PRIVACY

1. ACCESS DATA AND HOSTING

You can visit our websites without providing any personal information. Each time you access a website, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the access, the amount of data transferred and the requesting provider (access data) and documents the access. This access data is evaluated solely for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests in the correct presentation of our offer, which outweigh our interests in the context of a balancing of interests in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. All access data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes.

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Our service providers are located and use servers in Israel. For Israel, the European Commission has determined by decision an adequate level of data protection. In addition, our service providers use servers in the USA, South Korea and Taiwan, as well as in other countries outside the EU and the EEA for which there is no adequacy decision by the European Commission. Our cooperation with you is based on standard data protection clauses of the European Commission.

​

2. DATA PROCESSING FOR CONTRACT PROCESSING AND FOR CONTACTING US

In the context of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 (1) p. 1 lit. b DSGVO if you voluntarily provide us with this data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, since in these cases we absolutely need the data to process your contact. Which data is collected can be seen from the respective input forms. After complete processing of your request, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

 

3. DATA PROCESSING FOR THE PURPOSE OF SHIPMENT PROCESSING

For the purpose of fulfilling the contract in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

 

4. DATA PROCESSING FOR PAYMENT PROCESSING

For the processing of payments in our online store, we work with these partners: technical service providers, credit institutions, payment service providers.

​

5. GENERAL INFORMATION ON DATA PROCESSING

In principle, we only collect and use personal data from our users to the extent that this is necessary to provide a functioning website and for our content and services.

​

A) PERSONAL DATA

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). The personal data of users processed in the context of this online offer includes in particular

• Your name, your Instagram account name and your e-mail address for registering and subscribing to the newsletter

• Your data, which arise when using our online offer

​

B) PURPOSES OF PROCESSING

In principle, we only process the personal data of our users to the extent that this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.

 

The collection and use of personal data from our users is always in accordance with the GDPR and the applicable country-specific data protection regulations. If the processing of personal data is necessary and such processing is not permitted by statutory provisions, we always obtain the consent of the person concerned. If you are asked by us to provide certain personal data, you can of course refuse to do so. You have a choice about what information you give us. However, we may then not be able to offer you certain products and services.

​

C) LEGAL BASIS

Insofar as we obtain the consent of the person concerned for the processing of personal data, Article 6 Paragraph 1 lit. a EU General Data Protection Regulation (hereinafter "GDPR") serves as the legal basis.

Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if our interests, the fundamental rights and fundamental freedoms of the data subject prevail, Article 6 Paragraph 1 Letter f GDPR serves as the legal basis for the processing.

​

D) DISCLOSURE OF YOUR DATA

Personal data will be passed on to third parties in the following case if there is a  There is a legal obligation under Article 6 Paragraph 1 Sentence 1 Letter c GDPR​ . Service providers who work for us on our behalf have been carefully selected and commissioned by us and are bound by our instructions. Furthermore, we are contractually entitled to monitor compliance with the relevant contractual and legal regulations by the service providers. The external service providers can be assigned to the following categories:

• e-mail newsletter delivery service provider,

• Service providers in the field of marketing and web analysis,

• service provider for customer inquiries,

• Service provider for the presentation of forms on the website.

​

E) STORAGE PERIOD AND DELETION

In principle, we only store your data for as long as is necessary for the respective purpose of processing.  We delete the data collected and stored in connection with the registration at the latest when the purpose of storage no longer applies or you inform us that your registration should be deleted.  ​

​

6. NOTES ON DATA PROCESSING WHEN VISITING THE WEBSITE

When you visit our website www.yarnmeup.com, the browser you are using automatically transmits information to our website server. 

The following information is recorded and stored until it is automatically deleted:

• IP address of the requesting computer,

• date and time of access,

• name and URL of the retrieved file,

• the referrer URL, i.e. the website from which access was made,

• information about the type of browser used,

• the operating system of your computer,

• the name of the internet service provider.
   

The legal basis for processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. The legitimate interest in processing lies in the technical enabling of access to the website, the optimized presentation of the content for the user and the further improvement/optimization of the website in the future.

You have the right to object to the processing of your personal data based on legitimate interest. A message, for example by e-mail to info@yarnmeup.com, is sufficient for this. However, failure to provide it could mean that you cannot use our website or cannot use it to its full extent.​

​

7. NOTES ON DATA PROCESSING WHEN REGISTERING AS A TESTER

You can apply as a knitting pattern tester on our website. We only use the data entered for the purpose of using the respective offer or service for which you have registered. 

The legal basis for processing is Article 6 Paragraph 1 Letter a.

​

The personal data collected during application will be stored by us for as long as you the application process is running; then they will be deleted. Statutory retention requirements remain unaffected by this.

You have the right to withdraw your consent to the processing of your personal data at any time. A message, for example by e-mail to info@yarnmeup.com, is sufficient for this. In this case your registration will expire.

​

8. NOTES ON DATA PROCESSING FOR ADVERTISING PURPOSES

You can register to receive our newsletter on our website. Our newsletter contains news, offers and further information about the services of Yarn Me Up.

​

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else's e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

​

The newsletter is sent on the basis of your consent in accordance with Article 6 (1) (a) GDPR. To receive the newsletter, you must enter your email address in the space provided on our website. You can revoke your consent to the processing of your data for sending the newsletter at any time with effect for the future. A message, for example by e-mail to info@yarnmeup.com, is sufficient for this. You will also find an unsubscribe link in every newsletter.

​

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you have canceled the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for registering as a tester) remain unaffected by this.​

​

6. NOTES ON DATA PROCESSING WHEN CONTACTING

When contacting us (e.g. via contact form, e-mail, telephone or via social media), the information provided by the user is used to process the contact request and to process it in accordance with Article 6 (1) b. (in the context of contractual/pre-contractual relationships), Art. 6 Paragraph 1 lit. f. (other inquiries) GDPR processed. User information can be stored in a customer relationship management system (“CRM system”) or comparable inquiry organization.

​

We delete the requests if they are no longer necessary. We review necessity every two years; Furthermore, the statutory archiving obligations apply.​

​

7. NOTES ON DATA PROCESSING FOR COMMENTS AND CONTRIBUTIONS

You have the option of commenting on blog entries on our website. If you leave a contribution or comment on this website, your IP address will be saved. This is done on the basis of our legitimate interests within the meaning of Article 6 Paragraph 1 Letter f Have the identity of the comment or contribution author.

​

8. COOKIES

We use cookies on our website. Cookies are small text files that are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically removed by your web browser.

​

Unique identifiers consisting of a string of characters can be stored in cookies, which enable the browser to be identified when the website is visited again. Cookies can store various information, such as browser type, operating system used, language settings or other personal page settings as well as user behavior, such as sub-pages accessed or links clicked. This does not mean that we thereby obtain direct knowledge of your identity.

​

Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them. Other cookies are used to evaluate user behavior or to display advertising.  

​

Technically necessary cookies:

Technically necessary cookies are those that are required for the smooth functioning of our website. Technically necessary cookies are stored on the basis of Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services.

​

Cookies for marketing purposes:

Marketing cookies are used to show you advertising that is tailored to your interests. When you visit another website, your browser's cookie will be recognized and you will be shown selected advertising based on the information stored in this cookie. These cookies are only stored with your consent on the basis of Article 6 (1) (a) GDPR. The consent can be revoked at any time for the future.  

​

Cookies for analysis purposes:

With these cookies, the range of our own offer can be measured. The cookie that is set enables us, among other things, to track which website was visited before our website was called up and how our website was used. We use this data to optimize our website, among other things, by evaluating the campaigns we have carried out. These cookies are only stored with your consent on the basis of Article 6 (1) (a) GDPR. The consent can be revoked at any time for the future. 

You can set your browser so that you

• be informed about the setting of cookies, 

• Allow cookies only in individual cases, 

• exclude the acceptance of cookies for certain cases or in general, 

• activate the automatic deletion of cookies when the browser is closed.

​

The cookie settings can be managed under the following links for the respective browsers:  

• Google Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-allow-and-reject

• Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

• Opera: https://help.opera.com/en/latest/

​

You can also individually manage cookies from many companies and functions used for advertising. To do this, use the appropriate user tools.

​

Most browsers also offer a so-called "Do Not Track" function, which you can use to indicate that you do not wish to be "tracked" by websites. When this feature is turned on, the browser tells ad networks, websites, and applications that you do not want to be tracked for behavioral advertising and the like. Information and instructions on how to edit this function are available from the following links, depending on the provider of your browser:

• Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en

• Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/

• Internet Explorer: https://support.microsoft.com/de-de/topic/using-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792

• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

• Opera: https://help.opera.com/de/latest/

​

In addition, you can prevent the loading of so-called scripts by default. NoScript only allows JavaScripts, Java and other plugins to run on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

​

Please note that disabling cookies may limit the functionality of this website.​

​

9. SOCIAL MEDIA

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to be able to inform them about our services there.

​

We would like to point out that user data can be processed outside of the European Union. This can result in risks for the user, because it could make it more difficult to enforce the user's rights, for example. With regard to US providers who are certified under the Privacy Shield, we would like to point out that they undertake to comply with the data protection standards of the EU.

​

Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the user. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

​

The processing of the personal data of the users takes place on the basis of our legitimate interests in effective information of the users and communication with the users in accordance with Article 6 Paragraph 1 lit. f GDPR. If the users are asked by the respective providers of the platforms for their consent to the data processing described above, the legal basis for the processing is Article 6 Paragraph 1 Letter a., Article 7 GDPR.

​

For a detailed description of the respective processing and the possibility of objection (opt-out), we refer to the following linked information from the providers.

​

Also in the case of requests for information and the assertion of user rights, we would like to point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information directly. If you still need help, you can contact us.

​

INSTAGRAM OPT OUT

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/ Opt-Out:  http://instagram.com/about/legal/privacy/ .

​

PINTEREST OPT OUT

Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/ Opt-Out:  https://about.pinterest.com/de/privacy-policy .

​

PLUGINS

We use social media plugins or other components of the social networks Instagram and Pinterest on our website on the basis of Article 6 Paragraph 1 lit. a GDPR in order to make our website and our company better known.  

​

INSTAGRAM PLUG-IN

Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. You can find an overview of the Instagram plugins and their appearance here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

​

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

​

If you are logged in to Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

​

The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this regard and setting options for protecting your privacy can be found in Instagram's data protection information:

https://help.instagram.com/155833707900388/

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading with add-ons for your browser, e.g. B. with the script blocker "NoScript" (http://noscript.net/).

​

PINTEREST PLUGIN

Our website uses so-called social plugins (“plugins”) from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”). The plugins are e.g. B. recognizable by buttons with the sign "Pint it" on a white or red background. You can find an overview of the Pinterest plugins and their appearance here: https://developers.pinterest.com/docs/getting-started/introduction/

​

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The content of the plugin is transmitted directly to your browser by Pinterest and integrated into the page. Through the integration, Pinterest receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Pinterest profile or are not currently logged in to Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there.

​

If you are logged in to Pinterest, Pinterest can immediately assign your visit to our website to your Pinterest profile. If you interact with the plugins, for example by pressing the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there.  

​

The purpose and scope of the data collection and the further processing and use of the data by Pinterest as well as your rights in this regard and setting options for protecting your privacy can be found in Pinterest's data protection information:  

https://about.pinterest.com/de/privacy-policy

If you do not want Pinterest to directly assign the data collected via our website to your profile on Pinterest, you must log out of Pinterest before visiting our website. You can also completely prevent the Pinterest plugins from loading with add-ons for your browser, e.g. B. with the script blocker "NoScript" (http://noscript.net/).​

​

10. YOUR RIGHTS

As the data subject, you have the following rights vis-à-vis the person responsible. If you would like to exercise one of these rights, please contact the person responsible using the contact details given in Section 1.

​

A) RIGHT TO INFORMATION ( ART. 15 GDPR)

You have the right to request information from us as to whether and, if so, how we process your personal data. Upon request, we will provide you with a digital copy of this data. 

The aforementioned right to information can be limited or excluded under certain legal conditions. In particular, according to Section 29 (1) sentence 2 BDSG, there is no right to information if the information would reveal information that must be kept secret by law or by its nature, in particular because of the overriding legitimate interests of a third party.  

​

B) RIGHT TO RECTIFICATION (ART. 16 GDPR)

You have the right to immediate correction and/or completion of your personal data from the person responsible if the processed personal data concerning you is incorrect or incomplete.

​

C) RIGHT TO ERASURE (ART. 17 GDPR)

You can request the deletion of your data stored by us,  

• if the data are no longer necessary for the purposes for which they were collected or processed, 

• you have withdrawn your consent and there is no other legal basis for the processing,

• you file an objection in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing or you file an objection in accordance with Article 21 (2) GDPR,

• the personal data have been unlawfully processed, 

• the deletion is necessary to fulfill a legal obligation or 

• the personal data was collected in relation to information society services offered pursuant to Article 8 (1) GDPR. 

This right to erasure does not apply if the processing is carried out to exercise the right to freedom of expression and information; to comply with a legal obligation; for reasons of public interest; or is required to assert, exercise or defend legal claims.

​

D) RIGHT TO RESTRICTION OF PROCESSING (ART. 18 GDPR)

You can request the restriction of the processing of your personal data if  

• the accuracy of the personal data is contested by you for the duration of the verification of accuracy by the controller; 

• the processing is unlawful and you request the restriction of use instead of deletion; 

• the person responsible no longer needs the data, but you need them to assert, exercise or defend legal claims or 

• You have lodged an objection to the processing pursuant to Article 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

​

If the processing of the personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State are processed.

​

If the restriction of processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

​

E) RIGHT TO DATA PORTABILITY (ART. 20 GDPR)

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.

 

F) RIGHT TO OBJECT (ART. 21 GDPR)

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 Paragraph 1 lit. e or f GDPR, you have the right to object to the processing of your personal data if there are reasons for this that arise from your particular situation result. If the objection is directed against direct advertising, you have a general right of objection, which we will implement without specifying a particular situation.

 

G) RIGHT TO REVOKE CONSENT (ART. 7 (3) GDPR)

You have the right to revoke the consent you have given us at any time, with the result that we are no longer allowed to continue the data processing based on this consent for the future.

 

H) RIGHT OF APPEAL (ART. 77 GDPR)

You have the right to complain to a supervisory authority. You can contact the supervisory authority at your place of residence or work or the supervisory authority responsible for us.​

​

11. UPDATE AND CHANGES TO THE PRIVACY POLICY

This data protection declaration is currently valid as of August 2023. Due to the further development of our website and offers or due to changed legal requirements, it may be necessary to change this declaration.

​

​