privacy
data protection declaration
responsible for data processing is:
The Yeah Lab GmbH
Kaltensondheimerstr. 71
97318 Kitzingen
datenschutz@theyeahlab.com
We look forward to your interest in our online shop. Protecting your privacy is very important to us. Below we will inform you in detail about dealing with your data.
1. Access data and hosting
You can visit our websites without giving information about yourself. If you call a website, the web server only automatically stores a so-called server log file, which, for example, contains the name of the requested file, your IP address, date and time of access, transfer volume and the requesting provider (access data) and documents the access. These access data are only evaluated for the purpose of ensuring a trouble -free operation of the page and the improvement of our offer. This serves to protect our legitimate interests on a correct presentation of our offer in accordance with Article 6 (1) sentence 1 lit. f GDPR. All access data will be deleted at the latest seven days after the end of your page visit.
1.1 hosting
The services for hosting and to present the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained in the context of this data protection declaration, all access data and all data that is collected in the forms provided on this website are processed on your servers. If you have any questions about our service providers and the basis of our cooperation with you, please contact the contact options described in this data protection declaration. Our service providers sit in the USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission.
1.2 Content Delivery Network
For the purpose of a shorter loading time, we use a so -called content delivery network ("CDN") for some offers. In this service, content, e.g. large media files, are delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of the service providers. Our service providers work for us as part of order processing. If you have any questions about our service providers and the basis of our cooperation with you, please contact the contact options described in this data protection declaration. Our service providers sit in the USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission.
2. Data processing for contract processing and contacting
2.1 Data processing for contract processing
We collect personal data if you voluntarily inform us of it as part of your order or if you contact us (e.g. via contact form or email). Mandatory fields are identified as such, since in these cases we need the data for contract processing or to process your contact and you cannot complete the order without specifying them or cannot send the contact. Which data is collected can be seen from the respective input form. Further information on the processing of your data, in particular on the transfer of our service providers for the purpose of ordering, payment and shipping, can be found in the following sections of this data protection declaration. After completing the contract, your data will be restricted for further processing and will be deleted after any tax and commercial law storage periods in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR, unless you expressly use your data in accordance with ART . 6 Para. 1 S. 1 lit. a GDPR, or we reserve the right to use the data that is permitted by law and which we inform you in this declaration.
ERP system
For ordering and contract processing, we use ERP systems of external service providers. Our service providers work for us as part of order processing. If you have any questions about our service providers and the basis of our cooperation with you, please contact the contact options described in this data protection declaration.
2.2 Contact
3. Data processing for the purpose of shipping processing
For fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 Lit. B GDPR, we will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is required for the delivery of ordered goods.
Data transfer to shipping service providers for the purpose of the shipping announcement
If you have given us your express consent during or after your order, we will pass on your telephone number to the selected shipping service provider based on Art. 6 Para. 1 S. 1 S. 1 lit. a GDPR, so that it will be available before delivery for the purpose the delivery announcement or vote can contact you. After revocation, we delete your data provided for this, unless you have expressly consented to further use of your data or we are reserved for any other use of data that is legally permitted and about which we inform you in this declaration.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany
dpd Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
General Logistics Systems Germany GmbH & AMP; Co. OHG
GLS Germany-Straße 1-7
DE-36286 Neuenstein
Germany
United Parcel Service Germany S.à r.l. & amp; Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
4. Data processing for payment processing
When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the selected payment method, we will pass on the data necessary for the processing of payment transaction to our technical service providers, which work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is available for processing the payment is required. This serves to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for the processing of the payment, e.g. on their own website or via a technical integration in the order process. In this respect, the data protection declaration of the respective payment service provider applies.
4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes
We may provide our service providers further data that you use together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, handling contested payments, support of bookkeeping). In accordance with Art. 6 Para. 1 S. 1 Lit. f GDPR, this serves to protect our legitimate interests against fraud or in efficient payment management.
4.3 Intake of collection service providers
We pass on your data to a commissioned collection provider (), provided that our payment claim has not been paid despite the previous reminder. In this case, the claim is collected directly by the collection service provider. This serves the fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 Lit.B GDPR as well as the protection of our legitimate interests on an effect on interests in the context of a balancing of interests in an effective assertion or enforcement of our payment claim in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
5. Advertising by email, post
5.1 email newsletter with registration
If you register for our newsletter, we use the data required or separately informed you to send you our email newsletter regularly based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR . You can deregister from the newsletter at any time and can be made either by a message to the contact option described below or via a link provided in the newsletter. After deregistering, we delete your email address from the recipient list, provided that you have not expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to use the data that goes beyond is legally allowed and about which we inform you in this explanation.
5.2 Post advertising and your right to object
In addition, we reserve the right to use your first and last name and postal address for your own advertising purposes, e.g. about sending interesting offers and information about our products by letter post. This serves to protect our legitimate interests on an advertising speech by our customers in accordance with Article 6 (1) sentence 1 lit. f GDPR. You can contradict the storage and use of your data for these purposes at any time by a message to the contact options described in this data protection declaration.
6. Cookies and other technologies
6. General information
To make visiting our website attractive and to enable the use of certain functions, we use technologies on different pages including so -called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser, (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit (persistent cookies).
We use such technologies that are imperative for the use of certain functions of our website (e.g. shopping cart function). These technologies provide and process the IP address, time of the visit, device and browser information as well as information on your use of our website (e.g. information on the content of the shopping cart). This serves as part of a balanced interests on an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
In addition, we use technologies to fulfill the legal obligations that we are subject to (e.g. to be able to prove consent to the processing of your personal data) as well as web analysis and online marketing. Further information on this, including the respective legal basis for data processing, see the following sections of this data protection declaration.
The cookie settings for your browser can be found under the following links:
If you have consented to the use of the technologies in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, you can revoke your consent at any time by a message to the contact options described in the data protection declaration. Alternatively, you can also call up the following link: https://www.yeahblend.com/cookie-etungen/. When not accepting cookies, the functionality of our website can be restricted.
7. Use of cookies and other technologies for web analysis and advertising purposes
If you have granted your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, we use the following cookies and other third -party technologies on our website. At the appropriate continuation and end of the use of the respective technology by us, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your cancellation options can be found in the "Cookies and other technologies" section. For more information, including the basis of our cooperation with the individual providers, see the individual technologies. If you have any questions about the providers and the basis of our cooperation with you, please contact the contact options described in this data protection declaration.
7.1 Use of Google services for web analysis and advertising purposes
We use the Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by the Google technologies about your use of our website is usually transferred to a server of the Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission. If your IP address is collected via the Google technologies, it will be shortened by activating IP anonymization before storing Google. Only in exceptional cases is the full IP address transferred to a Google server and shortened there. Insofar as there is nothing different with the individual technologies, data processing takes place based on a joint responsible agreement in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the
Google Analytics
For the purpose of website analysis, data (IP address, time of the visit, device and browser information as well as information on your use of our website) are automatically collected and stored, from which using pseudonymous usage profiles are automatically collected and stored. Cookies can be used. Your IP address is generally not merged with other Google data. Data processing takes place on the basis of an agreement on order processing by Google.
7.2 Other providers of web analysis and online marketing services
Use of Adroll Retargeting for online marketing
About the advertising partner Adroll Advertising Ltd., Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland ("Adroll") we advertise for this website in search results and on the websites of third parties. When visiting our website, a retargeting cookie from Adroll or its partner is automatically set, which enables interest -based advertising using a pseudonymous cookieid and on the basis of the pages you have visited. Data processing takes place on the basis of an agreement between jointly responsible in accordance with Art. 26 GDPR. We determine the parameters of the respective advertising campaign. Adroll is responsible for the exact implementation (e.g. the decision to place the individual ads). The data automatically collected by the Adroll (IP address, time of the visit, device and browser information as well as information on your use of our website) will be merged with information from other sources and transmitted to Adroll advertising partners. In addition, they are usually transmitted to a server of the Nextroll, Inc., 2300 Harrison St, FL 2, San Francisco CA, 94110, USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission.
Use of Amazon services for online marketing
About the advertising partner
Use of criteo for online marketing
About the advertising partner
Use of AWIN for online marketing
About the advertising partner
8. Social media
Our online presence on Facebook, Instagram, YouTube
If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR to the respective social media operator, when visiting our online presences on the social media mentioned above, your data will be available for market research and Advertising purposes automatically collected and saved, from which usage profiles are created using pseudonyms. These can be used to switch advertisements inside and outside the platforms that allegedly correspond to their interests. Cookies are usually used for this. The detailed information on the processing and use of the data by the respective social media operator as well as a contact option and your rights and setting options for the protection of your privacy, please refer to the data protection information from the provider linked below. If you still need help in this regard, you can contact us.
Facebook is an offer from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (" Facebook Ireland “) The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transferred to a Facebook server, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission. Data processing as part of the visit of a Facebook fan page takes place on the basis of an agreement between jointly responsible in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found
Instagram is an offer from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (" Facebook Ireland ") that through Facebook Ireland Automatically raised information about your use of our online presence on Instagram is usually transferred to a Facebook server, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission. Data processing as part of the visit of an Instagram fan page takes place on the basis of an agreement between jointly responsible in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found
youtube is an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Ireland ( "Google"). The information automatically collected by Google about your use of our online presence on YouTube is usually transferred to a server of the Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. The European Commission does not have any appropriateness. Our cooperation with you is based on standard data protection clauses of the European Commission.
9. Contact options and your rights
9.1 Your rights
As a person concerned, you have the following rights:
- according to Art. 15 GDPR the right to request information about your personal data processed by us;
- in accordance with Art. 16 GDPR the right to immediately request the correction of incorrect or complete your personal data stored by us;
- according to Art. 17 GDPR the right to request the deletion of your personal data stored by us, unless the further processing
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims;
- according to Art. 18 GDPR the right to restrict the processing of your personal data, if necessary
- The accuracy of the data is denied by you;
- The processing is illegal, but they reject their deletion;
- we no longer need the data, but you need it to assert, exercise or defend legal claims or
- they have objected to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR the right to obtain your personal data that you have provided to us in a structured, common and machine -readable format or to request the transmission to another responsible;
- according to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our corporate seat.
right of objection
Insofar as we process personal data as explained to protect our legitimate interests that are predominant in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. Insofar as the processing for other purposes is carried out, you are only entitled to a right to object if there are any reasons that arise from your special situation After exercising your right of objection, we will not process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing of assertion, exercise or defense of legal claims. This does not apply if the processing is carried out for direct marketing purposes. Then we will not process your personal data for this purpose. |
9.2 contacts
Bau
Kaltensondheimerstr. 71
97318 Kitzingen
datenschutz@theyeahlab.com
10. Contact form / type deform
We use the type Form SL, C/BAC de Roda, 163 (local), 08018 Barcelona Spain (type deform) for our contact form. This enables us to provide you with a simple contact option. > Position in the company, corporate name
mandatory information is marked with a *.
Type is the recipient of your personal data and as a processor for us. The processing of the data provided under this section is neither prescribed by law nor contractually. Without your consent and the transmission of your personal data, we cannot provide you with a contact form. However, you have the option of reaching us under the [above / following] email address. The data is stored exclusively for the purpose of transmitting inquiries and answering them. The mandatory information is used for the assignment and answering your concern. In addition, usage data is collected, such as the date and time, when you used the contact form. Type form needs this data to ensure the display of the contact form and functionality. This corresponds to the legitimate interest of type reforms (in accordance with Art. 6 Para. 1 Lit. f GDPR) and serves to carry out the contract (according to Art. 6 Para. 1 lit. b GDPR). For more information, can be found at: https://help.typeform.com/hc/en-us/articles/360029581691 what-happens-to--data
Further information on opposition and disposal options compared to type reform Find at: https://admin.typeform.com/to/dwk6gt
Legal basis for these processing is your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent to the processing of your personal data at any time. The revocation can be made via the specified contact options. Your data will be processed as long as a corresponding consent is available. By explaining the revocation, the legality that has not been carried out so far. Apart from that, they are deleted between us and the type of type after the end of the contract, unless legal requirements require further storage. Value duration to record information about the end device. These should be checked and listed.