1) Information on the Collection of Personal Data and the Controller’s Contact Details
1.1 Below, we provide information about how we handle your personal data. Personal data means any data by which you can be personally identified.
Please carefully consider which personal data you share with us via Instagram. Instagram is part of the Meta group of companies and shares infrastructure, systems and technology with Meta and other Meta companies (https://www.facebook.com/help/111814505650678?ref=dp). We expressly point out that Meta stores the data of users of its services (e.g. personal information, IP address, etc.) and may also use this data for business purposes. Further information on Meta’s processing of data on Instagram can be found in Instagram’s Privacy Policy at https://help.instagram.com/help/instagram/519522125107875/
We have no influence over the collection and further processing of data by Meta. Furthermore, we are unable to determine the extent to which, the location at which or the duration for which the data is stored, the extent to which Meta complies with existing deletion obligations, what analyses and links are made using the data, or to whom the data is disclosed. If you wish to prevent Meta from processing personal data that you transmit to us, please contact us by another means. Our full contact details can be found in our legal notice on Instagram.
1.2 The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is Vexara Teknoloji Ltd., Cevizli Mah. Zühal Cad. , Ritim Istanbul AVM, A Ticari Blok Apt. No:46/50, 34846 Maltepe, Türkiye, Tel.: +90 507 451 38 32, Email: privacy@vexara.ltd, insofar as we alone process the data that you transmit to us via Instagram. Insofar as the data that you transmit to us via Instagram is also or exclusively processed by Meta, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is also, alongside us, a controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR).
The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Protection Officer
You can contact Meta’s Data Protection Officer using the online contact form provided at https://www.facebook.com/help/contact/540977946302970

3) Data Processing When You Contact Us
3.1 We ourselves collect personal data when you contact us, for example, via a contact form or messenger service. The data we collect when you contact us via a contact form can be seen in the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or contacting you and for the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR constitutes an additional legal basis for processing. Your data will be deleted once your enquiry has been fully processed, provided that no statutory retention obligations prevent deletion. We consider processing to be complete when the circumstances indicate that the matter in question has been conclusively resolved.
3.2 WhatsApp Business
We offer visitors to our Instagram presence the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the “business version” of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name pursuant to Art. 6(1)(b) GDPR in order to process and respond to your enquiry. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or email address) so that we can assign your enquiry to a specific transaction.
If you use our WhatsApp contact for general enquiries (for example, about our range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.
Your data will always be used solely to respond to your enquiry via WhatsApp. It will not be disclosed to third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device that we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of its parent company, Meta Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, upon first using the app on their device and accepting the WhatsApp Terms of Service, to the transmission of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6(1)(a) GDPR. The transmission of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information about the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

4) Data Processing for Statistical and Marketing Purposes
Instagram Insights
Instagram provides us with so-called Insights for our Instagram profile: https://help.instagram.com/1533933820244654. These are aggregated data that allow us to understand how people interact with our profile. Insights may be based on personal data collected in connection with a person’s visit to or interaction with our page and its content. Pursuant to Art. 6(1)(f) GDPR, this serves to protect our legitimate interests—prevailing in the context of a balancing of interests—in optimising the presentation of our offering and communicating effectively with customers and prospective customers.
You may object to the processing of your data for the aforementioned purposes at any time by changing the advertising settings in your Instagram user account accordingly.

5) Rights of the Data Subject
5.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent previously given pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
5.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

6) Duration of Personal Data Storage
The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and—where applicable—additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods apply to data processed in connection with legal or similar obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods expire, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continuing to store it.
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise indicated by the other information in this statement concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This Privacy Policy was prepared by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

Last updated: 17 August 2026, 10:26:22