Yamo logo

Privacy policy

1. General This website was created and published by yamo food GmbH, based in Germany, Nymphenburger Str. 1, 80335 Munich, HRB 243321, VAT ID: DE314599497. Accordingly, we are responsible for the collection, processing and use of your personal data and the lawful data processing. Responsible for data processing on this website in terms of the Basic Data Protection Regulation (GDPR) is Tobias Gunzenhauser, Zählerweg 3, 6300 Zug, CH. Consequently, we consider it a matter of course to comply with the legal requirements of German and European data protection law, in particular the Federal Data Protection Act (BDSG-D) and the Telecommunications Telemedia Data Protection Act (TTDSG) as well as the EU General Data Protection Regulation (EU GDPR). In the following, we would like to inform you about how we treat your personal data. Please note that the information contained below may be reviewed and changed from time to time. We therefore recommend that you review this privacy policy regularly. While you are visiting our website, your personal data will be collected and used by us to the following extent and for the following purposes: 2. What data does yamo process? a) When you visit our website, our servers temporarily store each access in a log file. The following data is stored by us: - IP address of the requesting computer - Date and time of access - Name and URL of the retrieved data - Website from which our domain was accessed - Operating system of your computer and the browser you use - Country from which our website is accessed The collection and processing of this data is generally anonymized without reference to persons for the purpose of enabling the use of the website (connection establishment), ensuring system security and stability on a permanent basis and optimizing the Internet offering, as well as for internal statistical purposes. The aforementioned information is not linked to or stored with personal data. Only in the event of an attack on the network infrastructure of our website or a suspicion of other unauthorized or abusive website use will the IP address be evaluated for the purpose of clarification and defense and, if necessary, used in the context of criminal proceedings to identify and take civil and criminal action against the users concerned. Our legitimate interest in data processing within the meaning of Art. 6 (1) lit. f EU-DSGVO lies in the purposes described above. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Insofar as the data is stored in log files, these are deleted after seven days at the latest. Storage beyond this period is possible. In this case, we will delete or alienate your IP addresses so that an assignment to you is no longer possible. b) When subscribing to our newsletter On our website you can register for our newsletter. The following data will be requested for the registration: - E-mail address After entering the above information, you can trigger the registration for our newsletter. We use the double opt-in mechanism for this. After sending the registration, you will receive an e-mail from us, which contains a confirmation link. To definitely register for the newsletter, you must confirm this link. You can revoke your consent at any time (see "Contact"). You will also find an unsubscribe link in all newsletter emails. We use email marketing services from ActiveCampaign to send our newsletter. Our newsletter may contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1 pixel, invisible graphic that is associated with the user ID of the respective newsletter subscriber. For each newsletter sent, there is information about the address file used, the subject and the number of newsletters sent. Furthermore, it is possible to see which addresses have not yet received the newsletter, to which address it was sent and for which addresses the dispatch failed. In addition, we collect the opening rate including information about which addresses have opened the newsletter and unsubscribed. We use this data for statistical purposes and to optimize the newsletter in terms of content and structure. This allows us to better tailor the information and offers in our newsletter to the individual interests of the recipients. The tracking pixel is deleted when you delete the newsletter. To prevent the use of the web beacon in our newsletter, please set your mail program so that no HTML is displayed in messages, if this is not already the case by default. The legal basis for the processing of your data for this purpose is your consent according to Art. 6 para. 1 lit. a EU-DSGVO. c) When participating in "Testers Wanted" campaign We use the WordPress.org digital platform m to organize our campaigns. When registering for our "Testers Wanted" campaign, WordPress.org is used to submit the following data. - Name - E-mail address - Birthday of your child d) When participating in the "Test for free" program As part of the participation in the "Test for free" campaign, we collect the following data: - Name, first name - Address - E-mail address - Account data (IBAN and BIC) - Receipt We need this data to determine whether you are eligible to participate and to refund the purchase price after verification of the submitted data (including receipt). If you do not provide us with this data, participation in the promotion is not possible. We may use your email address to write to you if there are any problems with the promotion and we need or want to inform you about them. We will not use the email address to send you advertising about other promotions or products unless you have given us your express consent to do so. Your name and address data are used exclusively for the reimbursement of the purchase price and the above-mentioned purpose (determination of eligibility). We also need this data to be able to carry out the promotion. Without providing this data, the refund of the purchase price is not possible. We only process data that we collect for the purposes for which it was collected. Processing for other purposes is only considered if the legal requirements of Art. 6 (4) DSGVO are met. We process your personal data as long as it is necessary for the purpose. This means that after the end of the promotion, all personal data will be deleted within 30 days, unless there are legal retention obligations (for example, commercial or tax retention obligations) to the deletion. This is regularly the case when we have refunded the purchase price to you. The legal storage obligation is usually a maximum of 10 years. After expiration of the corresponding retention obligation, we will check whether the processing of your data is still necessary. If not, the data will be deleted. e) When opening a customer account In order to make purchases in the online store and to be supplied with the services you require, you must open a customer account. Certain services (such as information about the next delivery date, online cancellation of a subscription) can only be obtained by registered customers. For the purpose of processing your orders in the online store or the provision of the services ordered by you, we collect the following data when registering for a customer account (* mandatory entries): - First and last name* - E-mail address* - Password* - Birthday of your child* The data in the customer account can be viewed and changed at any time. You can also request the complete deletion of your customer account by submitting a corresponding deletion request (see under "Contact"). The legal basis for the processing of your data for this purpose lies in the consent you have given us according to Art. 6 para. 1 lit. a EU GDPR. f) Verification of your email address We use the service of Emailable to check if your email address exists. For this purpose we share the following data: - E-mail address The legal basis for the processing of your data for this purpose is your consent pursuant to Art. 6 (1) lit. a EU-DSGVO. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected, see section 10 of the privacy policy. g) When configuring your individual yamo plan In order to customize your yamo plan to meet your child's needs and deliver products you request, you provide us with various information about your child. For the purpose of customizing your yamo plan, we collect and process the following data: - Your child's first and last name - Age of your child - Information about your child's taste preferences - Information about your child's intolerances and allergies The data will only be processed by yamo and will not be passed on to third parties. You can view and adjust the data at any time in your customer account. If you request the complete deletion of your customer account, the information for the individualization of your yamo plan will also be deleted. Since the information we request about your child's intolerances and allergies is special personal data, you must provide us with this information in accordance with Art. 9 (2) lit. a) DSGVO expressly consent to the processing of this data. In order to provide you with comprehensive information, we therefore provide you with our privacy policy before the payment process. The legal basis for the processing of your data for this purpose lies in the consent to be expressly given by you before the start of the configuration in accordance with Art. 9 (2) a) DSGVO. h) When shopping in the online store If you would like to take out a subscription in our online store, we require various data for the processing of the contract. You must provide the following data: - First and last name - E-mail address - Billing address (and if different delivery address) - Phone number - Information within the framework of the payment (depending on the selected payment method) - Login data The collection of the telephone number is used to provide you (if necessary) after-sales services or to contact you if there should be any queries about your order. The provision of further data is voluntary. If you are registered and have a customer account, we store your data for the next purchase. In connection with your orders in the online store, with the processing of your orders and the provision of the services requested by you, we collect, store and process the following additional data: - Information about the ordered products - Data about your orders Unless otherwise stated in this privacy policy or you have not separately consented to this, we will use the aforementioned data only to process the contract, namely to process your orders, deliver the ordered products and ensure correct payment. The legal basis for processing your data for this purpose is the fulfillment of a contract according to Art. 6 para. 1 lit. b EU-DSGVO. i) Payment service provider yamo offers various payment options, such as prepayment, payment by credit card, payment by PayPal and payment on account. For this purpose, payment data may be transmitted to payment service providers with whom we cooperate. For more information on the processing of personal data by payment service providers, please refer to their privacy policies. Depending on the selected payment method, you will be asked to enter different additional information. Regarding the processing of your information by these third parties, we ask you to also read the terms and conditions as well as the privacy policy of your payment provider. The legal basis for processing your data for this purpose is the fulfillment of a contract according to Art. 6 para. 1 lit. b EU-DSGVO. Payment by invoice If you choose the payment option purchase on account, our payment service providers powerpay (MF Group, am Bohl 6, CH-9004 St. Gallen) will check your creditworthiness. In order to identify you and to check your creditworthiness, your name, address and date of birth will be transmitted. You can find more information about powerpay in the privacy policy of powerpay. The legal basis for processing your data for this purpose is the fulfillment of a contract according to Art. 6 para. 1 lit. b EU-DSGVO. j) Storage of your personal data in our CRM system The personal data mentioned in the previous sections will be stored and processed centrally in our CRM system if you have consented to this. The data in the central CRM system may be evaluated by us for advertising purposes, in particular to offer you personalized services or product information, e.g. by using your phone number to inform you about special offers via the service provider Twilio by SMS or WhatsApp. We evaluate the data in the CRM system to improve our products and services. These evaluations may result in user profiles about you. By using the aforementioned website functionalities, you agree that we may store your personal data in our CRM system and evaluate it there for advertising purposes. You agree that user profiles may be created about you in the process. You can revoke your consent to the analysis of your personal data for advertising purposes and the creation of user profiles at any time (see "Contact"). The legal basis for the processing of your data for this purpose is your consent pursuant to Art. 6 para. 1 lit. a EU-DSGVO or, insofar as this is necessary to protect our legitimate interests, pursuant to Art. 6 para. 1 lit. f EU-DSGVO. k) Shipping your orders For the delivery of orders, we work with external shipping service providers (e.g. DHL, UPS, DPD) ) and our warehouse staff. These shipping service providers receive the following data from us for the execution of the respective order: - Names - Delivery address - Phone number The legal basis for the processing of your data for this purpose is your consent according to Art. 6 para. 1 lit. a EU-DSGVO. l) Application process If you apply to us for a vacancy advertised by us, we will only use your applicant data to process your application. The legal basis for this data processing results from Art. 6 para. 1 lit. b DSGVO. We store your personal data upon receipt of your application. If we accept your application, we store your applicant data for a maximum of three years after the termination of the corresponding employment relationship. If we reject your application, we will store your applicant data for up to six months after the rejection of your application, unless you give us your consent to store it for a longer period. 3. Data sharing a) Disclosure of your personal data to third parties We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we share your data with third parties to the extent that this is necessary in the context of the use of the website and the execution of contracts, namely the processing of your orders, the processing of your purchases, the delivery of your ordered products and their payment, for the provision of the services requested by you. The use of the data passed on for this purpose by the third parties is strictly limited to the aforementioned purposes. b) Transfer of your personal data abroad We may transfer your data to third party companies abroad if this is necessary in connection with the processing of your inquiries, the provision of services and marketing campaigns. These third party companies are obligated to maintain your privacy to the same extent as we do. If the level of data protection in a country is deemed to be inadequate within the meaning of the EU General Data Protection Regulation, we will ensure by means of a contract that your personal data is protected at all times in accordance with the EU General Data Protection Regulation. Some of the third-party service providers mentioned in this privacy policy are located in the USA (see under "Tracking Tools" and "Social Plugins"). You can find more information about data transfers to the USA under "Tracking". 4. Use of third-party tools ActiveCampaign yamo uses ActiveCampaign to send our newsletter. You can find more details in the section "When subscribing to our newsletter". Sendgrid yamo uses Sendgrid (part of Twilio) for sending emails that are necessary for the processing of a purchase, e.g. the order confirmation and the shipping confirmation. Twilio yamo uses Twilio for special marketing activities, e.g. to send you notices about special offers via SMS and WhatsApp. Twilio uses cookies as information to link SMS as a conversation in a 4-hour span. Zendesk On this website we use the Customer Relationship Management (CRM) service of the company Zendesk Inc, 989 Market Street #300, San Francisco, CA 94102, USA. The legal basis for the use of this service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in using this service is to be able to answer user inquiries quickly and efficiently. Zendesk only uses your data to forward your requests to us. Your data will not be passed on to third parties. To use Zendesk, you must provide at least one correct email address. The service can also be used pseudonymously. In the course of processing service requests, it may be necessary to collect further data (e.g. first name, last name, address, etc.). The use of Zendesk is optional. If you do not consent to Zendesk collecting your data, we offer you alternative contact options for submitting Service requests by phone or mail. Trustpilot We use the rating portal Trustpilot, which is operated by TrustPilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark. In order to continuously improve our products and service, we offer our customers the opportunity to rate us via this independent portal. The content of these ratings cannot be influenced by us in any way. We create a rating invitation for a part of our customers, which contains a specially generated link to verify the rating. For this purpose, your name, first name, email address and a reference number (internal customer number for unique assignment) are transmitted to Trustpilot. This data is neither used by Trustpilot itself nor passed on to third parties. The submission of a rating is voluntary. In order to submit a rating, it is necessary to open a customer account with Trustpilot. In this case, the terms and conditions and privacy policy of Trustpilot apply. In order to maintain the neutrality and objectivity of the reviews, we have no direct influence on the reviews and cannot delete them. For this purpose, we ask users to contact Trustpilot. We have also integrated one or more Trustpilot widgets into our website. A widget is a function and content element integrated within our online offer that displays variable information. While the corresponding content is displayed within our online offer, it is retrieved from Trustpilot's servers at that moment. In order to establish this data connection with Trustpilot, certain technical data (access data, including the IP address) are transmitted to Trustpilot. Trustpilot may store this information in a cookie in order to track which online offers participating in the Trustpilot rating process are visited by the user. The information may be stored and used for advertising or market research purposes. The legal basis for processing the user's data in the context of integrating the widget, is your consent to process information from our users about the quality of our services, according to Art. 6 para. 1 lit. a. DSGVO. Typeform We use the "Typeform" service to conduct surveys, for example on customer satisfaction or reasons for cancellation of a subscription. This service is provided by TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona ("Typeform"). Zapier To create interfaces between programs and enable automated processes for various applications, we use the cloud service Zapier on our website, which is operated by Zapier Inc, 548 Market St #62411, San Francisco, California 94104, USA. The legal basis for processing the user's data to create interfaces between programs and to enable automated processes for various applications is your consent pursuant to Art. 6 para. 1 lit. a. DSGVO or your explicit consent according to Art. 9 para. 2 lit. a DSGVO." Facebook Connect Facebook Connect is a Facebook feature that allows Facebook users to log in to other websites, apps, and services using their Facebook identity. In doing so, this other service gains access to certain preferences and links stored in Facebook, on which it can base its own offers. More details can be found in Facebook's explanations. We have no influence on the scope of the data collected by Facebook by means of the Facebook login. If you do not want Facebook to collect data about you in connection with your use of our online offer and use it for its own purposes, you should not use the Facebook login. Google Login We offer you the possibility to register or log in with us via your Google account. If you make use of this, we receive the data required for the registration or login. Registration (e.g. e-mail address, name) by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We have no influence on the scope of the data collected by Google by means of the Google login. If you do not want Google to collect data about you in connection with your use of our online service and use it for its own purposes, you should not use the Google login. For more information about the purpose and scope of the collection and the further processing and use of your data by Google, as well as your rights and settings options for protecting your data, please refer to Google's privacy policy. TikTok Account / TikTok Videos We use a TikTok account and can embed videos of the platform "TikTok" of the provider TikTok Inc. 10100 Venice Blvd, Culver City, CA 90232, USA. We point out that TikTok may use its own tracking tools and refer to TikTok's privacy policy. TikTok Privacy Policy: For more information on how we handle user data, please see TikTok's privacy policy at: https://www.tiktok.com/legal/privacy-policy?lang=de. Basis The use of TikTok is based on Art. 6 para. 1 lit. a DSGVO. The use of TikTok is voluntary. We have no influence on the scope of the data collected by TikTok by means of registration. If you do not want TikTok to collect data about you in connection with your use of our online offer and use it for its own purposes, you should not use TikTok. For more information about the purpose and scope of the collection as well as the further processing and use of your data by "xxx" as well as about your rights and settings options to protect your data find in the privacy policy of TikTok. Pinterest We use a Pinterest account and can embed videos and images of the social media network Pinterest, of the company Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA. We point out that Pinterest may use its own tracking tools and refer to Pinterest's privacy policy. Pinterest Privacy Policy: For more information on how we handle user data, please see Pinterest's privacy policy at: https://policy.pinterest.com/de/privacy-policy Basis The use of Pinterest is based on Art. 6 para. 1 lit. a DSGVO. The use of Pinterest is voluntary. We have no influence on the scope of the data collected by Pinterest by means of registration. If you do not want Pinterest to collect data about you in connection with your use of our online offer and use it for its own purposes, you should not use Pinterest. For more information about the purpose and scope of the collection as well as the further processing and use of your data by Pinterest as well as your rights and settings options to protect your data, please find the Pinterest privacy policy. 5. Cookies use Cookies are partly mandatory to navigate the website, to use basic functions and to ensure the security of the website; other cookies help, among other things, to make your visit to our website easier, more pleasant and more meaningful, . Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website. Cookies do not damage your computer's hard drive, nor do they transmit your personal data to us. We use cookies, for example, to recognize you as a registered user without you having to log in again each time. In this case, using cookies does not mean that we receive new personal data about you as an online visitor. Most Internet browsers automatically accept cookies. However, you can set your browser so that no cookies are stored on your computer or you receive a warning message when a new cookie arrives. You can find more information about this in the settings options of your browser. However, deactivating cookies may mean that you cannot use all the functions of our website. The legal basis for the use of cookies that are not technically required is your consent according to Art. 6 I lit. a) DSGVO.For more information about which cookies we use and how you can manage your cookie settings, see our cookie/tracking banner [https://www.yamo.bio/de-de/]. The stored cookie data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. OneTrust We collect these consents and submissions through our Cookie consent management tool ("OneTrust"), from the provider OneTrust, LLC (UK headquarters: Cannon Green, 27 Bush Lane, London EC4R 0AA, UK and US headquarters: 1350 Spring Street NW, Suite 500, Atlanta, Georgia 30309, USA ). OneTrust is used to store cookie settings for the entire website. OneTrust stores information about the categories of cookies used by the website and whether users have given or revoked their consent to the use of each category. This allows us to prevent cookies from being set in each category in the user's browser if consent is not given. OneTrust uses cookies for information storage, which have a normal lifetime of one year, so that the preferences of returning visitors are stored. OneTrust is certified under the Privacy Shield agreement. For transfers of personal data to countries outside the EU or the EEA, OneTrust relies on (i) adequacy decisions issued by the European Commission based on Article 45 of Regulation (EU) 2016/679 (GDPR); or (ii) standard contractual clauses issued by the European Commission (as amended on June 4, 2021) and, where applicable, additional measures to ensure an adequate level of data protection. 6. Tracking tools The legal basis for the use of tracking tools that are not technically required is your consent according to Art. 6 I lit. a) DSGVO. You can control the use of tracking tools at any time here via our cookie/tracking banner. Google Tag Manager To manage the cookies and pixels for tracking and other tools, we also use the Google Tag Manager. The Tag Manager tool itself is a cookie-less domain and does not collect any personal data. Rather, the tool triggers other tags, which in turn may collect data. If you have opted out at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager. Google Analytics For the purpose of demand-oriented design and continuous optimization of our website, we use the web analysis service Google Analytics. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as - Browser type/version - Operating system used - Referrer URL (the previously visited page) - Host name of the accessing computer (IP address) - Time of the server request - Device are transferred to servers of Google Inc, a company of the holding company Alphabet Inc, in the USA and stored there. By activating IP anonymization ("anonymizeIP") on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area or Switzerland. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and demand-oriented design of these web pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of Google Inc. According to Google Inc., in no case will the IP address be associated with other data relating to the user. Users can prevent the collection of the data generated by the cookie and related to the website usage by the respective user (including the IP address) to Google as well as the processing of this data by Google by using the available Download and install the browser plugin. As an alternative to the browser plugin, you can control the use of all non-essential cookies including Google Analytics in the cookie settings (see under "Cookies"). If you delete cookies, you must click on the link again. Google Optimize Our website uses the web analysis and optimization service "Google Optimize", which are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google Optimize"). We use the Google Optimize service to increase the attractiveness, content and functionality of our website, by playing new features and content to a percentage of our users and statistically evaluating the change in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics). Google Optimize uses cookies that allow us to optimize and analyze your use of our website. The information generated by these cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymization, so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website optimization tests and related website activity, and providing other services relating to website activity and internet usage to us. You can prevent the storage of cookies by selecting the appropriate settings on your Internet browser. In addition, you can prevent the collection of data by the cookie generated and related to your use of our website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the available browser plugin. More information about the data collection and -You can find more information about the processing of your data by Google in Google's privacy policy. Hot Jar This website uses the Hot Jar analytics service, a service provided by Hotjar Ltd, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta to improve usability and customer experience. Mouse clicks and mouse and scroll movements can be recorded. Likewise, keystrokes performed on this website can be recorded. However, the recording is not personalized and therefore remains anonymous. You can control the Hot Jar Service via www.hotjar.com/opt-out . However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Unbounce (Unbounce Marketing Solutions Inc.) We use the service of Unbounce Marketing Solutions Inc, 400-401 West Georgia Street, Vancouver, BC, V6B 5A1 Canada on individual web pages. The affected pages are hosted by Unbounce. This means that the user's browser communicates directly with Unbounce. In doing so, the IP address, browser signature, operating system, device type and the date and time of the page visit are transmitted to Unbounce. Cookies are also set. The data is only made available to us anonymously, so that we cannot draw any conclusions about individual persons. GetSiteControl This website uses the provider GetSiteControl. GetSiteControl (GetWebCra Limited Klimentos 41-43, Klimentos Tower, Flat/Oce 25, 1061, Nicosia, Cyprus) is a program that displays pop-ups and overlay windows on the website for information purposes and better user guidance. The windows can be controlled according to certain rules (e.g. number of page visits). For this purpose, cookies are set by GetSiteControl. These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 Para. 1 lit. a) DSGVO. Leftmost We use the tracking technology of Linkster GmbH on this page, Geschwister-Scholl-Strasse 52, 20251 Hamburg to measure and visualize insights into partnerships and advertising channels. This is a function to measure the efficiency of the corresponding advertising measures. Furthermore, the information enables us to assign advertising successes for billing purposes with corresponding advertising partners. When you click on an advertising integration, cookies are set in your browser, which are read in the event of a transaction. At each touch point, your browser sends an HTTP request to Linkster's server, which transmits certain information. This information includes the URL of the website on which advertising material is placed (referrer URL), the browser identifier (user agent) of your end device (including information about the device type and operating system), the IP address of the end device (this IP address is anonymized and hashed by us before storage), HTTPHeader (data packet with various technical information automatically transmitted by your browser), the time of the request and, if already stored on the end device before, the cookie with its content. A cookie is a small data packet that is exchanged between your browser and the server. Information relevant to the web application can be stored and transmitted in this data packet, e.g. the contents of a virtual shopping cart. The tracking technology stores cookies on your terminal device to document actions. A 24-digit, anonymous ID is stored in the cookie. Linked to this ID, the data is stored in encrypted form in our database on the server. This contains information about the last touch points (i.e. when a particular advertising medium was displayed or clicked on by an end device). If necessary, the stored touch points can be combined to form a sequence chain (user journey). In the case of a promotion request, the order number, a new customer feature and the shopping cart value of your order are also transmitted and stored by us. The cookies stored by Linkster GmbH are deleted after 30 days at the latest. The information transmitted to us and the cookies serve the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing. If you do not wish cookies to be stored in your browser, you can control this through our cookie/tracking banner or by setting your browser accordingly. You can control the storage of cookies in your respective browser under Tools/Internet Options, limit it to certain websites or set your browser to notify you as soon as a cookie is sent. Please note, however, that in this case you must expect a restricted display of the online offers and a restricted user guidance. 7. Re-targeting On our website, we use so-called re-targeting technologies. This involves analyzing your user behavior on our website in order to be able to offer you customized advertising on partner websites. Your user behavior is recorded pseudonymously. Most re-targeting technologies work with cookies (see under "Cookies"). You can prevent re-targeting at any time by clicking on our Cookie/Tracking banner or in the menu bar of your web browser to reject or disable the relevant cookies (see under "Cookies"). Criteo Through the technology of Criteo GmbH (32 Rue Blanche, 75009 Paris, France), anonymized information about the surfing behavior of website visitors is collected and stored for marketing purposes. This data is stored in cookies on the visitor's computer. In order to identify logged-in users of our webshop across devices, Criteo GmbH stores anonymized e-mail addresses of logged-in webshop users through encryption. This data is stored on servers of Criteo GmbH. Criteo GmbH uses an algorithm to analyze the anonymously recorded surfing behavior and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). Under no circumstances can this data be used to identify you personally as a visitor to our websites. The collected data will only be used to improve our offer. This information will not be used in any other way or passed on to third parties. After a successful referral, the cookie is automatically deleted or it automatically loses its validity after 13 months if no purchase has been made by then. The cookie stores only technical identifiers and no data with which the identity of the user could be inferred directly or even indirectly. Taboola We use the Taboola service on our website, which makes it possible to play out user- specific recommendations for content and ads based on surfing behavior and customer interests in order to improve the user-friendliness of our offering. The usage profiles are created using pseudonyms, they are not merged with the data about the bearer of the pseudonym and do not allow any conclusions to be drawn about personal data. Taboola collects the following user information by means of cookies: - Operating system used - Referrer URL (the previously visited page) - Host name of the accessing computer (IP address) - Time & number of server requests - Web pages accessed/content on our web pages - Location information (city, state/canton, country) - Error page calls Google Ads Conversion We use the Google Ads Conversion offer to draw attention to our attractive offers with the help of advertising media (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you have accessed our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it. Google Ads Remarketing We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to the users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google display network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person. You can find more information in the section "Cookies. You can prevent participation in this tracking process in several ways: a) by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers b) by installing a plug-in provided by Google c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies d) by permanently deactivating it in your Firefox, Internetexplorer or Google Chrome browsers. e) by means of appropriate cookie settings, e.g. in our cookie/tracking banner. If you do this, you may not be able to use all functions of our offer in full. Google DoubleClick We use Google DoubleClick, a service of Google Inc., to display ads based on the use of previously visited websites. For this purpose, Google uses the so-called DoubleClick cookie, which enables the recognition of your browser when visiting other websites. The information generated by the cookie about your visit to this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website with regard to the advertisements to be displayed, compiling reports on website activity and advertisements for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. However, Google will not associate your IP address with any other data held by Google. Facebook Custom Audience We use communication tools of the provider Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304, USA or, if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Basically, when using Custom Audience, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes. The Facebook cookie is addressed in this process. Facebook Pixel Our website uses so-called "Facebook pixels" of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With the help of the Facebook pixel, it is possible for Facebook to use visitors to our website as a target group for the display of advertisements, so-called "ads". "Facebook Ads", to determine. Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our Internet offering. In other words, with the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad. The Facebook pixel is immediately integrated by Facebook when you visit our website, and a cookie is stored on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous for us, so we cannot draw any conclusions about your identity. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. The processing of the data by Facebook takes place within the framework of Facebook's data usage policy. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. 8. Links to our social media presences On our website, we have included links to our social media profiles on the following social networks: - Facebook Inc, 1601 S California Ave, Palo Alto, CA 94304, USA - Instagram Inc, 1601 Willow Road, Menlo Park, California 94025, USA - Twitter Inc.,1355 Market Street, Suite 900, San Francisco, CA 94103, USA - TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland - YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland If you click on the relevant social network icons, you will automatically be redirected to our profile on the relevant network. In order to use the functions of the relevant network there, you must partially log in to your user account at the relevant network. When you call up a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network in question. Thereby, the network receives the information that you are using your IP address visited our website and called up the link. If you call up a link to a network while you are logged into your account at the network in question, the content of our site can be linked to your profile at the network, which means that the network can assign your visit to our website directly to your user account. If you want to prevent this, you should log out before you click on the corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link. 9. Your right to information You can ask for information about your personal data stored by us at any time. Requests for information must be submitted in writing with proof of identity. You are also entitled to request the deletion or correction of your data stored by us at any time. You can do this by submitting a corresponding request to us (see under "Contact"). We would like to point out that we reserve the right to demand proof of identity and that in the event of the deletion of your data, it will no longer be possible to use our services in full or at all. You can revoke your consent to certain data processing at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Please note that by law, certain data must be kept for a certain period of time. Such data must therefore remain stored by us until the expiry of these periods. We block this data in our system and use it only to comply with legal requirements. You have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you or the processing is unlawful. You have the right to receive your personal data that you have provided to us in a structured, common and machine- readable format or to request the transfer to another controller. You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. Right of objection You may object to the processing if the processing is based on Art. 6 (1) sentence 1 lit. e or lit. f DS-GVO. This is particularly the case if the processing was not based on consent or is necessary for the performance of a contract with you. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If personal data are processed for the purpose of direct marketing and/or advertising oriented to your interests, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing. 10. Storage duration For the processing operations carried out by us, we generally specify how long the data will be stored by us and when it will be deleted or blocked. Unless an explicit storage period is specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for the storage no longer applies or the storage is inadmissible for other legal reasons. However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings, or if storage is provided for by legal regulations to which we are subject as the responsible party. If the storage period prescribed by the legal regulations expires, the personal data will be blocked or deleted, unless further storage by us is necessary and there is a legal basis for this. Regarding the use and storage period of cookies, please refer to point 5. 11. Data security We use appropriate technical and organizational security measures to protect your data stored by us against manipulation, partial or complete loss and unauthorized access by third parties, taking into account the state of the art, implementation costs and the nature, scope, context and purpose of the processing, as well as the varying likelihood and severity of a risk to the data. Our security measures are continuously improved according to technological developments. Our security measures are continuously adapted in accordance with technological developments. If you register with us as a customer, access to your customer account is only possible after entering your personal password. You should always keep your payment information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others. We also take our own internal data protection very seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of data protection law. In addition, they are only granted access to personal data to the extent necessary. 12. Contact If you have any questions about data protection on our website, would like information or would like to have your data deleted, please contact us: yamo food GmbH Data Privacy Nymphenburger Str. 1 80335 Munich Germany support@yamo.bio 13. Final provisions yamo reserves the right to adjust this privacy policy at any time in order to comply with current legal requirements or to update the privacy policy, e.g. in the event of the introduction of new services or changes to the website. For a renewed access to this website, the adjusted privacy policy applies. 16.08.2022.