Christmas with YOUBAG – Christmas presents for HIM and HER.
Festive handbags, decorative Gift Cards and new cooperations on our NEWS page.

Privacy and Cookies

  1. General information

 

1.1 What are personal data

Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

 

1.2 Handling of personal data

Personal data is used exclusively for the purpose of establishing the contract, structuring its content, implementing or handling the contractual relationship (Art. 6 I S. 1 b GDPR).

 

In addition, personal data will only be processed if we have received your consent to do so (Art. 6 I p. 1 a GDPR) or if the processing of such data is necessary for our legitimate interests and provided that the weighing of interests shows that there are no overriding interests, fundamental rights or fundamental freedoms that conflict with your interests (Art. 6 I p. 1 f GDPR).

 

We may use contract processors to process your personal data, but will not pass on your personal data to third parties.

 

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the necessary payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

 

The processing of your personal data takes place exclusively within the EU unless otherwise stated below.

 

1.3 Usage data

General technical information is collected when visiting the website. These are the IP address used, time of day, duration of the visit, browser type and, if applicable, the originating page. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this website. This usage data is not linked to your other personal data.

 

1.4 Duration of storage

We store your personal data after the end of the purpose for which the data was collected, only as long as this is necessary due to legal (especially tax) regulations.

 

 

  1. Your rights

 

2.1 Information

You can request information from us as to whether we process personal data about you and, if this is the case, you have the right to be informed of this personal data and the other information mentioned in Art. 15 GDPR.

 

2.2 Right of rectification

You have the right to rectify incorrect personal data concerning you and, in accordance with Art. 16 of the GDPR, you may request the completion of incomplete personal data.

 

2.3 Right to deletion

You have the right to demand from us that the personal data concerning you be deleted immediately. We are obliged to delete them immediately, especially if one of the following reasons applies:

– Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

– You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.

– Your data have been processed unlawfully.

The right to deletion does not exist insofar as your personal data is necessary for the assertion, exercise or defense of our legal claims.

 

2.4 Right to limit processing

You have the right to request us to limit the processing of your personal data if

– you dispute the accuracy of the data and we, therefore, verify the accuracy,

– the processing is unlawful and you refuse to delete it and instead request that its use be restricted,

– we no longer need the data, but you need it to assert, exercise or defend legal claims,

– you have lodged an objection to the processing of your data and it is not yet clear whether our legitimate reasons outweigh your reasons.

 

2.5 Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated procedures.

 

2.6 Right of withdrawal

If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

 

2.7 General and right of complaint

The exercise of your aforementioned rights is basically free of charge for you. You have the right to contact the supervisory authority responsible for us, the State Data Protection Commissioner, directly in the event of complaints.

 

 

  1. data security

 

3.1 Data security

All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and distribution.

 

3.2 Sessions and cookies

For the operation of our website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g., spam protection for contact form, shopping basket function) and thus the weighing shows that no predominant interests on your part are opposed (Art. 6 I S. 1 f GDPR) or an express consent on your part is present.

After your express consent, we use cookies to personalize content and advertisements, to offer functions for social media and to analyze access to our website. With your consent, we can pass on the information on your use of our website to our partners for social media, advertising and analysis. Our partners may be able to combine this information with other data that the partners already have about you.

Below you will find the domain, name and duration of the cookies used only with your consent:

Site owned cookies

__stripe_sid

Provider: .youbag.com

This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server.

Period of validity: Session

_fbp

Provider: .youbag.com

This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.

Period of validity: 3 months

__stripe_mid

Provider: .youbag.com

This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server.

Period of validity: 1 year

__paypal_storage__

Provider: .youbag.com

Used in context with the PayPal payment-function on the website. The cookie is necessary for making a safe transaction through PayPal.

Period of validity: Persistent

@@scroll#

Provider: .youbag.com

Measures scroll activity on the site

Period of validity: Session

_ga

Provider: .youbag.com

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

Period of validity: 2 years

_gat

Provider: .youbag.com

Used by Google Analytics to throttle request rate

Period of validity: 1 day

gid

Provider: .youbag.com

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

Period of validity: 1 day

_hjid

Provider: .youbag.com

Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes

Period of validity: Persistent

hjViewportId

Provider: .youbag.com

Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes

Period of validity: Session

_iub_cs-12265265
Provider: .youbag.com
Used to show Cookie notice banner
Period of validity: 1 year
showNotice
Provider: .youbag.com
Determines if banner should be displayed
Period of validity: Session
youbag_shopping_cart
Provider: .youbag.com

Stores items that has been added to the shopping cart

Period of validity: Persistent

 

Third-party cookies

akavpau_ppsd

Provider: .paypal.com

This cookie is provided by Paypal. The cookie is used in context with transactions on the website.

Period of validity: Session

ts_c

Provider: .paypal.com

Used in context with the PayPal payment-function on the website. The cookie is necessary for making a safe transaction through PayPal.

Period of validity: 3 years

tc

Provider: .paypal.com

Used in context with the PayPal payment-function on the website. The cookie is necessary for making a safe transaction through PayPal.

Period of validity: 3 years

lang

Provider: .paypal.com

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

Period of validity: Session

x-pp-s

Provider: .paypal.com

This cookie is generally provided by PayPal and supports payment services in the website.

Period of validity: Session

tsrce

Provider: .paypal.com

This cookie is generally provided by PayPal and supports payment services in the website.

Period of validity: 3 days

nsid

Provider: .paypal.com

This cookie is generally provided by PayPal and supports payment services in the website.

Period of validity: Session

X-PP-SILOVER

Provider: .paypal.com

This cookie is generally provided by PayPal and supports payment services in the website.

Period of validity: Session

X-PP-L7

Provider: .paypal.com

This cookie is generally provided by PayPal and supports payment services in the website.

Period of validity: Session

akavpau_ppsd

Provider: .paypal.com

This cookie is provided by Paypal. The cookie is used in context with transactions on the website.

Period of validity: Session

enforce_policy

Provider: .paypal.com

This cookie is generally provided by PayPal and supports payment services in the website.

Period of validity: 7985 years

akavpau_ppsd

Provider: .paypal.com

This cookie is provided by Paypal. The cookie is used in context with transactions on the website – The cookie is necessary for secure transactions.

Period of validity: Session

connect.sid

Provider: .paypal.com

The cookie is necessary for secure log-in and the detection of any spam or abuse of the website.

Period of validity: Session

ts

Provider: .paypal.com

Used in context with the PayPal payment-function on the website. The cookie is necessary for making a safe tran saction through PayPal.

Period of validity: 10 years

p.gif
Provider: typekit.net
Keeps track of special fonts used on the website for internal analysis. The cookie does not register any visitor data.
Period of validity: Session
fr
Provider: .facebook.com
The cookie is set by Facebook to show relevant advertisments to the users and measure and improve the advertisements. The cookie also tracks the behavior of the user across the web on sites that have Facebook pixel or Facebook social plugin.
Period of validity: 3 Months
tr
Provider: .facebook.com
Used by Facebook to deliver a series of advertisement products such as real-time bidding from third party advertisers.
Period of validity: Session
m
Provider: m.stripe.com
This cookie is set by Stripe payment gateway. This cookie is used to enable payment on the website without storing any payment information on a server.
Period of validity: Persistent

 

 

  1. Newsletter

 

If you register for our newsletter, we will use the data required for this purpose or data provided separately by you to send you our e-mail newsletter regularly on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time and either by sending us a message via the contact details given in the imprint or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond that which is legally permitted and about which we inform you in this declaration.

 

 

  1. Presence on social media platforms

 

We use the following social media platforms for company presentation and communication (the following linked privacy statements and opt-out options are expressly referred to).

 

Facebook (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Privacy policy: https://www.facebook.com/about/privacy/

Opt-out: https://www.facebook.com/settings?tab=ads alternatively http://www.youronlinechoices.com

 

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)

Privacy policy and opt-out: http://instagram.com/about/legal/privacy/.

 

Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA)

Privacy policy and opt-out: https://about.pinterest.com/de/privacy-policy.

 

These social media platforms may process personal data outside the EU and we refer to the above privacy statements of the social media platforms.

The respective social media platforms may create user profiles from your usage behavior and the resulting interests and actions on your part and save cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can even be saved independently of the device. Your user profile can be used, for example, to place advertisements that presumably correspond to your interests.

 

We process the personal data exclusively for communication with you via the social media platform you have chosen and for the optimization of our online presence and ensure that no interests on your part are affected which outweigh this legitimate interest on our part (Art. 6 I S. 1 f GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 I S. 1 a GDPR).

 

 

  1. Third-party services

 

6.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google and operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), and collects and stores data via this web analytics service from which usage profiles are created using pseudonyms. The user profiles created in this way serve to evaluate visitor behavior in order to design and improve the offer presented on this website in line with demand. Google Analytics uses so-called “cookies”, small text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Also, the user profiles maintained under a pseudonym are not merged with the personal data of the user without the express and separately declared consent of the user. Thus, the weighing of interests shows that there are no overriding interests on your part that conflict with this (Art. 6 I S. 1 f GDPR). You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your data during future visits to this website: Disable Google Analytics. You can view the Google privacy policy at http://www.google.de/intl/de/policies/privacy/. Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out that on this website Google Analytics has been extended by the code “anonymizeIp” in order to guarantee an anonymized collection of IP addresses (so-called IP-Masking).

 

6.2 Use of Facebook Remarketing Pixels

We use the remarketing function “Custom Audiences” which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94304, USA (“Facebook”). The entity responsible for processing the information collected by Facebook is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This feature allows us to target visitors to this website on Facebook with advertisements. For this purpose, personalized and interest-based Facebook ads are placed when the pages of Facebook are visited. The function is enabled on our website by a remarketing pixel from Facebook, which is implemented on the page. When you visit our website, a direct connection to the Facebook server is established via the pixel if you have agreed to the setting of the pixel or have activated the plugin. The Facebook server is thus informed which of our websites the user has visited. Facebook assigns this information to your personal Facebook user account. You can find more information about the collection and use of data by Facebook, about your rights in this regard and possibilities for the protection of your privacy in the Facebook privacy policy at https://www.facebook.com/about/privacy/ .

If you do not want Facebook to associate the collected information directly with your Facebook account, you can use the “Custom Audiences” remarketing feature in your account settings at https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads#_=_bearbeiten. You must be logged in to Facebook to do this.

 

6.3 Stripe

We have appointed the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) to handle our payment process. For this purpose, Stripe will pass on the information provided to us during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information about the data protection of Stripe under the URL https://stripe.com/de/privacy#pagmt.

 

6.4 Hotjar

We use on our website Hotjar, an analysis software of Hotjar Ltd. (“Hotjar”) (http://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe). With Hotjar we have the possibility to measure and evaluate your clicks, mouse movements etc. on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. Cookies from Hotjar can remain valid for up to 365 days. The following information is collected:

 

End device specific data

 

The following information is collected in relation to your end device and your browser:

– IP address of the end device (it is collected and stored in anonymous form);

– Resolution of the screen/display of the terminal device screen;

– Type of terminal device (individual terminal device identification features), operating system, and browser type;

– Geographical location (country only);

– Preferred language when displaying the Hotjar-based web page.

 

User Interactions

 

– Mouse events (movements, position and clicks);

 

Log data

 

Randomly, Hotjar’s servers automatically record information that is collected from our website and Hotjar’s website. Among other things, the following data is recorded:

– referring domain;

– pages visited;

– geographic location (country only);

– preferred language when viewing the website;

– date and time when the website pages were accessed.

 

This information is used by Hotjar to evaluate your use of our website, to generate reports on the use of the website, and for other services related to website usage and internet analysis of the website. Hotjar also uses the services of third parties such as Google Analytics and Optimizely. These may store information that your browser sends during your visit to the website (e.g., cookies or IP requests). You can find more information in the privacy policy of these services. The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation. If you do not wish a recording, you can deactivate it by setting the DoNotTrack header in your browser. You can also prevent Hotjar from recording the data by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out. You can view Hotjar’s privacy policy at https://www.hotjar.com/privacy.

 

 

  1. Social media links

We have our own social media pages at third-party providers that can be reached via links from this website. By using the links you will be able to reach the respective websites of the third-party providers (e.g., Facebook, Twitter). In order to avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a link, so that the use of the link does not result in the creation of user profiles by the third-party provider.

 

 

  1. Contacting

 

To contact us regarding data protection, you are welcome to use the following contact options. Responsible person in terms of the DSGVO:

 

Youbag Munich GmbH

Schäftlarnstr. 160

81371 Munich

E-mail: hello@youbag.com

Fax: +49 (0) 9119508787