Privacy Policy

Last updated: February 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General Information on Data Processing

As a matter of principle, we only process personal data to the extent necessary to provide a functional website and our content and services. The processing of personal data takes place regularly only after the user has given his or her consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

3. Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address (anonymized)

This data cannot be assigned to specific persons. This data is not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient operation of the website).

4. Payment processing via Mollie

For the processing of payments, we use the service of Mollie (Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands).

When you place an order, you will be redirected to Mollie's hosted payment page. Data processed there (name, e-mail address, payment data, delivery address) are subject to Mollie's privacy policy: https://www.mollie.com/de/privacy

We only receive a confirmation from Mollie that the payment was successful, as well as the order data necessary for order processing (product, variant, delivery address). We do not have access to complete payment information (e.g. credit card numbers) at any time.

The data is transmitted on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract).

5. Customer Reviews

On our website, we display customer reviews exclusively from a locally stored XML file. No requests are sent to external review platforms when these reviews are loaded.

The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the display of customer reviews).

6. Contact Form / E-mail

If you contact us by e-mail, the data you transmit (e-mail address, name and content of the inquiry, if applicable) will be stored for the purpose of processing the inquiry and in case of follow-up questions. This data will not be passed on without your consent.

The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in answering customer inquiries) or Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual inquiries.

Revocation Form

On our revocation page, an online form is available through which you can submit your revocation. The data entered (order number, name, e-mail address, delivery address, date) will be transmitted to us by e-mail exclusively for the purpose of processing your revocation and will not be stored beyond that. The legal basis is Art. 6 para. 1 lit. c GDPR (fulfillment of a legal obligation to receive revocations).

7. Cookies

This website does not use tracking or marketing cookies. A technically necessary session cookie is set, which exclusively stores your language preference (German/English). This cookie does not contain any personal data and is deleted when you close your browser. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a functional website).

Mollie B.V. may set its own cookies as part of the payment process; these are subject to Mollie's privacy policy (www.mollie.com/de/privacy).

8. Web Analytics (Simple Analytics)

This website uses Simple Analytics, a privacy-friendly analytics service from Simple Analytics B.V., Mauritskade 11, 1092 AD Amsterdam, Netherlands.

Simple Analytics stores no cookies, collects no personal data, and creates no individual user profiles. Only aggregated page view statistics are collected (pages viewed, referring source, device category). IP addresses are not stored.

The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in anonymous reach measurement). Since no personal data is processed, no consent is required. Further information: simpleanalytics.com/privacy.

9. Your Rights

You have the following rights with respect to us:

• Information (Art. 15 GDPR): Right to information about the data stored about you.
• Rectification (Art. 16 GDPR): Right to correction of incorrect data.
• Deletion (Art. 17 GDPR): Right to deletion under certain conditions.
• Restriction (Art. 18 GDPR): Right to restriction of processing.
• Data portability (Art. 20 GDPR): Right to receive your data in a machine-readable format.
• Objection (Art. 21 GDPR): Right to object to processing based on legitimate interests.

To exercise your rights, please contact: philipp@yawn-labs.com

10. Right to lodge a complaint with a supervisory authority

You have the right to complain to a data protection supervisory authority about our processing of your personal data. The competent authority is that of the federal state in which you have your residence, or the authority that is competent for us as the controller:

11. Data Security

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content (e.g. orders). You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://".

12. Topicality and amendment of this data protection declaration

This data protection declaration is currently valid and has the status stated above. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be retrieved and printed by you at any time on this page.