Data Privacy
Data Privacy Statements from Yeman Industries (Holdings) Ltd.
Your reliance on the correct handling of your data is an important prerequisite for the success of our site. Due regard is taken of the applicable provisions of data protection law when we process your data. We should like to inform you in this data privacy statement about how your data are processed when you use this website and other sites.
This data privacy statement applies irrespective of the domains, systems, and platforms used by us, and the terminals used, on which our services are offered.
1) The Controller / Responsible Authority is
Company name
Yeman Industries (Holdings) Ltd,
Company address
11/F., Greatmany Centre
109-115 Queen’s Road East
Wanchai
Hong Kong
Company telephone number
+86 139 1199 1910
Website
https://www.yeman-international.com
E-mail address
info@yeman-international.com
2) Legal base for the processing
If we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) GDPR is the applicable legal base (consent).
Article 6 (1) (b) GDPR is the legal base for the processing of personal data required to perform a contract to which the data subject is one of the parties (contractual purpose). This applies also to processing procedures which are necessary to implement pre-contractual measures.
If the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6 (1) (c) GDPR is the legal base (legal obligation).
For the case where the vital interests of the data subject or another natural person make necessary the processing of personal data, Article 6 (1) (d) GDPR serves as the legal base (protection of vital interests).
If the processing is necessary to safeguard a legitimate interest of our company or a third-party and the interests, basic rights and freedoms of the data subject do not override the first-mentioned interest, the legal base for processing is Article 6 (1) (f) GDPR (weighing of legitimate interests). The legitimate interest of our company lies in the performance of our business activity.
3) Processing of access data and log files
Our website is designed so that personal data are required only when it is really necessary. You can terminate the use of our website at any time by closing your browser or accessing another Internet site
During your use of our Internet site we collect and use access data/log files such as:
- the name of your Internet provider,
- the site from which you have accessed our site or the name of the requested file,
- date and time of the request,
- amount of data transferred,
- the message as to whether the access was successful,
- the incomplete IP address (first three blocks of figures) of the requesting computer,
- the referring URLs,
- type of browser used,
- type of operating system used.
These data are processed to facilitate the use of the website (dial-up), system security, the technical administration of the network infrastructure and optimising the Internet site, and therefore based on our legitimate interests within the meaning of Article 6 (1) (f) GDPR and for the protection of the user and to prevent other unauthorised use. These data are not transferred to third parties and are not analysed further. We do not create a personal user profile.
4) Processing of personal data in the context of contractual and personal services
Also, personal data are processed if you communicate these, for example when requesting catalogues, samples, registration for our newsletter, when placing an order or for other queries through our contact details or by e-mail or when these are used for services or own advertising purposes.
When you send us a contact query and register for the performance of a legal transaction or the execution of a contract we collect personal data, such as IP address, surname, forename, interests, address, contact details (e-mail, telephone numbers) and in certain circumstances, location data. It is easy to discover from the input screen exactly which data are collected. Any customer account may be erased at any time by de-registering or sending us a message. The data provided are stored by us and used to process the desired legal transaction. Unless we have your separate consent, we use the data you have provided to us solely for the necessary fulfilment and processing of the services offered, to comply with our contractual obligations and services under Article 6 (1) (b) GDPR.
When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.
Furthermore, personal data are processed when you register for our newsletter. The data provided for the newsletter (e.g. name and e-mail address) are used by us for our promotional purposes and to send further electronic notification and promotional information for our newsletter on our products, offers, campaigns and our company, once you have expressly consented thereto (double opt-in).
You can cancel your subscription to the newsletter at any time through the link provided in the newsletter e-mail or by sending us an appropriate message and thereby withdrawing your consent. On your cancellation of receipt of the newsletter, your e-mail address is immediately erased from our newsletter distribution list.
The newsletter sent by us contains a pixel tag, through which technical information, such as IP address, browser, operating system, access, time of access and links clicked on is collected when the customer opens the newsletter. This information is used for the technical improvement of our newsletter service and to adapt it better to the customer’s needs.
When we receive queries via the contact form, by e-mail or live chat, personal data are processed for handling contact queries and their development under Article 6 (1) (b) GDPR.
It is obvious from the contact form or dependent on your message by e-mail or live chat which data are collected. These data are stored and used solely to respond to your request or to make contact with you and for the associated technical administration.
Once your query has been finally processed, your data are erased insofar as you desire this and provided that there are no conflicting legal duties of retention.
Based on legitimate interests within the meaning of Article 6 (1) (f) GDPR and for our promotional purposes we reserve the right to retain your forename(s) and surname, your postal address, your e-mail address and, insofar as we have received additional information in the context of the contractual relationship, to store your title, academic degree, your year of birth and your professional, trade or business description in consolidated lists and to use these data to send you interesting offers and information on our products. You may object to the storage and use of your data for this purpose at any time by sending us a message.
Unless we have your consent, we use the data you have provided solely for the necessary performance and development of the services offered and based on our legitimate interests. When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.
As part of the registration procedure for the respective service, the user is made aware by transparent means of the scope of any consent required and the consent is logged. The content of the consent granted is available to the user for access within the service. Please note that, should you not grant your consent, it may not be possible for you to use the respective service.
5) Information on the newsletter
To despatch the newsletter this website uses the services of CampaignMonitor (http://www.campaignmonitor.com). CampaignMonitor’s data protection statements are available here: http://www.campaignmonitor.com/privacy/.
We use CampaignMonitor based on our legitimate interests under Article 6 (1) (f) GDPR and have a commissioned data processing contract with them under Article 28 (3) 1st sentence GDPR. CampaignMonitor may use the recipients’ data in pseudonymised form, i.e. without attributing them to a user, for the optimisation or improvement of their services, e.g. to optimise the technical performance of the despatch and representation of the newsletter or for statistical purposes. However, CampaignMonitor does not use the data from our newsletter recipients to write directly to the latter or to transfer the data to third parties. If you do not wish your data to be analysed by CampaignMonitor, you must cancel your subscription to the newsletter. In each newsletter message, we provide an adequate link for this purpose.
6) Use of cookies
To make a visit to our Internet sites attractive and to facilitate the use of certain functions and in our legitimate interests, on various sites we use what are known as cookies. These are small text files which are deposited on your terminal.
When you access a page, the cookie is transmitted to this page and thus it becomes possible to allocate it to the user. Cookies help to simplify the use of Internet sites for users (such as by storing log-in data). Some of the cookies used by us are erased at the end of the browser session, in other words, when you close your browser. Other cookies remain on your terminal and allow us or our partner firms to recognise your browser when you next visit us.
You can adjust your browser settings so that you are notified when cookies are deposited and can decide on an individual basis whether to accept them or exclude the acceptance of cookies in determined cases or in general. Deposited cookies can be erased. If you do not accept the use of cookies, this may restrict the functionality of our site, in particular the ordering of products on our website.
7) Information on web analysis services
Based on our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the following web analysis services for the analysis and optimisation of our sites:
This website uses Google Analytics, a web analysis service of Google Inc. (Google). Google Analytics uses text files, known as cookies, which are stored on your computer and allow the use of the website to be analysed. The information generated by the cookie about your use of this website is normally transmitted to a Google server in the USA and stored there. If IP anonymisation is enabled on this website, your IP address is, however, abbreviated by Google within the Member States of the European Union or in other States which are contractual parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server in the USA and abbreviated there. Google uses this information on behalf of the operator of this website, to evaluate your use of the website, to compile reports on website activity and to perform other services connected to the use of the website and the Internet for the website operator. The IP address transmitted by Google Analytics from your browser shall not be merged with other Google data. You can prevent your computer storing cookies by adjusting the settings of your browser software; however, we should like to make you aware that in this case, you may not be able to use all the functions of this website to their full extent. Moreover, you can prevent the collection of the data generated by the cookie and by your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available from the following link.
As an alternative to a browser plug-in or within the browsers on mobile devices, please click on the following link to download an opt-out cookie, which will in the future prevent Google Analytics from collecting data within this website. This opt-out cookie works only in the given browser and in the given domain. If you erase your cookies in this browser, you must click on this link again. Deactivate Google Analytics
8) Information on Google marketing and re-marketing services
Based on our legitimate interests (i.e. interest in the analysis, optimisation and commercial operation of our online offer within the meaning of Article 6 (1) (f) GDPR) we use the marketing and re-marketing services (in short: Google Marketing Services) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google is certified under the Privacy Shield Convention and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google Marketing Services allow us to present targeted advertising for and on our website, to present to users only those advertisements which potentially address their interests. When a user is shown advertisements for products for which he has shown interest on other websites, this is referred to as re-marketing. For these purposes, when you access our websites and those of others, on which Google Marketing Services are active, Google issues a code and this integrates marketing or re-marketing tags (invisible graphics or codes, also known as web beacons) into the website. With their help, an individual cookie, or small file, is saved on the user’s terminal. Instead of cookies, other technologies may be used. Cookies may be deposited from a variety of domains, including from google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file notes which websites the user visited, what contents interest him and which offers he has clicked on, other technical information on the browser and operating system, referring websites, time of the visit and other information on the use of the online offer.
The user’s IP address is also recorded. Within the scope of Google Analytics, we inform you that the IP address will be truncated within the Member States of the European Union or in other states/countries which are contractual parties to the Agreement on the European Economic Area and only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. The IP address is not merged with the user’s data within other offers from Google. Google may also link the information detailed above with such information from other sources. If the user then visits another website, advertisements matched to his interests may be displayed to him.
The user’s data are processed by Google Marketing Services in a pseudonymised form. This means that Google does not, for example, store and process the name or e-mail address of the user, but processes the relevant data obtained from the cookie within a pseudonymous user profile. This, in turn, means that from Google’s point of view the advertisements are not administered and displayed to a specifically identified person, but to the possessor of the cookie, irrespective of who this cookie possessor is. This does not apply if a user has expressly permitted Google to process the data without pseudonymisation.
The information collected by Google Marketing Services on the user is transferred to Google and stored on Google servers in the USA. One of the Google Marketing Services used by us is the online advertising program, Google AdWords. In the case of Google AdWords, each AdWords customer receives another conversion cookie. Cookies thus cannot be tracked via the websites of AdWords customers.
The information obtained using the conversion cookies serves to generate conversion statistics for AdWords customers who use conversion tracking. The customers discover the total number of users who have clicked on their advertisement and who have been forwarded to a page provided with a conversion tracking tag. However, they do not receive any information which allows the user to be personally identified. Based on the AdSense Google Marketing Service we can integrate advertisements from third parties. AdSense uses cookies with which Google and its partner websites can display advertisements based on users’ visits on this website or other websites on the Internet.
We are also able to use Google Tag Manager to integrate and administrate Google analysis and marketing services on our website. Further information on the use of data by Google for marketing purposes is available on the overview page: https://www.google.com/policies/technologies/ads; the data privacy statement from Google is available on https://www.google.com/policies/privacy. If you wish to object to interest-related advertising by Google Marketing Services, you may use the settings and opt-out facilities provided by Google: http://www.google.com/ads/preferences.
9) Information on the integration of Google Maps
This website uses the Google Maps API to display visual geographical information. When you use Google Maps, Google also collects, stores and uses data on the use of the map function by visitors. More detailed information on data processing by Google is available in the Google data protection information. There in the data protection centre, you can also modify your data protection settings.
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data Privacy Statement: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
10) Information on the use of Google Webfonts
To display our contents correctly and graphically on all types of browser, we use script libraries and font libraries on this website, such as Google Webfonts (https://www.google.com/webfonts/). Google Webfonts are transferred to your browser cache to avoid repeated downloads. If your browser does not support Google Webfonts or prohibits access, contents are displayed in a standard font.
Accessing script libraries or font libraries automatically triggers a connection to the library operator. In this way, it is theoretically possible that operators of relevant libraries might collect data, although it is currently not clear whether and, if applicable, to what purpose they would do so.
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data Privacy Statement: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
11) General Information for the use of Facebook, Twitter and Instagram
Based on our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the following plug-ins to analyse and optimise our offers:
The social plug-ins (plug-ins) of the Facebook social network and the Twitter and Instagram micro-blogging services are used on our website. These services are offered by Facebook Inc., Google Inc., Twitter Inc. and Instagram LLC (providers).
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). This site offers an overview of the appearance of Facebook plug-ins: https://developers.facebook.com/docs/plugins.
Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (Twitter). This site offers an overview of the appearance of Twitter buttons: https://twitter.com/about/resources/buttons
Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (Instagram). This site offers an overview of the appearance of Instagram buttons: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
If you access one of the pages on our website which contains such a plug-in, your browser establishes a direct connection to the Facebook, Twitter or Instagram servers. The content of the plug-ins is transferred by the respective provider directly onto your browser and integrated into the site. By integrating the plug-ins, the providers receive the information that your browser has visited the relevant page of our website, even if you do not have a profile or are currently not logged on. This information (including your IP address) is transferred directly from your browser to a Facebook, Twitter or Instagram server in the USA and stored there.
If you are logged into one of these services, the provider can directly allocate the visit to our website to your profile on Facebook, Twitter or Instagram. If you interact with the plug-ins, for example, by activating the “like”, “tweet” or Instagram button, the relevant information is transferred directly to one of the providers’ servers and stored there. Also, the information is published on the social network, your Twitter or Instagram account and displayed to your contacts. The purpose and scope of data collection and the further processing and use of the data by Facebook, Twitter or Instagram as well as your rights in this regard and possible browser settings to protect your privacy can be found in the Facebook, Twitter and Instagram data protection instructions.
Data protection information from Facebook: http://www.facebook.com/policy.php
Data protection information from Twitter: https://twitter.com/privacy
Data protection information from Instagram: https://help.instagram.com/155833707900388/
If you do not want Facebook, Twitter or Instagram to allocate the information collected on our website directly to your profile in the respective service, you must log out of the respective service before visiting our website. You can also prevent the plug-ins uploading any data by using add-ons on your computer, e.g. by using the NoScript script blocker (http://noscript.net/).
12) Third-party services and contents, disclosure and transfer
Based on our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the services of third parties to analyse and optimise our sites. In these cases, the third-party suppliers may see the IP address of the users of third-party contents or this may be necessary for the performance of the services of the third-party suppliers. The third-party suppliers may also evaluate information on visitor traffic by using pixel tags and may use this information for statistical or marketing purposes. Also, this information may be stored in cookies and deposited on the terminals of the users. These cookies may contain technical information on the browser and operating system used, the time of the visit and other details of the use of our website and may be linked with this information from other sources.
Based on our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we also use various other service providers to perform our contracts. These include in particular payment processors, credit rating services, shipping providers and carriers.
13) Data security
To prevent unauthorised access or unauthorised disclosure, to guarantee the accuracy of the data and to ensure the authorised use of the data, we have implemented technical and organisational procedures to secure and protect the data which we request online. We use technical and organisational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorised persons.
We use the encrypted transfer of data between your browser and our server. During any ordering process, your data are transferred over the Internet in encrypted form using SSL encryption.
14) Contacting us
If a contact form is available on our website, this can be used to contact us electronically. Alternatively, it is possible to contact us via the e-mail address provided. If the data subject contacts us via one of these channels, the personal data provided are automatically stored. Data are stored solely to process the data or of contacting the data subject. Data are not transferred to third parties.
15) Routine erasure and blocking of personal data
The controller in charge of the processing processes and stores personal data only for as long as this is necessary to achieve the purpose of storage. Data may be stored for a longer period if this is required by European or national legislation in statutory orders, laws or other provisions of European Union law to which the Controller of the data processing is subject.
As soon as the purpose of storage ceases to apply or a storage period prescribed by the aforesaid provisions expires, the personal data are routinely blocked or erased.
16) Rights of the data subject
Every data subject has the right to disclosure following Article 15 GDPR, the right to rectification following Article 16 GDPR, the right to erasure following Article 17 GDPR, the right to restriction of processing following Article 18 GDPR, the right to object following Article 21 GDPR and the right to data portability arising from Article 20 GDPR. The restrictions following §§ 34 and 35 of the German Federal Data Protection Act apply to the right to disclosure and the right to erasure. Moreover, there is also a right to complain with a competent data protection supervisory authority (Article 77 GDPR in conjunction with § 19 of the German Federal Data Protection Act).
You may withdraw at any time any consent to the processing of personal data previously granted to us. This also applies to the withdrawal of declarations of consent which have been granted to us before the entry into force of the General Data Protection Regulation, in other words, before 25 May 2018. Please note that the withdrawal takes effect only for the future. Processing procedures carried out before the withdrawal are not affected thereby.
Right to object following Article 21 GDPR
1. Right to object on a case to case basis
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is processed based on Article 6 (1) (e) GDPR (data processing in the public interest) and Article 6 (1) (f) GDPR (data processing based on balancing of interests).
If you object, we shall no longer process your data unless we can prove compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing serves the purpose of the establishment, exercise or defence of legal claims.
2. Right to object to the processing of data for direct advertising
In individual cases, we process your data to carry out direct advertising. You have the right to object at any time to the processing of personal data concerning you for advertising of this nature.
If personal data concerning you are processed, you are a data subject within the meaning of the GDPR and you have the following rights as regards the controller:
Right of access
You may request confirmation from the controller as to whether personal data concerning you are being processed by us. If such data are being processed, you may request from the controller disclosure of the following information:
a. the purposes for which the personal data are processed;
b. the categories of personal data which are processed
c. the recipients and/or the categories of recipients to whom the personal data at issue have been disclosed or are still being disclosed;
d. the planned duration of storage of the personal data concerning you or, if specific details of this are not possible, the criteria for the determination of the storage period;
e. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
f. the right to complain at a supervisory authority;
g. all available information on the source of the data, if the personal data were not collected from the data subject;
h. the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request disclosure as to whether personal data concerning you are transferred to a third country or an international organisation. In this regard, you may request to be informed about the adequate guarantees under Article 46 GDPR concerning the transfer of data.
Right to correction
You have the right vis-à-vis the controller to correction and/or completion if the processed personal data concerning you are incorrect or incomplete. The controller must undertake the correction without delay.
Right to restriction of processing
Under the following prior conditions you may request the restriction of processing of the personal data concerning you:
a. if you dispute the accuracy of the personal data concerning you for a duration which allows the controller to check the accuracy of the personal data;
b. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
c. the controller no longer needs the personal data for the processing, but they are required by you for the establishment, exercise or defence of legal claims;
d. if you have objected to the processing under Article 21 (1) GDPR and have not yet ascertained whether the legitimate grounds of the controller override your grounds.
Where the processing of the personal data concerning you has been restricted, such personal data shall, except storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or the protection of the rights of another natural or legal person or on grounds of important public interest of the Union or of a Member State. If the restriction of processing has been restricted on the aforesaid grounds you shall be informed by the controller before the restriction is lifted.
Right to erasure
You may request the controller to erase the personal data concerning you without delay and the controller is obliged to erase these data without delay, provided that one of the following grounds applies:
a. The personal data concerning you are no longer necessary concerning the purposes for which they were collected or otherwise processed;
b. You withdraw your consent on which the processing under Article 6 (1) (a) or Article 9 (2) (a) GDPR relied and there are no other legal bases for the processing.
c. You object to the processing under Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing under Article 21 (2) GDPR.
d. The personal data concerning you have been unlawfully processed.
e. The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f. The personal data concerning you have been collected concerning services offered by an information society under Article 8 (1) GDPR.
Where the controller has made the personal data concerning you public and is obliged under Article 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not exist if the processing is necessary:
a. for exercising the right of freedom of expression and information;
b. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c. for reasons of public interest in the area of public health following Article 9 (2) (h) and (i) as well as Article 9 (3) GDPR;
d. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes following Article 89 (1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
e. for the establishment, exercise or defence of legal claims.
Right to information
If you have asserted the right to correction, erasure or restriction of processing against the controller, the latter is obliged to notify this correction, erasure or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or is linked to disproportionate effort. You have the right to be informed by the controller of these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
a. the processing is based on consent under Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract under Article 6 (1) (b) GDPR;
b. the processing is carried out by automated means.
Furthermore, in exercising this right you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected thereby.
That right shall not apply to process necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) (e) or (f) GDPR; this applies also to profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this applies also to profiling to the extent that it is related to such direct marketing.
If you object to processing for direct advertising, we shall no longer process your data for those purposes.
Concerning the use of information society services and irrespective of Directive 2002/58/EC you are free to exercise your right to object using automated procedures in which technical specifications are applied.
Right to withdraw the declaration of consent under the provisions of data protection law
You have the right to withdraw your declaration of consent under the provisions of data protection law. The withdrawal of consent does not affect the legality of the processing carried out before the withdrawal.
Automated individual decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision:
a. is necessary for entering into, or performance of, a contract between you and the data controller;
b. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
c. is based on your explicit consent.
Decisions referred to in paragraph 2 shall not be based on special categories of personal data referred to in Article 9 (1) GDPR, unless Article 9 (2) (a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points (a) and (c), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Right to complain with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy under Article 78 GDPR.
17) Disclosure of the data to third parties
The data and extracts from the data are not transferred to third parties for commercial or non-commercial purposes by means other than represented in this data privacy statement. Other conditions shall apply only insofar as we have your express agreement or the transfer of data is justified on the grounds of the statutory provisions in force. The data are not aligned with other data sets.
18) Duration of storage of personal data
We process and store your data for as long as this is necessary for compliance with our contractual and legal duties. Therefore, personal data are stored for the duration of the respective legal retention period. When the data are no longer required for compliance with contractual or statutory duties, they are routinely erased, unless their time-limited subsequent processing is required for the following purposes:
Compliance with the duty under commercial and tax law to preserve records: The retention or documentation periods specified there range from two to ten years.
Retention of evidence under the statutory provisions of the statute of limitations: Under §§ 195 et seq. of the German Civil Code, these statutes of limitations may persist for up to 30 years, whereas the statute of limitations is routinely three years.
19) Questions and notices
If you have any further questions on the topic of data protection concerning our offers and services, you may contact us via the e-mail addresses provided. We shall then endeavour to answer your questions and to clear up any concerns you may have.
The version of the data privacy statement accessible online at the date of your visit to our website shall always apply to the use of our website. We reserve the right to amend this data privacy statement at any time with due regard to the applicable data protection provisions. Therefore, you should visit our Internet site regularly and take cognisance of any amendments.
20) Retrieval of the data privacy statement
You may access and print out this data privacy statement in the version current at any given time through the link: https://www.yeman-international.com/data-privacy
