Privacy Policy & Data Protection

1.0. Introduction

YUUNRI Afroshopping (haftungsbeschränkt) (“YUUNRI”, “we”, “us”) operates a multi-vendor eCommerce marketplace serving customers in Germany. This Privacy Policy explains how we collect, use, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR).

2.0. Data Controller

The data controller within the meaning of Article 4(7) GDPR is:

YUUNRI Afroshopping (haftungsbeschränkt)
Bundesallee 142 / 12161 Berlin
contact@yuunri.com

3.0. Personal Data We Collect

Depending on your interaction with the platform, we may collect:

a) Users

• Name
• Email address
• Phone number
• Delivery address
• Order and transaction history
• Customer support communications

b) Vendors

• Business name and registration details
• Contact person information
• Bank account details (processed via Stripe only)
• Tax-related information
• Sales and payout data

4.0. Payment Data

Payments on YUUNRI are processed exclusively by Stripe, a certified third-party payment processor.

• YUUNRI does not collect, store, or process payment card or bank account details.
• Payment data is handled securely by Stripe in compliance with PSD2 and industry security standards.

Stripe’s Privacy Policy applies in addition.

5.0. Purpose of Data Processing

We process personal data for the following purposes:

• account registration and authentication,
• order processing and delivery coordination,
• payment facilitation and payouts,
• customer support and dispute handling,
• legal and regulatory compliance.

Processing is based on contract performance (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).

Additional processing activities may be based on:

• legitimate business interests pursuant to Art. 6(1)(f) GDPR, including fraud prevention, platform security, dispute management, and service improvement;
• user consent pursuant to Art. 6(1)(a) GDPR, where required for marketing communications or optional tracking technologies.

YUUNRI may require reasonable identity verification before responding to data protection requests. Requests shall be handled in accordance with applicable GDPR timelines and requirements.

5.1. Hosting / Third-Party Processors

YUUNRI may use carefully selected third-party service providers and processors for:

• cloud hosting,
• infrastructure,
• customer support,
• analytics,
• communication tools,
• logistics integrations,
• and platform operations.

Such providers process data only under contractual safeguards and in accordance with applicable data protection laws.

6.0. Data Sharing

Personal data may be shared with:

• Vendors (for order fulfillment),
• logistics providers (for delivery),
• Stripe (for payment processing),
• authorities where legally required.

Data is never sold to third parties.

7.0. Data Retention

Personal data is retained only as long as necessary to:

• fulfill contractual obligations,
• comply with statutory retention requirements,
• resolve disputes.

8.0. User Rights

Users and Vendors have the right to:

• access their personal data,
• rectification or deletion,
• restriction of processing,
• data portability,
• lodge a complaint with a supervisory authority.

Requests can be submitted to: privacy@yuunri.com

Users also have the right to lodge a complaint with the competent data protection supervisory authority in Germany or their country of residence within the European Union.

In the event of a personal data breach, YUUNRI shall act in accordance with applicable GDPR notification and response obligations.

8.1. Account Deletion Process

Users and Vendors may request deletion of their accounts and personal data, subject to:

• legal retention obligations,
• unresolved disputes,
• fraud prevention requirements,
• tax and accounting obligations,
• or other lawful grounds for retention.

9.0. Data Security

YUUNRI implements appropriate technical and organizational security measures designed to protect personal data against:

• unauthorized access,
• accidental loss,
• misuse,
• disclosure,
• alteration,
• or destruction.

Such measures may include:

• encrypted communications,
• access controls,
• authentication systems,
• monitoring,
• and secure infrastructure practices.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

10.0. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be communicated via the platform or email.

Continued use of the platform following publication of updated policies constitutes acceptance of the revised Privacy Policy to the extent permitted by law.

11.0. Cookies and Tracking Technologies

YUUNRI uses cookies, session storage, and similar technologies necessary for:

• platform functionality,
• authentication,
• shopping cart management,
• fraud prevention,
• analytics,
• and performance optimization.

Where legally required, users will be asked to provide consent before non-essential cookies or tracking technologies are activated.

Users may manage cookie preferences through browser settings or the platform’s consent management tools.

Essential cookies required for platform functionality may be processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, while non-essential analytics, marketing, or tracking technologies shall only be activated based on user consent where required by law.

12.0. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), YUUNRI shall ensure that appropriate safeguards are implemented in accordance with GDPR requirements, including:

• adequacy decisions,
• Standard Contractual Clauses (SCCs),
• or other legally recognized transfer mechanisms.

13.0. Marketing Communications

Where permitted by applicable law or based on user consent, YUUNRI may send:

• promotional emails,
• platform updates,
• offers,
• newsletters,
• or operational notifications.

Users may unsubscribe from marketing communications at any time.

Users may withdraw previously granted consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

14.0. Minors

The YUUNRI platform is not intended for persons under the age of 18 without parental or legal guardian consent.

YUUNRI does not knowingly collect personal data from minors in violation of applicable law.

15.0. Liability Disclaimer

Third-party services integrated into the platform may maintain separate privacy policies and independent data processing practices.

Where users interact directly with third-party services, the respective third-party provider may act as an independent data controller for certain processing activities.

Users are encouraged to review the privacy policies of such third-party providers.