Privacy Policy

Privacy Policy

Last updated: June 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

YN Performance
Iliya Hazeghpasand
Darmstädter Str. 2
50678 Cologne
Germany

E-mail: info@yn-performance.de
Phone: +49 174 6828489

2. Collection and processing of personal data

We collect and process personal data only to the extent necessary to provide our services, in particular:

  • Name and address for orders
  • E-mail address for order confirmation and communication
  • Payment data for processing the purchase contract
  • IP address and technical access data (server logs)

3. Legal basis for processing

Your data is processed on the basis of the following legal bases of the GDPR:

  • Art. 6(1)(b) GDPR — performance of a contract (order processing)
  • Art. 6(1)(c) GDPR — compliance with legal obligations (e.g. retention obligations)
  • Art. 6(1)(f) GDPR — legitimate interests (e.g. security, fraud prevention)

4. Shopify as processor

Our online shop is operated via Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, K2P 2L8, Canada. Shopify processes your data as a processor pursuant to Art. 28 GDPR, exclusively in accordance with our instructions. Further information: shopify.com/legal/privacy.

5. Payment processing

Payment is processed via payment providers made available by Shopify. Your payment data is transmitted in encrypted form and is not stored permanently by us.

6. Cookies

Our shop uses cookies that are necessary for technical operation (e.g. the shopping cart function). You can disable cookies in your browser; however, this may limit the functionality of the shop.

7. Retention period

Personal data is deleted as soon as the purpose of processing no longer applies. Order data is subject to statutory retention periods of up to 10 years.

8. Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact: info@yn-performance.de

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence. The supervisory authority responsible for the controller based in Germany is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).