Data protection

Information on the Responsible Party

Yinproducts Ltd.
Stephan Schneider

Studio / London
71-75 Shelton Street
Convent Garden
London
WC2H9JQ

Overview of Data Protection

General Information
The following notes provide an overview of what happens with your personal data when you visit our website. Personal data includes all data by which you can be personally identified. Detailed information on data protection can be found in our Privacy Policy below.

Data Collection on Websites
Who is responsible for data collection on this website?
Data processing on this website is primarily handled by the website operator.

How do we collect your data?
Some of your data is collected when you provide it to us, such as data entered into a contact form.
Other data is collected automatically when you visit the website, mainly technical data (e.g., browser, operating system, or access time). This data is collected automatically as soon as you enter our website.

Why do we use your data?
Part of the data is collected to ensure error-free provision of the website, while other data may be used to analyze user behavior.

What are your rights regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction, blocking, or deletion of this data. For further questions about data protection, you can contact us at any time at the address provided in the site’s legal notice. Additionally, you have the right to lodge a complaint with the relevant supervisory authority.

You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Details can be found in the Privacy Policy under “Right to Restriction of Processing.”

Analytics and Third-Party Tools
Your browsing behavior may be statistically evaluated when you visit our website. This is primarily done with cookies and analytics programs. Your browsing behavior is usually analyzed anonymously; it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following Privacy Policy.

You may object to this analysis, and we will inform you about the options for objection in this Privacy Policy.

Hosting

External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers, which may include IP addresses, contact requests, metadata, and communication data, among others.

The use of the host is based on our legitimate interest in a reliable, fast, and efficient online presence by a professional provider (Art. 6 Para. 1 lit. f GDPR) and to fulfill contractual obligations to our potential and existing customers (Art. 6 Para. 1 lit. b GDPR).

The host will process your data only to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

The following host is used:
Pressable, Inc. – Netherlands, Amsterdam

Order Processing
The hosting contract is made in the name of our technical service provider. To ensure data processing complies with data protection, the technical service provider, Spotzer, Jacob Bontiusplaats 9, 1018 LL – Amsterdam, has signed an order processing agreement with the host.

General notes and mandatory information

Privacy Policy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data are collected. Personal data are any data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the Internet (e.g., communication by email) can have security gaps. Complete protection of data from third-party access is not possible.

Notice Regarding the Responsible Party

If the responsible party for data processing on this website is not specified at the beginning of this document, it is the website operator. You can find their contact information in the website’s Impressum (Legal Disclosure).

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can withdraw consent at any time by simply sending an informal email to us. The legality of data processing performed prior to withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims (objection according to Art. 21(1) GDPR).

If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising, including profiling to the extent that it is related to direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection according to Art. 21(2) GDPR).

Right to Lodge a Complaint with a Supervisory Authority

In the case of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or place of the alleged violation. This right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data, which we process based on your consent or in fulfillment of a contract, automatically delivered to you or a third party in a standard, machine-readable format. If you request direct transfer of the data to another controller, this will only be done to the extent technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line changes from “https://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Blocking, Deletion, and Correction

Within the scope of applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin and recipients, and the purpose of the data processing and, if necessary, a right to correct, block, or delete this data. For this purpose, as well as for other questions regarding personal data, you can contact us at any time using the address provided in the Impressum.

Right to Restrict Processing

You have the right to request the restriction of processing of your personal data. To do so, you can contact us at any time using the address provided in the Impressum. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data is unlawful, you may request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need them to exercise, defend, or assert legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
If you have filed an objection under Art. 21(1) GDPR, a balance must be struck between your and our interests. Until it is determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, these data may—apart from being stored—only be processed with your consent or for asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Data Collection on Our Website

Server Log Files

The provider of this site automatically collects and stores information in server log files, which your browser transmits to us automatically. These are:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources.

The basis for data processing is Article 6(1)(b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website; for this purpose, server log files must be recorded.

Contacting Us

When you contact us (e.g., via contact form or email), we collect personal data. Your contact information is stored by us for processing the request and for potential follow-up questions. We do not share this data without your consent.

Processing of the provided data is based solely on your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time by sending us an informal message via email. The legality of data processing up to the point of revocation remains unaffected by the revocation.

The data you provide will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after the processing of your inquiry is completed). Mandatory statutory provisions, particularly retention periods, remain unaffected.

Plugins and Tools

Use of Cookies (General)

Websites often use “cookies.” These are small text files that do no harm to your device. Cookies are either temporarily stored for the duration of a session (session cookies) or permanently stored (persistent cookies) on your device. Session cookies are deleted automatically at the end of your visit, while persistent cookies remain on your device until you delete them manually or they are automatically removed by your browser.

Sometimes third-party cookies may also be stored on your device when you visit our site, allowing either us or you to use specific third-party services (e.g., payment processing cookies).

Cookies serve different purposes. Many are technically necessary, as certain website functions (such as the shopping cart feature or video playback) cannot function without them. Other cookies are used to analyze user behavior or display advertising.

Cookies necessary for the electronic communication process (essential cookies), specific functions requested by you (functional cookies, e.g., for the shopping cart), or optimizing the website (e.g., audience measurement cookies) are stored based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for technically error-free and optimized service provision. Where consent is requested, the storage of these cookies is based exclusively on that consent (Article 6(1)(a) GDPR), which can be withdrawn at any time.

You can configure your browser to notify you about the setting of cookies, only allow cookies on a case-by-case basis, exclude cookies in certain cases or generally, and enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

If third-party cookies or cookies for analytical purposes are used, we will inform you separately as part of this privacy policy and obtain consent if necessary.

eCommerce and Payment Providers

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only as necessary for establishing, structuring, or modifying a legal relationship (inventory data). This is done based on Article 6(1)(b) GDPR, which allows data processing for the fulfillment of a contract or preliminary contractual measures. We collect, process, and use personal data related to the use of this website (usage data) only as necessary to enable or bill the user for using the service.

Collected customer data is deleted once the order is completed or the business relationship ends. Legal retention periods remain unaffected.

Data Transfer Upon Contract Conclusion for Online Shops, Merchants, and Shipping

We transfer personal data to third parties only when necessary for contract execution, such as to companies entrusted with delivering the goods or the financial institution handling the payment. Further data transfer occurs only if you have expressly consented to it. No data is shared with third parties without your explicit consent, for example, for advertising purposes.

The basis for data processing is Article 6(1)(b) GDPR, which allows data processing for contract fulfillment or preliminary contractual measures.

Data Transfer Upon Contract Conclusion for Services and Digital Content

We transfer personal data to third parties only as necessary for contract execution, such as to the financial institution handling the payment.

Further data transfer occurs only if you have expressly consented to it. No data is shared with third parties without your explicit consent, for example, for advertising purposes.

The basis for data processing is Article 6(1)(b) GDPR, which allows data processing for contract fulfillment or preliminary contractual measures.

Order Processing via Dropshipping

If you order goods from us, your order may be shipped directly to you by our vendors (dropshipping). For this, we provide your name, delivery address, and – as necessary for delivery – your phone number to the shipping company. This data transfer occurs solely for the purpose of fulfilling your order.

The legal basis for data processing is Article 6(1)(b) GDPR (contract fulfillment) and our legitimate interest in a fast and efficient purchase process under Article 6(1)(f) GDPR.

We use the following vendors for dropshipping:

Name and address of the vendor

Payment Services

We integrate payment services from third-party providers on our website. When you make a purchase, your payment data (e.g., name, payment amount, account information, credit card number) is processed by the payment service provider for payment processing. These transactions are subject to the terms and privacy policies of the respective provider. The use of payment providers is based on Article 6(1)(b) GDPR (contract processing) and our legitimate interest in a smooth, convenient, and secure payment process (Article 6(1)(f) GDPR). Where consent is requested, this consent is the legal basis for data processing (Article 6(1)(a) GDPR) and can be withdrawn at any time.

We use the following payment services/providers on this website:

PayPal: Provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
- EU Commission’s Standard Contractual Clauses apply for data transfer to the USA. Details: PayPal Privacy Policy.
Apple Pay: Provided by Apple Inc., Infinite Loop, Cupertino, CA 95014, USA.
- Privacy Policy: Apple.
Google Pay: Provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Privacy Policy: Google.
Stripe: For EU customers, Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
- EU Commission’s Standard Contractual Clauses apply for data transfer to the USA. Details: Stripe Privacy Policy.
Klarna: Provided by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. Klarna offers multiple payment options, and when using Klarna Checkout, it collects various personal data. Klarna uses cookies to optimize the Checkout experience. Details: Klarna Privacy Policy.
Paydirekt: Provided by Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany.
- For payment details: Paydirekt Privacy Policy.
Immediate Transfer: Provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.
- Privacy Policy: Sofort/Klarna.