Protecting your data
Privacy Policy
We process personal data responsibly, for specific purposes and in accordance with the General Data Protection Regulation of the European Union (GDPR) and the applicable German data protection regulations.
1. Responsible person
Nataliia Yarova
Germany
E-mail: nataliiayarova.store@gmail.com
Website: www.nataliiayarova.de
2. What data we process
Depending on how you use our online shop, the following data in particular may be processed:
- Master data such as name and, if applicable, customer account,
- Contact and delivery details such as email address, telephone number and address,
- Order, contract and return data,
- Payment status and transaction-related information,
- Contents of messages to our customer service as well as
- Technical data such as IP address, browser, device, time of access and server logs.
3. Purposes of processing
processing orders
Receiving, confirming, processing, returning and managing your order.
shipping
Preparation, handover, delivery and tracking of your order.
payment handling
Execution, confirmation and, if necessary, reversal of the chosen payment.
customer support
Handling of questions regarding products, orders, delivery, payment and returns.
4. Legal basis
We process data, in particular for the implementation of pre-contractual measures and for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR, for compliance with legal obligations pursuant to Art. 6 para. 1 lit. c GDPR, and on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, for example, for the secure and reliable operation of the shop. Where consent is required, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. Consent can be withdrawn at any time with effect for the future.
5. Forwarding to recipients
Personal data will not be sold or shared for third-party advertising purposes. Data will only be transferred if necessary for order fulfillment, the secure operation of the shop, or compliance with legal obligations. Recipients may include, in particular:
- Logistics and shipping service providers, especially DHL and Hermes,
- Payment service providers according to the payment method selected at checkout,
- Hosting, IT, shop and email service providers,
- Tax advisors, accounting firms or authorities, insofar as there is a legal obligation.
Service providers only receive the data they need for their respective task and must comply with applicable data protection requirements.
6. Orders and customer account
When you place an order, we process the information necessary for fulfilling the contract. If you create a customer account, the data you enter there will be stored so you can manage orders and account information. A customer account can be deleted upon request, provided there are no legal retention obligations to the contrary.
7. Payment processing
Depending on the chosen payment method, the necessary data will be transmitted directly to the respective payment service provider. NY does not generally store complete card or login details. The payment provider's privacy policy also applies to the processing of this data.
8. Shipping and shipment tracking
For transport and delivery, we transmit the necessary recipient and shipping data to the selected logistics provider. Contact information for shipment notification or tracking is only shared to the extent necessary for delivery or otherwise legally permissible.
9. Making contact
When you contact us via contact form or email, we process your contact details and the content of the message in order to answer your inquiry. The data will be deleted as soon as the inquiry has been fully processed and there are no legal or contractual reasons for further retention.
10. Cookies and technically necessary functions
This shop uses technically necessary cookies and similar storage technologies to ensure the functionality of the shopping cart, login, language settings, security, and checkout. Optional analytics or marketing technologies may only be used if there is a valid legal basis for doing so and – where required – prior consent has been obtained. Consent can be withdrawn via the cookie settings.
11. Registration via Facebook
If you choose to register via Facebook, the data required for registration may be exchanged between Facebook and our shop. The specific information transmitted depends on your Facebook settings and the permissions you grant. Meta's privacy policy also applies to their independent processing of this data.
12. Server log files
When you visit this website, technically necessary access data may be processed in server log files. This includes, in particular, your IP address, date and time, the page accessed, your browser, operating system, and referrer. This processing serves the purposes of technical provision, stability, error analysis, and prevention of misuse.
13. Storage duration
We only store personal data for as long as it is necessary for the respective purpose. Contract and invoice data are stored in accordance with the statutory commercial and tax law retention periods. After this period, the data is deleted or anonymized, unless further legal reasons or the establishment, exercise, or defense of legal claims require longer storage.
14. Transfer to third countries
Individual technical or payment service providers may process data outside the European Economic Area. In this case, the transfer only takes place on the basis of legal requirements, such as an adequacy decision or suitable safeguards like EU standard contractual clauses.
15. Your data protection rights
Within the framework of the legal requirements, you have, in particular, the right to information, rectification, erasure, restriction of processing, data portability, and objection. You can withdraw any consent you have given at any time with effect for the future.
To exercise your rights, simply send a message to nataliiayarova.store@gmail.com. Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority.
16. Data security
We implement appropriate technical and organizational measures to protect personal data from loss, manipulation, and unauthorized access. Security measures are reviewed and adapted in line with technological developments and the specific risks involved.
17th update to this statement
This privacy policy may be amended if legal requirements, services used, or shop procedures change. The version published on this website at any given time applies.
As of July 2026
