I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Yare Group AG, Landstrasse 274, 9495 Triesen, Liechtenstein
+423 390 00 33, contact@yaretools.com
II. General Information on Data Processing
1. Scope of Processing Personal Data
Our processing of our users’ personal data is limited to those data required to provide a functional website as well as our content and services. The processing of our users’ personal data only takes place for the purposes agreed with you or if another legal basis (within the meaning of the GDPR) exists. Only such personal data is collected that is actually required for the performance and processing of our tasks and services or that you have provided to us voluntarily.
2. Your Rights (Data Subject Rights)
You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, data portability (provided that this does not cause disproportionate effort in the case of data transfer), the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling.
You also have the right to revoke any consent granted for the use of your personal data at any time.
If you believe that our processing of your personal data contradicts the applicable data protection regulations, you have the option to lodge a complaint with the data protection authority.
III. Description and Scope of Data Processing
1. Provision of the Website
Every time our website is accessed, our web server automatically collects data and information from the computer system of the accessing computer in so-called server log files. The following data is collected:
- Date and time of access
- The user’s IP address
- Information about the browser type and the version used
We store this information for a maximum period of 30 days. Storage is for reasons of data security to ensure the stability and operational safety of our system.
2. Cookies
We use cookies on our website to make our offer user-friendly. Cookies are small files that your browser creates automatically and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. The cookies remain stored until you delete them. This allows us to recognize your browser on your next visit.
If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you allow them in individual cases. However, we would like to point out that deactivation will mean that you will not be able to use all the functions of our website.
The legal basis for the data processed by cookies is Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
The cookies remain valid for an indefinite period and are subsequently deleted by your browser.
In our cookie notice, you will find all cookies listed, sorted by function and explained in detail. You can individualize your settings and accordingly allow or reject only the necessary or all cookies (incl. statistics, marketing, etc.).
3. Web Analysis
On our website, “Google Analytics”, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, is used to evaluate website usage. Google Analytics uses cookies that are stored on your computer. The information contained therein about the visitor’s website and internet usage can be processed and evaluated by Google. The data collected by Google may be transmitted by Google to countries outside the EU and the EEA, in particular the USA.
The basis for the transfer of personal data from the EU to the USA is the EU-US Data Privacy Framework.
We have activated the IP anonymization function on this website so that your IP address is anonymized before transmission to Google.
You can also prevent the use of your data by Google Analytics with the browser add-on for deactivating Google Analytics.
You can also prevent Google Analytics cookies by selecting the “only necessary cookies” button in the “Cookie Information” pop-up that appears when you access the website. In this case, the use of Google Analytics cookies will not be permitted.
The legal basis for the data processed by Google Analytics cookies is Art. 6 Para. 1 Sentence 1 lit. a) GDPR (“consent”).
4. Customer Account/User Account
To provide you with the greatest possible convenience, we offer the permanent storage of your personal data in a password-protected customer account/user account.
The creation of a customer account is generally voluntary and takes place on the basis of your consent within the meaning of Article 6 Para. 1 lit. a) GDPR. After setting up a customer account, no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.
In addition to the data requested during an order, you must provide a self-chosen password to set up a customer account. This, together with your email address, serves to access your customer account. Please treat your personal access data confidentially and, in particular, do not make it accessible to unauthorized third parties. Please note that you will remain logged in automatically even after leaving our website, unless you actively log out. You have the option to delete your customer account at any time. Please note, however, that this does not simultaneously result in the deletion of the data visible in the customer account if you have ordered from us. The deletion of your data takes place automatically after the expiry of the commercial and tax law retention obligations applicable to us. The legal basis for this data processing is Art. 6 Para. 1 c) GDPR and Art. 6 Para. 1 f) GDPR.
You can also place orders without a customer account – in this case, we process your personal data only to the extent necessary for processing the order. No further retention of the data takes place. The legal basis for data processing in this case is (merely) Art. 6 Para. 1 lit. b) GDPR.
5. Contact Form & Email Contact
If you fill out a contact form or send us an email or other electronic message, your details will only be stored for processing the inquiry and any related further questions, and will only be used within the scope of the inquiry.
The legal basis for processing your inquiry is Art. 6 Para. 1 Sentence 1 lit. b) GDPR.
We will delete your email address after your inquiry has been dealt with.
6. Online Payment Transactions
To process online payment transactions, we only transfer the most essential personal data to the payment service provider (Payrexx).
In the area of card payments (Visa, Maestro, Twint, Google Pay, Apple Pay), we work with Payrexx AG, Burgstrasse 20, CH-3600 Thun.
If you pay by card, personal data from you is required. You can find details on the processing of your personal data here: https://www.payrexx.com/en/legal/
In this context, in addition to the purchase amount and date, card data is also transmitted to the aforementioned company. All payment data as well as data on any chargebacks that may occur are only stored as long as they are needed for payment processing (including the processing of possible chargebacks and debt collection) and for combating abuse.
Furthermore, additional storage may take place if and as long as this is necessary to comply with a statutory retention period or to prosecute a specific case of abuse. The legal basis for data processing is Art. 6 Para. 1 f) General Data Protection Regulation.
You can request information and, if necessary, rectification or erasure as well as the restriction of the processing of your data and/or, if necessary, object to the processing of your data. For questions regarding data processing by Payrexx or to assert your aforementioned rights, you can contact the data protection officer, whom you can reach at the address provided or by email at privacy@payrexx.com.
We point out that the provision of payment data is neither legally nor contractually required. If you do not want to provide your payment data, you can use the “prepayment” payment method.
7. Logistics Service Providers/Transport Companies
For the purpose of delivering ordered goods, we work with logistics service providers/transport companies and/or shipping partners. No personal data is transmitted.
8. Newsletter
When you register for our newsletter, we immediately send an email containing a hyperlink to the email address provided. By clicking on this link, you confirm your newsletter registration (double opt-in procedure). If this registration confirmation does not take place within 30 days, we delete the email address from our temporary list and registration has not occurred.
If you confirm the newsletter registration, you give your consent to the storage of your email address including the date of entry, IP address, and the list name of the desired newsletter. We use your email address and the personal data collected at the same time, such as first name and last name, only for the administration and sending of the newsletter you requested, at the periodicity specified during registration.
Our newsletters do not contain any obvious or hidden counters, third-party advertising, or links to external sites that are not directly related to the content of our newsletter.
The legal basis for sending a newsletter to you is Art. 6 Para. 1 lit. a GDPR.
Every newsletter contains information on how you can unsubscribe from the newsletter again.
The newsletter is sent using the shipping service provider “MailChimp”, a newsletter shipping platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the shipping service provider here. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with the European data protection level (PrivacyShield). The shipping service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 lit. f GDPR and an order processing contract according to Art. 28 Para. 3 Sentence 1 GDPR.
The shipping service provider can use the recipients’ data in pseudonymous form, i.e., without assignment to a user, to optimize or improve its own services, e.g., for technical optimization of shipping and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
IV. Data Security
1. SSL Encryption
During the website visit, we use the common TLS procedure in connection with the highest encryption level supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the address bar of your browser.
In addition, we apply other suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
2. Emails Sent to Us
We draw your attention to the fact that – subject to an explicit agreement and configuration – emails to us are sent unencrypted.
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing within the framework of our website.