N° 07 — Legal
As of: May 2026
Privacy Policy.
Information on the processing of personal data on this website pursuant to the General Data Protection Regulation (GDPR). Protecting your data matters to us — this notice describes what data we process, when, how and why.
01 · Controller
Controller within the meaning of the GDPR
The controller responsible for data processing on this website is:
Kémali Group
Kemankeş Karamustafa Paşa Mahallesi, Fransız Geçidi Sokak, B Blok No. 1, İç Kapı No. 35,
34425 Beyoğlu / Istanbul – Turkey
E-mail: info@kemali-group.com
Web: www.kemali-group.com
Tel. DE: +49 173 279 55 22
Tel. TR: +90 534 853 42 61
Data Protection Officer
A Data Protection Officer has [been appointed / not been appointed — please complete]. Please direct any privacy-related inquiries to the email address listed above.
Kémali Group
Kemankeş Karamustafa Paşa Mahallesi, Fransız Geçidi Sokak, B Blok No. 1, İç Kapı No. 35,
34425 Beyoğlu / Istanbul – Turkey
E-mail: info@kemali-group.com
Web: www.kemali-group.com
Tel. DE: +49 173 279 55 22
Tel. TR: +90 534 853 42 61
Data Protection Officer
A Data Protection Officer has [been appointed / not been appointed — please complete]. Please direct any privacy-related inquiries to the email address listed above.
02 · General Information
General Information on Data Processing
We generally only process the personal data of our users to the extent necessary to provide a functioning website along with our content and services. Processing regularly takes place only with the user's consent, unless obtaining prior consent is not possible for practical reasons and processing is permitted by statutory provisions.
Legal Bases
Where consent from the data subject is obtained for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis. Where processing is necessary to safeguard a legitimate interest, Art. 6(1)(f) GDPR serves as the legal basis.
Data Deletion and Storage Duration
The data subject's personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if provided for by European or national legislators in EU regulations, laws or other provisions.
Legal Bases
Where consent from the data subject is obtained for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis. Where processing is necessary to safeguard a legitimate interest, Art. 6(1)(f) GDPR serves as the legal basis.
Data Deletion and Storage Duration
The data subject's personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if provided for by European or national legislators in EU regulations, laws or other provisions.
03 · Log Files
Provision of the Website and Server Log Files
Each time our website is accessed, our system automatically collects data and information from the accessing computer system. The following data is collected:
- IP address (usually anonymized)
- Date and time of access
- Browser used and browser version
- Operating system
- Referrer URL (previously visited page)
- Page accessed
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision and security of our website. Log files are deleted after no more than [7 / 14 / 30] days.
- IP address (usually anonymized)
- Date and time of access
- Browser used and browser version
- Operating system
- Referrer URL (previously visited page)
- Page accessed
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision and security of our website. Log files are deleted after no more than [7 / 14 / 30] days.
04 · Cookies
Cookies
Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system.
Technically Necessary Cookies
Certain cookies are required for our website to function. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technical operation).
Optional Cookies (Analytics, Marketing)
Cookies for analytics or marketing purposes are only set with your explicit consent (Art. 6(1)(a) GDPR in conjunction with § 25 (1) TTDSG). You can withdraw your consent at any time via the cookie settings.
A complete overview of the cookies used can be found in the cookie banner on your first visit to the website.
Technically Necessary Cookies
Certain cookies are required for our website to function. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technical operation).
Optional Cookies (Analytics, Marketing)
Cookies for analytics or marketing purposes are only set with your explicit consent (Art. 6(1)(a) GDPR in conjunction with § 25 (1) TTDSG). You can withdraw your consent at any time via the cookie settings.
A complete overview of the cookies used can be found in the cookie banner on your first visit to the website.
05 · Contact
Contact Form and Email Contact
If you send us an inquiry via the contact form or email, your details will be stored by us to process the inquiry and in case of follow-up questions. The following data is processed:
- Name
- Email address
- Phone number (optional)
- Brand name / company
- Sector and target market
- Content of your message
The legal basis is Art. 6(1)(b) GDPR (initiating a contractual relationship) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).
This data will not be shared without your consent and will be deleted once the inquiry has been fully processed, but no later than after [24 / 36] months — unless statutory retention obligations require otherwise.
- Name
- Email address
- Phone number (optional)
- Brand name / company
- Sector and target market
- Content of your message
The legal basis is Art. 6(1)(b) GDPR (initiating a contractual relationship) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).
This data will not be shared without your consent and will be deleted once the inquiry has been fully processed, but no later than after [24 / 36] months — unless statutory retention obligations require otherwise.
06 · Hosting
Hosting (Webflow)
This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When the website is accessed, technically necessary data (see Section 03) is transmitted to and processed by Webflow.
The legal basis is Art. 6(1)(f) GDPR. Transfer to the USA takes place on the basis of the EU Standard Contractual Clauses and in compliance with the European Commission's adequacy decision (EU-US Data Privacy Framework). Webflow is certified under the Data Privacy Framework.
More information: webflow.com/legal/privacy.
The legal basis is Art. 6(1)(f) GDPR. Transfer to the USA takes place on the basis of the EU Standard Contractual Clauses and in compliance with the European Commission's adequacy decision (EU-US Data Privacy Framework). Webflow is certified under the Data Privacy Framework.
More information: webflow.com/legal/privacy.
07 · Fonts
Google Fonts
This website uses external fonts (Bricolage Grotesque, Geist, Geist Mono) for a consistent typographic appearance, provided via Google Fonts. When a page is accessed, your browser loads the required fonts to display text correctly.
This transmits technically necessary data — in particular your IP address — to Google LLC. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent, visually appealing presentation).
Alternatively, fonts can be hosted locally so that no connection to Google servers is made. [Please specify setup: hosted locally / via Google Fonts CDN]
More information: policies.google.com/privacy.
This transmits technically necessary data — in particular your IP address — to Google LLC. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent, visually appealing presentation).
Alternatively, fonts can be hosted locally so that no connection to Google servers is made. [Please specify setup: hosted locally / via Google Fonts CDN]
More information: policies.google.com/privacy.
08 · Analytics
Web Analytics
[If no web analytics tool is used: remove this section.]
We use the analytics tool [e.g. Plausible Analytics / Fathom / Google Analytics] on this website to evaluate how our website is used and to improve our offering.
What Data is Collected
- Pages viewed
- Time spent on page
- Referral source (referrer)
- Device type and browser (anonymized)
- Anonymized IP address
The legal basis is [Art. 6(1)(a) GDPR for consent-based tools / Art. 6(1)(f) GDPR for cookieless tools].
We use the analytics tool [e.g. Plausible Analytics / Fathom / Google Analytics] on this website to evaluate how our website is used and to improve our offering.
What Data is Collected
- Pages viewed
- Time spent on page
- Referral source (referrer)
- Device type and browser (anonymized)
- Anonymized IP address
The legal basis is [Art. 6(1)(a) GDPR for consent-based tools / Art. 6(1)(f) GDPR for cookieless tools].
09 · Social Media
Social Media Links
This website contains links to our profiles on LinkedIn and Instagram. These are simple hyperlinks, not embedded plug-ins. Simply visiting our page does not transmit any data to the respective providers.
As soon as you click one of the links, you will be redirected to the external platform, where the respective privacy policies apply:
- LinkedIn: linkedin.com/legal/privacy-policy
- Instagram (Meta): privacycenter.instagram.com/policy
As soon as you click one of the links, you will be redirected to the external platform, where the respective privacy policies apply:
- LinkedIn: linkedin.com/legal/privacy-policy
- Instagram (Meta): privacycenter.instagram.com/policy
10 · Your Rights
Your Rights as a Data Subject
If personal data about you is processed, you are a data subject within the meaning of the GDPR. You have the following rights:
- Access (Art. 15 GDPR) — regarding the data stored about you
- Rectification (Art. 16 GDPR) — of incorrect or incomplete data
- Erasure (Art. 17 GDPR) — of your personal data stored with us
- Restriction of Processing (Art. 18 GDPR) / Objection (Art. 21 GDPR) — to the processing
- Data Portability (Art. 20 GDPR) — in a structured, commonly used format
- Withdrawal of Consent (Art. 7(3) GDPR) — at any time with effect for the future
To exercise your rights, it is sufficient to send an informal email to info@kemali-group.com.
- Access (Art. 15 GDPR) — regarding the data stored about you
- Rectification (Art. 16 GDPR) — of incorrect or incomplete data
- Erasure (Art. 17 GDPR) — of your personal data stored with us
- Restriction of Processing (Art. 18 GDPR) / Objection (Art. 21 GDPR) — to the processing
- Data Portability (Art. 20 GDPR) — in a structured, commonly used format
- Withdrawal of Consent (Art. 7(3) GDPR) — at any time with effect for the future
To exercise your rights, it is sufficient to send an informal email to info@kemali-group.com.
11 · Complaint
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR.
A list of supervisory authorities in Germany can be found at: bfdi.bund.de.
A list of supervisory authorities in Germany can be found at: bfdi.bund.de.
12 · Currency
Currency and Amendment of this Privacy Policy
This privacy policy is currently valid and dated May 2026. Due to the ongoing development of our website and offerings, or due to changed statutory or regulatory requirements, it may become necessary to amend this privacy policy.
The current version of this privacy policy can always be accessed on this page.
The current version of this privacy policy can always be accessed on this page.
