1. Party responsible for the data processing

The party responsible for the data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

YellowShift GmbH

Reichenbachstrasse 31
D-80469 München
Email: info@yellowshift.eu

2. General information about the data processing and about joint processing

We process data in the course of our business and website operations.

This also includes disclosure through the transmission of data to third parties and, where applicable, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transmit data to countries outside the EU or the EEA, we have indicated this accordingly below.

You can also contact us at any time with inquiries or for the purpose of exercising your data subjects’ rights by using the contact information set out below. We will then forward your inquiry internally for handling. The processes described below are subject to joint processing unless otherwise stated.

3. Data processing

The individually involved data, processing purposes, legal bases, recipients and, where applicable, transmissions to third countries are listed below:

a) Logfile of website visit

We log your visit to our website. In doing so, we process:

- Name(s) of our called website(s)
- Date and time of call
- Volume of data transferred
- Browser type, including version
- Your used operating system
- Referrer URL (the website visited beforehand)
- Your IP address
- The requesting provider

The legal basis for data processing is point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in the ongoing provision and security of our website.

The logfile will be erased after 14 months, unless it is required to demonstrate or investigate specific legal violations that have become known within the retention period.

b) Hosting and Form data via Webflow

https://webflow.com/legal/privacy

c) Contacting us

If you contact us, the following data that you provide us will be processed for the purpose of dealing with and handling your inquiry: name, company name, contact details, provided links and – if provided by you – your message.

The legal bases for the data processing are point (b) of Article 6 (1) GDPR, namely our obligation to perform a contract and/or to fulfill our pre-contractual obligations, and/or point (f) of Article 6 (1) GDPR, namely our overriding legitimate interest in processing your inquiry.

d) Contacting us in relation to job applications

If you contact us to send us a job application, e.g. by email or via a contact form, the data you provide (e.g. name, email address, message, provided links, etc.), your message and the submitted job application documents will be processed exclusively for the purpose of handling and dealing with your application inquiry.

The legal basis for data processing is primarily Section 26 of the German Data Protection Act (Bundesdatenschutzgesetz, BDSG). In accordance with this, it is permissible to process data in connection with making a decision on the establishment of an employment relationship.

Should the data possibly be needed for legal prosecution after completion of the application process, the legal basis for further processing is point (f) of Article 6 (1) GDPR, namely the safeguarding of our legitimate interest in the exercise and/or defense of legal claims.

e) Performance of a contract, data management within the context of providing a service

We process various data in the course of providing our services and for initiating and performing the contractual relationship that exists between you and us.

Where you have tasked us with providing a service, your data (if specified: your name, contact details and address) as well as all the information needed to fulfill the order are processed exclusively for the purpose of performing and handling the contractual relationship.

This includes, in particular, our adequate consulting and support, correspondence with you, invoicing, and fulfillment of our accounting and statutory tax obligations.

The legal bases for the processing are point (b) of Article 6 (1) GDPR and, for fulfilling our legal obligations, point (c) of Article 6 (1) GDPR.

Your data will be forwarded to third parties where this is necessary for processing your order.

This includes, in particular, the disclosure to supervisory authorities for the purpose of correspondence as well as for the exercise and defense of your rights.

In addition, the Affiliates cooperate with one another in order to provide diverse services. In such cases, the data are shared among the Affiliates where they are processed under commission.

f) Newsletter

In order to provide you with regular information about our company and offers, we offer the dispatch of an email newsletter. When you register for the newsletter, we process the data you entered during the registration (email address and other freely provided information). To prevent misuse, we send you an email after your registration in which you are requested to confirm your registration (double opt-in procedure). To be able to demonstrate the legal compliance of the registration process, your registration is logged. Involved here are the time of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is point (a) of Article 6 (1) GDPR, namely your prior consent. The legal basis for the data processing in connection with the sending of the confirmation email for your registration and the associated data logging is point (f) of Article 6 (1) GDPR, namely our legitimate interest in being able to demonstrate your legally compliant registration.
‍
In order to provide you with regular information about our company and offers, we offer the dispatch of an email newsletter. When you register for the newsletter, we process the data you entered during the registration (email address and other freely provided information). To prevent misuse, we send you an email after your registration in which you are requested to confirm your registration (double opt-in procedure). To be able to demonstrate the legal compliance of the registration process, your registration is logged. Involved here are the time of registration and confirmation as well as your IP address.

For the dispatch of the newsletter, we might engage service providers to whom we transmit the stated data.

e) Cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.

Further information about the specific cookies we use, their providers and purposes can be found in our consent management platform (which can be called up by clicking the 'Cookies' link in the footer of the website). There you can give your consent to the services concerned, and later withdraw or adjust your consent settings.

Our consent banner
‍
We use a consent banner (consent management platform) to document your selection of certain data processing processes and to fulfill our statutory data protection obligations. When you visit our website, your cookie preferences are requested via a consent banner. We then set a cookie in which data on your given consents and withdrawn consents are stored. The legal basis for the data processing is point (c) of Article 6 (1) GDPR, namely fulfillment of our legal obligations.

f) Analytics

Google Analytics
Our website uses the Google Analytics tracking tool of Google. We use Google Analytics to evaluate your use of the website, to compile reports on website activities and to provide other services associated with the use of the website, and thereby improve user friendliness.

When Google Analytics is used, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.

We use Google Analytics with the extension “anonymizeIp()”. This truncates IP addresses within the member states of the EU or EEA. If data are transmitted to Google’s servers in the USA, the full IP address is only transmitted in exceptional cases and truncated there. A direct reference to a person can therefore generally be ruled out. In particular, an assignment to the called computer or to the end device of the website visitor is no longer possible.

The following data are processed through the use of Google Analytics:

- the called website called
- the website from which the user reached the accessed page of our website (referrer)
- the subpages accessed from the website
- the time spent on the website
- the frequency with which the website is accessed
- Google declares that it will not under any circumstances combine your IP address with any other data held by Google.

Google Tags / Remarketing / Retargeting
Our website uses so-called tracking cookies from Google. When you visit our website, permanent cookies are used to store information about the products you viewed on our website, as well as the third-party ads and web pages through which users reach our website. If you subsequently visit a partner website, we can display customised advertising for you based on the items you viewed on our website.

Legal basis and withdrawal

The legal basis for the data processing is point (a) of Article 6 (1) GDPR, namely your prior given consent.

You can withdraw your consent at any time with effect for the future by adjusting your preferences in our consent management platform (which can be called up by clicking the 'Cookies' link at the lower right of the website).

4. Duration of data storage

We store personal data only as long as is necessary for the designated processing purposes or until you withdraw your given consent. Where statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the designated processing purposes.

5. Your rights as a data subject

a) Right to information

Upon request, we will provide you at any time and at no charge with information about all the personal data that we have stored about you.

b) Right to rectification, erasure, restriction of processing (blocking), right to object

If you no longer consent to the storage of your personal data or if these data have become inaccurate, we will arrange for your data to be erased or blocked, or to be rectified as necessary (provided that this is possible under applicable law), as per your instructions. The same applies if we are to process data only in a restrictive manner in the future. You have a right to object, in particular, in cases where your data are required due to the performance of a task that is in the public interest or the data processing is based on our legitimate interest, as well as in the event of profiling based on this. You also have such a right to object if your data are processed for the purpose of direct marketing.

c) Right to withdraw consents with effect for the future

You may withdraw given consents at any time with effect for the future. Your withdrawal does not affect the lawfulness of the processing up until the time of the withdrawal.

d) Right to data portability

Where data are processed on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format to enable you to transmit the data to another controller if so desired.

e) Right to restrict processing

Data for which we are unable to identify the data subject, e.g. if they have been anonymized for analysis purposes, are not covered by the above rights. The right to information, erasure, blocking, rectification and transmission to another company may be possible for these data if you provide us with additional information that allows us to associate them with to you.

f) Exercising your data subjects’ rights, right to lodge a complaint

If you have any questions regarding the processing of your personal data, or wish to obtain information, or rectify, block, object to or erase data, or if you wish to have your data transmitted to another company, please contact info@yellowshift.eu

You also have the option of lodging a complaint with a supervisory authority in regard to your data subject’s rights.

6. What are cookies?

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. For further information, visit:

allaboutcookies.org

7. How to manage cookies?

You can set your browser not to accept cookies, and the below website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

8. Privacy policies of other websites

The yellowShift GmbH website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.