Privacy

Yunara is operated by the entity identified in our Impressum. For all privacy-related questions, requests, or complaints, please write to niklas@yunara.agency. We reply within five business days.

Website visitors. When you visit yunara.agency, our hosting provider (Vercel Inc.) automatically processes standard server-log data: your IP address, the time of the request, the URL you requested, your user agent string, and the referring page. This data is used exclusively to deliver the website, detect abuse, and troubleshoot technical issues. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in operating a functional and secure website. Server logs are retained by Vercel according to their own retention policy (typically under 30 days). We do not export or analyse these logs ourselves.

People who email us. When you contact niklas@yunara.agency, we process your email address, your name (if you provide one), and the content of your message. This data is used to respond to your inquiry and, if the inquiry leads to an engagement, to perform the contract. The legal basis is Art. 6(1)(b) GDPR for pre-contractual and contractual processing, and Art. 6(1)(f) GDPR (legitimate interest in responding to business inquiries) for inquiries that do not lead to an engagement.

People we contact first. Yunara sends outbound business proposals to publicly identifiable marketing and brand contacts at companies we have researched as potential clients. The data we process for this purpose is limited to the professional contact information of a specific employee in their professional capacity at their employer (name, job title, business email address, company, and publicly-observable information about their company's marketing activity). The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in business-to-business outreach. We comply with the specific guidance on B2B outreach in recitals 47 and 49 GDPR, and we honour every opt-out request immediately and permanently.

Cookies and tracking. Yunara's website does not set any cookies, does not run any analytics scripts, does not use pixel trackers, and does not embed third-party content that profiles visitors. The only network requests the page makes outside its own origin are for images served from the same domain. You do not need to accept a cookie banner because there are no cookies to accept.

We use a small number of carefully chosen processors to deliver the website and our business operations. All processors are bound by data processing agreements that comply with the GDPR.

• Vercel Inc. (United States) — website hosting, edge delivery, TLS, server logs. Vercel is self-certified under the EU-U.S. Data Privacy Framework.
• Google Ireland Limited — Google Workspace email hosting for niklas@yunara.agency. Google Ireland is the data controller for EU users.
• Amazon Web Services EMEA SARL — outbound email delivery via Amazon SES in the eu-central-1 (Frankfurt) region, and host infrastructure for the Yunara operations stack. All data is processed within the European Union.
• GoDaddy EMEA S.A.R.L. — domain registration and DNS for yunara.agency.

We do not sell, rent, or otherwise transfer your personal data to third parties for their own purposes. We do not use your data for advertising or profiling.

Vercel is based in the United States. When you visit this website, Vercel processes server-log data (including your IP address) on servers that may be located outside the European Economic Area. Vercel is self-certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection under Art. 45 GDPR.

All other personal data processed by Yunara in the operation of our business stays within the European Union.

Server logs: retained by Vercel under their own retention schedule, typically under 30 days.

Email correspondence: retained for as long as necessary to handle the inquiry and for up to six years afterwards to comply with German commercial retention obligations (HGB §257, AO §147). Emails that did not lead to a commercial engagement are deleted within one year of the last contact.

B2B outreach contact data: retained for as long as the contact remains in their professional role at a brand we consider a potential client. Data is deleted when the contact asks to be removed, when a company exits our target list, or when the contact is no longer reachable at the stored address.

You have the following rights in relation to the personal data we process about you:

• Access (Art. 15 GDPR) — the right to confirmation that we process data about you, and a copy of that data.
• Rectification (Art. 16 GDPR) — the right to have incorrect data corrected.
• Erasure (Art. 17 GDPR) — the right to have your data deleted, subject to legal retention obligations.
• Restriction of processing (Art. 18 GDPR) — the right to restrict how your data is used.
• Portability (Art. 20 GDPR) — the right to receive your data in a machine-readable format.
• Objection (Art. 21 GDPR) — the right to object to processing based on our legitimate interests, including a right to object to direct marketing outreach at any time.
• Withdrawal of consent (Art. 7(3) GDPR) — where processing is based on consent, the right to withdraw that consent at any time.
• Lodging a complaint (Art. 77 GDPR) — the right to lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, write to niklas@yunara.agency. We respond within the statutory one-month period.

We may update this privacy policy from time to time to reflect changes in our services, our processors, or applicable law. The most recent version is always the one at yunara.agency/privacy. Material changes affecting how we process your data will be announced on this page with a dated note.

Last updated: 11 April 2026.