Privacy policy

 

1. Data Controller

The controller responsible for data processing on this website is:

YanaDreams GbR
Zahra Bonakdar & Nazanin Yarmohammadi
Moltkestr. 4
45128 Essen
Germany
Email: yanaadreams@gmail.com

2. General Information on Data Processing

We take the protection of your personal data very seriously. We process personal data only in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR).

a) Legal bases for processing

We process personal data in particular on the basis of:

  • Art. 6(1)(a) GDPR (consent)

  • Art. 6(1)(b) GDPR (performance of a contract)

  • Art. 6(1)(c) GDPR (legal obligation)

  • Art. 6(1)(f) GDPR (legitimate interest)

b) Storage period

Personal data is stored only for as long as necessary to fulfill the respective purposes or as long as statutory retention obligations exist.

c) Disclosure of data

We only share your data if this is necessary for contract performance, if we are legally obliged to do so, or if you have expressly consented.

3. Rights of Data Subjects

You have the right at any time to:

  • access (Art. 15 GDPR)

  • rectification (Art. 16 GDPR)

  • erasure (Art. 17 GDPR)

  • restriction of processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

4. Data Collection When Visiting Our Website

a) Server log files

When you visit our website, information is automatically collected by the hosting provider (e.g., IP address, browser type, date and time of access).
This data is used to ensure the technical security and stability of the website.
Legal basis: Art. 6(1)(f) GDPR

5. Hosting and E-Commerce Platform Shopify

Our online shop is operated via Shopify International Limited, Dublin, Ireland.
Shopify processes personal data on our behalf. This may also involve transferring data to third countries (e.g., Canada or the USA). Shopify uses Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR to ensure an adequate level of data protection.

Further information:
https://www.shopify.com/legal/privacy

6. Cookies & Consent Management

Our website uses cookies. Technically necessary cookies are required to operate the shop.
Additional cookies (e.g., for analytics or marketing) are only set with your consent.
Your consents are managed via the cookie consent tool integrated in Shopify.

Legal basis:

  • Technically necessary cookies: Art. 6(1)(f) GDPR

  • All other cookies: Art. 6(1)(a) GDPR

7. Customer Account

If you create a customer account, we process the data you provide to manage your account and process your orders.
Legal basis: Art. 6(1)(b) GDPR

8. Order Processing

To process your order, we process in particular:

  • name

  • billing and delivery address

  • payment data

  • email address

This data is required for the conclusion and performance of the contract.

9. Payment Service Providers

For payment processing, we pass the necessary payment data to the selected payment service provider:

  • PayPal

  • Klarna

  • Visa

  • Mastercard

  • Apple Pay

  • Google Pay

Processing is carried out exclusively by the respective payment provider. Their privacy policies apply.
Legal basis: Art. 6(1)(b) GDPR

10. Shipping Service Provider

Shipping is carried out via DHL.
For this purpose, we pass your name and delivery address to DHL.
Legal basis: Art. 6(1)(b) GDPR

11. Contact Form & Email Contact

If you contact us via the contact form or by email, your details will be stored to process your request.
Legal basis: Art. 6(1)(b) GDPR (contract-related enquiries)
or Art. 6(1)(f) GDPR (other enquiries)

12. Newsletter

If you subscribe to our newsletter, we use your email address exclusively to send the newsletter.
Registration takes place using the double opt-in procedure.
You can unsubscribe from the newsletter at any time.
Legal basis: Art. 6(1)(a) GDPR

13. Social Media (External Links)

Our website contains links to social networks such as Instagram, Pinterest, and TikTok.
When you click these links, you leave our website. The respective platform operators are solely responsible for the processing of personal data on those platforms.

14. Changes to This Privacy Policy

We reserve the right to amend this privacy policy in order to adapt it to changed legal requirements or changes to our services.