Privacy policy
We take the protection of your personal data seriously. This policy explains which data we process when you visit yachtfabrics.com, send us an enquiry or use the cart, for which purposes, on which legal basis and which rights you have.
1. Controller
Pankoke & Hellmich GbR
Fosse Bredde 25
33758 Schloß Holte-Stukenbrock
Germany
Phone: +49 5207 925 6959
Email: info@yachtfabrics.com
We are not required to appoint a data protection officer. For all questions about data protection, please contact us at the email address above.
2. Hosting and server log files
The website yachtfabrics.com is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, on servers in Frankfurt am Main. The database for enquiries and cart handovers is operated by Neon Inc., USA, on servers in Frankfurt am Main. We have concluded data processing agreements with both providers.
When you visit the website, the servers automatically process technical data that your browser transmits: IP address, date and time, the page requested, the referring page, browser and operating system. This is necessary to deliver the website securely and to detect attacks. The legal basis is Art. 6 (1) (f) GDPR. The data are deleted as soon as they are no longer needed for these purposes.
Vercel and Neon are certified under the EU-U.S. Data Privacy Framework. For any transfer to the USA, the adequacy decision of the European Commission applies, and in addition the EU standard contractual clauses.
3. Cookies and similar technologies
We store information on your device or read it from there only if this is strictly necessary to provide the website you requested (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR):
- yf_locale: stores your language, 12 months
- Bill of materials of the configurator (session storage of your browser): carries your cut list over to the enquiry form, until you close the tab
- yf_admin: login to our internal backend, only for our staff
We do not use analytics or advertising tools and load no fonts, maps or videos from third parties. That is why there is no cookie banner.
4. Enquiries
When you send us an enquiry through the contact form, we store your name, email address, company, vessel type, the dimensions and positions from the configurator and your message in our database, together with the IP address and browser of the request to prevent misuse. We then send the enquiry to our team by email and you receive a confirmation. Emails are sent via STRATO GmbH, Berlin, Germany (data processor).
Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data when your enquiry has been dealt with, unless retention periods under commercial and tax law apply. The same applies if you write to us directly by email.
5. VAT number check
If you enter a VAT identification number in the configurator, we check it with the VIES system of the European Commission. Only the number is transmitted. Legal basis: Art. 6 (1) (c) GDPR together with § 18e UStG and Art. 6 (1) (b) GDPR.
6. Cart handover to matnext.com
Orders are placed in our shop at matnext.com. When you click “Add to cart”, we record the configuration (thickness, dimensions, quantity, format, price), the VAT identification number if you entered one, the result of its check, the IP address and the time, and forward your browser to matnext.com with a signed link that contains the same configuration and VAT number. We use the record to match the order to your configuration and as evidence for a tax exempt delivery. Legal basis: Art. 6 (1) (b) GDPR, for the evidence Art. 6 (1) (c) GDPR. From that point on, the privacy policy of matnext.com applies.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time with effect for the future (Art. 7 (3)).
Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Düsseldorf, Germany.
8. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Status: October 2026