Privacy Policy

When you access our website, our hosting provider automatically collects information in so-called server log files, which your browser automatically transmits to us. These are: IP address, date and time of the request, content of the request, browser and operating system used, and the requesting domain.

This data cannot be attributed to specific individuals and is used exclusively to ensure trouble-free operation of the website and the security of our IT systems (Art. 6 (1) (f) GDPR).

Yabino uses only technically necessary cookies or comparable storage technologies, in particular a session cookie to keep you signed in, a security token to protect against cross-site request forgery (CSRF), and optionally a "remember me" cookie if you select that option when logging in.

These cookies are necessary for the operation of the website and are used on the basis of § 25 (2) no. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act) and Art. 6 (1) (f) GDPR. No separate consent is required for these technically necessary cookies. We do not use cookies for advertising or analytics purposes.

When you register on Yabino, we collect your name, email address, an encrypted password, and the account type you choose (regular user or business account). This data is necessary to provide the user account and its associated features (e.g. reviews, favorites, business management) (Art. 6 (1) (b) GDPR).

We also use your email address to send you confirmation, security, and account notifications (e.g. for email verification or password resets).

Registered users can leave reviews on business listings and save businesses as favorites. Submitted reviews (star rating and optional comment) are displayed publicly on the respective business page together with your displayed name. You can edit or delete your own reviews at any time via your user account.

Business accounts can create and manage their own business listings with contact details, location, opening hours, and photos. This information is processed for the purpose of public display in the directory (Art. 6 (1) (b) GDPR).

Business listings that were originally created by us can be taken over by their actual owner via a claim feature ("Claim this business"). For this, we collect a contact phone number, your role at the business (e.g. owner, manager, authorized representative), and an optional additional message.

Optionally, you may upload a document to prove ownership (e.g. a business registration certificate, ID, or comparable confirmation). This document is used exclusively for internal review by our team, is never displayed publicly, and is stored in a non-publicly accessible storage area. It is deleted after the review is completed.

Our AI-assisted search processes your search query in order to suggest matching business listings. To do this, the query is transmitted to and processed by our server-side backend (including a self-hosted automation component on a subdomain of yabino.de).

If you explicitly allow it via your browser's permission prompt, we use your approximate location (geolocation) to show results near you. The location request is made once per session and only with your active consent (Art. 6 (1) (a) GDPR). Search also works without sharing your location.

When you send us an inquiry via the contact form, the information from the inquiry form — name, email address, selected subject, and message text — is stored by us and forwarded to our contact address for the purpose of processing your inquiry and any follow-up questions. We do not pass on this data without your consent (Art. 6 (1) (b) GDPR).

To protect our forms (contact, registration, login, forgot password) from abuse by automated access (bots), we use the "Google reCAPTCHA" (v3) service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

reCAPTCHA checks in the background whether input on our website (e.g. in a contact form) comes from a human or from automated access. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics and transmits data (including IP address, device, and browser information) to Google in the USA. This is done on the basis of our legitimate interest in protecting our website from abusive automated access and spam (Art. 6 (1) (f) GDPR).

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy

To display locations, we embed a Google Maps view (Google Ireland Limited) on business pages and link to Google Maps for directions. When you access a page with an embedded map, data (including your IP address) is transmitted to Google servers. This happens regardless of whether you have a Google account or are logged in to Google.

For our registered business accounts and in the admin area, we additionally use the Google Places address-suggestion feature to make entering business addresses easier.

This is done in our legitimate interest in a clear and user-friendly presentation of our offerings (Art. 6 (1) (f) GDPR). For further information, please refer to Google's terms of use and privacy policy at https://policies.google.com/privacy.

We use an email delivery service provider to send account notifications, confirmation emails, replies to contact inquiries, and comparable system messages. The data required for this (email address, subject, and content of the message) is processed exclusively for the purpose of sending the email.

Your personal data is only transferred to third parties to the extent necessary to provide our services (e.g. hosting provider, email delivery service, the Google services mentioned above), where required by law, or where you have expressly consented. Where legally required, we enter into data processing agreements pursuant to Art. 28 GDPR with external service providers who process personal data on our behalf.

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. User account data is deleted or anonymized once you delete your account, unless statutory retention periods prevent this. Documents uploaded to prove ownership (see section 7) are deleted after the review is completed.

You have the following rights with respect to us regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent already given, with effect for the future (Art. 7 (3) GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

We update this privacy policy whenever our processing practices or legal requirements change. The version published on this page at any given time applies.