Privacy Policy

Privacy at a glance

We take the protection of users' personal data seriously. Yadore GmbH treats your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

Many data processing operations are only possible with your express consent. Users may revoke consent they have already given at any time. An informal notification by email to Yadore GmbH is sufficient for this purpose. The lawfulness of data processing carried out until revocation remains unaffected by the revocation.

Users have the right to receive data that Yadore GmbH processes automatically on the basis of their consent or in fulfilment of a contract, either for themselves or for a third party, in a commonly used, machine-readable format. If the user requests direct transfer of the data to another controller, this will only be done where technically feasible.

The following information explains how Yadore GmbH handles your personal data when you visit our website yadore-targeting.com or advertising placed by us on partner sites (our own sites or third-party sites). Personal data means any data with which you – hereinafter referred to as the "user" – can be personally identified in any way. The details are explained in this privacy policy.

We hereby expressly object to the use of contact data published as part of our legal notice obligations for sending unsolicited advertising and information materials. Yadore GmbH expressly reserves the right to take immediate legal action in the event of unsolicited transmission of advertising information, such as spam emails.

Last updated: 22 July 2026

Legal basis for our services and general information on the use and disclosure of data

The information in this privacy policy is intended to inform you about the purpose, scope and nature of the processing of your personal data within our entire online offering and all associated websites, including their functions and content (hereinafter collectively referred to as the "website" or "online offering"). This statement applies to all platforms and devices (e.g. mobile devices or desktop PCs) on which our online offering is used or executed, regardless of the domains or systems used. This information is provided in accordance with Art. 13 GDPR.

Terms used, such as "personal data" or its "processing", are explained in the definitions in Art. 4 of the General Data Protection Regulation (GDPR). Personal user data processed within this online offering includes, for example, personal data (such as customer names and addresses, IP addresses), transaction data (order numbers, services used), as well as usage data and customer inputs within our online offering (e.g. interest in specific products or content or entries in the contact form). Persons affected by data processing include all visitors to our online offering, including business partners, prospects and customers, hereinafter referred to as "users". Terms such as "user", "customer" or "service provider" are to be understood in a gender-neutral manner.

All personal user data is processed in compliance with applicable data protection provisions. The basis for this is the existence of legal permission and the user's consent. Where data processing is necessary for the provision of our contractual services (e.g. order processing) or online services (e.g. to ensure and comply with legal requirements), or also on the basis of our legitimate interests (e.g. for the security of our online offering within the meaning of Art. 6(1)(f) GDPR, analysis to optimise the security and economic efficiency of our operations, including profiling for advertising and marketing purposes, collection of reach and access data and third-party services), we will use the data within the scope of legal permission.

Art. 6(1)(a) and Art. 7 GDPR form the legal basis for consents, Art. 6(1)(b) GDPR serves as the legal basis for processing for contract and service provision. The legal basis for processing data to fulfil our legal obligations is Art. 6(1)(c) GDPR, and the basis for processing data to protect our legitimate interests is Art. 6(1)(f) GDPR.

Disclosure of data to third parties and third-party providers

Data is disclosed to third parties exclusively within the scope of legal requirements. Disclosure only takes place where this is necessary for contractual purposes/fulfilment (pursuant to Art. 6(1)(b) GDPR), or on the basis of legitimate interests in our economic and effective business operations (pursuant to Art. 6(1)(f) GDPR).

To comply with legal requirements and to protect personal data, we also take appropriate legal, technical and organisational measures when using subcontractors.

Where third-party services, tools or other means are used and the provider's registered office is located in a third country, a data transfer to that country is also likely. The GDPR is an EU regulation and applies to all member states in any case. Transfers to countries outside the EU or the European Economic Area only take place with legal permission, user consent, or where an adequate level of data protection exists in the respective third country.

Where Yadore GmbH places advertising offers on yadore-targeting.com, other websites or third-party websites, the following applies

Yadore GmbH only stores data when the user has actually clicked on an advertisement from Yadore GmbH. The time of the click, the origin (i.e. on which website the click occurred), which advertisement was accessed there and the related information, such as the clicked shop and which category there, are stored anonymously. In addition, the referrer (i.e. from which website the user came), the user's IP address, the browser used by the user and the user's country of origin are stored anonymously. Furthermore, an identification number for the click from the website on which the advertisement is placed is stored, as well as an identification number for the overall process. No personal data of the user is stored.

The following user data is disclosed to our advertising partners for the purpose of commission settlement as follows

The anonymous identification number generated by Yadore GmbH specifically for the respective process is only disclosed for billing purposes and to verify whether and which clicks were counted/not counted. Therefore, no personal data of the user is disclosed, only the anonymous identification number generated by Yadore GmbH for the respective process.

The following anonymous data is returned to the operator of the site (= "publisher") on which the user clicked the advertisement

During the "click process", an internal, anonymous "click identification number" is generated. From this number, the publisher cannot under any circumstances draw conclusions about the user or access their personal data. The "publisher" may be assigned their own "click identification number"; they are informed of the time of access (= click) by the user, the country of origin and the page on which the access by the user took place, i.e. the shop where the click was executed. The aforementioned anonymous data is stored for billing purposes for 90 days. The legal basis for this data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Yadore GmbH automatically collects and stores information in so-called server log files that the user's browser automatically transmits to Yadore GmbH

These are:

• Anonymised IP address
• Browser type and browser version
• Operating system
• Referrer URL
• Hostname of the accessing computer
• Time of the server request

This data will under no circumstances be merged with other data sources.

The legal basis for this data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

If the user sends enquiries to Yadore GmbH via the contact form, the information from the enquiry form including the contact details provided by the user there will be stored for the purpose of processing the enquiry and in case of follow-up questions at Yadore GmbH. We do not disclose this data without the user's consent.

The processing of data entered in the contact form is carried out exclusively on the basis of the user's consent pursuant to Art. 6(1)(a) GDPR. The user may revoke this consent at any time. An informal notification by email to Yadore GmbH is sufficient for this purpose. The lawfulness of data processing operations carried out until revocation remains unaffected by the revocation.

Data entered by the user in the contact form remains stored at Yadore GmbH until the user requests deletion, revokes consent to storage or the purpose for data storage no longer applies. Mandatory legal provisions – such as retention periods – remain unaffected.

Protection and security measures

To protect the data processed by us against accidental or intentional manipulation, destruction, loss or access by unauthorised persons, and to comply with data protection laws, we implement technical, organisational and contractual security measures in accordance with the state of the art.

Encrypted transmission of data between our server and your browser is one of the security measures we employ.

Provision of contractual services

To fulfil our contractual and service obligations, we process master data (e.g. name and address as well as contact details of users) and data on concluded contracts (e.g. services used, information on payment and shipping) pursuant to Art. 6(1)(b) GDPR. The mandatory information required to create a user account is communicated to users as part of registration. User accounts cannot be indexed by search engines as they are not public. Data from terminated user accounts is deleted unless retention is necessary for commercial or tax reasons (pursuant to Art. 6(1)(c) GDPR). Upon termination, users are responsible for securing their data before the end of the contract. We are entitled to irrevocably delete all data of the user stored during the contract term.

To protect against abusive or unauthorised use and to safeguard our legitimate interests, we store the IP address and timestamp upon registration, re-login and when the user uses our online services. As a rule, this data is not disclosed to third parties; exceptions include the pursuit of our claims or a legal obligation pursuant to Art. 6(1)(c) GDPR.

For advertising purposes, we create a user profile based on usage data (e.g. visits to our websites or specific product interests) as well as content data (entries in forms or information in the customer account) in order to display product information and offers of interest to the user.

Reach measurement and use of cookies

Cookies are small files stored on users' storage media.

We primarily use cookies (session cookies) that are deleted from the respective storage medium when the browser session ends. Session cookies are required, for example, to enable shopping cart functions or to store your entries across multiple pages. However, we also use cookies that remain on the user's hard drive. This enables automatic recognition of the user on a return visit and preferred entries and settings. These cookies are stored on the hard drive for a period of one month to 10 years and delete themselves after the specified time. These cookies primarily serve to make the online offering more user-friendly, secure and effective. We also inform users within this privacy policy about the use of cookies for pseudonymous reach measurement.

If users wish to avoid the storage of cookies, this option can be disabled in the browser settings. Cookies already stored can also be deleted there; however, excluding cookies may lead to functional limitations of our online offering. An objection to the use of cookies used for reach measurement and advertising purposes can be made via the opt-out page of the Network Advertising Initiative (optout.networkadvertising.org), the European website youronlinechoices.com and additionally the US website (aboutads.info/choices).

Google reCAPTCHA

With the user's consent pursuant to Art. 6(1)(a) GDPR, we use Google's captcha service, which protects websites from spam software and abuse by non-human visitors. This service is used when you fill out our form. Google reCAPTCHA belongs to Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. Further information on data protection can be found at Google.

Collection of access data and records (log files)

For every access to our servers, we collect corresponding data (so-called server log files) in our legitimate interest within the meaning of Art. 6(1)(f) GDPR, including date and time, data volume, name of the accessed website, success message about the retrieval, the operating system including browser type and version, the previously visited website, the IP address and the provider.

For the investigation of fraud or abuse, log file information is stored for security reasons for a maximum of seven days and then deleted. If certain data is required for evidentiary purposes, deletion is postponed until the incident has been finally clarified.

Use of Google Analytics

To optimise, analyse and operate our online offering economically, we use Google Analytics in our own interest within the meaning of Art. 6(1)(f) GDPR. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google uses cookies for analysis with information about users' use of the online offering.

Google creates reports on the use of our online offering on our behalf. For this purpose and for further services on our behalf, information about users' activities within our offering is collected. This information may also be used to create pseudonymous usage profiles. As a rule, Google truncates the user's IP address within the EU or EEA (IP anonymisation activated).

The user's IP address is not merged with other Google data. Users can prevent the collection and processing of user data by downloading and installing the browser plugin available at this link: tools.google.com/dlpage/gaoptout. Cookie storage can also be avoided through settings in the respective browsers. In addition to browser settings and Google's add-on software, we offer a further function to prevent data collection. This allows you to see whether the collection of your visits via Google Analytics is activated on our website. You can also prevent collection by clicking "Deactivate now". When you click the button, an HTML5 storage object is stored on your computer, which then ensures that no Google Analytics script is loaded. If website data is deleted in this browser, the link must be clicked again. Furthermore, the opt-out only applies within the browser you are using and only within our respective web domain on which the link was clicked.

Further information on settings and objection options as well as data collection by Google can be found directly at Google: google.com/policies/privacy/partners, google.com/policies/technologies/ads; you can also view and edit your ad settings here: adssettings.google.com.

Integration of third-party services and content

Third-party offerings are also used within our online offering. The basis for this is likewise our legitimate interest within the meaning of Art. 6(1)(f) GDPR. For the content and its presentation (e.g. videos or fonts), it is necessary for third-party providers to recognise the user's IP address. This is essential for delivering the content to the browser. When selecting third-party providers, we ensure that we only use providers that use the IP address solely for delivering the content. Third-party providers may also use web beacons or pixel tags to collect data for statistics and marketing. This may, for example, be used to analyse information about website visitors. All data may be stored pseudonymised in cookies on the device used by the user. This data includes, among other things, technical information about the operating system and browser, as well as data on use of the offering. This data may also be linked with data from other sources.

Below you will find an overview of the third-party providers integrated by us, including links to the respective privacy policies. These also contain further information on objection options and opt-out options, where available.

• We may use "Google Tag Manager" to integrate and manage various analytics and marketing services.
• External code of the JavaScript framework "jQuery", provided by third-party provider jQuery Foundation, jquery.org.

Further information on third-party cookies

Yadore GmbH works with numerous affiliate networks that act as intermediaries between Yadore GmbH website partners and advertisers. These networks use cookies to record the click and a subsequent purchase and thereby enable payment of a commission to Yadore GmbH. Affiliate network cookies are set when clicking a link within a partner website to an advertiser or a product of the advertiser. Yadore GmbH has no influence over affiliate network cookies. Below you will find an extract of the affiliate networks with which Yadore GmbH cooperates:

Users' personal rights

Upon request, any user may obtain information about their personal data stored by us.

In addition, users have the right to have inaccurate data rectified, as well as to restrict the processing and deletion of their personal data. The right to data portability may also be asserted. A complaint to the competent supervisory authority is possible at any time. Any consent given by the user may in principle be revoked at any time with effect for the future only.

Data deletion

Data that is not subject to a statutory retention period is deleted as soon as it is no longer required for its purpose. If deletion is not possible due to its legally permitted purpose or other provisions, its processing is restricted. Blocking the data therefore prevents processing for other purposes.

Retention is carried out in accordance with Section 257(1) of the German Commercial Code (HGB) (for commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) for 6 years, and in accordance with Section 147(1) of the German Fiscal Code (AO) (for books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.) for 10 years.

Right to object

Users may object to the future processing of their personal data in accordance with legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.

Updates to this privacy policy

We reserve the right to amend this privacy policy in the event of changes to the legal situation, as well as changes to our services or data processing. This applies exclusively with regard to statements on data processing. Where user consent is required, or components of the privacy policy contain provisions of the contractual relationship with users, changes are only possible with the users' consent.

We ask users to regularly obtain independent information about the content of this privacy policy.