Responsible party
The responsible party for data processing on this website is the following business.
- Ömer Hakan Ölçer - Hafsa Software
- Fritz-Reuter Str. 19
- 21629 Neu Wulmstorf
- Germany
- Telephone: +49 176 61660555
- E-Mail: info@hafsa.de
- VAT No.: DE332751962
- Wi ID no.: 1513203042
What data is processed?
The website may process basic server logs, security data, technical request information, and data necessarily transmitted by your browser.
Through contact forms, email, or quote requests, we process data you provide such as name, email, phone, company/store details, project description, and message content.
If a Shopify app project starts, store links, test store information, API permission scope, and technical issue logs may be processed for the project purpose.
Why is data processed?
Data is processed to prepare quotes, define project scope, provide technical support, handle pre-contractual and contractual steps, operate the site securely, and meet legal obligations.
Legal bases may include GDPR Article 6(1)(b) contract and pre-contractual steps, Article 6(1)(f) legitimate interests, Article 6(1)(c) legal obligations, and Article 6(1)(a) consent where required.
Service providers and transfers
Hosting, email, analytics, security, project management, payment, or third-party API providers may be used only where necessary.
If data is transferred to third countries, suitable GDPR safeguards, standard contractual clauses, or the provider’s applicable protection mechanisms are considered.
How long is data kept?
Personal data is retained only as long as necessary for the processing purpose and applicable statutory retention periods.
Quote and contact requests are deleted or anonymized after completion unless legal obligations or legitimate follow-up needs require retention.
Rights under GDPR
You have rights of access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent.
Privacy requests can be sent to info@hafsa.de. You also retain the right to lodge a complaint with the competent data protection authority.
- Access and copy request
- Correction or deletion request
- Objection or restriction request
- Withdrawal of consent