Privacy Policy for the Use of Buddy Services (yappyBuy GmbH)
Last updated: April 2025
Introduction
We appreciate your interest in our products. The protection of your personal data is important to us. This privacy policy informs you about the processing of your personal data in connection with the use of our SaaS services under the "Buddy" brand (in particular, "Buddy Assistant" and "Buddy Reporter").
Controller in the Sense of Data Protection Law:
yappyBuy GmbH
Johannes (“Peter”) Hattingh
Kaiselsbergstr. 41
63808 Haibach
Germany
info@yappybuy.com
+49 (0)6021 3271150
Contact Details of the Data Protection Officer:
PROLIANCE GmbH
www.datenschutzexperte.deLeopoldstr. 21
80802 Munich
Germany
datenschutzbeauftragter@datenschutzexperte.de
When contacting the data protection officer, please indicate which company your inquiry concerns. Please refrain from including sensitive information, such as copies of identification documents, with your request.
Definitions
Our privacy policy is designed to be simple and understandable. We generally use the official terms of the General Data Protection Regulation (GDPR). Official definitions can be found in Article 4 of the GDPR.
Data Processing When Visiting Our Website
When you access our websites, it is technically necessary for data to be transmitted from your internet browser to our web server. The following data is recorded during an active connection between your internet browser and our web server:
• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status
• Web browser and operating system used
• (Full) IP address of the requesting computer
• Amount of data transferred
We collect the listed data to ensure a smooth connection setup of the website and to enable a comfortable use of our website for users. Additionally, the log file serves to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data and log files is Art. 6 (1) lit. f GDPR.
For technical security reasons, in particular to defend against attempts to attack our web server, this data is stored briefly. It is not possible for us to draw conclusions about individuals based on this data. After no more than thirty days, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to trace it back to individual users.
The data may also be processed in anonymized form for statistical purposes. This data is not stored together with other personal data, is not compared with other datasets, and is not shared with third parties at any time.
Use of Buddy Assistant and Buddy Reporter
When using Buddy Assistant: We may collect the following data:
• IP address (masked every other day)
• Browser information
• Access timestamp
• Usage and interaction data (e.g., search queries, clicks, product interest)
• Location data (if enabled by the user)
We do not store IP addresses permanently but mask them to change at least every two days. Only the country of origin is retained. There are no permanent trackers that follow a user across sessions.
When using Buddy Reporter: We process the following data:
• Shop/website data and linked accounts (e.g., product data, sales figures, usage analysis)
• Personal data uploaded by the customer or provided via integrations (e.g., customer data)
Purposes and Legal Basis for Data Processing
We process personal data for the provision, improvement, and reliable operation of our yappyBuy services. The processing is carried out on the following legal bases:
• Art. 6 (1) lit. b GDPR: to perform a contract
• Art. 6 (1) lit. f GDPR: based on our legitimate interests
• Art. 6 (1) lit. a GDPR: based on your consent, where required
Contact Form and Email Communication
When you send us inquiries via the contact form or by email, the information provided (e.g., name, email address) will be stored and processed by us for the purpose of responding to your inquiry and in case of follow-up questions. Providing an email address is required for contacting us. Providing your name or phone number is optional.
This data will not be shared without your consent. The legal basis for processing is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) lit. f GDPR, and where applicable, Art. 6 (1) lit. b GDPR if your inquiry relates to the conclusion of a contract.
Your data will be deleted after the final processing of your request unless legal retention obligations prevent deletion. You may object to the processing of your personal data at any time if it is based on Art. 6 (1) lit. f GDPR.
Use of Cookies and Analysis Tools
To optimize our services, we use cookies and similar technologies. A detailed description and configuration options can be found in our cookie policy: https://www.yappybuy.com/de/cooky-richtlinie
Our website uses cookies, which are stored by your browser on your device and contain certain settings related to website use (e.g., active sessions). Cookies help make our offerings more user-friendly, effective, and secure. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your device until you delete them or they expire.
These cookies allow us to recognize your browser upon your next visit. Some cookies simplify website processes by storing settings (e.g., saving previously selected options).
If any cookies we implement also process personal data, processing is based on Art. 6 (1) lit. b GDPR for contract performance or Art. 6 (1) lit. f GDPR to ensure our legitimate interest in the best possible functionality of the website and user-friendly design.
You can configure your browser to notify you about cookies and allow them only in individual cases, exclude cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. The cookie settings can be managed using the following links depending on your browser:
• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
• Chrome: https://support.google.com/chrome/answer/95647
• Safari: https://support.apple.com/en-us/HT201265
• Opera: https://help.opera.com/en/latest/web-preferences/#cookies
You can also manage cookies for many companies and functions individually used for advertising. Use the following tools:
• https://www.aboutads.info/choices/
• https://www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a "Do-Not-Track" feature to signal that you do not wish to be tracked. Browser-specific information:
• Chrome: https://support.google.com/chrome/answer/2790761
• Firefox: https://www.mozilla.org/en/firefox/dnt/
• Internet Explorer: https://support.microsoft.com/en-us/topic/use-do-not-track-in-internet-explorer-11-ad3f2065-fbfa-39b2-9d47-74e0d13f3d88
• Opera: https://help.opera.com/en/latest/web-preferences/#cookies
• Safari: https://support.apple.com/en-us/guide/safari/sfri35610/mac
You can also block script loading using browser extensions such as NoScript (for Firefox): https://addons.mozilla.org/en/firefox/addon/noscript/
Please note: Disabling cookies may limit the functionality of this website.
Data Sharing and Recipients
Your personal data will not be transferred to third parties unless:
• we have explicitly indicated this in the description of the respective data processing;
• you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR;
• the disclosure is necessary under Art. 6 (1) sentence 1 lit. f GDPR to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding interest in not disclosing your data;
• there is a legal obligation to disclose according to Art. 6 (1) sentence 1 lit. c GDPR; or
• this is legally permissible and required under Art. 6 (1) sentence 1 lit. b GDPR for the performance of a contractual relationship with you.
We also use selected external service providers for the provision of our services. These are carefully selected and contractually bound to our instructions. Where required, we have concluded data processing agreements pursuant to Art. 28 GDPR. This includes services such as web hosting, email dispatch, maintenance, and IT system support. These service providers are not permitted to share your data with third parties.
Access by Third Parties / Data Processing Agreements
To provide our services, we use external service providers acting as processors in accordance with Art. 28 GDPR. These include, in particular:
• Hosting providers
• Analytics and monitoring services
• Support and CRM tools
A current list of our processors is available at: https://www.yappybuy.com/de/auftragsverarbeitungsvertrag
Data Security
In accordance with Article 32 GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, implementation costs, the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Duration of Storage of Personal Data
The duration of storage of personal data depends on the applicable statutory retention periods (e.g., from commercial or tax law). After these periods expire, the respective data is routinely deleted.
If data is required to fulfill or initiate a contract, or if we have a legitimate interest in continuing storage, the data will be deleted once it is no longer needed for these purposes or if you exercise your right of revocation or objection.
Your Rights
Below is a summary of your data protection rights under applicable law:
• Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of incorrect or completion of your personal data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your stored personal data, unless processing is required for freedom of expression, legal obligations, public interest, or legal claims.
• Right to restriction of processing (Art. 18 GDPR): You may request restriction if you dispute the accuracy of the data, the processing is unlawful, we no longer need the data, or you have objected.
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used, and machine-readable format or have it transferred to another controller.
• Right to lodge a complaint (Art. 77 GDPR): You can contact the supervisory authority in your place of residence, workplace, or at our company headquarters.
• Right to withdraw consent (Art. 7 (3) GDPR): You may withdraw your consent at any time with effect for the future.
Right to Object (Art. 21 GDPR)
If your data is processed on the basis of legitimate interests under Art. 6 (1) lit. f GDPR, you have the right to object to such processing for reasons arising from your particular situation.
If your objection is directed against direct marketing, you have a general right to object without stating a specific reason. To exercise your right to withdraw or object, simply send an email to: info@yappybuy.com
Please direct all inquiries to: info@yappybuy.com
External Links
Social networks (such as Facebook, Twitter, Xing, etc.) are integrated into our website as links only. When you click on these text/image links, you are redirected to the respective provider’s site. Only after this redirection is user data transmitted to the respective provider.
For information on how your personal data is handled on these external websites, please refer to the respective privacy policies of the providers you are using.
Right to Amend This Privacy Policy
We reserve the right to update or amend this privacy policy as needed in accordance with applicable data protection regulations. This may be necessary to reflect changes in legal requirements or to adapt to changes in our services, such as the introduction of new features.
The current version of the privacy policy always applies to your visit.
This privacy policy was created by
www.datenschutzexperte.deLast updated: May 6, 2025
