Privacy Policy

Privacy Policy

This site uses cookies, both ours and those of third parties, to provide you with a quality user experience, measure audience, and show you personalized advertisements. By using Y2k-empire.com, you accept our use of this technology. To learn more about cookies and how to manage them, please refer to our data privacy policy.

Definitions

Personal Data: Any information relating to an identified or identifiable natural person, directly or indirectly.
Processing of Personal Data: Any operation or set of operations performed on such data, regardless of the means used (collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, transmission communication, dissemination, or any other form of making available, reconciliation or interconnection, blocking, erasure, or destruction).
Cookie: A small data file placed and read, for example, when visiting a website, reading an email, installing or using a software or mobile application, regardless of the type of device used (computer, smartphone, e-reader, connected video game console, etc.).

Our Privacy Policy

In this data protection policy, we inform you about the processing of your personal data when using our website. Personal data includes information that can be associated with an identifiable person, such as your name, phone number, postal or email address. Statistical data that we collect when you visit our site, which cannot be directly associated with you, are not considered personal data.

You can print or save this data protection policy (e.g., as a PDF file) using the standard functionality of your browser.

What Data Is Collected?

Whenever you use our website, we collect data that your browser automatically transmits to enable the visit to our site. This includes:

The IP address of the device accessing the site,
The date and time of access,
The URL of the referring and accessed website,
Technical information about the browser used and the operating system of the device.

Processing this data is necessary to allow you to visit the site and ensure the security of our systems. This data is temporarily stored in internal log files for statistical purposes and to improve our site based on user habits (e.g., increased mobile device usage). The legal basis for this data processing is Article 6, paragraph 1, point b) f of the GDPR. The information recorded in the log files does not allow us to draw direct conclusions about you. We only store IP addresses in an abbreviated form. Log files are retained for 30 days and then deleted.

Types of Cookies Used

Session Cookies: As described above, these cookies are essential for navigating our site and using its features, such as adding products to your cart. They are deleted once you leave our site or close your browser.
Persistent Cookies: These cookies allow websites to remember your preferences for future visits. For instance, if you choose to view content in French during your first visit, the site will automatically be in French on your next visit. This makes your navigation more convenient and efficient.
Advertising Cookies: These cookies can be used to determine your interests based on websites you visit or products you buy. They help us know your age, marital status, or number of children, allowing us to send you ads for products or services that match your interests or needs and limit the number of times these ads are shown to you.
Analytical Cookies: These cookies inform us about the performance of our sites. We mainly use Google Analytics cookies to study the performance of our sites. Our ability to use and share information collected by Google Analytics about your visits to our sites is governed by the Google Analytics Terms of Use and Google Privacy Policy.

Other Technologies Used

Pixels: Also known as "tags," "web bugs," or "pixel gifs," pixels are small invisible objects embedded in a webpage. We use pixels to send cookies to your computer, monitor site activity, facilitate login, and manage online marketing activities. Our promotional emails and newsletters also include pixels to let us know if the message was opened and your interactions.

The Benefit of Cookies for a Subscription Model

You can register on our online store to use all the site's features and buy our products. Required data (name, email address, password, payment information, billing, and shipping address) are necessary for registration or the ordering process. Without this data, registration is impossible as it is essential for contract execution. Therefore, we use cookies. The legal basis for this data processing is Article 6, paragraph 1, point b of the GDPR.

Are Cookies Used During Payment?

For orders in our online store, we offer payment by credit card. We work with payment service providers from whom we obtain or transmit your payment information. Without this payment information and service providers, payment processing and contract fulfillment would be impossible. The legal basis for this data processing is Article 6, paragraph 1, point b of the GDPR.

Payment Service Providers

Our subcontractors who may receive your personal data if necessary include:

PayPal (online banking and payment services),
Stripe (online banking and payment services),
Mollie (online banking and payment services).

Contact and Customer Service Data Usage

You have various options to contact us (e.g., via email, chat). We use your contact details exclusively for communication. Without this information, we cannot communicate with you. The legal basis for this data processing is Article 6, paragraph 1, point b of the GDPR.

Who Else Can Access Your Data?

We use third-party providers who collect, use, and disclose your information only when necessary to use the services they allow us to operate.

Working with Third Parties

Besides payment service providers, we mainly work with subcontractors:

Shopify Inc. - Privacy Policy - Terms of Use,
Google - Privacy Policy - Terms of Use,
Meta - Privacy Policy - Terms of Use,
Pinterest - Privacy Policy - Terms of Use,
Logistics,
Transport.

We use third-party applications very sparingly and pay particular attention to ensuring that non-essential order processing elements are never disclosed.

Shopify Inc.

The Y2k-Empire.com site is hosted on Shopify Inc., a platform that allows us to sell our products and services online. Your personal data is stored in Shopify's databases and application. This server is secure and protected by a firewall.

Personal Data for Payment on Shopify

When you purchase products on our Y2k-Empire.com site and use a direct payment gateway, Shopify stores your credit card information. This information is encrypted according to the PCI-DSS (Payment Card Industry Data Security Standard). Transaction information is retained throughout your order until it is completed. Once your order is finalized, transaction information is deleted.

PCI-DSS Standard

This standard protects all direct payment gateways. Managed by the PCI Security Standards Council, it includes companies like Visa, MasterCard, American Express, and Discover. The PCI-DSS standard ensures secure data handling for credit cards used in our store and other service providers.

Google

How does Google use information collected through sites or applications using their services? Like many website and application owners, we use Google services to enhance our content. As we are integrated with their services, we share information with them.

How Does It Work?

For example, when you visit a website using advertising services like AdSense (including analytics tools like Google Analytics) or embedding video content from YouTube, your browser automatically transmits certain information to Google. This includes the URL of the page you are visiting and your IP address. Google may also place or read cookies in your browser. Applications using our advertising services also share information with us, such as the app's name and a unique advertising identifier.

Personalizing Ads

When ad personalization is enabled, Google uses your information to show you more useful ads. If you visit our site and then another site displaying Google-served ads, you might see an ad for hairbrushes.

When ad personalization is disabled, Google does not collect or use your information to create an ad profile or personalize the ads you see. You will still see ads, but they are likely less relevant.

Controlling Information Collected by Google on Our Site

You can control the information transmitted by your device when visiting sites and applications using Google services or interacting with them:

Ad Settings Tool: Control the ads you see on Google services or non-Google sites using Google advertising services. Learn more about ad personalization and how to disable this feature and block specific advertisers here.
My Activity Page: Check and control data created when using Google services, including information collected via sites or applications. Browse by date and theme and delete some or all of your activity here.
Google Analytics Opt-Out Browser Add-On: Prevent your browser from using Google Analytics. Learn more here.
Chrome's Incognito Mode: Surf the web without saving webpages or files in your browser or account history (unless you decide to log in). Cookies are deleted when you close windows and tabs. Learn more about cookies here.
Managing Cookies in Google Chrome: Block third-party cookies or delete existing cookies in your browser. Learn more here.

Google Analytics

A service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies and other similar technologies to analyze and improve our site based on user behavior. Information collected may be transmitted to a Google server in the USA and stored there. If personal data is transferred to the USA, Google complies with the EU-US Privacy Shield. However, your IP address is abbreviated before use, making it impossible to identify you. Google Analytics includes "anonymizeIP" code on our site to ensure IP addresses are anonymized. Google processes the information collected by Google Analytics through cookies to evaluate your use of the website, compile reports on site activity, and provide other services related to site and internet use. Normally, Google AdWords Conversion-Tracking cookies remain active for about 30 days. If you visit our site during this period, Google and we will be informed that you have seen the provided ad.

Google AdWords Conversion-Tracking

Google Remarketing. These Google services (Google AdWords Conversion-Tracking and Google Remarketing) also use cookies and similar technologies to measure the performance of displayed ads and show personalized advertising messages on websites collaborating with Google.

YouTube

Our site may contain third-party content, such as YouTube videos. This always involves the providers of these contents knowing your IP address. Without an IP address, the content cannot be sent to your browser. The IP address is essential for representing this content. The legal basis for this data processing is Article 6, paragraph 1, points b) f of the GDPR. We strive to use only content from providers who ensure your IP address is used solely for content delivery. However, we have no control over whether third-party providers store the IP address, e.g., for statistical purposes. We have integrated videos stored on YouTube into our website, which can be viewed directly from our site. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). If personal data is transferred to the USA, Google and YouTube comply with the EU-US Privacy Shield. The legal basis is Article 6, paragraph 1, point f of the GDPR, based on our legitimate interest in integrating videos and images. When visiting our site, YouTube and Google receive information that you have accessed the corresponding subpage. This occurs regardless of whether you are logged into YouTube or Google. YouTube and Google use this data for advertising, market research, and site design purposes. If you visit YouTube from our site while logged into your YouTube or Google account, these sites can associate this event with your profiles. To prevent this association, you must log out of your Google account before visiting our site.

Controlling Information Collected by Meta on Our Site

Before allowing Meta to process your data, we ask for your consent. For instance, a banner might appear on our site asking you to allow Meta to process the information collected. Meta will respect the purposes described in the authorization you gave our site. To modify or withdraw your consent, visit our Data Privacy page.

Pinterest may also obtain information about you and your activity outside Pinterest. We share information with Pinterest to measure, improve, or report on the effectiveness of ads on Pinterest or to identify types of ads to show you on Pinterest or elsewhere. This includes visits to our site or purchases made with us or information collected about your interests, which Pinterest may use to serve you ads.

Personalizing Ads

When ad personalization is enabled, Pinterest uses your information to show you more useful ads. When ad personalization is disabled, Pinterest does not collect or use your information to create an ad profile or personalize the ads you see.

Does Y2K-Empire.com Share Data with Other Agents?

Data collected is only transmitted when necessary to fulfill the contract or provide technical features of the website or online store or if an external legal basis applies (e.g., legal obligations to disclose data to authorities or courts or when we need third parties bound by professional secrecy to enforce our claims). Part of the data processing is carried out by service providers, such as data centers storing our site and databases, IT service providers maintaining our systems, logistics, and shipping providers, and consulting firms. When we share information with service providers, they can only use it to perform their functions. We select and engage service providers carefully, contractually bind them to our instructions, require confidentiality, and inspect them regularly.

How Long Does Y2K-Empire.com Retain Your Data?

We generally retain personal information only as long as necessary to fulfill contractual or legal obligations for which we collected it. We then delete the information immediately unless we still need it until the expiration of the legal limitation period for civil actions or due to legal documentation obligations. For instance, we must retain contract information for three years from the end of the year our business relationship with you ended for evidence purposes. We must retain some of your data beyond the limitation period due to documentation obligations from the Commercial Code, Tax Code, Banking Act, Anti-Money Laundering Act, and Securities Trading Act. Documentation periods range from two to ten years.

Your Rights

You have the right to request information about the processing of your personal data at any time. We will explain data processing and provide an overview of stored data. If the stored data is incorrect or outdated, you have the right to request correction. You can also request the deletion of your data unless legal regulations prevent deletion, in which case the data will be blocked for legal purposes only. You can request limited processing of your personal data if, for example, you dispute the accuracy of the data. You also have the right to data portability, meaning we can send you a digital copy of the personal information you provided upon request. You can object to data processing based on Article 6, paragraph 1, point f of the GDPR, if a specific personal situation justifies it or if the objection is against direct marketing. You have a general right to object without providing reasons for direct marketing. Additionally, you can revoke your consent at any time, preventing future data processing based on that consent. Revocation does not affect the legality of data processing based on consent before revocation.

Security Measures

We apply current technical measures to ensure data security, protecting your personal data against transfer risks and unauthorized access by third parties. These measures are adjusted based on current technology. For protecting personal information provided on the website, we use SSL (Secure Sockets Layer) to encrypt the information you enter.

Data Breach Notification

If, despite our and our subcontractors' protections, your personal data is stolen, compromised, or deleted, Y2k Empire commits to informing you within the legal timeframe and according to legal requirements. This legal notification obligation should not be interpreted as an acknowledgment of responsibility or negligence by Y2k Empire or its subcontractors.