Privacy policy

The following data protection declaration applies, as well as information on any consent you may have given.

I. Terminology of the General Data Protection Regulation

In simple terms, personal data is any information that relates personally to you as a data subject. The meaning of important terms that will help you to understand the following data protection provisions can be found in Article 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the data controller; contact details of the data protection officer

In simple terms, the GDPR defines the controller as the person who alone or jointly with others determines the purposes and means of the processing of personal data.

The name and contact details of the responsible person are as follows:
Dirk Marras, Managing Director 5starUnity Europe ÖU,

The contact details of the data protection officer are as follows:
info@yem-coupon.com

III. Purpose and legal basis of the processing of your personal data

Your personal data is processed for the purposes listed below in accordance with the respective legal bases stated:

1. pre-contractual measures implemented on the basis of an enquiry from you lead to the processing of your personal data on the basis of the consent given by you pursuant to Article 6 (1) (a) DS-GVO or on the basis of Article 6 (1) (b) DS-GVO.
2. In order to safeguard our legitimate interest in responding to enquiries and in taking other measures based on an enquiry from you, your personal data will be processed on the basis of the consent given by you pursuant to Article 6(1)(a) DS-GVO or on the basis of Article 6(1)(f) DS-GVO.
3. In order to protect our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) of the GDPR.
4. In order to protect our legitimate interest in enforcing our rights and defending ourselves against claims, the processing of your personal data is based on Article 6 (1) (f) of the GDPR.
5. For the performance of a contract to which you are a party, the processing of your personal data is based on your consent pursuant to Article 6(1)(a) DS-GVO or on Article 6(1)(b) DS-GVO.
6. For the implementation of measures for the purpose of advertising, the processing of your personal data is carried out either on the basis of the consent given by you pursuant to Article 6 (1) (a) DS-GVO or on the basis of Article 6 (1) (f) DS-GVO.

Your personal data is protected against access, modification or dissemination by unauthorised persons as well as against loss and destruction, as our systems are secured by technical and organisational measures in accordance with the state of the art.

Further information on the processing of your personal data for the individual processing purposes can be found in the notes within the scope of this data protection declaration.

IV. Transfer of your personal data to third parties and categories of recipients of your personal data

We transmit your personal data to third parties within the framework of the legal requirements, insofar as this is necessary to achieve the purposes of the processing of your personal data. Further information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding notes within the scope of this data protection declaration. The scope of the transmitted data is limited to the necessary minimum.

V. Scope of the processing of your personal data for the individual processing purposes

Below we inform you in detail about the processing of your personal data for the various processing purposes.

Insofar as your data is no longer required for processing for the respective processing purpose, it will be deleted unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

1. use of our website for information purposes

When you visit our website without providing us with any further information, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary to display our website and to ensure the stability and security of our website:
- the page you accessed
- date and time of the request
- amount of data transferred
- source or reference from which you accessed the page
- browser you are using
- operating system you are using
- your IP address.

The processing of the aforementioned personal data is carried out on the basis of Article 6 (1) (f) DS-GVO to protect our legitimate interest in maintaining the proper operation of our website.

This personal data is deleted after 6 months, unless it is still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion takes place immediately after the conclusion of the corresponding proceedings.

2. processing of enquiries

If you contact us with an enquiry or request, we will process the personal data you provide. This data may be relevant irrespective of the way in which you send us your enquiry or request:

- Date and time of contact
- Name data
- Contact data
- Data on enquiry/concern
- Information/documents transmitted

The processing of your personal data and the transmitted information takes place - depending on the content of your enquiry/your request - on the basis of the consent you have given pursuant to Article 6 (1) (a) DS-GVO to answer your enquiry or on the basis of Article 6 (1) (b) DS-GVO to carry out pre-contractual measures or on the basis of Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party or on the basis of Article 6 (1) (f) DS-GVO to protect our legitimate interest in answering you. 1 letter b) DS-GVO for the performance of a contract to which you are a party or on the basis of Article 6 (1) letter f) DS-GVO to protect our legitimate interest in responding to enquiries/concerns and in taking other measures in connection with the processing of enquiries/concerns.

Insofar as you contact us via a contact form that we may provide, you grant your consent by sending us your message. You will be informed separately about your consent, which has the following content, in the contact form:

"I hereby consent to the processing of my e-mail address and the other personal data provided by me for the purpose of responding to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. To exercise the revocation, it is sufficient to send a corresponding message to the person responsible, whose contact details you can find in the information on the person responsible. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

We transmit your personal data to third parties within the framework of the legal requirements, insofar as this is necessary for the processing of your enquiry/your request. In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

We will delete your personal data when your enquiry/concern has been resolved, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.

3. performance of contracts

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data you provide for the purpose of processing the contract. This transmitted data can be your customer data (e.g. your name and address) and the contract data (e.g. details of the products that are the subject of the contract as well as payment and delivery information).

In this case, the processing of your personal data is based on Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party.

We transmit your personal data to third parties within the framework of the legal requirements, insofar as this is necessary for the fulfilment of the contract with you. This transfer is made to the service providers involved in the processing of the contract. These are the providers of the processing tools used by us as well as the companies commissioned with transport, insofar as transport is necessary. Otherwise, these are the payment service providers commissioned with payment matters.

Insofar as you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

We delete your personal data after the expiry of the retention periods under tax and commercial law of 6 or 10 years, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

4. advertising via newsletter

When you register for our newsletter, we process the e-mail address you provide - and, in the event that you provide us with further personal data, these too - in order to send you information about our offers by e-mail. Only your e-mail address is required to receive the newsletter. If you voluntarily provide further personal data, the processing of this data may be used to address you personally in the newsletter.

When registering for our newsletter, you give your consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and the other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."

The registration for our newsletter takes place in the so-called double opt-in procedure: After you have registered on our site, you will first receive an e-mail with a message about the registration for the newsletter. This message is linked to a request for confirmation of your registration. This confirmation that you have registered to receive the newsletter is necessary so that we can document your required consent to send the newsletter and to be able to recognise registrations to third-party e-mail addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of your consent in accordance with the legal requirements, if necessary.

The processing of your personal data for the purpose of receiving our newsletter is based on your consent in accordance with Article 6 (1) (a) DS-GVO.

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to send a corresponding message to the person responsible, whose contact details you can find in the information on the person responsible. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

Your e-mail address and any other data transmitted will be deleted immediately if you withdraw your consent or unsubscribe from our newsletter, unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

5. advertising by letter post

We may process the personal data you provide regarding your first and last name and address for the purpose of sending you information about our offers by post.

The processing of your personal data is carried out to protect our legitimate interest in carrying out advertising measures by letter post on the basis of Article 6 (1) (f) DS-GVO.

You may object to the processing of your personal data for the purpose of carrying out advertising measures by letter post at any time. For this purpose, it is sufficient to send a corresponding message to the person responsible, whose contact details you can find in the information on the person responsible.

There will be an immediate deletion of the personal data provided by you on first and last name and address if you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

6. use of cookies

We use so-called cookies on our website. Cookies are small files that are stored on your device. They transmit certain information to us. The use of cookies serves to enable you to use certain functions of our website and to make our offer more user-friendly overall.

Session cookies that we use are deleted after the end of the browser session, i.e. after you close your browser. Persistent cookies remain on your device even after the end of the browser session, i.e. after you close your browser, and enable us or our partner companies (third-party cookies) to recognise you the next time you visit our website.

Some of the cookies we use are technically necessary to enable you to use certain functions. In this respect, the processing of your personal data takes place on the basis of Article 6 (1) (b) DS-GVO for the implementation of pre-contractual measures that are carried out at your request as a data subject or on the basis of Article 6 (1) (b) DS-GVO for the performance of a contract to which you are a party or on the basis of Article 6 (1) (f) DS-GVO for the protection of our legitimate interest in providing the most user-friendly functions possible. Further information on cookies used by us or our partner companies, the purposes of which are range measurement or are used for marketing purposes, can be found in this data protection declaration.
You can prevent cookies from being stored by setting your browser software accordingly. If necessary, please refer to the program help of the browser you are using to find out how to make the appropriate setting. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. By way of example, we refer to the information on the following common browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera: https://help.opera.com/de/latest/web-preferences/
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

7. use of Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. ("Google").

Your personal data is processed to protect our legitimate interest in analysing the use of our website, Article 6 (1) (f) DS-GVO.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of our website. The information generated by these cookies about your use of our website is usually transferred to a Google server in the USA and stored there. In this context, we would like to point out that the code "anonymizeIp" has been added to Google Analytics on our website. This ensures anonymised recording of IP addresses (so-called IP masking), so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area in order to exclude a reference to persons. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage to us as website operators. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by setting your browser software accordingly. If necessary, please refer to the programme help for the browser you are using to see how the corresponding setting can be made. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The current link is https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can prevent the future collection of your data by Google Analytics by setting an opt-out cookie. You set this cookie by clicking on this link. Please note that the opt-out cookie only works in this browser and for this website. If you delete the cookies in your browser, you must click the link again.

For more information on the terms of use between us and Google on data protection, please visit https://www.google.com/analytics/terms/de.html and for more information on Google's data protection, please visit https://policies.google.com/?hl=de.

Google is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law.

8. enforcing our rights and defending claims against us

If we process your personal data to protect our legitimate interest in enforcing our rights and defending claims against us, this is done on the basis of Article 6(1)(f) DS-GVO.

We transmit your personal data to third parties within the framework of the legal requirements insofar as this is necessary to protect our legitimate interest. Such a transfer takes place, for example, to the providers of debt collection services involved or our lawyers.

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the retention periods of 6 or 10 years under tax and commercial law, unless we may continue to process the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this data protection declaration.

VI. duration for which your personal data are stored or criteria for determining this duration

Your personal data will be deleted when it is no longer needed for processing for the relevant processing purpose, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy. Information on the period for which your personal data is stored or the criteria for determining this period can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

VII. Your rights

1. overview

As a data subject, you have the following rights to ensure fair and transparent processing of personal data:

the right to information pursuant to Article 15 of the GDPR,
the right to rectification pursuant to Article 16 of the GDPR,
the right to erasure pursuant to Article 17 of the GDPR,
the right to restriction of processing pursuant to Article 18 of the GDPR,
the right to data portability pursuant to Article 20 of the GDPR
the right to withdraw consent at any time pursuant to Article 7(3) of the GDPR. 7 (3) of the GDPR,
the right to object to processing pursuant to Article 21 of the GDPR, about which we will inform you separately below
and the right to lodge a complaint with the supervisory authority pursuant to Article 77 of the GDPR, about which we will inform you separately below.

2. your right to object to processing

THE PROCESSING OF PERSONAL DATA IS ALLOWED IF THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS OF THE CONTROLLER OR A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE THE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, ART. 6 ABS. 1(F) DS-GVO.

YOU, AS THE DATA SUBJECT, HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LETTER F) DS-GVO; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU AS THE DATA SUBJECT OBJECT TO THE PROCESSING FOR THE PURPOSES OF DIRECT MARKETING, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.

3. your right to complain to the supervisory authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the requirements of the GDPR.

VIII. Information on the basis for providing your personal data

If you wish to conclude a contract with us or contact us with an enquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your enquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you or process your enquiry.

Status: 04 July 2021