← Back to the homepage
  • Deutsch
  • English
  • Français
  • Nederlands
  • Lëtzebuergesch

Privacy policy

This translation is for convenience; only the German version is legally binding.

We treat your data confidentially and in accordance with the statutory provisions (GDPR). Here is an overview:

1. Controller

Arokora, Ardahan Asikoglu
Richard-Wagner-Straße 39, 66424 Homburg, Germany
Email: kontakt@arokora.com

2. Legal bases for processing

Where we process personal data, we rely on the following legal bases, depending on the case: your consent (Art. 6(1)(a) GDPR), the performance of a contract or steps prior to entering into a contract taken at your request (Art. 6(1)(b) GDPR), compliance with a legal obligation, for example under commercial or tax law (Art. 6(1)(‌c) GDPR), and our legitimate interest in the secure and reliable operation of this website and in advertising our services (Art. 6(1)(f) GDPR).

3. Hosting and server log files

Our website is hosted by Hostinger International Ltd. and uses SSL encryption (https). When you open the site, technical data such as your IP address, the date and time of access, the page visited and your browser type is automatically stored in server log files. This serves technical security and stability, and the data is deleted automatically after a short time (Art. 6(1)(f) GDPR). Fonts are stored directly on our own server, so no connection to external providers such as Google Fonts is made for them.

4. Cookies and visit counting on our server

This website does not use cookies or third-party analytics services. No third-party services that would process your data are embedded. Consent to cookies is therefore not required.

So that we know whether the site is doing its job, we use our own server to count how many visits there are and how often the contact form is submitted or a contact option (phone, WhatsApp, email) is tapped. Nothing is stored on or read from your device. Your IP address and your browser identifier are not stored: they are only used to calculate a hash that stops us from counting the same visitor twice on the same day. This hash is calculated using a random value that is newly generated every day and deleted with the first page view of the following day. Only monthly totals are kept, with no link to any individual. The legal basis is our legitimate interest in simple audience measurement (Art. 6(1)(f) GDPR).

5. Contact form

If you write to us using the form or by email, we store the details you provide (name, email address, phone number, the address of your current website, the subject of your enquiry, whether you would like a callback, and your message) in order to process your enquiry. The legal basis is taking steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR). We do not pass this data on without your consent, and we delete it as soon as it is no longer needed to process your enquiry.

If you provide an email address, we automatically send you a short confirmation of receipt that includes the subject of your enquiry. To protect against automated spam, the page fetches a signed timestamp from our own server when it loads and checks on submission whether the form was filled in by a person. We also limit the number of enquiries and confirmations per sender. For this purpose we store a hash of your IP address, not the address itself, for no longer than one hour, and then delete it automatically. No cookies are set and no third-party services are used for this (Art. 6(1)(f) GDPR).

6. Contact via WhatsApp

On this site you will find a button that opens a WhatsApp chat with us. It is a simple link, not an embedded window: as long as you do not click it, nothing is transmitted to WhatsApp or Meta. If you click it, WhatsApp opens, and from that point on the privacy policy of WhatsApp Ireland Limited applies. There, your phone number and the content of your message are processed, possibly also outside the EU. We ourselves process your message in order to deal with your enquiry; the legal basis is taking steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR). If you would like to avoid this, please use the contact form or send us an email.

7. Images

The images and video on this website are AI-generated. This does not involve processing any of your personal data.

8. Retention of business records

If a business contact or contract comes about through this website, we process the data needed for it (for example in invoices or business letters) within the scope of the statutory retention obligations. Under commercial and tax law (§ 257 HGB, the German Commercial Code, and § 147 AO, the German Fiscal Code), we keep invoices and accounting records for up to 10 years and other business correspondence for up to 6 years. The legal basis is compliance with this legal obligation (Art. 6(1)(‌c) GDPR).

9. Advertising by post to businesses

We send letters to businesses and self-employed people in Homburg and the surrounding area to tell them about our services (websites, online shops, Google presence, legal texts and maintenance). For this we process the company name, the business address and, if publicly stated, the name of the owner or of the management. In our records we also note what we have found out about the company’s online presence from publicly visible information (for example whether a website is listed in its Google Business Profile), as well as the date and outcome of our contact.

Source of the data: The details come from publicly accessible sources, in particular Google Business Profiles (Google Maps), the Firmenverzeichnis der Stadt Homburg (the town of Homburg’s business directory), the member list of the Gewerbeverein Homburg (local business association), and the company’s own website and legal notice.

Purpose and legal basis: We use the data to draw attention to what we offer (direct marketing). The legal basis is our legitimate interest in advertising our services (Art. 6(1)(f) GDPR); Recital 47 GDPR expressly names direct marketing as a possible legitimate interest. We only use business details that the company has published itself, and we write only to the business address.

Recipients: The data stays with us. We do not pass it on to third parties and do not sell it. We deliver our letters ourselves or hand them to a postal service provider, which uses the address only for delivery.

Storage period: If no contact comes about, we delete the data no later than twelve months after we contacted the company. If a contract comes about, section 8 applies. If you object to the advertising, we store only the company name and address in a suppression list so that we do not write to you again (Art. 6(1)(f) GDPR).

Right to object to advertising (Art. 21(2) GDPR): You can object to the use of your data for advertising at any time without giving reasons, informally by email to kontakt@arokora.com, by phone on +49 15510 243115 or by post to the address given above. After that, we will no longer use your data for advertising.

10. Your rights as a data subject

As a data subject, you have the following rights under the GDPR, which you can exercise with us at any time free of charge:

  • Right of access (Art. 15 GDPR): You can request information about the data we process.
  • Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): You can request the deletion of your data, unless a statutory retention obligation prevents this.
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR): You can receive your data in a common format.
  • Right to object (Art. 21 GDPR): You can object at any time, on grounds relating to your particular situation, to processing based on a legitimate interest. You can object to the use of your data for advertising at any time without giving reasons (see section 9).
  • Right to withdraw consent (Art. 7(3) GDPR), with effect for the future.

11. Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Unabhängiges Datenschutzzentrum Saarland (the data protection supervisory authority for Saarland)
Fritz-Dobisch-Straße 12, 66111 Saarbrücken
www.datenschutz.saarland.de

12. Changes to this privacy policy

We update this privacy policy whenever our website, our processes or the legal requirements change. If you are interested, please check back here from time to time.

Last updated: 13 October 2026