Privacy Policy

1. Data Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Marcel Beckers
Goethestraße 33
42327 Wuppertal
Germany

Phone: +49 (0) 176 22 38 95 58
E-mail: info@yourecom.de

Where this Privacy Policy refers to "we", "us" or "YoureCom", this means the data controller named above.

2. General Information

Protecting your personal data is important to us. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data is any information relating to an identified or identifiable natural person.

This Privacy Policy explains:

• which personal data we process,
• the purposes for which we process it,
• the legal basis for processing,
• how long personal data is stored, and
• your rights as a data subject.

3. Hosting and Server Log Files

Our website is hosted by an external hosting provider.

Hosting Provider

NetzLiving GmbH
Tannenweg 24
66629 Freisen
Germany

The servers are located in data centres in Frankfurt am Main. We have concluded a Data Processing Agreement (Art. 28 GDPR) with our hosting provider.

For the operation of this website, technically required information is processed automatically (server log files), including:

• IP address
• Date and time of access
• Requested URL
• Referrer URL
• Browser type and version
• Operating system

The access logs of the web server are kept for 14 days and deleted afterwards.

The processing is based on Art. 6(1)(f) GDPR.

Our legitimate interest lies in providing a secure, stable and efficient website as well as detecting and resolving technical issues and security incidents.

This data is not merged with other data sources.

Sending e-mails, domains and DNS

To send e-mails (for example order confirmations, invoices, access data and notices about your contract) and to manage our domains and name resolution (DNS) we use ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When e-mails are sent, your e-mail address and the content of the e-mail are processed. We have concluded a Data Processing Agreement (Art. 28 GDPR) with the provider.

4. Cookies

Our website uses cookies where they are technically necessary for the operation of the website or individual functions.

This includes cookies required for:

• user login,
• the shopping cart,
• security settings, and
• other technically necessary website functions.

The processing is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

Should we use non-essential cookies in the future (e.g. analytics or marketing cookies), these will only be stored with your prior consent in accordance with Section 25(1) TDDDG.

5. Web Analytics with Matomo

We use the open-source web analytics software Matomo to analyze the use of our website.

Matomo is hosted exclusively on our own server. No collected data is transferred to third parties.

For the purpose of improving our website, the following information may be processed:

• visited pages
• date and time of access
• referrer URL
• browser type
• operating system
• anonymized IP address
• country or region
• clicks on downloads and external links
• search terms entered on our website

To protect your privacy, Matomo has been configured in a privacy-friendly manner.

In particular:

• no analytics cookies are set,
• IP addresses are anonymized before storage,
• the browser's "Do Not Track" setting is respected,
• no browser fingerprinting is performed, and
• all collected data remains on our own server.

The processing is based on Art. 6(1)(f) GDPR.

Our legitimate interest is to improve the technical quality, stability and usability of our website.

Personally identifiable raw data is automatically deleted or anonymized after 180 days.

You may object to the anonymous collection of your usage data at any time by using the following opt-out option:

6. Registration and User Account

Registration of a user account is required to use certain features of our website and to purchase digital products.

When you register and use a user account, we process the following personal data in particular:

• Username
• E-mail address
• Password (stored exclusively in encrypted form)
• Registration date
• IP address at the time of registration
• Voluntarily provided profile information

This processing is carried out to provide and manage your user account, authenticate your identity and fulfill our contractual obligations.

The legal basis is Art. 6(1)(b) GDPR.

Your user account will generally remain active until you request its deletion or we delete it due to legal requirements or prolonged inactivity.

7. Orders, Digital Products and License Management

We offer digital products and services through our online shop.

To process your order, we process the following personal data in particular:

• Name
• Billing address
• E-mail address
• Order details
• Payment information
• Purchased products
• Invoice data

If you purchase digital products, we also process information required for license management, including:

• Issued license keys
• License status
• Download permissions
• Version entitlements
• License transfers

This processing is carried out solely to provide the purchased products and manage your usage rights.

The legal basis is Art. 6(1)(b) GDPR.

Statutory retention obligations, particularly under commercial and tax law, remain unaffected.

8. Downloads

After purchasing a digital product or when providing free downloads, we may log the download.

The following information may be processed:

• Downloaded product
• Date and time of the download
• User account
• IP address
• Downloaded file version

This processing is carried out to provide downloads, verify download permissions and prevent misuse or fraud.

The legal basis is Art. 6(1)(b) and Art. 6(1)(f) GDPR.

9. Payment Processing

We offer various payment methods for processing orders.

Personal data required for payment processing is processed exclusively for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

PayPal

If you choose PayPal as your payment method, payment processing is carried out by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

The personal data required to process the payment is transmitted to PayPal.

Further information on PayPal's processing of personal data can be found at:

Stripe (card, Apple Pay, Google Pay, SEPA direct debit)

If you pay by card, Apple Pay, Google Pay or SEPA direct debit, payment processing is carried out by:

Stripe Payments Europe, Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin, D02 H210
Ireland

The data required for the payment is transmitted to Stripe, such as name, e-mail address, amount and payment method data. You enter the payment method data (card number, IBAN) directly with Stripe, we do not receive it. We only store an identifier of your payment method and the last digits to assign the payment.

For subscriptions your payment method is stored for the recurring payments and charged afterwards without further confirmation until you cancel. The legal basis is Art. 6(1)(b) GDPR. Stripe processes some data as an independent controller (for example for fraud prevention). Further information is in Stripe's privacy policy: https://stripe.com/privacy

Bank Transfer

If you choose payment by bank transfer, we process only the information necessary for payment processing, including:

• Invoice number
• Payment amount
• Payment received
• Payment date

Bank account details are processed exclusively for the purpose of payment processing.

10. YoureCom Cloud (contracts, subscriptions and instances)

Controller and processor. YoureCom is the controller of your contract, contact and billing data. For the data stored in your cloud instance (for example members, posts, tasks) you are the controller, and we process it on your behalf under the data processing agreement you conclude when you order.

Which data we process. When ordering and under the contract: name, address, e-mail address, where applicable phone number, legal form, authorised representatives and VAT ID, your details for the legal notice of the instance, the chosen address and title of the site, whether you order as a business or a consumer, details of the subscription (plan, term, trial, cancellation, plan changes) and payment status. For a withdrawal or a cancellation we store your declaration with date and time. If someone reports illegal content, we process the details of the report (reasons, location, name and e-mail address of the reporting person).

Purposes and legal basis. To establish and perform the contract (setting up and operating the instance, billing, support, notice of the end of the trial, cancellation and withdrawal): Art. 6(1)(b) GDPR. To comply with legal obligations (accounting, tax law, obligations under the Digital Services Act): Art. 6(1)(c) GDPR. For the security of our systems and the enforcement of legal claims: Art. 6(1)(f) GDPR.

Recipients. NetzLiving GmbH (hosting, data centre in Frankfurt am Main), ALL-INKL.COM – Neue Medien Münnich (sending e-mails), Stripe and PayPal (payment processing, see section 9). We have data processing agreements with the providers where they act on our behalf. We process the data of your instance exclusively in Germany.

Retention. We keep contract data until the contract ends and afterwards as far as the law requires (invoices and accounting records up to eight years). The instance with all its data is deleted after the end of the contract, the transition period and the data retrieval period (see the terms of YoureCom Cloud, section 17), backups after their retention periods have expired. We delete the data of a report under the Digital Services Act as soon as it is no longer needed for the review and possible legal action.

You can find more information in the terms (https://yourecom.de/cloud-agb/) and the data processing agreement (https://yourecom.de/cloud-avv/).

11. Contact

If you contact us by e-mail or via our contact form, we process the personal data you provide solely for the purpose of handling your request.

This may include:

• Name
• E-mail address
• Subject
• Message content
• Date and time of your request

If your request relates to the performance of a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR.

In all other cases, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in responding to your inquiry.

Your personal data will be deleted once your request has been fully processed, provided that no statutory retention obligations require otherwise.

12. Security question against spam

To protect our forms against spam and automated submissions, we use our own security question in the form of a simple arithmetic task. It is processed entirely on our server, no data is transmitted to third parties. Your answer is only checked and not stored.

To prevent mass requests, we also store for a short time how many requests were sent from one connection. This information is deleted automatically.

The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in protecting our website against spam, misuse and automated attacks.

13. Community Features

Our website provides registered users with various community features, including forums, reviews, comments, reactions, file attachments, private conversations and other ways to interact with other users.

If you use these features, we process the personal data required solely to provide the respective functionality and to fulfill the contractual relationship between you and us.

The legal basis is Art. 6(1)(b) GDPR.

Public Content

Posts, comments, reviews and similar content that you publish are generally visible to other visitors.

Please note that publicly available content may be indexed by search engines and stored or archived by third parties. You are solely responsible for deciding which personal information you publish.

Private Conversations

Registered users may exchange private messages with other users.

The content of private conversations is stored solely to provide the messaging functionality.

Access to private conversations is only permitted where required by law, necessary to prevent abuse or to protect our legitimate interests.

File Attachments

Users may upload files in various areas of our website.

When uploading files, we process information such as:

• File name
• File size
• File type
• Upload date and time
• Uploading user

Depending on the applicable permissions, uploaded files may be publicly accessible or restricted to authorized users.

Search Function

To improve usability, we provide an internal search function.

Search queries are processed solely to display relevant content within our website. Anonymous search terms may also be evaluated statistically as part of our web analytics.

14. Data Retention

Unless a more specific retention period is stated within this Privacy Policy, we store personal data only for as long as necessary to fulfill the respective processing purposes.

Afterwards, the data will be deleted unless statutory retention obligations or legitimate interests require continued storage.

Server log files are deleted after 14 days. We keep contract and billing data for as long as commercial and tax law require.

15. Transfer of data to the USA

Stripe and PayPal belong to groups of companies headquartered in the USA. The USA is considered a third country under EU data protection law, without a data protection level fully equivalent to that within the EU. A transfer of data to the USA can therefore not be ruled out when processing payments.

It takes place on the basis of the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) or the EU-US Data Privacy Framework, where the provider is certified.

16. Your Rights

Under the applicable data protection laws, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw any consent previously given with effect for the future

To exercise your rights, you may contact us at any time using the contact details provided in Section 1.

17. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

You may contact, in particular, the supervisory authority responsible for your habitual residence, your place of work or the place of the alleged infringement.

18. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy whenever necessary due to changes in legal requirements or modifications to our website and its services.

The version published on our website at the time of your visit shall apply.