Privacy Policy

1. Controller

The controller for data processing is Concept Stand, owner Arzu Arukaslan. The full postal address and further contact details are listed in the Legal Notice. Email: info@conceptstand.com.

2. Hosting and technical delivery

This website is provided as a static website via Cloudflare Pages. When the website is accessed, technically necessary access data such as IP address, date, time, requested file, referrer, browser and system information may be processed. The purpose is secure, stable and fast website delivery. The legal basis is Art. 6(1)(f) GDPR.

3. Contact, design request and project brief

If you contact us by email, design request or online project brief, we process the data you submit in order to handle your request and prepare a possible project. This may include email address, name, company, phone, message, project details, fair information, optional attachments and, for the project brief, an automatically generated PDF. The legal basis is Art. 6(1)(b) GDPR for pre-contractual communication and Art. 6(1)(f) GDPR for efficient handling of business inquiries.

4. Contact via WhatsApp

This website offers a button that opens a WhatsApp chat with us. When you click it, you are forwarded to a service of WhatsApp Ireland Limited or Meta Platforms Ireland Limited; from that point processing follows WhatsApp's own terms and privacy notice. We do not set cookies for this and do not embed any WhatsApp scripts in this website.

If you write to us on WhatsApp, we process your mobile number, your profile name and the content of your message in order to handle your request. The legal basis is Art. 6(1)(b) GDPR for pre-contractual communication and Art. 6(1)(f) GDPR in an uncomplicated communication channel. Data may be transferred to servers outside the EU/EEA; safeguards are provided through the standard contractual clauses used by Meta. If you prefer to avoid this transfer, please use email or one of the forms on this website.

5. Form storage and email notification

Form submissions are stored in a Cloudflare D1 database. Notifications are sent to design@conceptstand.com through the existing DreamHost SMTP mail channel. For the online project brief, a PDF is generated from the submitted details and sent as an internal notification. No automatic visitor reply is sent in this phase.

6. Catalogue and fair reminders

If you voluntarily opt in through a form, we may occasionally send catalogue links, fair reminders and practical tips. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future, for example via https://www.conceptstand.com/en/unsubscribe/ or by email to info@conceptstand.com.

7. Cloudflare Turnstile

To protect against spam and abusive form submissions, Cloudflare Turnstile may be used when behavior appears unusual. Technically necessary security data is processed to verify whether a request is made by a human. The legal basis is Art. 6(1)(f) GDPR.

8. Analytics tools and consent

Google Analytics 4 and Microsoft Clarity are activated only if you consent to analytics cookies. We use these services to evaluate page views, referrers, campaign parameters and interactions such as email, WhatsApp, CTA and form events. The legal basis is your consent under Art. 6(1)(a) GDPR and, where required, Section 25 TDDDG.

9. Google Search Console

Google Search Console is used for technical verification and aggregated search performance analysis. It does not set visitor tracking cookies on this website.

10. Recipients and third-country transfers

Recipients of personal data may include technical service providers, in particular Cloudflare, DreamHost and, after consent, Google and Microsoft. If you contact us via WhatsApp, also Meta Platforms Ireland Limited. Where data is processed outside the EU/EEA, this is based on suitable safeguards such as adequacy decisions or standard contractual clauses.

11. Storage period

Requests are stored only as long as necessary for handling, project preparation and statutory retention obligations. Application data for future roles is generally stored for up to 6 months and then deleted unless further storage has been agreed.

12. Your rights

Within the legal framework, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. If processing is based on consent, you may withdraw that consent at any time with effect for the future.

13. Complaint and contact

You have the right to lodge a complaint with a data protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information. For privacy questions, contact info@conceptstand.com.