Privacy policy

Privacy Policy

1. Access Data and Hosting

Hosting

2. Data Processing for Contract Fulfilment and Communication

2.1 Data Processing for Contract Fulfilment

2.2 Customer Account

Contacting Us

3. Data Processing for Shipping Purposes

Disclosure of Data to Shipping Providers for Delivery Notifications

4. Data Processing for Payment Purposes

4.1 Data Processing for Transaction Handling

4.2 Data Processing for Fraud Prevention and the Optimisation of Our Payment Processes

5. Advertising by Email

5.1 Email Newsletter with Subscription

5.2 Newsletter Distribution

5.3 Sending Review Requests by Email

6. Cookies and Other Technologies

General Information

7. Social Media

Our Online Presence on Facebook by Meta, X, formerly Twitter, and Instagram by Meta

8. Contact Options and Your Rights

8.1 Your Rights

8.2 Contact Options

The data controller:

YURO GmbH
The Squaire 24
60549 Frankfurt am Main
Germany

Email: ahn@yuro-de.com

Thank you for your interest in our website. Protecting your privacy is very important to us. The following information explains in detail how we process your personal data.

1. Access Data and Hosting

You may visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a server log file containing information such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider. This access data documents the access to our website.

The access data is evaluated exclusively for the purpose of ensuring the proper operation of the website and improving our services. This serves our legitimate interests in the correct presentation of our services, which prevail in the context of a balancing of interests, pursuant to Article 6(1)(f) GDPR.

All access data is processed only for as long as necessary to achieve the processing purposes stated above.

Hosting

The services for hosting and displaying our website are partly provided by service providers acting on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through forms provided on this website are processed on the servers of our service providers. For questions regarding our service providers and the legal basis of our cooperation with them, please use the contact option described in this Privacy Policy.

2. Data Processing for Contract Fulfilment and Communication

2.1 Data Processing for Contract Fulfilment

For the purpose of fulfilling the contract, including handling enquiries relating to potential warranty claims, service disruptions and any statutory updating obligations, we collect personal data that you voluntarily provide to us when placing an order.

The legal basis for this processing is Article 6(1)(b) GDPR.

Mandatory fields are marked accordingly, as the information is required for contract fulfilment. Without this information, we are unable to process or ship your order. The specific data collected can be seen in the respective input forms.

Further information about the processing of your data, particularly the disclosure of data to service providers for order processing, payment processing and shipping, can be found in the following sections of this Privacy Policy.

Following the complete fulfilment of the contract, the processing of your data will be restricted. The data will be deleted after the expiry of applicable tax and commercial-law retention periods in accordance with Article 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this scope in a manner permitted by law and explained in this Privacy Policy.

2.2 Customer Account

Where you have given your consent pursuant to Article 6(1)(a) GDPR by choosing to create a customer account, we use your data to open and manage your customer account and to store your information for future orders placed through our website.

You may delete your customer account at any time by sending a message using the contact option described in this Privacy Policy or by using the relevant function within your customer account.

After your customer account has been deleted, your data will also be deleted, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this scope in a manner permitted by law and explained in this Privacy Policy.

Contacting Us

When communicating with customers, we collect personal data that you voluntarily provide when contacting us, for example through a contact form, live-chat tool or email.

The legal basis for this processing is Article 6(1)(b) GDPR.

Mandatory fields are marked accordingly, as the information is required to process your enquiry. The specific data collected can be seen in the respective input forms.

Once your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this scope in a manner permitted by law and explained in this Privacy Policy.

3. Data Processing for Shipping Purposes

For the purpose of fulfilling the contract pursuant to Article 6(1)(b) GDPR, we disclose your data to the shipping provider commissioned with delivery, insofar as this is necessary for the delivery of the ordered goods.

For questions regarding our service providers and the legal basis of our cooperation with them, please use the contact option described in this Privacy Policy.

Transfer of Data to Shipping Providers for Delivery Notifications

Where you have given us your express consent during or after your order, we disclose your email address and telephone number to the selected shipping provider pursuant to Article 6(1)(a) GDPR.

This enables the shipping provider to contact you before delivery for the purpose of providing a delivery notification or coordinating the delivery.

You may withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy.

Following the withdrawal of your consent, we will delete the data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope in a manner permitted by law and explained in this Privacy Policy.

For questions regarding our service providers and the legal basis of our cooperation with them, please use the contact option described in this Privacy Policy.

4. Data Processing for Payment processing

For the processing of payments in our online shop, we work with technical service providers, financial institutions and payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we disclose the data required to process the payment transaction to our technical service providers, the commissioned financial institutions or the selected payment service provider, insofar as this is necessary for processing the payment.

The legal basis for this processing is Article 6(1)(b) GDPR.

In some cases, payment service providers collect the data required for payment processing themselves, for example on their own website or through a technical integration into the ordering process. In such cases, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, data may be transferred to third countries outside the European Union or European Economic Area for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection.

Where data is transferred to a third country outside the European Union or European Economic Area for which the European Commission has not adopted an adequacy decision, our cooperation is based on the European Commission’s Standard Contractual Clauses.

For questions regarding our payment processing partners or the legal basis of our cooperation with them, please use the contact option described in this Privacy Policy.

4.2 Data Processing for Fraud Prevention and the Optimisation of Our Payment Processes

Where applicable, we disclose additional data to the service providers mentioned above. They use this data together with the information required for payment processing for the purpose of fraud prevention and the optimisation of our payment processes. This may include invoicing, the handling of disputed payments and support for accounting processes. The legal basis for this processing is Article 6(1)(f) GDPR. This serves our legitimate interests in protecting ourselves against fraud and ensuring efficient payment management, which prevail in the context of a balancing of interests.

5. Advertising by Email

5.1 Email Newsletter with Subscription

When you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter on a regular basis. The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. You may unsubscribe from the newsletter at any time by sending a message using the contact option described below or by using the unsubscribe link provided in the newsletter. After unsubscribing, we will delete your email address from the newsletter mailing list, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this scope in a manner permitted by law and explained in this Privacy Policy.

5.2 Newsletter Distribution

The newsletter may also be distributed by service providers acting on our behalf. For questions regarding our service providers and the legal basis of our cooperation with them, please use the contact option described in this Privacy Policy.

5.3 Sending Review Requests by Email

Where you have given us your express consent during or after your order pursuant to Article 6(1)(a) GDPR, we use your email address to ask you to submit a review of your order through the review system used by us. You may withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy or by using the link provided in the review request. Following the withdrawal of your consent, we will delete your email address from the relevant mailing list, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or we reserve the right to use your data beyond this scope in a manner permitted by law and explained in this Privacy Policy.

Review requests may also be sent by service providers acting on our behalf. For questions regarding our service providers and the legal basis of our cooperation with them, please use the contact option described in this Privacy Policy.

6. Cookies and Other Technologies

General Information

To make your visit to our website attractive and enable the use of certain functions, we use technologies including cookies on various pages. Cookies are small text files that are automatically stored on your device. Some cookies are deleted after the end of your browser session, meaning after you close your browser. These are known as session cookies. Other cookies remain on your device and allow us to recognise your browser when you next visit our website. These are known as persistent cookies. Information regarding the storage duration of cookies can be found in the cookie settings of your web browser.

Protection of Privacy on End Devices

When you use our online services, we use technologies that are strictly necessary to provide the telemedia service expressly requested by you. The storage of information on your device or access to information already stored on your device does not require consent in these cases.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that, where consent is not given, certain parts of the website may not be fully available. Any consent you have given will remain valid until you adjust or reset the relevant settings on your device.

Subsequent Data Processing Through Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain functions on our website. These technologies collect and process information such as your IP address, the time of your visit, device and browser information and information regarding your use of our website. The legal basis for this processing is Article 6(1)(f) GDPR. This serves our legitimate interests in the optimised presentation of our services, which prevail in the context of a balancing of interests.

Cookie Settings

You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have consented to the use of technologies pursuant to Article 6(1)(a) GDPR, you may withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy.

7. Social Media

Our Online Presence on Facebook by Meta, X (Formerly Twitter) and Instagram by Meta

Where you have given your consent to the respective social media provider pursuant to Article 6(1)(a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presence on the social media platforms named above. User profiles may be created from this data using pseudonyms. These profiles may be used, for example, to display advertisements within and outside the respective platforms that are presumed to correspond to your interests. Cookies are generally used for this purpose. Detailed information regarding the processing and use of data by the respective social media provider, as well as contact options, your rights and available privacy settings, can be found in the privacy notices of the respective providers. Should you require assistance in this regard, you may contact us.

Facebook (by Meta) is a service provided by: Meta Platforms Ireland Ltd.
Block J, Serpentine Avenue, Dublin 4, Ireland. The information automatically collected by Meta Platforms Ireland regarding your use of our Facebook online presence is generally transferred to and stored on a server operated by: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, United States. Data processing in connection with visits to a Facebook fan page is carried out on the basis of an agreement between joint controllers pursuant to Article 26 GDPR. Further information, including information regarding Insights Data, can be found in Meta’s relevant privacy information.

Our service providers are located or use servers in the following countries for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection: United States, Canada, Japan, South Korea, New Zealand, United Kingdom and Argentina.

The adequacy decision for the United States serves as the basis for transfers to the United States where the respective service provider is certified. Such certification is in place.

Our service providers are also located or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil and Mexico. The European Commission has not adopted an adequacy decision for these countries. Our cooperation with service providers in these countries is based on the European Commission’s Standard Contractual Clauses.

X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("X"). The information automatically collected by X regarding your use of our online presence on X is generally transferred to and stored on a server operated by: X Corp., FM 1209, Building 2, Bastrop, Texas 78602, United States

Our service providers are located or use servers in countries outside the European Union and the European Economic Area for which the European Commission has adopted an adequacy decision confirming an adequate level of data protection.

Our service providers may also be located or use servers in countries outside the European Union and the European Economic Area for which no adequacy decision has been adopted by the European Commission. Our cooperation with these service providers is based on the European Commission’s Standard Contractual Clauses.

Instagram (by Meta) is a service provided by: Meta Platforms Ireland Ltd.
Block J, Serpentine Avenue, Dublin 4, Ireland(„Meta Platforms Ireland“). The information automatically collected by Meta Platforms Ireland regarding your use of our Instagram online presence is generally transferred to and stored on a server operated by: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, United States. Data processing in connection with visits to an Instagram fan page is carried out on the basis of an agreement between joint controllers pursuant to Article 26 GDPR. Further information, including information regarding Insights Data, can be found in Meta’s relevant privacy information.

The adequacy decision for the United States serves as the basis for transfers to the United States where the respective service provider is certified. Such certification is in place.

8. Contact Options and Your Rights

8.1 Your Rights

As a data subject, you have the following rights:

Pursuant to Article 15 GDPR, you have the right to request information about your personal data processed by us within the scope specified therein.
Pursuant to Article 16 GDPR, you have the right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data stored by us.
Pursuant to Article 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is required:
- for exercising the right to freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise or defence of legal claims.
Pursuant to Article 18 GDPR, you have the right to request the restriction of the processing of your personal data where:
- you dispute the accuracy of the data;
- the processing is unlawful, but you oppose the deletion of the data;
- we no longer require the data, but you require it for the establishment, exercise or defence of legal claims; or
- you have objected to the processing pursuant to Article 21 GDPR.
Pursuant to Article 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that the data be transmitted to another controller.
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority responsible for your usual place of residence, your place of work or our registered office.

Right to Object

Where we process personal data on the basis of our legitimate interests, which prevail in the context of a balancing of interests, as explained above, you may object to this processing with effect for the future. Where the data is processed for direct marketing purposes, you may exercise this right at any time as described above. Where data is processed for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or defence of legal claims.

This does not apply where the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

8.2 Contact Options

For questions concerning the collection, processing or use of your personal data, requests for information, correction, restriction or deletion of data, the withdrawal of consent or objections to a specific use of data, please contact us directly using the contact details provided in our Legal Notice.

Privacy policy