Privacy Policy

Privacy Policy

1. Controller

YOKE GmbH & Co. KG
Flözstraße 26
73433 Aalen
Germany

Authorized representatives: Gerrit Kübler & Florian Guttenberger
Phone: +49 (0) 73 61 / 92 45-0
Email: info@yoke.eu

A data protection officer has not been appointed, as there is no legal requirement to do so.

2. Hosting and Website Provision

Our website is hosted by Hetzner Online GmbH. The use of this hosting provider is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the secure and reliable presentation of our website.

Hetzner processes technical data (e.g., IP address, server logs) for website delivery. We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR.

CDN: To optimize loading times, we use Cloudflare as a Content Delivery Network. The service is operated on EU servers. A data processing agreement is in place.

3. Collection and Storage of Personal Data

We only process personal data when legally permitted or when users have given consent.

3.1 Access Data (Server Logs)

When accessing our website, the following data is automatically recorded:
IP address
Date and time of access
URL of the accessed page
HTTP status code
Browser type and version
Operating system

Purpose: technical website operation and security (Art. 6(1)(f) GDPR).
Log files are deleted regularly.

4. Cookies & Consent Management

We use Cookiebot (Cybot A/S) to obtain legally compliant cookie consent in accordance with Art. 6(1)(c) GDPR.

Users receive a consent banner when visiting our website and may accept or reject various cookie categories. Non-essential cookies are only set after consent.

5. Tracking and Analytics

5.1 Google Analytics 4

Provider: Google Ireland Limited
We use GA4 to analyze user behavior. Google uses cookies and similar technologies.

Data processed: anonymized IP address, device information, click paths, approximate location.

Legal basis: Art. 6(1)(a) GDPR (consent obtained via Cookiebot).

A data processing agreement with Google is in place. Data may be transferred to the USA under EU Standard Contractual Clauses (SCCs).

5.2 LinkedIn Insight Tag

Provider: LinkedIn Ireland Unlimited Company
Used for conversion tracking and remarketing.

Data processed: IP address, device and browser information, page views, pseudonymized LinkedIn IDs.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data transfers to the USA may occur under SCCs.

6. Google Fonts

Our website uses Google Fonts hosted locally.
No data is transmitted to Google.
Legal basis: Art. 6(1)(f) GDPR (optimized website display).

7. Contact Form

When submitting our contact form, we process the following information:
Company name
Company size
Industry
Full name
Job title
Email address
Phone number
Country
Project name
Project type
Budget range
Project timeline
Delivery date
Optional message

Legal basis:
Art. 6(1)(b) GDPR (pre-contractual communication)
Art. 6(1)(f) GDPR (general business communication)

The data is used exclusively to process your request and will not be passed on to third parties without consent.

8. Disclosure of Data to Third Parties

Personal data is only shared when necessary, such as with:
Service providers acting as data processors (hosting, CDN, analytics)
Based on Art. 28 GDPR
No sharing for advertising purposes without explicit consent

9. Data Retention

We store personal data only as long as required for the respective purpose or where statutory retention periods apply.

Contact form submissions are deleted once the inquiry has been fully processed, unless other legal obligations require continued storage.

10. Your Rights

You have the following rights at any time:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to object to processing (Art. 21 GDPR)

Please direct requests to: info@yoke.eu

11. Right to Lodge a Complaint

You may contact the supervisory authority:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstraße 10a
70173 Stuttgart
Germany

12. Security of Processing

We implement technical and organizational measures to protect personal data from loss, misuse, or unauthorized access, in accordance with Art. 32 GDPR.

13. International Data Transfers

When using Google Analytics and LinkedIn Insight Tag, personal data may be transferred to the USA. Such transfers are based on EU Standard Contractual Clauses and additional safeguards.

14. Changes to This Privacy Policy

We reserve the right to update this privacy policy when technical or legal changes require it. The current version is always available on our website.