1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data refers to all data by which you can be personally identified.
1.2 The data controller for the processing of data on this website in accordance with the General Data Protection Regulation (GDPR) is Thomas Anton Binder, shop.ymcyc.com, Hildebrandstraße 11, 80637 Munich, Germany, Phone: 0049 151 70020073, Email: hello@ymcyc.com. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.1 When using our website for informational purposes only — i.e., if you do not register or otherwise provide us with information — we collect only the data your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:
Processing is carried out pursuant to Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transmission or other use of the data. However, we reserve the right to retrospectively inspect the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the prefix “https://” and the lock symbol in your browser’s address bar.
We use the services of the following provider for hosting our website and displaying its content: Shopify International Limited, Victoria Buildings, 2nd floor, 1‑2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data are also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website are processed on the provider’s servers. We have concluded a data processing agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorised disclosure to third parties.
When data are transferred to Canada, an adequate level of data protection is ensured by a decision of the European Commission on adequacy.
To make visiting our website attractive and to enable the use of certain functions, we use cookies — small text files that are stored on your device. Some cookies are automatically deleted after closing the browser (so-called “session cookies”), others remain on your device and allow saving of site settings (so-called “persistent cookies”). In the latter case, you can find the retention period in your browser’s cookie settings.
If individual cookies used by us also process personal data, the processing takes place either for the performance of a contract (Art. 6 (1) lit. b GDPR), on the basis of your consent (Art. 6 (1) lit. a GDPR), or on the basis of our legitimate interest in the optimal functionality of the website and a customer‑friendly and effective design of the site visit (Art. 6 (1) lit. f GDPR).
You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude cookies entirely. Please note that if you do not accept cookies, the functionality of our website may be limited.
When contacting us (e.g., via contact form or email), the personal data you provide are processed exclusively for the purpose of handling and answering your inquiry, and only to the extent necessary. The legal basis for processing these data is our legitimate interest in responding to your inquiry (Art. 6 (1) lit. f GDPR). If your contact aims at concluding a contract, the additional legal basis is Art. 6 (1) lit. b GDPR. Your data will be erased once it is clear that the matter has been conclusively settled and no statutory retention obligations conflict.
In accordance with Art. 6 (1) lit. b GDPR, personal data are collected and processed insofar as they are necessary when you provide them to open a customer account. Which data are required is evident from the corresponding form.
You can request deletion of your customer account at any time by contacting the controller at the address above. After deletion, your data will be erased provided all contracts concluded via the account have been fully settled, no statutory retention obligations exist, and we no longer have a legitimate interest in further storage.
If you subscribe to our email newsletter, we regularly send you information about our offers. Providing your email address is mandatory; further data are optional and serve to allow us to address you personally.
We send the newsletter only after you have given your express consent via the double‑opt‑in procedure. By confirming the verification link, you consent to the use of your personal data per Art. 6 (1) lit. a GDPR. We store the IP address of the Internet Service Provider, as well as date and time of the subscription, to allow us to trace potential abuse later. The data collected at subscription are used exclusively for the newsletter and not passed on to third parties.
You can unsubscribe at any time via the link in the newsletter or by contacting the controller. After unsubscribing, your email address is removed from our mailing list unless you have explicitly consented to further use or we reserve a legally permitted further use and inform you about it.
Our newsletters are sent via Shopify. Data provided during newsletter subscription are forwarded to Shopify for processing. This is based on our legitimate interest to run effective and user‑friendly newsletter marketing (Art. 6 (1) lit. f GDPR).
Unless you consent to tracking per Art. 6 (1) lit. a GDPR, Shopify may process anonymous usage data (e.g. opening rates, interactions) via web beacons or tracking pixels. Device information (date/time of interaction, IP address, browser type, operating system) may be collected but not merged with other data sets. You can revoke your consent to newsletter tracking at any time.
We have concluded a data processing agreement with Shopify, which ensures data protection and prohibits unauthorised third‑party transfer. When data are transferred to Canada, the level of protection is ensured by the adequacy decision of the European Commission.
If you abandon your shopping cart before completing the purchase, you may receive a one‑time email reminder. Only your email address is required; further data are optional. We only send this email after your explicit consent via double‑opt‑in. By confirming, you consent to the use of personal data under Art. 6 (1) lit. a GDPR, and we store your ISP IP address as well as date/time of the consent. Data collected are used only for the intended purpose. You can unsubscribe at any time; after unsubscribing, your email is deleted from our reminder list unless you consent to further use or we reserve legally permitted further use — which we will clearly communicate to you.
8.1 To the extent necessary for delivery and payment purposes, personal data collected are transferred to the transport company and the payment service provider commissioned, in accordance with Art. 6 (1) lit. b GDPR.
If under a contract we owe updates for goods with digital components or digital products, we process the contact data (name, address, email) provided during the order to fulfil our statutory information obligations (Art. 6 (1) lit. c GDPR), and to inform you about upcoming updates via appropriate communication channels (e.g., mail or email). Your data are used strictly for the purpose of communication and only processed as far as necessary for this purpose.
Furthermore, we cooperate with third‑party service providers for order processing. In accordance with the following information, certain personal data may be transferred to these providers to enable them to assist in fulfilling contracts.
For shipping preparation, we use the services of 247APPS UG (limited liability), In der Goldgrube 28, 56073 Koblenz. In accordance with Art. 6 (1) lit. b GDPR, we transmit digital shipping labels with your delivery information solely for the purpose of fulfilling your online order. The data may be passed on only to the extent necessary for order processing.
PayPal
We offer one or more payment methods of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L‑2449 Luxembourg. If you choose a payment method where you pay in advance, your payment and order details (name, address, payment card or bank information, currency, transaction number) are transferred to the provider solely for payment processing (Art. 6 (1) lit. b GDPR).
If you choose a payment method where we advance payments, you may be asked to provide personal data (name, address, date of birth, email, phone, possibly alternative payment info). In such cases we may transmit these to the provider for a credit‑worthiness check based on our legitimate interest (Art. 6 (1) lit. f GDPR).
Shopify Payments
Similarly, if you choose a payment method via Shopify Payments (e.g. credit card), the personal/payment data provided during checkout are forwarded to Shopify International Limited, Dublin, Ireland, exclusively for payment processing (Art. 6 (1) lit. b GDPR).
Within our online offer, we use the service "Meta Pixel" provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter with the help of the "Meta Pixel." This URL parameter is then entered into the user's browser by a cookie set by our linked page itself after the redirection.
This makes it possible for Meta, on the one hand, to determine the visitors of our online offer as a target group for the display of advertisements (so-called "Ads"). Accordingly, we use the service to show the Facebook and/or Instagram Ads placed by us only to users who have shown an interest in our online offer or who have certain characteristics (e.g., interests in specific topics or products, which are determined based on the websites visited) that we transmit to Meta (so-called "Custom Audiences").
On the other hand, the "Meta Pixel" can be used to track whether users were forwarded to our website after clicking on an advertisement and what actions they perform there (so-called "Conversion Tracking").
The data collected is anonymous to us, meaning it does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Meta, making a connection to the respective user profile possible, and Meta can use the data for its own advertising purposes.
All processing described above, particularly the setting of cookies for reading information on the terminal device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your granted consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a Data Processing Agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, transmission to servers of Meta Platforms Inc. in the USA may also occur.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
We use the online advertising program “Google Ads” and, within this framework, Conversion Tracking (evaluation of visitor actions) on our website. Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
If you click on an ad placed by Google, a cookie for Conversion Tracking is stored on your device. These cookies have limited validity, do not contain any personal data, and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, it is not possible for cookies to be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to generate conversion statistics. Through this, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that personally identifies users.
Your data may be transferred to Google LLC servers in the USA. For the USA, an adequacy decision is available from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is thus obligated to comply with European data protection principles.
The use of cookies or comparable technologies occurs with your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data occurs with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on the consent up to the point of withdrawal.
Further information and Google’s Privacy Policy can be found at: https://www.google.de/policies/privacy/
We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of renting advertising space on the website and targeting visitors with interest-based advertising on those spaces. Using this function, personalized, interest-based advertising from the Google Display Network is shown to the website visitors. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. For the USA, an adequacy decision is available from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is thus obligated to comply with European data protection principles. Google may transfer this information to third parties if required by law or if third parties process this data on Google's behalf. Google will, in no case, associate your IP address with other data held by Google.
The use of cookies or comparable technologies occurs with your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data occurs with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on the consent up to the point of withdrawal.
Further information and Google’s Privacy Policy can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/
We use the Remarketing or "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application serves the purpose of analyzing visitor behavior and interests. To perform the analysis of website use, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record visits to the website and anonymized data about the website’s use. No personal data of the website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.
Your data may be transferred to Google LLC servers in the USA. For the USA, an adequacy decision is available from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is thus obligated to comply with European data protection principles.
The use of cookies or comparable technologies occurs with your consent on the basis of Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data occurs with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on the consent up to the point of withdrawal.
Further information on Google Remarketing and the associated Privacy Policy can be found at: https://www.google.com/privacy/ads/
This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users as an interactive interface when they visit the page, allowing them to give consent for specific cookies and/or cookie-based applications by checking boxes. By using this tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by checking the boxes. This ensures that such cookies are only placed on the user's terminal device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. As a rule, no personal user data is processed in this context.
In isolated cases, if personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in the legally compliant design of our internet presence.
A further legal basis for the processing is also Art. 6 (1) lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Where necessary, we have concluded a Data Processing Agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
The applicable data protection law grants you, in relation to the controller regarding the processing of your personal data, the data subject rights listed below (rights of information and intervention), with the reference being made to the stated legal basis for the respective exercise requirements:
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREDOMINANT LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
WHERE YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).
When processing personal data based on explicit consent pursuant to Art. 6 (1) lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods exist for data processed within the scope of legal or quasi-legal obligations based on Art. 6 (1) lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided that it is no longer required for contract fulfillment or initiation and/or we no longer have a legitimate interest in continued storage.
When processing personal data based on Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for direct marketing purposes based on Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the other information of this declaration concerning specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.