Privacy Policy (Website)

1. Controller

2. Visiting the website and hosting

The website is hosted by IONOS. When you visit it, the web server processes technically necessary connection data, in particular your IP address. Technical access logs may contain requested pages, times, HTTP status and browser and connection information.

This processing serves to deliver the website and keep it secure (legitimate interest, Art. 6(1)(f) GDPR).

3. Contact form and email

If you use the contact form, we process your name, your email address, your message and the language selected on the page. This information is sent as an email to info@yelomyth.com; it is sent via the mail server of our hosting provider IONOS. Your email address is used as the reply address so that we can answer you. A field that is invisible to visitors helps protect against automated spam. If you email us directly, we process your address and the content of your message in the same way.

We use this information solely to handle your enquiry and not for advertising or newsletters. The form does not store messages on the web server. We keep the email only for as long as is necessary to handle your request, unless statutory retention obligations prevent deletion.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or steps prior to entering into one; otherwise, our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

4. Purchases and payment via Stripe

When you buy a desktop collection on our website, you are redirected to a payment page operated by the payment service provider Stripe. Our contractual partner for payment processing in the European Economic Area is Stripe Payments Europe, Limited (Ireland). On this page you enter your payment details and the information Stripe requests for the purchase, such as your email address, name and billing country. Stripe processes this data to carry out and secure the payment; Stripe’s privacy policy applies to the payment page.

Yelomyth Labs does not receive your full card or account details. From Stripe we receive the information required to process the order: your email address, the details you entered during checkout, the purchased product, amount, currency, time and payment status, and – depending on the payment method – limited payment information such as the card brand and the last four digits of the card number.

After a confirmed payment, we store your email address, the purchased product and a personal download link, which is valid for 30 days, on our server so that we can provide your download and send you the link by email.

The purpose of this processing is to conclude and perform the purchase contract and to process the payment (Art. 6(1)(b) GDPR). Where statutory retention obligations apply, in particular under tax and commercial law, we keep the required records for this purpose (Art. 6(1)(c) GDPR).

Stripe may also process data outside the EU, in particular in the USA. According to its own information, Stripe participates in the EU-U.S. Data Privacy Framework and uses EU Standard Contractual Clauses where a transfer mechanism is required. You can find more information in Stripe’s privacy policy: stripe.com/privacy.

5. Language setting in your browser

The website stores the selected language in your browser’s local storage (Local Storage, entry “language”) so that it is kept for your next visit. This entry is not transmitted to us and remains stored until you delete it in your browser settings.

The website does not set cookies and does not use any analytics, tracking or advertising services.

6. Fonts and external links

The website uses a font that is loaded directly from our server. No connection to Google or other external font services is established for this purpose.

Links to Google Play and to our profiles on Instagram, TikTok, Pinterest and YouTube are simple links. Data is only transmitted to these providers when you open such a link; the respective provider’s privacy policy then applies.

7. Your rights

Where the legal requirements are met, you have the right of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.

You may also lodge a complaint with a data protection supervisory authority, in particular in your place of habitual residence, place of work or place of the alleged infringement. For privacy enquiries, you can reach us at info@yelomyth.com.