Privacy Policy
As of: April 2026
1. Controller and Data Protection Officer
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Yaska UG (haftungsbeschränkt)
Jahnstr. 3a
92245 Kümmersbruck
Germany
Phone: +49 9621 8979 553
E-mail: info@yaska-germany.de
Represented by the Managing Director Sebastian Krötzsch
A data protection officer has not been appointed as the statutory requirements for this are not met.
2. General Information on Data Processing
As a rule, we only process personal data of our users to the extent required to provide a functional website as well as our content and services. Processing generally only takes place with the user's consent or where such processing is permitted by statutory provisions.
Depending on the processing, the legal bases are, in particular, Art. 6(1)(a) (consent), (b) (performance of a contract), (c) (legal obligation) and (f) (legitimate interest) GDPR.
3. Provision of the Website & Server Log Files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device (server log files). The following data is collected:
- User's IP address (truncated after a short time)
- Date and time of access
- Page / URL accessed
- Browser type and version
- Operating system
- Referrer URL
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of our website. The log files are deleted after 30 days at the latest, unless longer storage is required for evidentiary purposes in the event of security-related incidents.
4. Cookies
Our website uses cookies. Cookies are small text files that are stored in the user's browser.
Technically necessary cookies are required to ensure the operation of the website (shopping cart, login, language selection). The legal basis is Art. 6(1)(f) GDPR and § 25(2) no. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act).
Non-essential cookies (e.g. for reach measurement) are only set if the user has given consent via our consent tool (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). Consent may be withdrawn at any time with effect for the future.
5. Contact via E-mail or Contact Form
If you contact us by e-mail or via our contact form, your details will be stored for processing the enquiry and in case follow-up questions arise. The legal basis is Art. 6(1)(b) GDPR (performance of a contract / pre-contractual measure) or (f) GDPR (legitimate interest in responding to the enquiry).
Data from contact enquiries will be deleted as soon as it is no longer required for the purpose of its collection, at the latest upon expiry of statutory retention obligations.
6. Customer Account
To set up a customer account, we process the following mandatory information: salutation, first and last name, address, e-mail address and password. Optional information is marked as such.
The legal basis is Art. 6(1)(b) GDPR. The customer account can be deleted at any time by sending an e-mail to info@yaska-germany.de, provided that no commercial or tax law retention obligations apply.
7. Order Processing
To process your order, we process the personal data provided during the order process (in particular name, address, e-mail, phone, order data, payment data). Processing takes place to perform the purchase contract concluded with you (Art. 6(1)(b) GDPR) and to fulfil tax law obligations (Art. 6(1)(c) GDPR in conjunction with § 147 AO — German Fiscal Code, § 257 HGB — German Commercial Code).
We pass on your data to the shipping service providers commissioned with the delivery, to the extent necessary for the delivery. Your payment data is passed on to the credit institution or payment service provider selected by you.
8. Payment Service Providers
8.1 PayPal
If you select PayPal as the payment method, the data collected during the order process is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for payment processing. The legal basis is Art. 6(1)(b) GDPR. PayPal privacy information: paypal.com/de/webapps/mpp/ua/privacy-full.
8.2 Mollie (credit card, Klarna, other payment methods)
For the processing of credit card payments, Klarna (purchase on account / instalment purchase) as well as other payment methods offered in the order process, we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands („Mollie“).
If you select a payment method processed via Mollie, the data required for payment processing (in particular name, address, e-mail, order data and payment data) will be transmitted to Mollie. The legal basis is Art. 6(1)(b) GDPR.
If you select Klarna as the payment method via Mollie, your data will be forwarded by Mollie to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Within the scope of the purchase on account, Klarna carries out a credit check (Art. 6(1)(f) GDPR; legitimate interest in securing against payment default risk).
Privacy information: Mollie at mollie.com/de/privacy, Klarna at klarna.com/de/datenschutz.
9. Newsletter
On our website, we offer the option to subscribe to a free newsletter. Upon registration, your e-mail address will be used for our own advertising purposes until you unsubscribe from the newsletter.
Registration is carried out using the so-called double opt-in procedure: after registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary to ensure that no one can register using someone else's e-mail address. Newsletter registrations are logged.
For the dispatch of the newsletter we use the service [Newsletter provider, e.g. CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede — please specify]. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR.
You can withdraw your consent to the newsletter dispatch at any time and unsubscribe from the newsletter, for example via the unsubscribe link in each newsletter. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 7(2) no. 3 UWG (German Act against Unfair Competition).
10. Web Analytics with Google Analytics 4
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
Google Analytics uses cookies and similar technologies to analyse the use of the website. The information generated in this way is usually transmitted to a Google server in the USA and stored there. Within GA4, IP anonymisation is activated by default; your IP address is truncated before storage.
Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you can grant or withdraw via our cookie consent tool. For transfers to the USA, Google relies on the EU-US Data Privacy Framework.
Further information on data processing by Google can be found at policies.google.com/privacy.
11. Review System / Trusted Shops or similar
If you are asked for a review following an order, we obtain your prior consent during the order process. Data processing is based on your consent pursuant to Art. 6(1)(a) GDPR and can be withdrawn at any time.
12. Hosting
Our website is operated on servers of an external hosting service provider within the European Union. The data required to provide the website (in particular server log files) is processed exclusively for the purpose of providing the website. The legal basis is Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the hosting service provider pursuant to Art. 28 GDPR.
13. Your Rights as a Data Subject
You have the following rights vis-à-vis us:
- Right of access regarding the personal data processed about you (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw a consent given with effect for the future (Art. 7(3) GDPR)
To exercise your rights, please contact info@yaska-germany.de.
14. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data (Art. 77 GDPR). The competent authority for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
www.lda.bayern.de
15. Data Security
Our website uses SSL/TLS encryption. This protects your transmissions to us from being read by third parties. You can recognise the encrypted connection by the „https://“ in your browser's address bar.
16. Currency and Changes to this Privacy Policy
This Privacy Policy is currently valid and has the status indicated above. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version can be accessed at any time on this page.
As of: April 2026