← Back to home
Legal

Privacy­policy

Last updated: August 2026

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Company
YPROJECT SIA, registration number 40203701717
Lāčplēša iela 20A – 6, LV-1011 Rīga, Latvia
Represented by
Cornelius Rieger, Managing Director
Location in Germany
Berlin – branch registration in progress
Email
email address is shown here

No data protection officer has been appointed, as the statutory requirements for this do not apply.

2. General principles

We process personal data only to the extent necessary to provide a functioning website together with our content and services, or where you actively provide us with data. Processing is carried out exclusively on the basis of the GDPR and the German Federal Data Protection Act (BDSG).

This website uses an encrypted connection (SSL/TLS). You can recognise this by https:// in your browser's address bar. Data you transmit to us therefore cannot be read by third parties.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. A data processing agreement pursuant to Article 28 GDPR is in place with IONOS.

When the website is accessed, the server automatically collects information transmitted by your browser and stores it in what are known as server log files:

Purpose and legal basis: processing serves the technical operation, security and stability of the website. The legal basis is our legitimate interest in trouble-free and secure operation (Article 6(1)(f) GDPR).

Storage period: log files are deleted automatically after no more than 14 days, unless they are exceptionally required for longer to investigate a specific security incident.

4. Contact form

If you send us an enquiry using the form on this website, we process the details you provide in order to answer your enquiry. We collect:

Purpose and legal basis: processing is carried out to handle your enquiry and to take steps prior to entering into a contract (Article 6(1)(b) GDPR), as well as on the basis of the consent you give when submitting the form (Article 6(1)(a) GDPR). You may withdraw your consent at any time with effect for the future; an informal email to us is sufficient. The lawfulness of processing carried out until withdrawal remains unaffected.

Transmission: the form data is converted into an email on our web server and delivered to our mailbox. Enquiries are not stored in a database on the web server. There is no transfer to further third parties unless it is necessary in order to handle your request (for example to a specialist firm we commission) and you have agreed to it.

Spam protection: the form contains a field that is invisible to you as well as a time measurement. Both serve solely to detect automated submissions. Your behaviour is not analysed, no cookies are set and no data is transferred to third parties.

Storage period: we keep your enquiry until it has been dealt with conclusively and delete it afterwards – unless statutory retention obligations apply (in particular commercial and tax retention periods of six or eight years) or the data is still required to perform a resulting contract.

4a. Contact by email

If you write to us directly by email instead of using the form, we likewise process your details solely in order to handle your request. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and otherwise our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). The same deletion periods apply. Our mailboxes are operated by IONOS SE.

5. Cookies and local storage

This website does not use cookies for analytics, advertising or tracking purposes and does not embed any third-party services that could recognise you.

Only the one-off notice at the bottom of the screen stores in your browser's local storage (localStorage, key yp-cookie) that you have acknowledged it, so that it does not reappear on every visit. This entry never leaves your device and contains no personal data. You can delete it at any time via your browser settings.

6. Fonts, scripts and images

All fonts (Space Grotesk, Inter), JavaScript libraries (Three.js, GSAP) and all images are served from our own server. No connection is made to Google Fonts, to content delivery networks or to any other external provider. Your IP address is therefore not transmitted to any third party.

7. 3D visualisations

The three-dimensional visualisations on this website (building animation and point cloud) are computed entirely in your device's browser using the WebGL graphics interface. No data about your device is collected, stored or transmitted to us.

8. Recipients and transfers to third countries

Your data is processed within the European Union. The only recipient is our hosting and email provider IONOS SE as a processor. No transfer to countries outside the EU or EEA takes place.

9. Your rights

You have the following rights regarding the personal data concerning you:

An informal message to email address is shown here is sufficient to exercise these rights.

10. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 GDPR). Among others, the authority responsible for our German location in Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de

You may also contact the supervisory authority of your habitual residence or the Latvian data protection authority (Datu valsts inspekcija).

11. Changes to this policy

We update this privacy policy whenever the legal situation or the technical setup of this website changes. The version available here applies in each case.