AY Privacy Policy
AY
Privacy Notice
PDF-Version
As at: 06/2025
This Privacy Notice gives you an overview of how AY processes your data. It applies to all websites, apps and other benefits and services offered by AY.
If you have a question regarding this Privacy Notice or data protection at AY you can reach out to our Privacy Team by sending an email to ay@asafyaacobi.de.
Please also send an email to our Privacy Team if you would like to request data access or data deletion, or in order to exercise other data protection rights provided in Art. 15-22 GDPR, including withdrawal of consent to marketing, opt out from newsletter etc.
Which services and offers this Privacy Notice applies to: AY processes your data in a similar way for most of our services. This Privacy Notice therefore applies to all benefits and services which we offer our European customers. This is true regardless of whether we do this via a website, an app, in transactions, on the phone, at events or via social networks or other channels. For ease of comprehension, we use the term “services” to summarise this “normal case”.
What you will learn in this Privacy Notice:
-
Which data AY stores.
-
What we do with this data and what it is needed for.
-
Which data protection rights and options you have.
-
Which technologies and data we use to personalise and coordinate our services in order to offer you a secure, simple, seamless and individual shopping experience.
-
Which technologies and data we use for advertising, including the tracking technologies we use.
1. Which data does AY process?
AY offers you a wide range of services, which you can also use in a wide range of ways. Depending on whether you contact us online, by phone or otherwise and on which services you use, various data from different sources may come into play. Much of the data we process is provided by you yourself when you use our services or contact us, for example when you register and provide your name or email address or address. We do, however, also receive technical device and access data which is automatically collected when you interact with our services. This may, for example, be information on which device you are using.
When we talk about “your data”, we are referring to personal data. This includes all information which allows us to identify you straight away or by combining it with other information. Examples: Your name, your telephone number, your customer number, order numbers or your email address. All information which cannot be used to identify you (even by combining it with other data) is classified as non-personal data. Non-personal data is also referred to as anonymous data. If we combine your personal data with anonymous data, all the data in this record counts as personal data. If we delete the personal data from a piece of information or a record on your person, the remaining data in this record no longer counts as personal data. This procedure is referred to as anonymisation.
1.1 Profile Information
Profile information is personal and demographic information on your person (so-called master data), along with your individual interests, which you share with us when registering for a customer account. Your profile data includes, for example:
-
Your first and last names
-
Your contact details
-
Your preferences, e.g. in relation to brands, product types or styles
-
Demographic information such as your gender, age and place of residence
Mandatory information is usually your name, your email address and a password you choose yourself. Your email address and the password will later constitute your login details.
Other mandatory information may also be required for the use of access-restricted, fee-based or personalised services, such as your date of birth or your title.
Profile data may also include further information on your person and your interests. These may be collected in the process of registering for the service, or only subsequently. This is the case, for example, if you later add voluntary information to your profile or you wish to use your customer account to register for a service which requires additional mandatory information.
1.2 Contact Information
If you contact us, we collect your data. Depending on how you contact us (e.g. by phone or by email), your contact details may include your name, postal addresses, telephone numbers, fax numbers, email addresses, detail on your social network profiles (for example we receive your Facebook ID if you contact us via Facebook), user names and similar contact details.
1.3 Shopping Information
If you order something from AY, we collect your shopping data. Depending on the type of purchase and processing status, shopping data may include the following information:
-
Order number
-
Details on the purchased items
-
Payment method information
-
Delivery and billing addresses
-
Messages and communication relating to purchases (e.g. notice of revocation, complaints and messages to customer service)
-
Delivery and payment status, e.g. “completed” or “dispatched”
-
Return status, e.g. “successfully completed”
1.4 Payment details
We offer you the common payment methods in online retail - especially advance payment, credit card, PayPal or invoice. We collect the payment details shared by you in order to execute the payment. We receive further payment details from external payment service providers and credit agencies which we work with in executing payments and carrying out credit checks. We only forward information to our payment service providers which is necessary for processing payment.
Payment details include:
-
Preferred payment method
-
Billing addresses
-
IBAN and BIC or account number and sort code
-
Credit card details
1.5 Messages, conversation content
If you communicate with us or other users regarding products and other topics by phone, post, social media, contact forms or any other medium, we collect the content of your messages.
1.6 Site data
For particular purposes, we also collect data on your device’s current location when you use our services. Two different technologies are used for this.
If you approve your device’s location services for an app, a website or another online service by AY, AY processes the location data collected by your device and provided to us in order to provide you with location-specific services.
We also collect location data derived from your device’s IP address (down to the city level). An anonymised IP address shortened to three characters is used for this purpose. Therefore, this cannot be used to identify your internet connection or device.
1.7 Photos
Profile photos can be uploaded if you wish, once you are logged in to your AY account. Ay has access to those images, but does not use them for any other purposes.
1.8 Device and access data
When using online and mobile services, it is inevitable that technical data will be generated and processed in order to provide the features and content offered and to display them on your device. We refer to this data as "Device and Access Data". Device and Access Data are created whenever online and mobile services are used. It does not matter who the provider is. Device and Access Data are therefore created, for example, when using:
-
Websites
-
Apps
-
Social media
-
Email newsletters (i.e. if your newsletter interaction is recorded)
-
Location-based services
2. What does AY use my data for?
AY processes your data in accordance with all applicable data protection laws. Of course, we observe the principles of data protection law for the processing of personal data. We therefore generally only process your data for the purposes explained to you in this Privacy Notice or shared when we collect the data. These are mainly purchase processing and the provision, personalisation and development as well as security of our services. We also use your data within the framework of the strict German and European data protection law, but also for other purposes such as product development, scientific research (especially in the areas of machine learning, artificial intelligence and deep learning) and market research, for the optimisation of business processes, the needs-based design of our services and personalised advertising.
3. Personalised services
The development and provision of personalised functionalities and services for you is our top priority. We offer you an individual shopping experience and a range tailored to your individual interests, regardless of location, time and devices used. The processing of your data to personalise our service is therefore an integral part of AY’s service.
4. Info on websites and apps
We use your data to provide access to the AY websites and apps. Along with the device and access data collected whenever you use these services, the type of data processed as well as the processing purposes depend especially on how you use the functions and services provided via our services. We also use the data collected when you use our services to find out how our online offering is used. We use this information and other information in the course of shopping personalisation to improve our services and for personalised advertising.
5. Information about Social Media
AY maintains social media profiles on the social networks of Facebook and Instagram. We regularly publish and share content, offers and product recommendations. The operators of the social networks record your usage behaviour via cookies and similar technologies upon every interaction on our fan pages or other Facebook or Instagram websites. Social media operators can view general statistics about the interests and demographic characteristics (e.g. age, gender, region) of fan page visitors. When you use social networks, the nature, scope and purposes of processing social network data are determined primarily by the social network operators.
6. Newsletter
We offer you various newsletter services which include
-
Inspirational content such as updates on brands, trends, offers, sales, categories;
-
Personalised recommendations of items we think you might like based on your previous orders and browsing behaviour;
If you signed up for newsletters, you will receive some of the newsletter services as described above (depending on the scope of your subscription). There are also service-specific newsletters, which are integral components of a particular service.
7. Individual product recommendations by email and push service
In connection with our services we present information and offerings from AY on the basis of your interests. You may receive a limited number of individual product recommendations, surveys, as well as product review requests from us regardless of whether you have subscribed to a newsletter. In accordance with legal stipulations, we preferentially use the data on your previous orders, to select individual product recommendations.
8. Vouchers
We use the data submitted when ordering AY vouchers to check and process the order and to issue and redeem the voucher. This also includes the recording and processing of the data connected to use of the voucher, especially for fraud prevention.
9. Who is my data forwarded to?
AY only forwards your data if this is allowed by German or European law. We work particularly closely with certain service providers, for example in the area of customer service.
10. Which data protection rights do I have?
You have the following legal data protection rights under the relevant legal conditions: Right to information (Article 15 GDPR), right to deletion (Article 17 GDPR), right to correction (Article 16 GDPR), right to restriction of processing (Article 18 GDPR), right to data portability (Article 20 GDPR), right to lodge a complaint with a supervisory authority (Article 77 GDPR), right to withdraw consent (Article 7 (3) GDPR) as well as the right to object to particular data processing measures (Article 21 GDPR). If you want to exercise your data protection rights you can reach out to our Privacy Team by sending an email to ay@asafyaacobi.de. As for the right to information and the right to deletion pursuant to Art. 15 and 17 GDPR, you can also request your data file/report or the deletion of your account within your user account under the account setting “Request or delete data”.
11. When will my data be deleted?
We will store your personal data as long as is necessary for the purposes named in this Privacy Notice, especially for the fulfilment of our contractual and legal obligations. We may also store your personal data for other purposes if or as long as the law allows us store it for particular purposes, including for defence against legal claims.
12. How does AY protect my data?
We transmit your personal data securely using encryption. This applies to your order and your customer login. We do this using the coding system SSL (Secure Socket Layer). We also use technical and organisational measures to secure our website and other systems against loss, destruction, access, change or dissemination by unauthorised persons.
13. Changes to this Privacy Notice
Further development of our websites and apps and the implementation of new technologies to improve our service for you may require changes to this privacy notice. We therefore recommend that you re-read this Privacy Notice from time to time.
14. Contact
You can reach out to our Privacy Team for general questions on privacy and in order to exercise your data protection rights by sending an email to ay@asafyaacobi.de.
15. Information on cookies
You can find out which cookies we use by clicking on the 'Cookie Settings' widget on the bottom left of each page. You can also adjust the 'Cookie Settings' by disabling 'Marketing Cookies', 'Functional Cookies' and 'Analytics Cookies', however, 'Essential Cookies' cannot be disabled. For more information on 'Cookies' please refer to the website 'All About Cookies' by click here.