Privacy Policy
Last updated: November 2026
1. Data Protection at a Glance & Controller
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the EU General Data Protection Regulation – GDPR and the German Telecommunications Digital Services Data Protection Act – TDDDG).
The party responsible for data processing on this website (Controller) is:
- Yakoz Ladenbau GmbH
- Otto-Hahn-Straße 17, 63303 Dreieich, Germany
- Phone: +49 (0) 6103 7066500
- E-mail: contact@yakoz-ladenbau.de
2. Your Rights as a Data Subject
Under applicable data protection laws, you have the right at any time to:
- Request information about your personal data stored by us (Art. 15 GDPR),
- Request correction of inaccurate data (Art. 16 GDPR),
- Request deletion of your data (Art. 17 GDPR),
- Request restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR),
- Object to the processing of your data (Art. 21 GDPR),
- Withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR).
You also have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).
3. Hosting, Content Delivery, and Infrastructure
External Hosting via Vercel
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, Vercel automatically collects server log files (e.g., IP address, browser type, operating system, referrer URL, time of the server request). This is technically necessary to deliver the website stably, securely, and quickly.
The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a secure and efficient provision of our online presence). We have concluded a Data Processing Addendum (DPA) with Vercel. Data transfers to the USA are based on the Standard Contractual Clauses (SCCs) of the European Commission and, where certified, the EU-US Data Privacy Framework (DPF).
Content Management System & Media CDN (Sanity)
To manage and deliver page content and media files (images/graphics), we use the headless CMS and Content Delivery Network (CDN) provided by Sanity (Sanity AS, Thorvald Meyers gate 49, 0555 Oslo, Norway / Sanity US Inc., San Francisco, CA, USA). When loading images and content on our site, your IP address is transmitted to Sanity's CDN servers for technical reasons to deliver media in an optimized format.
The legal basis is Art. 6 (1) lit. f GDPR. We have concluded a Data Processing Addendum (DPA) including EU Standard Contractual Clauses with Sanity.
SSL / TLS Encryption
For security reasons and to protect the transmission of confidential content (such as inquiries submitted via our contact form), this website uses SSL/TLS encryption.
4. Contact Form, File Attachments, and E-Mail Delivery
Contact Form and E-Mail Inquiries
If you send us inquiries via our contact form or e-mail (including any project plans or file attachments), your details and contact information will be stored by us for the purpose of processing your inquiry and in case of follow-up questions.
The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the execution of a contract or is necessary for pre-contractual measures (e.g., preparing a quote for store fitting). In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) lit. f GDPR).
The data sent by you to us will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for the data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods under commercial and tax law (6 to 10 years) – remain unaffected.
Technical E-Mail Delivery via Resend
For the reliable technical delivery of inquiries submitted via our contact form, we use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Data and attachments entered into the form are transmitted encrypted via Resend's servers to our e-mail inbox.
The legal basis is Art. 6 (1) lit. f GDPR and Art. 6 (1) lit. b GDPR. We have concluded a Data Processing Addendum (DPA) with Resend. Data transfers to the USA are based on the Standard Contractual Clauses (SCCs) of the European Commission and, where certified, the EU-US Data Privacy Framework (DPF).
5. Contact via WhatsApp
On our website, we offer you the option to contact us via a direct link to WhatsApp (provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland).
A connection to WhatsApp is only established when you actively click on the WhatsApp button or link. At that point, data (such as your phone number and communication metadata) is transmitted to WhatsApp. The legal basis for processing your inquiry is Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. f GDPR. For details, please refer to WhatsApp's Privacy Policy at https://www.whatsapp.com/legal/privacy-policy-eea.
6. Links to Our Social Media Profiles (Instagram, Facebook)
Our website contains links to our company profiles on Instagram and Facebook. Both services are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
These are purely external links; no plugins, scripts or content from Meta are embedded on our website. Merely visiting our website therefore does not transmit any data to Meta. Only when you actively click one of the links are you redirected to Meta's website and data (e.g., your IP address) is transmitted to Meta. Meta is responsible for any processing there; Meta's privacy policy applies: https://www.facebook.com/privacy/policy/.
7. Web Fonts and Cookies
Local Hosting of Web Fonts
This site uses web fonts for the uniform display of typefaces. These fonts are hosted locally on our web server. No connection to external third-party servers (such as Google Fonts servers) is established when you visit our website.
Technically Necessary Storage
Our website uses only technically necessary functions (e.g., to store your language preference DE/EN). No tracking or advertising cookies are set without your explicit consent (Section 25 (2) TDDDG, Art. 6 (1) lit. f GDPR).
