Privacy statement

As of May 2023

Thank you for your interest in our website. YT Industries GmbH takes the protection of your personal data very seriously. In this privacy statement, we inform you about the processing of your personal data when using our website and about the handling of your data with regard to marketing measures and purchasing our products.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF MY DATA?

Responsible for the data processing is

YT Industries GmbH
Pilatus Campus 9
91353 Hausen
Phone: +49 9191 736 305-0
E-Mail: service@yt-industries.com
(hereinafter also "YT", "we", "us") 

For further questions regarding data protection and the processing of your personal data in connection with our website and our services, you can contact our data protection officer at any time by mail at the above address, attn. to data protection officer and by e-mail at: dataprivacy@yt-industries.com.

2. WHAT DO WE USE YOUR DATA FOR (PURPOSE OF PROCESSING) AND WHAT IS THE LEGAL BASIS FOR THE PROCESSING?

2.1 Compliance with contractual obligations pursuant to Art. 6 para. 1 lit. b) GDPR

Primarily, the data processing serves the establishment, implementation, and termination of the mutual business relationship. This includes in particular: 

• Processing of your order
• Processing of your service requests
• Processing of inquiries about products

2.2 Consent pursuant to Art. 6 para. 1 lit. a) GDPR

In addition, where applicable, your separate consents may be used as a legal basis for certain purposes, in particular:

 
- Newsletter subscription
- Receipt of targeted information and offers
- Personalized use of the website 

You can revoke your consent at any time with effect for the future.

2.3  Protection of our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR

To the extent that it is necessary, we also process your data in order to protect our legitimate interests.

These include in particular: 

• To control, optimize and further develop services and products
• to prevent, investigate and prosecute criminal offenses such as fraud, e.g. credit card or identity fraud
• credit scoring
• enforcement of legal claims and defense in the event of legal disputes
• for auditing purposes
• Ensuring the security and operability of our IT systems
• for purposes of direct marketing
• Shopping cart abandonment emails

2.4 Legal obligations according to Art. 6 para. 1 lit. c) GDPR

We are subject to various legal obligations, in particular:

• Retention obligations under commercial and tax law
  
  

3. WHEN DO WE COLLECT DATA ABOUT YOU?

3.1 Accessing our website

Each time you use our website, we collect technical access data in so-called server log files, which your browser automatically transmits to enable you to visit the website. The accessed data includes in particular:

• IP address of the requesting device,
• browser type, browser version, and operating system,
• online identifiers (e.g. device identifiers),
• the name of the requested file
• date and time of the request,
• amount of data transferred,
• requesting provider

The data processing is carried out on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is exclusive to ensure a trouble-free operation of the website, guaranteeing the security of our systems, and evaluation for the purpose of improving our services. The information stored in the log files does not allow any direct conclusions to be drawn about your person. Further personal data is only collected if you provide it voluntarily, for example when making an inquiry or registering, or via the settings of your browser.

3.2  Purchase in our online store

With a customer account, you have the possibility to order our products on our website.

a) Registration of a customer account

We set up for each customer who registers accordingly, password-protected access to their inventory data stored with us (customer account). Here you can view your order history and the status of your order, cancel your order depending on the payment method (prepayment or credit card) and store and change your contact information.

For the purpose of registration and to provide you with the functions of the account (e.g. login authentication, verification of authorization for account management, contact regarding notices, updates, security messages, ensuring the technical functionality of the site), the following mandatory information is collected during the creation of the customer account in addition to optional information: 

• Master data (title, surname, first name)
• Communication data (e-mail address, telephone number)
• Private or corporate customer status
• Address data (street, house no., postal code, city, country)
• Access data (password)
• Time and date of registration
• IP address

 The legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR.

b) Orders

For the purpose of order processing, in addition to information about the ordered product, among other things, the following data is collected from you and processed: 

• Name
• First name
• Title
• Invoice and delivery address
• E-mail address
• Telephone number
• Customer number
• Payment data

The data collected in each case results from the form on the website.

The legal basis for data processing in the context of a purchase or purchase initiation via your customer account is Art. 6 para. 1 b) GDPR. This means that we use your data for pre-contractual measures, such as advice about our products, and purchase processing. In addition, we also use your personal data to enforce rights arising from the purchase contracts concluded or initiated with you.

c) Payment

As part of the payment in our online store, we collect certain personal data from you, depending on the selected payment method, in order to process the payment transaction via one of the following payment service providers. The payment information is processed during the payment process in order to carry out the payment method you have chosen and to process the online order. The legal basis for the transmission of your data to external payment service providers is on the one hand your consent according to Art. 6 para. 1 lit. a) GDPR as well as for the fulfillment of the contract according to Art. 6 para. 1 lit. b) GDPR.

The data will be stored as long as it is necessary for the purchase transaction unless this is opposed by commercial or tax retention periods.

(1)  PayPal
If you choose to pay via PayPal (Europe) S.à r.l. et Cie, S.C.A., (22-24 Boulevard Royal, L-2449 Luxembourg), the necessary data for payment processing (name, address, telephone number, IP address, email address, order, and billing information) will be transmitted to PayPal. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfillment of contractual obligations or if the data is to be processed on behalf. Information on data processing by PayPal can be found in the privacy statement www.paypal.com/de/webapps/mpp/ua/privacy-full.

(2) Payment by credit card (via Braintree)

You also have the possibility to pay by credit card via Braintree. Braintree is a service of PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal,L-2449 Luxembourg). For this purpose, the following personal data is transferred to Braintree/PayPal: Name, address, e-mail address, card type, credit card number, name of the credit card holder, check digit, and validity period of the credit card. Braintree verifies this data together with the data of your order. The purpose of the processing is the early detection of misuse of the credit card or the payment option by credit card and the use for processing the payment after successful verification. For more information on data processing and the protection of your privacy, please see the privacy statement of Paypal and Braintree at the following links: https://www.paypal.com/de/webapps/mpp/ua/privacy-full and https://www.braintreepayments.com/de/legal/braintree-privacy-policy.

(3) Prepayment

After sending the order and deciding to pay in advance, you will first receive an order confirmation by e-mail and then a second e-mail with the payment information. In this e-mail, you will receive the necessary data for the transfer, such as invoice amount, order number, and bank details. Please specify the exact purpose of the transfer, which will be displayed in the e-mail.

(4) Financing

You can also use financing from our financing partner Consors Finanz BNP Paribas S.A. to pay for our products. We will receive information from the bank as to whether the financing has been approved or denied. After you have been redirected to the Consors website, we transmit the following data from the billing address to Consors: first name, surname, billing amount address. As part of the financing approval process, our financing partner collects further data about you on its own responsibility and independently performs a credit check to avoid and minimize late payments, defaults, and corresponding risks. We receive information from Consors as to whether the financing has been approved or rejected. Further information can be found in the respective financing conditions.

d) Transportation service provider

For the shipment of the goods, we use transportation service providers and transfer your contact details (name, address) to them. If necessary, we also transfer your e-mail address and telephone number to the transportation service providers commissioned by us, so that they can contact you in advance of the delivery and coordinate the details of the delivery.

The transmission is necessary for the fulfillment of our contractual obligations with you. The legal basis is therefore Art. 6 para. 1 lit. b) GDPR.

3.3 Contacting, Services

You have various options to contact us. These include various contact forms and contact by e-mail. In this context, we process your data exclusively for the purpose of communicating with you. In the context of communication with interested parties, the legal basis is our legitimate interest according to Art. 6 (1) f) GDPR and if the data processing is necessary for the implementation of pre-contractual measures or for the performance of a contract, Art. 6 (1) b) GDPR is relevant. Within the scope of service requests, we may forward your data to component manufacturers for service purposes.

The data we collect when using the contact forms will be automatically deleted after your request has been fully processed unless we still need your request to fulfill contractual or legal obligations.

We have integrated the following contact forms on our website:

• Contact form
• Service form (maintenance and repair)
• Service form (crash replacement)
• Warranty form

The mandatory data collected can be seen in the respective input forms. This includes in particular: 

• Salutation, surname, first name
• E-mail address
• Address data
• Order number
• Invoice data
• Request
• Photos or videos (damage to the bike)

3.4 Existing customer advertising

If you have already purchased a product from us, we will record your registration and contact data in our database and list you as an existing customer. If you have provided us with your e-mail address in the course of registration, we will use this to send you advertising for our own or similar goods and services. The legal basis for this processing of your data is Art. 6 para. 1 lit. f) GDPR in conjunction with § 7 para. 3 UWG, based on our interest in carrying out direct advertising to our existing customers. 

You can object to data processing for the aforementioned purposes at any time, free of charge and with effect for the future. To do so, simply unsubscribe via the link in the respective email or send an email to the above contact details. 

3.5 Newsletter

You have the option to subscribe to our newsletter, in which we will inform you up to four times a month about offers and news from YT. The data collected can be seen from the registration form.  To order our newsletter, we use the so-called double opt-in procedure, i.e. we will only send you the newsletter by e-mail if you confirm in our notification e-mail by clicking on a link that you are the owner of the specified e-mail address. If you confirm your e-mail address, we will store your e-mail address, the time of registration, and the IP address used for registration until you unsubscribe from the newsletter. The storage serves the sole purpose of sending you the newsletter and to be able to prove your registration.

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. a) GDPR.

For sending newsletters, we use the services of Salesforce. The provider is Salesforce Germany GmbH, Erika-Mann-Str. 31-37, 80636 Munich. We have concluded a so-called "Data Processing Agreement" (order data processing agreement) with Salesforce, in which we oblige Salesforce to protect our customers' data and not to pass it on to third parties. Salesforce is a service that can be used, among other things, to organize and analyze the sending of newsletters. When you enter data for the purpose of receiving newsletters (e.g. e-mail address), this data is stored on Salesforce's servers in Germany.

With the help of Salesforce, we can analyze our newsletter campaigns. When you open an email sent with Salesforce, a file contained in the email (known as a web beacon) connects to Salesforce's servers in Germany. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also recorded (e.g. time of access, IP address, browser type, and operating system). This information cannot be associated with the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients and to track the effectiveness of our advertising measures.

The legal basis for newsletter tracking is your consent (Art. 6 para. 1 lit. a) GDPR), which you give in connection with the registration for the newsletter. You can revoke the tracking at any time by unsubscribing from the newsletter.

You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every newsletter message. Alternatively, you can also send your unsubscribe request at any time to the contact details above. This will not incur any costs other than the transmission costs according to the prime rates of your Internet service provider. Furthermore, you can unsubscribe from the newsletter directly on the website.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Salesforce after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

You can read more about this in Salesforce's privacy statement: https://www.salesforce.com/de/company/privacy/full_privacy/

3.6 Rolling Circus and YT Mill

We collect and process the data that you provide to us as part of the registration for the Rolling Circus event as well as in the YT Mill.

In detail, we collect your data for the following purposes:

- Processing of the bike reservation

- Communication related to the bike reservation

- Processing of damage claims survey in connection with the use of the bike

- Sending our newsletter (after consent)

 The data collected can be seen in the input form.

We use the booking system bikerentalmanager by Taste Provence Ltd (Europa House, Goldstone Villas, Hove, England, BN3 3RQ, Great Britain) to process the bike reservation. In the context of the cooperation, we have concluded an order processing agreement with this company in accordance with Art. 28 of the GDPR.

The legal basis for the processing of your data in connection with the bike reservation is Art. 6 para. 1 lit. b) GDPR.

The legal basis for sending marketing information is your consent according to Art. 6 para. 1 lit. a) GDPR.

We store your data as long as it is necessary for the processing of the loan and the associated services or we have a legitimate interest in the continued storage or we have your consent.

During our events, photographs and film footage are occasionally taken, which may be used for publication in social media and press reports. The legal basis for the described data processing is usually our legitimate interests according to Art. 6 para. 1 lit. f) GDPR or, in special cases, consent of the participants according to Art. 6 para. 1 lit. a) GDPR. We have a legitimate interest in taking photos and filming to inform the public about the event. You can object to the data processing or revoke your consent at any time. This and other information will be posted in a visible place at each event.

3.7 Voucher campaigns

You can benefit from voucher offers. If you have rented and test-ridden a bike at one of our events, you will receive a personalized voucher code by e-mail for your next purchase from us. We process your data in the context of the voucher redemption and merge the data with your personal data.  The legal basis for this is your consent in accordance with Art. 6 (1) a) GDPR and for existing customers Art. 6 (1) f) GDPR. We have a legitimate interest in sending existing customers personalized vouchers and discounts.

You can object to the processing of your data for advertising purposes at any time or revoke your consent.

3.8 Customer Relationship Management System (CRM)

We use a CRM system from Salesforce Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany, to maintain and manage our customer data and to process your inquiries efficiently and quickly.

The legal basis for the processing of your personal data is Art. 6 para. 1 lit. b) GDPR, in order to be able to fulfill our obligation from the contractual relationship with you. In addition, we have a legitimate interest within the meaning of Art. 6 (1) f) GDPR in the use of the system for the proper structuring of our customer data.

3.9 Registration as a B2B customer

In addition to the data requested in the registration process, the VAT identification number is checked. For this purpose, the following data will be transmitted for verification: VAT ID number, country codes, company name, postcode, city, street. 

The legal basis is Art. 6 para. 1 lit. b GDPR.

4. WHAT DOES THIS WEBSITE USE CHOKES FOR?

To make your visit to our website attractive and to enable, protect and improve the use of certain features, we use browser cookies, scripts, web beacons, tracking URLs, pixel tags, and similar technologies (hereinafter "cookies") to provide, protect and improve our website and applications. Below, we explain how our cookies work, what their purpose is, what type of data each collects, and how you can manage your cookie settings.

4.1  What are cookies and how do they work?

These are small text files that are stored on your end device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Most web browsers (see help function in the menu bar of your browser) can be configured to reject new cookies, inform you that a new cookie has been placed, or disable all received cookies. For smartphones, tablets, and other mobile and stationary devices, you can read the necessary settings in the respective operating instructions.

However, we recommend that you leave the cookie functions completely switched on, as it is only possible to further improve our website for your needs with cookies. Our cookies do not store any sensitive data such as passwords, credit card details, or similar. They do not cause any damage to your end device and do not contain viruses.

When you visit our website for the first time, a pop-up window automatically opens, the so-called cookie consent manager. In this consent manager, you can select which category of cookies you would like to accept. You can change your selection at any time by clicking on the "Cookie Settings" link at the bottom of the website.

4.2 Technically necessary cookies

Cookies that are necessary to administer the website and carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function, language settings) are stored on the basis of Art. 6 (1) f) GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. These cookies cannot be deactivated but can be deleted when they are displayed to you.

4.3 Statistics and tracking cookies

If you have consented to the use of comfort functions, statistics, and tracking cookies, the collection, storage, and analysis of the cookies listed below is based on Art. 6 (1) a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device as defined by the TTDSG.

a) Google Tag Manager

On our website, we use the Google Tag Manager (hereinafter referred to as "GTM"), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tag management system that enables and simplifies the administration and control of website tags via an interface. This means that the GTM only implements tags. Tags are small code elements such as tracking codes or conversion pixels from analytics tools, such as Google Analytics, that are embedded on our website.  No additional cookies are used via the GTM and no user profiles are created, instead only the loading of other analysis tools is controlled, which then, in turn, collect data to measure user behavior on our website, display interest-based advertising, and record the impact of advertisements. GTM does not access this data. If you deactivate it in the browser or in the cookie settings, this will also directly affect the tracking tags that are implemented with the GTM.

You can find more information about Google's data protection here: https://policies.google.com/privacy and the data protection conditions for advertising here: www.google.de/intl/de/policies/technologies/ads.

b) Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited (www.google.de). Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as so-called "cookies", text files that are stored on your end device. The information generated on your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gao- ptout?hl=en

As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your end device. If you delete your cookies, you must click the link again.

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described above.

c) Google AdSense

This website uses Google AdSense, a service for embedding advertisements of Google Inc ("Google"). The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyze how users use the website. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on these pages can be analyzed.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats will be transmitted to and stored by Google on servers in the United States. This information may be transferred by Google to Google's contractual partners. However, Google will not merge your IP address with other data stored on you.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By giving your consent, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

d)  Google AdWords and Google Conversion-Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

Within the framework of Google AdWords, we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted-in to conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users. If you do not wish to participate in the tracking, you can revoke your consent by deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

You can find more information about Google AdWords and Google conversion tracking in Google's privacy statement: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases, or generally activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

e) Facebook Pixel

Within our website, the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used.

With the help of the Facebook pixel, it is on the one hand possible for Facebook to identify you - as a visitor to our online offer - as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). We only receive statistical data from Facebook for this purpose without any reference to a specific person.

If you do not want Facebook to assign the collected information directly to your Facebook user profile, you can deactivate the Custom Audiences remarketing function here: www.facebook.com/set- tings?tab=ads]. To do this, you must be logged in to Facebook.

You can read more data protection information from Facebook here: https://www.facebook.com/policy.php

f) Microsoft Advertising

On our website, we use the Microsoft Advertising service of the provider Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads). Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us serve targeted advertisements via the Microsoft Bing search engine. Microsoft Advertising uses cookies for this purpose. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about device and browser settings.

Microsoft Advertising collects data via UET that allows us to track target groups thanks to remarketing lists. For this purpose, a cookie is stored on the end device used when visiting our website. Microsoft Advertising can thus recognise that our website has been visited and play an advertisement when Microsoft Bing or Yahoo is used at a later time. The information is also used to create conversion statistics, i.e. to record how many users have reached our website after clicking on an advertisement. This tells us the total number of users who clicked on our ad and were redirected to our website. However, we do not receive any information that can be used to identify users personally.

The processing only takes place with your consent in accordance with Art. 6 para. 1 letter a DSGVO. You can revoke your consent via our Consent Management Tool.

You can also deactivate personalised advertising in at Microsoft at: https://about.ads.microsoft.com/de-de/ressourcen/richtlinien/personalisierte-anzeigen.

In the case of Microsoft services, the transmission of data to Microsoft Corp. in the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Microsoft can be found in the Microsoft data protection information at https://privacy.microsoft.com/de-de/privacystatement.

4.4. Plug-ins

If you have consented to the setting of comfort functions, statistics, and tracking cookies, the collection, storage, and evaluation of the plug-ins listed below is based on Art. 6 (1) a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device as defined by the TTDSG.

a)  Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google's privacy statement: https://www.google.de/intl/de/policies/privacy/.

b) YouTube

We use YouTube on our website. This is a video portal of YouTube LLC., 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to only as "YouTube". YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

This connection is necessary in order to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time as well as the website you visited. In addition, a connection to Google's advertising network "DoubleClick" is established.

In the event that personal data is transferred to the USA, we have agreed to standard contractual clauses with YouTube pursuant to Art. 46 (2) c) GDPR.

If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you either have to log out of YouTube before visiting our website or configure the corresponding settings in your YouTube user account.

For the purpose of functionality and analysis of user behavior, YouTube permanently stores cookies on your end device via your Internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by a setting in your Internet browser.

Google provides further information about the collection and use of data as well as your rights and protection options in this regard in the data protection information available at https://policies.google.com/privacy.

c)  Vimeo

We also include videos from the provider Vimeo, Inc. (555 West 18th Street, New York, New York 10011, USA) on our website in order to be able to show you interesting video content.

If you call up one of our pages equipped with Vimeo videos and have agreed to the tracking cookies, a connection to the Vimeo server is established. This transfers information to the Vimeo server that you have visited our website. In addition, Vimeo obtains your IP address. If you are logged into your Vimeo account, Vimeo assigns this information to your personal user account. When you click on the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo account before using our website and deleting the corresponding cookies from Vimeo.

You can find more information about data processing and information about data protection by Vimeo at https://vimeo.com/privacy.

5. WHAT DO WE USE SOCIAL MEDIA FOR?

5.1 Social Media Plug-ins

We offer you the option of using so-called "social media buttons" on our website. These buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic, you will thus be redirected to the services of the respective provider. Only then will your data be sent to the respective provider. The provider receives, among other things, the information that you have visited our website with your IP address. If you are logged into your respective social media account, the respective provider can assign the visit to our website to your user account. If you do not wish this, please log out of your social media account. If you do not click on the graphic, no exchange takes place between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the corresponding providers.

We have integrated the social media buttons of the following companies on our website:

• Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA) for Facebook and Instagram.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for YouTube

5.2 Social media profiles

Content and offers are regularly published and shared on the social media profiles of YT Industries GmbH. In the following, we explain our handling of your personal data on our social media pages.

a) Controller for processing your data

YT operates social media pages on the social networks of:

• Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) for the Facebook page.
• New Work SE (Am Strandkai 1 - 20457 Hamburg - Germany) for the Xing website
• Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) for the Instagram page
• LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2 Ireland) for the LinkedIn page
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for the YouTube page
• Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA) for the Twitter page

Due to legal provisions, we, YT Industries GmbH, and the operator of the respective social network have joint responsibility according to Art. 26 of the GDPR. 

Insofar as you communicate directly with us via our social media profiles or share personal content with us, YT is responsible for the processing of your data. Exceptions apply to the data processing described below, e.g.

• in case of usage analysis (so-called analysis services or page insights); for this, we are jointly responsible with the operator of the respective social media platform or
• to the extent that the operator of the respective social media platform independently determines the type, scope, and purposes of the data processing.

b) What data is collected and for what purpose?

We maintain social media profiles for the purpose of informing you about products, promotions, and offers and to get in touch with you as a visitor and user of the respective page. When you visit our social media pages, YT generally collects all messages, content, and other information that you directly share with us there, such as when you post, like, or share something on a social media page or send us a private message.

The legal basis for the processing of your data is our above-mentioned legitimate interests pursuant to Art. 6 (1) f) GDPR and Art. 6 (1) b) GDPR, if you send us an inquiry about our company, products, or services for the purpose of initiating or fulfilling a contract.

If you have an account with the respective social network, we can of course also see your public information, for example, your username, profile picture, other information in your public profile, and content that you share with a public target group. The legal basis here is your consent pursuant to Art. 6 (1) a) GDPR.

c) Processing of your data by the operator of the respective social media platform

Please note that the operator of the respective social media platform is solely responsible for the processing of your data on the social media platform and determines the type, scope, and purposes of the processing of your data by itself when you use it. With each interaction on our social media pages, the operator of the respective social media platform records your usage behavior with cookies and similar technologies. Operators of social networks can view general statistics on the interests and demographic characteristics (such as age, gender, and region) of users of social media platforms. We would like to point out that when you visit our social media sites, data about you as a user may also be processed outside the EU. 

We have no influence on the data processing procedures on the social media platforms or the possible transfer of your data to countries outside the EU and this data protection declaration does not cover this. In this respect, we refer to the data protection information of the operator of the respective social media platform:

• Facebook privacy policy at https://www.facebook.com/policy,
• Instagram privacy policy at https://help.instagram.com/519522125107875,
• Xing privacy policy at https://privacy.xing.com/de,
• LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy,
• YouTube privacy policy at https://policies.google.com/privacy?hl=de&gl=de,
• Twitter privacy policy at https://twitter.com/de/privacy,

With every interaction on our social media pages, the operator of the respective social media platform records the usage behavior of the visitors and followers of the respective social media pages using cookies and similar technologies. On this basis, the operators of the social media platforms receive so-called "page insights data". Page insights only contain statistical, anonymized information about visitors, which thus cannot be assigned to any specific person. The anonymous usage statistics are based on comments, likes, shares, number of visitors, reach of a post, calls to individual page areas, and statistics on followers by age, language, origin, or interests. We have no access to the personal data used by the operators of the social media platforms to create page insights ("page insights data"). The selection and processing of page insights data are carried out exclusively by the operator of the respective social media platform.

With the help of page insights, we obtain knowledge about how our social media profiles are used, what interests visitors to our social media profiles have, and which topics and content are particularly popular. This allows us to optimize our social media profile activities, for example, by better addressing the interests and usage habits of our audience when planning and selecting our content.

The legal basis for the processing is our legitimate interest (Art. 6 para. 1 lit. f) GDPR) in analyzing the data provided to us by the operator of the respective social media platform for the purpose of optimizing our web offering and our marketing activities. 

YT and the operator of the respective social media platform are jointly responsible for the data processing that serves to provide page insights. For more information on the processing of your personal data by the operator of the respective social media platform in the context of the creation and processing of usage statistics, please refer to the information on usage statistics on the following web pages of the respective social media platform:

• Facebook information on Page Insights data at https://de-de.facebook.com/legal/terms/information_about_page_insights_data,
• Instagram insights at https://help.instagram.com/788388387972460?helpref=faq_content,
• Xing at https://privacy.xing.com/de/datenschutzerklaerung/informationen-die-wir-auf-grund-ihrer-nutzung-von-xing-automatisch-erhalten
• LinkedIn privacy policy (Aggregated Insights) at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
• YouTube insights at https://youtubeinsights.withgoogle.com/
• Twitter Audience Insights at https://business.twitter.com/de/analytics/audience-insights.html,

 For more information on data processing by the operator of the respective social media platform in the context of interest-based advertising as well as the settings options for your profile and your advertising preferences, please visit the following websites of the respective social media platform

• Facebook: https://de-de.facebook.com/ads/preferences
• Instagram: https://help.instagram.com/410983803065364?helpref=search&sr=6&query=werbung,
• Xing at https://privacy.xing.com/de
• LinkedIn at https://www.linkedin.com/psettings/
• YouTube at https://adssettings.google.com/anonymous?hl=de&sig=ACi0TCiTTROne828Fqf_0lUqqKRlN7BUiI8myE0fXuSfsJqS3Rsu4ZH-d-cYNLeEGbsFDQ6XUi_oF-OkzZyLZnoR5uGDKeQ9fbvdj5GX3ILQPjpAKZLTPxE
• Twitter at https://help.twitter.com/de/safety-and-security/privacy-controls-for-tailored-ads

• Tik Tok unter https://www.tiktok.com/legal/tiktok-website-cookies-policy?lang=de

d) What rights do you have and against whom can you exercise them?

If you do not wish the data processing by YT as described hereunder 5. to continue in the future, please cancel the connection of your user profile to the respective social media site of YT by using the functions "I no longer like this page" and/or "Do not subscribe to this page".

With regard to the data processing by YT, you may exercise your rights mentioned in section 9. against YT and with regard to the data processing by the operator of the respective social media platform against the respective operator at any time. Further information on this can be found in the data protection declarations (see clause 5.2. c)) of the operator of the respective social network.

If you gave YT consent, you can revoke this at any time with effect for the future by e-mail or by post using the contact details above. If YT processes your data based on a balance of interests, you can object to the processing.

6. TO WHOM WILL YOUR DATA BE TRANSFERRED?

The data collected by us will only be transferred if: 

• You have given your express consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR,
• the transfer according to Art. 6 para. 1 p. 1 lit. f GDPR is necessary for the enforcement, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• we are legally obligated to transfer your data according to Art. 6 para. 1 p. 1 lit. c GDPR or this is legally permissible and
• it is necessary according to Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.

Within our company, only those persons and departments (e.g. financial accounting, purchasing, sales, customer service) receive your personal data that need them to fulfill our contractual and legal obligations.

If external service providers are used to operating the website or providing services, they may only use your data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organizational measures to protect the rights of the data subjects, and are regularly monitored by us.

Data processing via our processors takes place predominantly in Germany or within another member state of the European Union.

If a service provider processes your data outside the European Union, we will inform you separately in this privacy statement. In this case, it may be that your data is transferred to a country that does not offer the same data protection standards as the European Union. In this case, we ensure that the respective service providers contractually (e.g. by concluding standard contractual clauses in accordance with Commission Decision (EU) 2021/914 of June 4, 2021) or otherwise guarantee a level of data protection equivalent to the European Union in accordance with Chapter 5 of the GDPR.

In addition, disclosure may take place in connection with official inquiries, court decisions, and legal proceedings if it is necessary for legal prosecution or enforcement.

7. WHEN WILL YOUR DATA BE DELETED?

In principle, we store personal data only as long as necessary to fulfill contractual or legal obligations. After complete fulfillment of a contract or deletion of your customer account, your data will be blocked for further use and deleted after the expiration of the retention periods under tax and commercial law, unless we still need the data until the expiration of the statutory limitation period for evidence purposes in civil claims or you have expressly consented to further use of your data. The deletion of your customer account is possible at any time and can be done either by an informal message to the above contact details or via a designated function in the customer account.

8. OBLIGATION TO PROVIDE YOUR DATA

Within the scope of our business relationship, you must provide personal data required for the establishment, implementation, and termination of the business relationship and the fulfillment of the associated contractual obligations or to whose collection we are legally obligated. Without this data, we will not be able to carry out our business relationship with you.

9. WHAT PRIVACY RIGHTS DO YOU HAVE?

You have a right to access(Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR) against YT Industries GmbH under the respective legal conditions. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). In Bavaria, the competent supervisory authority is: Bavarian State Office for Data Protection Supervision, Promenade 27, 91522 Ansbach, e-mail: poststelle@lda.bayern.de. 

If you have given consent to YT Industries GmbH, you can revoke this consent at any time with effect for the future by sending an e-mail or letter to the above contact details.

If YT Industries GmbH processes your data on the basis of a balance of interests, you can object to the processing. If you object, your data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

10. CHANGES TO THE PRIVACY STATEMENT

Occasionally, we update this privacy statement, for example, if we adapt our website or if legal or regulatory requirements change.