Privacy Policy
1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Controller (Verantwortlicher)
The controller responsible for data processing on this website is:
YoliYoli UG (haftungsbeschränkt)
Malte Klatte
Laisackerweg 17
79244 Münstertal, Germany
Email: [email protected]
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
2. General Information and Mandatory Disclosures
Legal Basis for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR.
If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, the processing is based on Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR.
Data processing may also be based on our legitimate interest according to Art. 6(1)(f) GDPR. Information about the specific legal bases in each individual case is provided in the following paragraphs of this privacy policy.
Your Rights as a Data Subject
Within the framework of the applicable legal provisions, you have the right at any time to:
- Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
- Rectification (Art. 16 GDPR): You have the right to demand the correction of incorrect or incomplete personal data stored by us.
- Erasure (Art. 17 GDPR): You have the right to demand the deletion of your personal data stored by us.
- Restriction of processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data.
- Data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Objection (Art. 21 GDPR): You have the right to object to the processing of your personal data if it is based on Art. 6(1)(f) GDPR.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority. For us, the competent supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information of
Baden-Württemberg
(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)
Postfach 10 29 32, 70025 Stuttgart, Germany
Internet: www.baden-wuerttemberg.datenschutz.de
3. Provision of the Website (Hosting & CDNs)
Hosting by Namecheap
We host our website with Namecheap, Inc. (4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA). Namecheap processes your IP address and technical log data to provide and ensure the secure operation of the website.
The use of Namecheap is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website.
Cloudflare (CDN, Security & DNS)
This website uses Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) as a Content Delivery Network (CDN) as well as for website security and the provision of HTTPS encryption.
Cloudflare processes technically necessary data (in particular IP addresses) to fend off attacks, deliver the website, and ensure a secure connection.
The use of Cloudflare is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and efficient provision of our website.
Data transfer to the USA is based on the Standard Contractual Clauses (SCC) approved by the EU Commission (Art. 46 GDPR).
Self-Hosted Tailwind CSS and Assets
To maximize your privacy, we no longer load the Tailwind CSS engine or images from third-party CDNs. These assets are hosted locally on our own servers, preventing unnecessary data transfers to third-party providers upon page load.
4. Data Collection on This Website
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include (among others) browser type, operating system, referrer URL, host name of the accessing computer, time of the server request, and IP address.
The basis for data processing is Art. 6(1)(f) GDPR, which permits the processing of data to protect the legitimate interests of the controller (security and stability of the website).
Email Contact
If you contact us by email, your details, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR).
Cookies / Tracking
We do not use analysis cookies (such as Google Analytics) or tracking pixels on this website. Only technically necessary data required for the operation of the website is processed.
5. Fonts
System Font Stack
To protect your privacy in the best possible way, this website does not load fonts from external servers (such as Google Fonts). Instead, we use a "System Font Stack." This means your browser accesses fonts that are already installed on your local device. Therefore, no data is transmitted to font providers.