Privacy Policy (Datenschutz)
This statement informs you about the nature, scope and purpose of the processing of personal data under the General Data Protection Regulation (GDPR / DSGVO).
1. Data Controller
The party responsible for data processing on this website is:
OsCore LLC
117 S Lexington Street Ste 100
Harrisonville, MO 64701, USA
Email: info@digiturk.de
Contact form: digiturk.de/en/iletisim
The controller is established in the USA. Insofar as personal data are thereby transferred to the USA, this is necessary for the performance of the contract with you (Art. 49(1)(b) GDPR); the transfer bases of the payment and hosting providers are set out in the respective sections.
2. General Principles / Your Rights
We process personal data only insofar as this is necessary to provide a functioning website as well as our content and services. Processing generally takes place only with consent (Art. 6(1)(a) GDPR), for the performance of a contract (lit. b), to comply with legal obligations (lit. c) or on the basis of our legitimate interest (lit. f).
3. Hosting & Server Log Files
This website is hosted by Cloudflare, Inc. (content delivery network and edge computing). When the pages are accessed, information transmitted by your browser is automatically processed in server log files: IP address, date and time, page accessed, referrer URL, browser type and operating system. The legal basis is Art. 6(1)(f) GDPR (secure, stable operation of the website). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare.
In addition, we record as daily totals which pages automated programs (search engine and AI bots) request and from which AI service (e.g. ChatGPT) visits are referred: date, page, name of the bot or service, and the count. No IP address, full browser identifier (user agent) or other information about individual visitors is stored for these counts.
4. Cookies
We use strictly necessary cookies and similar storage only for operation, security, language selection, the shopping cart and sign-in/session functions. Your choice is kept in your browser’s local storage for 180 days so that we can respect it without asking again. Non-essential storage such as Google Analytics cookies is activated only after your explicit consent. The separate ‘Marketing’ category covers remembering partner referrals (see ‘Partner referrals’) and ad conversion measurement in Google consent mode (ad_storage, ad_user_data) and is activated only if you consent to this category; ad personalisation is always off. The cookieless basic measurement signals sent without consent are explained below. You can change your choice at any time through ‘Cookie settings’ in the footer.
4.1 Google Analytics
To measure and improve use of our website, we use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with measurement ID G-NCTJT4ZV7X in advanced consent mode. The Google tag loads on every visit. Without consent, analytics storage remains denied and no Google Analytics cookies are set, but cookieless measurement signals containing consent status, page visited, time and basic device/browser information are sent to Google. The IP address may be processed in transit and used to derive an approximate region. We rely on our legitimate interest under Art. 6(1)(f) GDPR for this cookieless basic reach measurement. Analytics cookies and more detailed measurement are based on your consent under Art. 6(1)(a) GDPR. Advertising personalisation and Google Signals are disabled.
dg_consent_v1: consent choice in local storage; 180 days_ga, _ga_*: only after analytics consent, to distinguish visitors and sessions; no more than 180 days
Google may also process data outside the European Economic Area. Where applicable, Google relies on safeguards such as the EU-US Data Privacy Framework and standard contractual clauses. When consent is withdrawn, detailed cookie-based measurement stops and accessible Google Analytics cookies are deleted; cookieless aggregated basic measurement continues. Further details are available in Google’s Privacy Policy. Google Privacy Policy
4.2 Order Source
To evaluate which channels (e.g. search engines, social networks, AI assistants, email) lead to orders, we store with your order where you came to our website from: the address of the referring page, campaign parameters (utm_*, ad click IDs), the landing page and the time. When you order, we also store your browser’s user agent (device type, operating system, browser), your IP address, the approximate location derived from it (country, region, city, postal code and city-level coordinates) and the network operator of the IP address. This information is used to fulfil the order and to prevent fraud and abuse. The IP address is deleted after 90 days. The data is not shared with third parties and is kept together with the order data. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in evaluating our sales channels and in processing orders securely).
dg_src_v1: source of the visit; without analytics consent only for the browser session (session storage), with consent in local storage for no more than 30 days
After ordering, you can optionally answer the question ‘How did you find us?’ on the order status page. If you answer, we store the option you choose (e.g. an AI assistant, a search engine or a recommendation from friends) and the time of your answer with your order and use it for the same purpose as the data above. Not answering has no effect on your order.
4.3 Ahrefs Web Analytics
With your analytics consent, we also use Ahrefs Web Analytics. Its script runs after a delay following page load. Public page visits, campaign source, referring page, basic device/browser information and eligible link/form interactions are sent to Ahrefs; the IP address is processed during the connection. According to the provider, the service uses no cookies or persistent visitor identifiers. Account and payment pages are excluded from this measurement. You can withdraw consent through Cookie settings in the footer; the page then reloads and Ahrefs is not loaded again. Ahrefs Web Analytics
4.4 Cookieless Visitor Count
We count how many people visit our website on the server, without cookies and without storing anything in your browser. On each page request your IP address and browser identifier (user agent) are turned into a one-way hash (SHA-256) together with a value that is randomly renewed every day; the hash only serves to count you once on the same day and cannot be matched the next day. The IP address, the browser identifier and the address of the referring page are not stored; the hash is deleted after 48 hours at the latest. Only daily totals remain (visitors, page views, entry channel, entry page) together with a separate count of recognised search and AI bots. This data is not combined with other data and not shared with third parties. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in measuring the reach of our website).
4.5 Microsoft Clarity
With your analytics consent, we use Microsoft Clarity heatmaps and session recordings to understand clicks, scrolling and usage flows on public pages. Page, device/browser and interaction data is sent to Microsoft; cookies may link sessions. The script starts after a delay following page load. Account, administration and payment pages are excluded; contact form content is masked. Ad storage is not granted. You can withdraw consent through Cookie settings in the footer; Clarity stops and the page reloads. See Microsoft’s privacy statement for details. Microsoft Privacy
5. Contact Form & Email Contact
When you contact us via the contact form or by email, we process the data you provide (name, email address, phone number if applicable, subject and message) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or lit. f (handling of enquiries). The data is deleted once the request has been conclusively dealt with and no statutory retention obligations preclude this.
6. Orders & Payment Processing
To process your order, we process customer data (name, contact details, delivery address if applicable) and contract data. The legal basis is Art. 6(1)(b) GDPR. Payment is processed via our payment service provider Stripe, LLC (USA). You enter your payment data (e.g. card details) directly with Stripe; we ourselves do not store full card data. Stripe processes your name, email address, amount, IP address and device information under its own responsibility in the USA to carry out the payment and prevent fraud; the transfer relies on Stripe's certification under the EU-U.S. Data Privacy Framework and, in addition, on EU standard contractual clauses. Stripe's privacy notice applies in addition. Earlier orders were paid via Adyen N.V. (Netherlands); refunds of those orders go through the same provider. Tax and commercial retention periods (usually up to 10 years) remain unaffected (Art. 6(1)(c) GDPR). For an order you started but did not complete, we send at most one reminder or help e-mail; you can opt out via the link in that e-mail (Art. 6(1)(b) and (f) GDPR). The answer you choose there is stored with your order.
7. Customer Account & Login
To access your member area, we process your email address and login data. Sessions are managed via technically necessary cookies. The legal basis is Art. 6(1)(b) GDPR.
8. Email Dispatch
For sending order, service and notification emails, we use the service provider Mailgun (Sinch/Mailgun Technologies). Your email address and the message content are processed in this context; for delivery monitoring, dispatch and open events may be recorded. The legal basis is Art. 6(1)(b) or lit. f GDPR.
9. Push Notifications
If you activate push notifications, we store the subscription data provided by your browser (endpoint URL and keys) in order to deliver notifications to you. The legal basis is Art. 6(1)(a) GDPR (consent); you can revoke this at any time in your browser settings.
10. YouTube Videos & Embedded Third-Party Content
On the highlight/summary pages, we embed videos from YouTube (Google Ireland Ltd. / Google LLC). We use the extended data protection mode (youtube-nocookie.com): data is only transmitted to YouTube once you actively start a video. When the video starts, your IP address and information about your device may be transmitted to YouTube/Google and cookies may be set; a transfer to the USA may also take place. Processing by YouTube is carried out under its own responsibility in accordance with Google’s privacy policy (https://policies.google.com/privacy). The legal basis for the integration is Art. 6(1)(f) GDPR (attractive presentation of our offering).
News articles are compiled from publicly available third-party sources; the respective sources are linked at the end of each article. When you access linked external pages, the privacy policy of the respective provider applies.
11. Your Rights as a Data Subject
You have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may revoke any consent given at any time with effect for the future (Art. 7(3)). An informal message to the contact address above is sufficient to exercise these rights.
12. Right to Lodge a Complaint with the Supervisory Authority
Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement. A list of the supervisory authorities in Germany is available at https://www.bfdi.bund.de.
13. Storage Period & Data Security
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Transmission is encrypted via TLS/HTTPS (recognisable by the padlock symbol in your browser).
Partner referrals
When you arrive via a partner link (digiturk.de/… or a partner's own domain that forwards to us), our server records the click: date, link, country, device type and the referring site's domain. No IP address, browser identifier or query parameter is stored with it; raw clicks are reduced to daily counts after 90 days. The signed referral is kept in this tab's memory and session storage and is deleted when the tab closes; an eligible order placed in the same tab is attributed to the partner with it. If you consent to the ‘Marketing’ category in the cookie banner, it is also stored in the first-party cookie dg_partner_v3 for up to 30 days from the click, so eligible orders on later visits are attributed too; without consent no cookie is set; if you enter a partner's discount code at checkout, the order is attributed to that partner without a cookie. Browsing does not extend the deadline; a new partner link replaces the last referral and starts its own 30-day period. Withdrawing consent via ‘Cookie settings’ in the footer deletes the cookie. The old dg_partner_v1 and dg_partner_v2 entries are not used and are removed. Order-linked partner, link, package, commission, payment and refund records are processed on the server for commission accounting and financial recordkeeping. Clearing browser storage does not erase existing financial records. Partners cannot see customer names, email, phone, address or membership credentials. The referring partner's Google Ads tag loads in this tab, and its Google Ads conversion tag on the confirmation page after payment, in Google's advanced consent mode. Without marketing consent, ad storage stays denied: no cookies are set, the ad click ID is redacted and Google receives only cookieless signals with consent status, page, time, basic device/browser information and, on the confirmation page, the order number and amount. We base this cookieless conversion measurement on legitimate interest under Art. 6(1)(f) GDPR; with marketing consent Google cookies are used as well (Art. 6(1)(a) GDPR). Ad personalisation is always off. The partner's Google Analytics 4 and Meta Pixel tags load on the confirmation page only with marketing consent. The provider processes your IP address and browser data; the partner is separately responsible for its tag. The partner may also receive a server notification without personal data (only order number, amount and click ID). Partner attribution does not change the price.
14. Currency of This Statement
This privacy policy is updated when our offerings or the legal situation change.