Privacy Policy

a) When visiting the website

Each time a customer (or other visitor) accesses our website, information is automatically sent to the server of our website by the internet browser used on your device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a so-called log file.

The following data is collected without your intervention and stored until automated deletion:

• (Pseudonymized) IP address of the requesting computer, as well as device ID or individual device identifier and device type
• Name of the retrieved file and amount of data transferred, as well as date and time of retrieval
• Notification of successful retrieval as well as the requesting domain
• Description of the type of internet browser used and, if applicable, the operating system of your device, as well as the name of your access provider
• Your browser history data as well as your standard weblog information
• Location data, including location data from your mobile device (the use of location services can be controlled or deactivated in the settings menu of your mobile device)

Our legitimate interest in collecting the data pursuant to Art. 6 (1) sentence 1 lit. f GDPR is based on the following purposes:

• Ensuring a smooth connection setup and a comfortable use of the website
• Evaluation of system security and stability
• Other administrative purposes

Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. The above-mentioned data is deleted after leaving the website.

b) Registration as a user

When you register as a user, this is done by providing the following data:

• Data that personally identifies you, such as first name, surname and email address, postal address
• VAT identification number
• Commercial register number
• Telephone number

The data processing for the purpose of registration takes place pursuant to Art. 6 (1) sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The data is deleted when you deregister your user account, unless we are obliged to store it for a longer period due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO).

c) When concluding a contractual relationship

When concluding a contractual relationship via our website, we ask you to provide the following personal data:

• Data that personally identifies you, such as name and email address, billing and delivery address
• Information about your means of payment
• Other personal data which we are legally obliged or entitled to collect and process and which we need for your authentication, identification or for verifying the data we have collected

The aforementioned data is processed to handle the contractual relationship. The processing of the data takes place on the basis of Art. 6 (1) sentence 1 lit. b GDPR. Your data is stored until the expiry of the statutory warranty obligation and then deleted, unless we are obliged to store it for a longer period due to tax and commercial law retention and documentation obligations.

d) Use of payment service providers

To process your order, we work together with the following payment service providers. The legal basis for the transfer of the data is in each case Art. 6 (1) sentence 1 lit. b GDPR.

A chat function can be used on our website for faster and more efficient processing of customer inquiries.

The legal basis for the processing of your data that you enter in the chat program is your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

The chat histories are deleted after the expiry of the regular limitation period pursuant to § 195 BGB, i.e. three years after the end of the year in which the respective chat took place. Storage takes place for the purpose of asserting, exercising or defending legal claims.

If chat histories are the subject of judicial or official proceedings, they are stored beyond the regular limitation period and only deleted after the legally binding conclusion of the respective proceedings. The legal basis for this is Art. 6 (1) sentence 1 lit. f GDPR.

On our platform there is the possibility of rating service providers. Insofar as you provide personal data in this context, the legal basis for the processing is your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

The ratings are deleted three years after the end of the year in which the provider ended their presence on the platform. Storage takes place for the purpose of asserting, exercising or defending legal claims.

If ratings are the subject of judicial or official proceedings, they are stored beyond the aforementioned period and only deleted after the legally binding conclusion of the respective proceedings. The legal basis for this is Art. 6 (1) sentence 1 lit. f GDPR.

A transfer of your data to third parties for purposes other than those listed below does not take place. We only pass on your data to third parties if:

• you have given express consent to do so (Art. 6 (1) sentence 1 lit. a GDPR)
• this is necessary for the handling of contractual relationships with you (Art. 6 (1) sentence 1 lit. b GDPR)
• there is a legal obligation to pass it on (Art. 6 (1) sentence 1 lit. c GDPR)
• the disclosure is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (Art. 6 (1) sentence 1 lit. f GDPR)

In these cases, the scope of the transmitted data is limited to the necessary minimum. We also work together with third-party providers who may process data outside the EU. All third-party providers with whom we work are listed in this privacy policy.

On request, we will be happy to inform you whether and which personal data is stored about you. You have the following rights:

• Right of access to stored data, processing purposes and recipients (Art. 15 GDPR)
• Right to rectification – correction of incorrect or completion of incomplete data (Art. 16 GDPR)
• Restriction of processing, provided the legal requirements are met (Art. 18 GDPR)
• Data portability – receipt of your data in a structured, machine-readable format (Art. 20 GDPR)
• Right to be forgotten – deletion of your personal data (Art. 17 GDPR)
• Right of withdrawal – withdrawal of your once-given consent at any time (Art. 7 (3) GDPR)
• Right to object to the processing of your personal data (Art. 21 GDPR)

If you would like to make use of your right of withdrawal or objection, an email to: info@eveyamin.com is sufficient.

In the event of violations of data protection regulations, you have the option pursuant to Art. 77 GDPR of lodging a complaint with the competent supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information NRW (www.ldi.nrw.de) as well as any other competent supervisory authority.

The collected data is stored with us for as long as this is necessary for the performance of the contracts concluded with us, or as long as you have not exercised your right to deletion or your right to data transfer to another company.

We use cookies on our website. These are small text files that your browser automatically creates and that are stored on your device when you visit our website. These cookies are set as so-called first-party cookies or third-party cookies and are differentiated into technically necessary and technically non-necessary cookies.

a) Technically necessary cookies

Technically necessary cookies are absolutely required for the operation of our website and, for example, make certain functions possible in the first place. These cookies are automatically deleted after leaving our website.

The legal basis is Art. 6 (1) sentence 1 lit. f GDPR.

b) Technically non-necessary cookies

Insofar as you have given the corresponding consent, we use so-called technically non-necessary cookies on our site. These mainly serve to evaluate the use of the website and user behavior and to provide further related services. The technically non-necessary cookies we use are explained in our cookie banner with regard to their functionality, duration and possible third-party recipients.

The legal basis is Art. 6 (1) sentence 1 lit. a GDPR, provided you have given your consent. You can withdraw your consent at any time. Furthermore, you have the option at any time of configuring the setting of cookies in your browser or refusing it completely.

We have hosted the website with the help of the service provider Supabase, Inc., 3500 S Dupont Hwy, Dover, DE 19901, USA. Our website is hosted on servers in Ireland. All data collected on our website is processed on the servers in the EU.

The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR. Further information on data protection at Supabase can be found at: Privacy Policy | Supabase

We do not use any social media plugins on our website that immediately transmit your IP address. Instead, we use the so-called Shariff solution, in which no personal data is initially passed on to the providers of the individual social media plugins. Only when you click on one of the social media graphics can data be transmitted to the respective service provider and stored there.

We point out that data of our website visitors can also be processed outside the area of the European Union. Furthermore, it is possible that user data can be processed for market research and advertising purposes by the third-party providers and usage profiles can be created.

By way of the Shariff solution, we use links to the following social networks:

We endeavor to take all necessary technical and organizational security measures in order to store your personal data in such a way that it is accessible neither to third parties nor to the public.

Should you wish to contact us by email, we point out that with this means of communication the confidentiality of the transmitted information cannot be fully guaranteed. We therefore recommend that you send us confidential information exclusively by post.

This privacy policy is currently valid and has the status March 2026. Due to the further development of our website or due to changed legal requirements, it may become necessary to amend this privacy policy. The respective current privacy policy can be retrieved by you at any time on our website.

This data protection information applies to data processing by: