This data protection declaration clarifies the type, scope and purpose of the collection and use of personal data by the responsible provider, the
YOUCAT Foundation non-profit GmbH
Bishop Kindermann St. 23
61462 Königstein im Taunus
Phone: +49 (0)821 410 108-10
on this website (hereinafter referred to as "YOUCAT Foundation").
See also →Imprint.
The legal basis of data protection can be found in the European Data Protection Ordinance (GDPR).
2. Handling Of Personal Data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes, among other things, your name, e-mail address or telephone number. But also data about preferences, hobbies, memberships or which websites were viewed by someone counts as personal data.
You are not required to disclose any personal data in order to use this website. In certain cases, however, the YOUCAT Foundation needs your name and other information such as your postal address, your e-mail address or other information so that I can provide the requested services.
The YOUCAT Foundation will collect, process and use the personal data you provide online only for the purposes disclosed to you. Your personal data will not be passed on to third parties without your express consent. The collection and transfer of personal data to government institutions and authorities entitled to receive information will only take place within the framework of the relevant laws or if we are obliged to do so by a court decision. The YOUCAT Foundation and any service companies commissioned by it are contractually bound to secrecy and compliance with the provisions of the Federal Data Protection Act.
2.1 Access Data/Server Logfiles
The YOUCAT Foundation (or its web space provider) collects data (so-called server log files) about every access to the offer for organizational and technical reasons. The access data includes, among other things: Name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. The YOUCAT Foundation uses the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, the YOUCAT Foundation reserves the right to check the log data subsequently if there is a justified suspicion of illegal use based on concrete evidence. The server log files are stored separately from other personal information on secure systems. No conclusions are drawn about individual persons.
2.2 Contact us
When contacting the YOUCAT Foundation (for example via contact form or e-mail), the user's details are stored for the purpose of processing the request and in the event that follow-up questions arise.
2.3 Comments and Posts
When users leave comments on the blog or other posts, their IP addresses are stored. This is done for the safety of the YOUCAT Foundation if someone writes illegal content in comments or contributions (insults, forbidden political propaganda, etc.). In this case, the YOUCAT Foundation itself can be prosecuted for the comment or contribution and is therefore interested in the identity of the author.
With the newsletter we inform you about us and our offers. If you would like to receive the newsletter, we need a valid e-mail address from you as well as information that allows us to verify that you are the owner of the given e-mail address or that the owner agrees to receive the newsletter. Further data will not be collected. These data will only be used for sending the newsletter and will not be passed on to third parties. When you register for the newsletter, we save your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an e-mail address and registers for receiving the newsletter without the knowledge of the authorized party. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time. The revocation can take place via a link in the newsletters themselves, in your profile area or by notification to the above contact possibilities.
Cookies are small files that enable the user’s access device (PC, smartphone, etc.) to store specific information relating to the device. They serve on the one hand the user-friendliness of web pages and thus the users (e.g. storage of login data). On the other hand, they serve to collect statistical data on the use of the website and to be able to analyse them in order to improve the offer. Of course, you can also view the website without cookies. If you do not want your computer to be recognized again, you can prevent cookies from being stored on your hard disk by selecting “do not accept cookies” in your browser settings.
The cookie settings can be managed using the following links for the respective browser.
You can also individually manage the cookies of many companies and features used for advertising. Use the corresponding user tools, available at www.aboutads.info/choices/ or www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a so-called "Do-Not-Track function" with which you can specify that you do not want to be "tracked" by websites. When this feature is enabled, your browser tells advertising networks, websites and applications that you do not want to be tracked for behavior-based advertising. Information and instructions on how to edit this function are available from the links below, depending on the provider of your browser:
However, it is pointed out that the use and especially the comfort of use are limited without cookies. The YOUCAT Foundation only stores a session ID in a cookie, which is then used, for example, to assign the shopping basket and to complete the order.
2.6 Opening or creating an account
If you wish us to provide a service or to send you products, we will only collect and store your personal data to the extent necessary for the provision of the service or the performance of the contract. To this end, it may be necessary to pass on your personal data to companies that we use to provide the service or to process the contract. These are, for example, transport companies or other service providers.
Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. The YOUCAT Foundation does not request personal data from children and young people, does not collect them and does not pass them on to third parties.
a) For the execution of purchase contracts (initiation, conclusion, processing, guarantees and reversal), for our services, technical administration, our own marketing purposes and to ensure the correspondence existing between you and us, we collect personal data for the order process as well as for the opening of a customer account, which include in detail: Name, contact details, payment details, e-mail, phone number. For business customers, the company name, department and VAT ID are also stored. This VAT ID is checked by the YOUCAT Foundation at the Federal Central Tax Office (Bundeszentralamt für Steuern) first without permanent storage for correctness and only saved when registration is completed.
In principle, your data may be passed on to several companies if this is necessary to process our contractual relationship, in particular in the following cases: b) A passing on always takes place for the purpose of the delivery to the dispatch enterprise assigned by us for this. The transfer only includes such data as are necessary for sending the goods. c) If payment services are used for the payment transaction (e.g. Paypal, Visa, Mastercard etc.), your data will be passed on to the payment intermediaries used. The same applies with regard to the credit institutions charged with the payment. d) In the event of payment disruptions, a claim may be assigned to a collection agency. Information can also be sent to credit agencies. The transfer of the personal data required for this will take place if you have not provided a service owed despite the due date, have received two written reminders after the due date of the claim, lie four weeks between the first reminder and the transfer and you have not disputed the legality of the claim. We will inform you in good time before sending it to the credit agency. The data passed on may be used by the service providers exclusively for the purpose of their passing on.
2.7 Integration of third-party services and content
It may happen that third party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated within this online offer. This always presupposes that the providers of this content (hereinafter referred to as "third party providers") are aware of the IP address of the users. Because without the IP address they could not send the content to the browser of the respective user. The IP address is therefore required for the display of this content. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. However, we have no influence on this if the third party providers store the IP address, e.g. for statistical purposes. As far as we know, we inform the users about this.
2.7.1 Using Facebook Social Plugins
This site uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins can be identified by one of the Facebook logos (white "f" on blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and the appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/. When a user accesses a website on this site that contains such a plugin, his browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. The provider therefore has no influence on the extent of the data that Facebook collects with the help of this plugin and therefore informs users according to their level of knowledge: By integrating the plugins, Facebook receives information that a user has called up the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for the protection of the privacy of the users, can be found in the Facebook data protection information: https://www.facebook.com/about/privacy/. If a user is a Facebook member and does not want Facebook to use this offer to collect data about him or her and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting the website. It is also possible to block Facebook social plugins with add-ons for your browser, for example with the "Facebook Blocker".
The controller has integrated components of the Instagram service on this website. Instagram is a service that can be qualified as an audiovisual platform that allows users to share photos and videos and to redistribute such data on other social networks.
Instagram's services are operated by Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this website is accessed, which is operated by the controller and on which an instagram component (Insta button) has been integrated, the Internet browser on the person's information technology system is automatically prompted by the respective instagram component to download a representation of the corresponding component of instagram. In the course of this technical procedure, Instagram is informed about which specific subpage of our website is visited by the person concerned.
If the person concerned is logged in to Instagram at the same time, Instagram recognizes which specific subpage the person concerned visits with each visit to our website by the person concerned and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned to the person's Instagram account by Instagram. If the person concerned presses one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the person concerned and stored and processed by Instagram.
Instagram receives information via the Instagram component that the person concerned has visited our website whenever the person concerned is logged in to Instagram at the same time as accessing our website, regardless of whether or not the person concerned clicks on the Instagram component. If the person concerned does not want such information to be transmitted to Instagram, they can prevent the transmission by logging out of their Instagram account before accessing our website.
188.8.131.52 FACEBOOK REMARKETING
We would like to present our users in this online offer advertising tailored to their interests or special offers ("interest-based advertising") and limit the frequency of the display of certain advertising. For this purpose, we use Facebook's Website Custom Audiences tool and the Facebook pixel. The Facebook pixel is a Javescript code that sends the following data to Facebook Ireland Ltd, Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"): - HTTP header information (including IP address, web browser information, page location, document, web page URL and web browser user agent, and day and time of use); - Pixel-specific data; this includes the pixel ID and Facebook cookie data, including your Facebook ID (used to link events to a specific Facebook advertising account and associate them with a Facebook user); - Additional information about the visit and standard and custom data events. We use the following user-defined data events: o Content searched for and viewed at product level; o Product has been placed in the shopping cart; o Introduction of a checkout in the ordering process; and o Completion of the ordering process. Facebook uses the hashed user-specific Facebook ID (included in the Facebook cookie) to automatically check whether the data transmitted by the Facebook pixel can be assigned to a Facebook user. If no Facebook cookie is stored in your browser, it will not be assigned to any user group designated as "Custom Audience".
If the Facebook ID contained in the Facebook cookie can be assigned to a Facebook user, Facebook assigns this user to a "custom audience" according to the rules we have defined, provided that the applicable criteria are met. We use the information obtained in this way for the playout of ads on Facebook ("Facebook Ads"). However, ads are only displayed for a "Custom Audience" size of 20 or more different users - no conclusions can be drawn about the properties of the individual users from the ad placement. The assignment to a "Custom Audience" takes place for a maximum of 180 days. This period begins again if you visit our website again and you comply with the same "Custom Audience" rules. Facebook may associate your visit to our site and related activities with your Facebook account. This is not possible for us. Facebook merely provides us with statistical information about the use of our website via audience insights. Facebook shares your information with Facebook Inc, Facebook 1 Hacker Way Menlo Park, CA 94025, USA and uses your information to improve the quality of its advertising, including improving the optimization algorithm used by Facebook to display Facebook ads and the news feed ranking. Right of objection: If you wish to object to the use of Facebook Website Custom Audiences, please click here. An opt-out cookie is then set that prevents the transmission of data via the Facebook pixel.
This opt-out cookie has an essentially unlimited duration of effect. Please note, however, that the Opt-Out function is device- or browser-related and only applies to the device or browser currently in use. If you use several devices or browsers, you must opt-out on each individual device and in each browser used. If you delete all cookies in your browser, a contradiction may also no longer be taken into account and must be reclaimed by you.
Newsletter2Go is the email marketing software used. This means your information is transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and from using it for purposes other than sending email. Newsletter2Go is a certified German email marketing software provider, working in accordance with the European directive 95/46, as well as the German Federal Data Protection Act (BDSG).
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the United States. In case of activation of IP anonymization on this website, Google will, however, truncate your IP address beforehand within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing the website operator with other services relating to website and Internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be associated with any other data held by Google. You may stop the use of your data with this button google analytics at the start of this website. We inform you that google analytics is using IP anonymization in this website.
2.7.5 GOOGLE TAG MANAGER
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tool Tag Manager itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
2.7.6 GOOGLE ADS
The person responsible for processing has integrated Google Ads on this website. Google Ads is an Internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google Advertising Network. Google Ads allows an advertiser to pre-define certain keywords that will only display an ad in Google's search engine results when the user uses the search engine to retrieve a keyword relevant search result. On the Google Network, ads are distributed to thematically relevant websites using an automatic algorithm and using the previously defined keywords.
The operator of Google Ads services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Ads is to advertise our website by displaying interest-relevant advertising on the websites of third parties and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping basket of an online shop system, have been called up on our website. The conversion cookie enables both us and Google to track whether a person who has accessed our website via an ad has generated revenue, i.e. completed or cancelled a purchase of goods. The data and information collected through the use of the conversion cookie is used by Google to generate visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via ads, i.e. to determine the success or failure of the respective ads and to optimize our ads for the future. Neither our company nor other Google-Ads advertisers receive information from Google that could identify the person concerned.
The conversion cookie is used to store personal information, such as the websites visited by the person concerned. Personal data, including the IP address of the Internet connection used by the person concerned, is therefore transferred to Google in the United States of America each time he or she visits our Internet pages. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
The person concerned can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Ads can be deleted at any time via the Internet browser or other software programs.
2.7.7 GOOGLE REMARKETING
The data controller has integrated Google Remarketing services into this website. Google Remarketing is a feature of Google Ads that allows a company to display advertisements to Internet users who have previously visited the company's website. The integration of Google Remarketing therefore allows a company to create user-related advertisements and consequently to display interest-relevant advertisements to the Internet user.
The operator of Google Remarketing services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing allows us to display advertisements on the Google Advertising Network or on other websites that are tailored to the individual needs and interests of Internet users. Google Remarketing places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google will be able to recognize the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Every time a website on which the Google Remarketing service has been integrated, the person's Internet browser automatically identifies itself with Google. As part of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user's surfing behaviour, which Google uses, among other things, to display interest-relevant advertising. The cookie is used to store personal information, such as the web pages visited by the person concerned. Personal data, including the IP address of the Internet connection used by the person concerned, is therefore transferred to Google in the United States of America each time he or she visits our Internet pages. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
The person concerned can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
The controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, music videos, trailers or videos produced by users themselves can be called up via the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about In the course of this technical procedure, YouTube and Google are informed which specific subpage of our website is visited by the person concerned.
If the person concerned is logged on to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned visits by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned. YouTube and Google receive information via the YouTube component that the person concerned has visited our website whenever the person concerned is logged on to YouTube at the same time as accessing our website; this happens regardless of whether the person concerned clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desired by the person concerned, this can prevent the transmission by logging out of their YouTube account before calling up our website.
The data protection regulations published by YouTube, which can be accessed at https://www.google.com/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google. The legal basis for processing is Art. 6 para. 1 lit. f GDPR.
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to: Communicate with you; Screen our orders for potential risk or fraud; and When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
Salesforce is the controller of your Personal Data as described in this Privacy Statement, unless expressly specified otherwise.
More information about Salesforce privacy: https://www.salesforce.com/company/privacy/full_privacy/.
3. Opt-out, changes, corrections and updates
Furthermore, your personal data will not be passed on to third parties unless we are legally obliged to do so or you have given us your permission to do so. The YOUCAT Foundation will not use the customer’s data for advertising, market or opinion research purposes without the customer’s consent.
Personal data that you provide to us for the processing of order transactions may be stored for up to 10 years for commercial and tax reasons.
Our websites are protected against damage, destruction and unauthorized access by state-of-the-art technical measures. Unfortunately, we must finally point out that data transmission on the Internet has security gaps and cannot be completely protected against access by third parties. The use of our website and all other internet communication with us is therefore at your own risk.
The YOUCAT Foundation reserves the right to change security and data protection measures if this becomes necessary due to technical developments. In these cases, the notes on data protection will also be adapted accordingly. Please therefore note the current version of the YOUCAT Foundation gGmbH data protection declaration.
You will receive information about your data stored by us free of charge at any time without stating any reasons. You can block, correct or delete your data collected from us at any time. You can revoke your consent to the collection and use of data given to us at any time without stating any reasons, unless there is a legal obligation to store such data. Please contact us: The data protection officer Dr. Karsten Kinast and send an e-mail to firstname.lastname@example.org.
April 17, 2018