Privacy Policy
1. Identity and contact details of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) of the European Union and other data protection provisions is:
YEARS GmbH Landwehrstraße 70A 80336 Munich Germany info@years.co www.years.co
2. Contact details of the data protection officer
The appointed data protection officer is:
DataCo GmbH Dachauer Str. 65 80335 Munich Germany +49 89 7400 45840 www.dataguard.de
3. General information on data processing
Scope of the processing of personal data
As a rule, we process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Personal data of our users is regularly processed only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for technical reasons and the processing of the data is permitted by law.
Legal basis for data processing
Where we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.
For the processing of personal data required to perform a contract, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Where the processing of personal data is necessary to comply with a legal obligation, Art. 6 (1) sentence 1 lit. c GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or of a third party, and the fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis.
Data erasure and storage period
The personal data of the data subject is erased or blocked as soon as the purpose of storage no longer applies. Data may be stored beyond that where this is provided for by European or national legislation.
4. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights:
- Right of access (Art. 15 GDPR): You may request confirmation from the controller as to whether personal data concerning you is being processed.
- Right to rectification (Art. 16 GDPR): You have the right to rectification and/or completion of the data if the personal data processed about you is inaccurate or incomplete.
- Right to restriction of processing (Art. 18 GDPR): Under certain conditions you may request that the processing of your personal data be restricted.
- Right to erasure (Art. 17 GDPR): You may request the erasure of your personal data if one of the legal grounds applies.
- Right to data portability: You have the right to receive your personal data in a structured and machine-readable format.
- Right to object: You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority if you consider that the processing infringes the GDPR.
5. Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
- Browser type and version used
- The user's operating system
- Date and time of access
Storage in log files takes place to ensure the functionality of the website. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR.
6. Use of cookies
When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. On your first visit you can choose whether to allow cookies in general or which individual additional functions you wish to select.
Where cookies that are not technically necessary are set, this is done on the basis of your express consent pursuant to Section 25 (1) TTDSG in conjunction with Art. 6 (1) sentence 1 lit. a and Art. 7 GDPR. You may withdraw your consent at any time.
7. Newsletter
On our website you can subscribe to a free newsletter. The following data is collected:
- Email address
- Surname and first name
- Date and time of registration
The legal basis is Art. 6 (1) sentence 1 lit. a GDPR. The subscription can be cancelled at any time via the unsubscribe link in every newsletter.
8. Contact by email
You can contact us via the email address provided on our website. The data is used exclusively to process the conversation. The legal basis is Art. 6 (1) lit. f GDPR.
Consent may be withdrawn, or an objection to data storage raised, by email to info@years.co.
9. Use of company profiles on professional networks
We use company profiles on professional networks:
LinkedIn: LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
Further information can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
10. Hosting
The website is hosted on servers of a service provider commissioned by us (Digital Ocean). The website's server is located geographically in the European Union (EU) or the European Economic Area (EEA). The legal basis is Art. 6 (1) sentence 1 lit. f GDPR.
11. Registration
We offer users the option of registering by providing personal data. The following data is collected:
- Email address
- Surname and first name
- Address
- Telephone/mobile number
- Date and time of registration
The legal basis is Art. 6 (1) sentence 1 lit. a GDPR or Art. 6 (1) sentence 1 lit. b GDPR. Deletion of a user account can be requested via info@years.co.
12. Use of plugins
Use of MailChimp
We use the service provider MailChimp of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, to send our newsletter. When you register for the newsletter, the data you enter is transmitted to MailChimp and stored there. The legal basis is Art. 6 (1) lit. a GDPR.
Further information: https://MailChimp.com/legal/privacy/
Use of Google Analytics
We use Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have activated IP address anonymisation. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.
You can prevent collection by Google by installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.
Further information: https://policies.google.com/privacy?hl=en
Risk notice
Your personal data is also transferred to the USA in this process. There is no adequacy decision pursuant to Art. 45 (3) GDPR for the USA. With Google we have concluded guarantees in the form of standard data protection clauses pursuant to Art. 46 (2) lit. c GDPR.
This privacy policy was created with the support of DataGuard.
YEARS GmbH Joachimsthaler Straße 34 10719 Berlin Email: info@years.co Phone: +49 3222 1094101