This is a courtesy translation. The legally binding version is the German original.
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy listed below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.
How do we collect your data?
Some data is collected when you provide it to us. This could be data you enter in a contact form, for example.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior, provided you have given your consent.
What rights do you have regarding your data?
You have the right to receive free information about the origin, recipient, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and other questions on the subject of data protection.
We host our website with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.
Vercel is a website hosting service. When you visit our website, Vercel collects various log files including your IP addresses. For details, please refer to Vercel's privacy policy: https://vercel.com/legal/privacy-policy.
The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; the consent can be revoked at any time.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
The responsible party for data processing on this website is:
YB Digital
(Contact details see legal notice)
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.
Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing and, if applicable, a right to correction or deletion of this data at any time. You can contact us at any time regarding this and other questions on the subject of personal data.
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.
The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
If you contact us by email or telephone, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.
The data you send us via contact requests will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
We use Resend (Resend, Inc., San Francisco, CA, USA) to send contact form notifications and automated confirmation emails. When you contact us via a contact form, your data (name, email address, message) is processed through Resend's servers.
The use of Resend is based on Art. 6(1)(f) GDPR (legitimate interest in reliable email delivery). For more information, see Resend's privacy policy: https://resend.com/legal/privacy-policy.
To protect against abuse of our contact forms, we use a server-side rate limiter (Upstash Redis, Upstash, Inc., USA). Your IP address is temporarily processed to limit the number of requests (maximum 5 requests per 10 minutes). The IP address is not permanently stored and is not used for analytics or tracking purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in website security and functionality).
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, session duration, operating systems used, and the origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.
Important: Google Analytics is activated on this website exclusively on the basis of your express consent (Art. 6(1)(a) GDPR). Without your consent, no data is collected by Google Analytics. You can revoke your consent at any time via the cookie settings.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
For more information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
This website uses Google Tag Manager. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to manage tracking and analytics tags on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform any independent analysis. It is solely used for managing and deploying the tools integrated through it (e.g. Google Analytics).
The use of Google Tag Manager is based on Art. 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in the quick and straightforward integration and management of various tools on our website. The services integrated through it are only activated with your consent (Art. 6(1)(a) GDPR).
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers does not take place.
For more information about Google Fonts, visit https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=en.
This website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. They serve to make our offering more user-friendly, effective, and secure.
Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies).
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
If cookies are used by third-party companies or for analysis purposes, we will inform you separately within this privacy policy and, if applicable, request your consent.
This website uses a cookie consent banner. Analytics cookies (Google Analytics) are only set after your express consent. You can revoke your consent at any time by deleting the cookies in your browser and reloading the page.
This website offers the option to contact us via WhatsApp. A link is provided that opens the WhatsApp application on your device (wa.me link). When you use this link, you are redirected directly to the WhatsApp service (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).
YB Digital itself does not collect or store any personal data through this feature. Data processing within WhatsApp is subject to WhatsApp/Meta's privacy policy. The legal basis for providing the link is Art. 6(1)(f) GDPR (legitimate interest in providing an accessible means of contact). For more information: https://www.whatsapp.com/legal/privacy-policy.
On our portfolio page, selected client projects are displayed as live previews in so-called iFrames. In this process, the external website is embedded directly into our page, causing your browser to establish a connection to the server of the respective website.
When loading an iFrame, the following data is transmitted to the server of the embedded website: your IP address, browser type and version, operating system, referrer URL, and date and time of access. The embedded website may also set its own cookies and load additional third-party resources (e.g., analytics tools or fonts).
The following external websites are currently embedded:
The embedding is based on Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the visual presentation of our work results to potential clients. We have no influence on data processing by the operators of the embedded websites.
We operate a protected client portal ("YB Digital Lab") for collaboration with our clients. Access is exclusively granted via a personal email invitation (Magic Link).
The following data is processed within the client portal:
Processing is based on Art. 6(1)(b) GDPR (contract performance) — data processing is necessary for the performance of our service agreement.
Account data is stored for the duration of the business relationship. After termination of cooperation, personal data will be deleted within 30 days, unless statutory retention obligations apply.
The client portal uses the following services:
You have the right to access, rectification, deletion and restriction of processing of your personal data. To exercise your rights, please contact us using the contact details provided in the imprint. Upon request, we will delete your client account including all associated data.
Im Rahmen der Projektfreigabe im YB Digital Lab können Kunden aufgefordert werden, Meilensteine mit einer digitalen Unterschrift zu bestätigen. Dabei werden folgende Daten erhoben und gespeichert:
Zweck der Verarbeitung: Rechtlich nachvollziehbare Freigabe von Projekt-Meilensteinen. Die Unterschrift dient als einfache elektronische Signatur gemäß eIDAS-Verordnung Art. 3 Nr. 10 zur Beweissicherung der Freigabeentscheidung.
Rechtsgrundlage: Art. 6 Abs. 1 lit. b DSGVO (Vertragserfüllung — Freigabe von Projektleistungen) sowie Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an einer rechtssicheren Dokumentation der Projektfreigabe).
Speicherort: Supabase (EU-Region, Rechenzentrum Frankfurt am Main). Die Unterschrifts-Bilddateien werden im verschlüsselten Supabase Storage gespeichert, die Metadaten (IP, User-Agent, Zeitstempel, Benutzer-ID) in der Datenbank.
Aufbewahrungsdauer: Für die Dauer des Projektverhältnisses zuzüglich der gesetzlichen Aufbewahrungsfrist von 6 Jahren gemäß § 257 HGB.
Ihre Rechte bezüglich dieser Daten (Auskunft, Berichtigung, Löschung, Einschränkung, Widerspruch) ergeben sich aus den oben genannten Betroffenenrechten.
When you fill out a contact form on our website (project wizard, website configurator, simple inquiry, or callback request), your inquiry is stored as a record in our database in addition to the email being sent. The purpose is the structured management and tracking of client inquiries in our internal administration area.
Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures — processing is necessary for the performance of pre-contractual measures at the request of the data subject).
Inquiry data is stored for a maximum of 12 months from submission, or until conversion into an active client project, whichever comes first. After that, the data is deleted.
Data is stored in the database of Supabase (Supabase Inc., USA). Processing is based on EU Standard Contractual Clauses (SCC). Supabase uses EU data centers.
Last updated: March 2026
This privacy policy was prepared with care. For questions or comments, please contact us using the contact details provided in the legal notice.