Effective Date: November 21, 2023

Protecting your data and ensuring the security of information while using our website is very important to us. We want to inform you about the personal data we collect when you visit our website and why we use it.

§ 1 Controller and Scope

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

YYachts GmbH
Represented by its Managing Director, Mr. Christian Möller
Nordstr. 1, D-17493 Greifswald
Phone: +49 (0) 3834 5858 77-0
Fax: +49 (0) 3834 58587-77
Email: info@yyachts.de

This privacy policy applies to the online offer of YYachts GmbH, as well as to other online appearances such as Facebook, Instagram, and LinkedIn.

§ 2 Data Protection Officer

If you wish to exercise the rights of the data subjects as outlined in § 11 of this privacy policy (e.g., right of access, right to erasure, etc.), requests should be sent exclusively to datenschutz@msyachtbau.com or by mail to:

YYachts GmbH
Data Protection
Nordstr. 1, D-17493 Greifswald

§ 3 What Are Personal Data?

Personal data are data that relate to an identified or identifiable natural person (data subject). This includes information such as your name, address, phone number, date of birth, or email address. Information that does not allow (or only with disproportionate effort) identification of a person, such as anonymized information, is not considered personal data.

§ 4 General Information on Data Processing

a) Scope

We collect and use personal data of our users only to the extent necessary to provide a functional website. We use your personal data to offer the information, products, and services we provide, to respond to your inquiries, and for the operation and improvement of our website and applications.

Collection and use of personal data only occur based on a legal basis under the GDPR, such as with the user’s consent. Additional details on specific consents can be found in § 5 of this privacy policy in connection with the respective processing.

No other use of your personal data is made. The transmission of your personal data to third parties or the use of your data for advertising purposes without your consent is not carried out, except in the cases described below, unless we are legally obligated to transmit the data.

b) Legal Basis

If we obtain consent from the data subject for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis for processing the personal data. In the case of processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing necessary for the performance of pre-contractual measures. When the processing of personal data is necessary to comply with a legal obligation, Article 6(1)(c) of the GDPR serves as the legal basis.

When processing is necessary to protect vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis. If processing is necessary for the protection of legitimate interests and the interests, rights, and freedoms of the data subject do not override, Article 6(1)(f) of the GDPR serves as the legal basis for processing.

c) Deletion of Data and Retention Period

Personal data of the data subject are deleted as soon as the purpose of their collection is achieved. Further retention may occur if required by European or national legislators in regulations, laws, or other provisions to which the controller is subject. Deletion also occurs when the retention period required by these norms expires, unless there is a need to continue retaining the data for the execution or conclusion of the contract.

§ 5 Specific Processing Activities

If you wish to use the services offered on our website, such as subscribing to a newsletter, additional data is required. Details can be found below in the description of the specific data processing activities. In particular, personal data is used as follows:

a) Provision of Websites and Creation of Log Files

Each time you access our websites, our system automatically collects data and information from the requesting computer. The following data is collected:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Amount of data transferred
• Message indicating whether the retrieval was successful
• Data identifying the browser and operating system
• Website from which access was made

Log files contain IP addresses or other data that could allow for the attribution to a user. This could occur, for example, if the link to the website from which the user accesses our site or the link to the website to which the user switches contains personal data.

The data is also stored in the log files of our system. No aggregation of these data with other personal data of the user is performed.

The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.

Storage in log files takes place to ensure the functionality of the website. Additionally, the data is used for the optimization of the website and to ensure the security of our IT systems. No evaluation of the data for advertising purposes is performed.

These objectives also constitute our legitimate interest in the processing of data according to Article 6(1)(f) of the GDPR.

The data is deleted as soon as it is no longer needed for the purpose of collection. This happens at most after 30 days. The collection of data for the provision of the website is strictly necessary for the operation of the website. Therefore, it is not possible for the user to object.

b) Newsletter

On our website, it is possible to subscribe to free newsletters. When subscribing to the newsletter, the data from the registration form is sent to us. To be able to subscribe to our email newsletter service, we need, in addition to your consent, at least your email address to which the newsletter will be sent. Any additional information is optional and is used to address you personally and to customize the content of the newsletter, as well as to address any requests regarding the email address. Your decision to provide us with this data is entirely voluntary. Without this data, we cannot send you our newsletters.

Additionally, during the registration process, the following data is collected and deleted after 30 days:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Amount of data transferred
• Message indicating whether the retrieval was successful
• Data identifying the browser and operating system
• Website from which access was made

We use the double opt-in procedure for sending newsletters, meaning that we will only send the newsletter after you have previously confirmed your registration via a confirmation email sent for this purpose with the included link. This ensures that only you, as the owner of the provided email address, can register to receive the newsletter. Your confirmation must be made promptly after receiving the confirmation email; otherwise, your newsletter registration will be automatically deleted from our database.

The collection of the email address and additional data is carried out solely for the purpose of sending the newsletter. In case of unsubscription, only the data necessary to prove the consent and its revocation will be retained.

The legal basis for sending the newsletter is Article 6(1)(a) of the GDPR, which allows processing of personal data based on consent.

Your subscription to the newsletter can be canceled at any time via the link included in each newsletter email or by sending a request to datenschutz@msyachtbau.com. After unsubscribing, the data will be immediately deleted.

c) Contact Form and Information Requests

To contact us via our website, we offer a contact form. Filling out this form requires the following data (name, email address, message) to be able to respond to your request. Any additional information is optional and is used to respond more fully and personally. The data provided through the contact form is used solely to respond to your request.

The legal basis for processing personal data is Article 6(1)(f) of the GDPR. Our legitimate interest is based on the ability to adequately and comprehensively respond to received inquiries.

The data is deleted as soon as it is no longer needed for the purpose of collection. In the case of personal data provided via the contact form, deletion takes place once the conversation is concluded, meaning once the final result of the inquiry is clarified.

d) Protection Against Automated Attacks

To protect ourselves against automated attacks on our website, we use protection services that evaluate the data transmitted automatically to detect potential threats and prevent unauthorized access to our website.

The legal basis for processing personal data is Article 6(1)(f) of the GDPR. Our legitimate interest is to protect our website and prevent attacks.

Data is stored only for the time necessary to protect our website. Data deletion occurs as soon as the threat is mitigated.

e) Cookies and Web Analytics Tools

To enhance the functionality of our websites, we use cookies and web analytics tools. Here are the details on the cookies and tools we use and how you can manage or disable cookies.

Cookies

Cookies are text files stored on your device and containing information about your use of the website. We use cookies to make our website more user-friendly and to tailor our content to your preferences. You can configure your browser not to store cookies or to notify you when cookies are sent. However, disabling cookies may affect the functionality of our website.

Session Cookies

Session cookies are used to temporarily store information during your visit to our website, such as the contents of a shopping cart. These cookies are automatically deleted at the end of the browsing session.

Persistent Cookies

Persistent cookies are stored for a longer period and allow your browser to be recognized on subsequent visits. These cookies are used, for example, to remember your preferences.

Google Analytics

We use Google Analytics to analyze the use of our website. Google Analytics uses cookies to collect information about website usage. The information collected is transmitted to Google and stored on servers in the United States. It is possible to prevent data collection by configuring the browser properly or by installing a browser add-on.

The legal basis for using cookies and web analytics tools is Article 6(1)(f) of the GDPR. Our legitimate interest is to improve the functionality and quality of our website.

Data is stored until cookies are deleted or the web analytics tool is deactivated.

§ 6 Rights of Data Subjects

As a data subject, you have the following rights under the GDPR:

• Right of Access: You may request information about your personal data that we process.
• Right to Rectification: You may request the correction of inaccurate personal data.
• Right to Erasure: You may request the deletion of your personal data if they are no longer necessary for the purpose for which they were collected.
• Right to Restriction of Processing: You may request the restriction of the processing of your personal data under certain circumstances.
• Right to Data Portability: You may request the transfer of your personal data to another controller in a structured, commonly used format.
• Right to Object: You may object to the processing of your personal data in certain cases.

To exercise these rights, you can contact us at the contact details provided in § 2.

§ 7 Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time to adapt to changes in legislation or our services. The privacy policy in effect at the time of your visit to the website will apply.

§ 8 Links to Other Websites

Our websites may contain links to other websites. We have no control over the content of these websites and assume no responsibility for their content or privacy practices. We recommend reading the privacy policies of these external websites.

§ 9 Contact Information

For any questions regarding this privacy policy, you can contact us at the following addresses:

YYachts GmbH
Data Protection
Nordstr. 1, D-17493 Greifswald
Email: datenschutz@msyachtbau.com