terms and privacy information.

For customers in the European Economic Area, additional requirements apply. Where consent is required for certain processing activities, consent is obtained through the relevant privacy settings, including Shopify’s cookie banner.

Consent can be withdrawn through the applicable privacy settings. Options for objecting to certain processing or exercising privacy rights with Shopify are also available through the [Shopify Privacy Portal].

Further information can be found in the  Shopify – Privacy Portal


13. Social Media Links

Our website contains links to our profiles on social media platforms, in particular Instagram and Pinterest.

We do not embed Instagram or Pinterest feeds, plugins or other content from these platforms on our website. Simply visiting our website therefore does not load Instagram or Pinterest content through these links.

If you click on one of our social media links, you will be redirected from our website to the respective platform. From that point onwards, the privacy policy of the respective provider applies.

We have no control over which personal data the respective platform processes after you leave our website.

Further information can be found in the respective privacy policies of the providers.


14. Data Sharing and Recipients

We only share personal data where this is necessary to fulfil our contractual or legal obligations, where consent has been provided, or where another legal basis permits the disclosure.

Possible recipients of personal data include, in particular:

  • Shopify as the operator and technical provider of our online shop
  • payment service providers
  • shipping providers such as DHL / Deutsche Post
  • technical service providers and service providers used by Shopify where necessary to operate the shop
  • tax advisers or other professional service providers where necessary
  • authorities where we are legally required to disclose information


15. International Data Transfers

Through our use of Shopify and certain integrated services, personal data may in some circumstances be transferred to and processed in countries outside the European Union or European Economic Area.

This may be relevant in particular in connection with service providers used by Shopify and the processing described under “Shopify Network Intelligence”.

Where personal data is transferred to a third country, the applicable data protection requirements are taken into account. These may include European Commission adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.


16. Data Retention

We retain personal data only for as long as necessary for the respective purposes.

Data relating to orders and business records may need to be retained beyond the actual fulfilment of the contract due to statutory retention and documentation requirements.

Once data is no longer required for the stated purposes and there are no statutory retention obligations or other legal reasons preventing deletion, it will be deleted.


17. Your Rights

Subject to the applicable legal requirements, you have the following rights in particular:

  • Right of access under Article 15 GDPR
  • Right to rectification under Article 16 GDPR
  • Right to erasure under Article 17 GDPR
  • Right to restriction of processing under Article 18 GDPR
  • Right to data portability under Article 20 GDPR
  • Right to object under Article 21 GDPR
  • Right to withdraw consent under Article 7(3) GDPR

Withdrawal of consent takes effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates data protection law.


18. Updates to This Privacy Policy

We may update this Privacy Policy if our online shop, the services we use or the applicable legal requirements change.

The version published on our website at the time of your visit or order shall apply.

 

 

Version: 20.09.2026