Privacy Policy

Effective date: 14 May 2026

This Privacy Policy explains how Hermanoslicense.com, operated by Hermanos License – Emirhan Tekin ("we", "our", "us"), collects, uses, and protects your personal data. We are committed to compliance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

1. Data Controller

The data controller for this website is Hermanos License – Emirhan Tekin. Contact for privacy matters: privacy@hermanoslicense.com.

2. Data We Collect

When you register or make a purchase, we may collect:

Account data: username, email address
Identity data: full name (if provided)
Contact data: phone number, country
Billing data: billing address (where required for invoicing)
Transaction data: orders, payments, delivered licenses
Technical data: IP address, browser type, device type, language preference
Usage data: products viewed, searches, cart activity and purchases, recorded first-party on our own server (see section 10), and aggregated website statistics via Google Analytics where you consent
Security and fraud-prevention data: login history, device/technical signals and rate-of-use signals used to detect fraud and abuse
Consent records: your marketing and cookie choices, with a timestamp, kept as proof of consent
Seller data (if you apply to sell): identity/KYC documents and verification records
Communication data: support tickets and messages you send to us

3. Legal Bases for Processing

Contract performance — to process orders, deliver products, and provide support.
Legal obligation — to comply with tax, accounting, and consumer protection laws.
Legitimate interests — to prevent fraud, maintain security, and improve our services.
Consent — for optional analytics and marketing cookies (you can withdraw consent at any time via our cookie banner).

4. How We Use Your Data

To process and fulfil your orders
To send order confirmations and support communications
To send transactional emails via Brevo (Sendinblue)
To detect and prevent fraud and abuse
To comply with legal obligations (tax, accounting)
To analyse website traffic and improve our services (Google Analytics, with your consent)

5. Third-Party Services

We may share your data with trusted third parties who help us provide our services:

Email delivery: Brevo (Sendinblue) — for transactional emails
Payment processing: Stripe and PayPal — as selected at checkout. Each processor handles payment data under their own privacy policy. Cryptocurrency payments are made manually to our own published wallet addresses and do not involve a third-party processor.
Analytics: Google Analytics — for website usage statistics (only with your consent)
Currency by location: ipwho.is — when you first visit, your IP address is sent to this geolocation service to pick a suitable display currency. This is used only to choose a currency; the result is cached for your session and the IP is not stored for this purpose.
Notifications (optional): if you link a Telegram account, order and account notifications you opt into are delivered through Telegram. WhatsApp notifications are available in our system but are currently inactive.

We do not sell your personal data to third parties. We do not use advertising pixels or behavioral ad targeting.

6. Data Retention

We retain your account and transaction data for as long as your account is active and for a minimum period required by applicable law (typically tax and accounting records for 5–10 years). If you delete your account, we will delete or anonymise your personal data within 6 months, except where we are required to retain it by law.

7. Your Rights

Depending on your location and applicable law, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing
Request a copy of your data in a portable format
Withdraw consent at any time (for consent-based processing)

You can delete your account yourself at any time from your Dashboard → Settings → Danger Zone; this immediately removes your account and personal data and irreversibly anonymises your behavioural records (order and invoice records are retained where the law requires). To exercise any other right, contact us at privacy@hermanoslicense.com. We will respond within the timeframe required by applicable law (generally 30 days).

8. Cookies

We use cookies for essential site functionality, security, and — with your consent — analytics. See our Cookie Policy for full details.

9. International Transfers

Some third-party providers (e.g. Google Analytics, Brevo, Stripe, ipwho.is) may transfer your data outside the European Economic Area. Where this occurs, appropriate safeguards are in place (e.g. Standard Contractual Clauses).

10. On-Site Analytics, Personalisation and Profiling

To improve our store we keep a first-party record of how our own website is used: which product pages are viewed, what is searched for, what is added to or removed from the cart, and completed purchases. This happens entirely on our own server. We do not use third-party analytics for this, we do not track you across other websites, and this data is never sold or shared.

These records are pseudonymised at the moment they are written: we store a keyed hash instead of your IP address, a coarse browser family instead of your full browser signature, and a keyed hash of the session identifier. Free-text search queries are automatically scrubbed of email-like and number-like content before storage.

We use this data to compute product statistics (for example bestseller lists), to understand and improve the purchase flow, to group customer accounts into broad segments (for example new, returning or inactive customers) and to decide which discounts or rewards an account is eligible for. This constitutes profiling within the meaning of Art. 4(4) GDPR. It only ever works in your favour: offers are additive and no price is ever raised for you based on this data. The legal basis is our legitimate interest in operating and improving our own store (Art. 6(1)(f) GDPR). Marketing emails remain strictly opt-in and are governed by your consent, which you can grant or withdraw at registration or in your profile settings at any time.

If you sign in or register, interaction records from your current browser session (up to the previous two days) are linked to your account, so that your own pre-login browsing joins your account history. Anonymous visitors who never sign in are not recognisable across sessions.

Raw interaction records are deleted after 12 months at the latest. If you delete your account, these records are immediately and irreversibly anonymised. You can object to this processing at any time (Art. 21 GDPR) by writing to privacy@hermanoslicense.com - we will then anonymise your behavioural records the same way.

11. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national data protection authority. In the EU, you can find your authority at edpb.europa.eu.

12. Contact

For any privacy questions, write to privacy@hermanoslicense.com.