Privacy notice of the YSI Global Website

The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). We would therefore like to inform you,

• When and for which actions we process data
• Which data we process and for what reasons
• Who receives data
• What rights you have in relation to data processing by us.

This privacy notice only governs the use of personal data on the YSI Global website at https://ysi.global/ including the subpages. If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this privacy notice.

The transmission of information to or from this website is secured with TLS encryption.

You can access, print or download this privacy policy permanently and at any time at https://ysi.global/[link].

Contact information

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

Yunus Social Business GmbH
c/o EDGE Grand Central,
Invalidenstraße 65
10557 Berlin
E‑mail: corpteam@yunussb.com

General information on data processing

Scope of the processing of personal data

The provision of the website requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data.

You are not obliged to provide us with personal data when visiting our website. However, if the provision of this data is technically required to access our website, refusing to do so will mean that you will not be able to access and use our website.

If you conclude a contract with us via the website, you may be obliged to provide personal data because of this or due to a legal requirement, in particular if this is necessary to fulfil your own contractual or legal obligations. In this respect, you may be liable to pay fines or damages if you fail to provide this information. Insofar as the provision of your data is necessary for the fulfilment of our obligations, there is an obligation on your part. Refusal to do so may result in the loss of your entitlement to benefits as well as claims for damages on our part.

As a visitor to our websites, you are not subject to automated decision‑making within the meaning of Art. 22 GDPR.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is presented below.

Processing reason	Legal basis in the GDPR	Explanation
Performance of a contract or implementation of pre‑contractual measures	Art. 6 (1) lit. b)	Processing only takes place to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, we only process data to this extent.
Legitimate interest	Art. 6 (1) lit. f)	Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this privacy policy as part of the processing description.
Consent	Art. 6 (1) lit. a) § 25 (1) TDDDG	Processing takes place if you have expressly consented to the type and scope of data processing. You can withdraw your consent at any time with effect for the future. However, this will not affect the processing that has taken place up to this point in time.
Legal obligation	Art. 6 (1) lit. c)	Processing takes place insofar as this is necessary to fulfil German or European legal obligations.

Data retention and erasure

We delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases may also exist in parallel, or a new legal basis may apply when a legal basis ceases to apply, such as the obligation to store certain data to fulfil a statutory retention obligation.

Data processing for the provision of the website

For us to display the website to you, it is necessary to process certain information. This already takes place when you access our website. We also offer various functionalities on our website that require further data processing.

Log files

When you visit our website, your browser sends various pieces of information to our server, so‑called server log files. We need these to establish and maintain the connection. The data also includes your IP address, which we treat as personal data. The following data is also collected:

• Date and time at the time of access
• Call successful / not successful
• Referrer (previous page)
• Operating system / version used

We store this data in so‑called server log files. This data is not merged with other data about you. The storage of log files including your IP address serves the legitimate interest of providing our website and preventing its misuse. Stored log files are deleted after 30 days at the latest, unless longer storage is necessary, for example to prevent or investigate an attack on our website.

Contact form

You can send us a request at any time via the contact form on our website. The following information is requested: title, first name, last name, e‑mail address, and your message. The information is marked as mandatory fields. All other data that you provide to us as part of the request, including via the free‑text field, is provided voluntarily.

We use this data exclusively for answering your inquiry and the related communication. The legal basis of this processing of your data depends on the content of your request. In principle, our legitimate interest here is in providing the contact functionality and responding to your inquiry transmitted via it. If your request is directed towards the conclusion of a contract with us, the processing is carried out in the context of this pre‑contractual obligation.

Your data will be deleted as soon as your request has been processed. In the event of a contract being concluded, we may process the data further to fulfill the contract.

Newsletter

You have the option of subscribing to our newsletter on this website. We use the e‑mail provider MailerLite Ltd., 88 Harcourt Street, Dublin 2, D02 DK18, Ireland (MailerLite) to send the newsletter.

If you register for our newsletter or give us your e‑mail address as part of a registration, the data required for this (e‑mail address, first name, surname) will be transmitted to MailerLite and stored there. After registration, MailerLite will send you an e‑mail to confirm your registration (so‑called “double opt‑in”). In addition to the simple sending of e‑mails, MailerLite offers various analysis options to enable us to find out whether, when and where the newsletters sent are opened, used or rejected. Among other things, MailerLite uses cookies and similar technologies for this purpose.

If you no longer wish to receive our e‑mails and newsletters, you can unsubscribe at any time using the “Unsubscribe” button, which is available in every message.

Cookies

We use cookies on our website for various purposes. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. If the cookies listed below have their own option to delete or block them, this is shown in the respective description. Cookies may be required to establish a connection or to improve the use of the website.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website.

The use of technically necessary cookies and the associated data processing is based on our legitimate interest in providing our website. Technically necessary cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage duration of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.

Usage Analysis

Analysis and tracking cookies are used to record and evaluate your usage behavior when using our services or visiting our website. In doing so, we learn, for example, how often certain functionalities are used, or content is read or whether you have come to us via an advertisement placed by us. We use this data to further improve the usability of this website and the attractiveness of its services.

The legal basis for data processing is your cookie consent, according to. § 25 (1) TDDDG in conjunction with Art. 6 para. 1 a) GDPR. You can disable the storage of cookies. In addition to the option to prevent them in the settings of your browser software, the individual cookies usually offer their own option to block or disable them. This is then shown below in each case.

Data processing for usage analysis takes place during your visit to our website and only until the time of your effective objection.

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google collects information about your use of this website (including your IP address) in the USA via a cookie and stores the information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened before transmission by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Google is certified under the EU‑U.S. Data Privacy Framework. Google analyses the information collected and sends us reports on usage activity on our website and provides further services to us for this purpose. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

In addition to blocking all cookies from your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt‑out cookie that will prevent the collection by Google Analytics within this website in the future. For more information about Google Analytics, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=d.

Possibility of objection and removal

If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or revoke your consent at any time. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. You can contact hello@ysi.global at any time to exercise your right of objection or revocation or change the cookie settings via the corresponding link in the footer. If you object to processing based on our legitimate interest, we may nevertheless continue the processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Social media presences

We operate our own presence in the social network LinkedIn. These networks process your personal data, for example, to create usage profiles corresponding to your interests. Cookies may be stored on your device for this purpose. More detailed information on data processing by the individual networks can be found in the respective data protection information and, where applicable, in the cookie policies of the networks:

https://de.linkedin.com/legal/privacy-policy

This data protection information also contains information about the type and scope of data processing by the respective networks as well as about the possibilities to assert your data subject rights (right to information, confirmation, correction, deletion, restriction, data portability and complaint to the competent data protection supervisory authority).

We do not know what user data the social networks collect. We do not get full access to the collected user data or user profiles. We can only access public profile information. What information you choose to make public can be customized through your account settings.

If available, we use user data of the chat functions to answer your questions. The collected customer data is used to contact the user to provide the requested information and offers.

We may receive anonymous statistics from the social networks based on legitimate interest in the use of our site such as:

• Followers: number of people who follow us – including growth and development over a defined period.
• Reach: number of people who see a particular post and number of interactions on a post, providing insight into which content resonates best with the community.
• Advertising performance: how many people saw and interacted with an ad or article.
• Demographics: average age of visitors, gender, place of residence, language, industry.

These statistics are used to constantly improve our online content and better respond to the interests of our users. We cannot link the statistical data to the profiles of our fans or individual users. You can use your account settings on social networks to decide in what form you want to display targeted ads.

Joint controllership with LinkedIn

For the operation of our LinkedIn company page, we are jointly responsible with LinkedIn for data protection. For LinkedIn, the responsible entity in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Joint controllership is governed by the LinkedIn Page Insights Joint Controller Addendum: https://legal.linkedin.com/pages-joint-controller-addendum.

Data processing outside of Europe by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is possible under certain circumstances.

The legal basis for the processing of your personal data on our company page is the legitimate interests of us or LinkedIn pursuant to Art. 6 (1) f) GDPR for advertising, recommendations and measurements, as well as to offer interested parties an information and communication channel. You can object to the data processing at any time. Please contact LinkedIn for this purpose. Information can be found in LinkedIn’s privacy policy. In your browser settings, you can also prevent the storage of cookies yourself at any time or delete existing cookies.

Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of Art. 4 (1) GDPR. As a data subject, you have the following rights in relation to your personal data. To exercise these rights, you can contact us using the contact details provided above.

Right to access – Art. 15 GDPR

You have the right to access your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.

Right to rectification – Art. 16 GDPR

You have the right to obtain the rectification of inaccurate personal data and the completion of incomplete personal data without undue delay.

Right to erasure – Art. 17 GDPR

You have the right to request the erasure of your personal data if one of the grounds specified in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.

Right to restriction of processing – Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data if one of the reasons stated in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.

Right to data portability – Art. 20 GDPR

In accordance with the provisions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine‑readable format and to transmit those data to another controller without hindrance.

Right to lodge a complaint – Art. 77 GDPR

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority responsible for you.

Recipients of data

The processing of your personal data within the framework of the website is also carried out in part by processors, in particular the hosting of the website (HostPress GmbH, Bahnhofstraße 34, 66571 Eppelborn) and the use of analysis tools. These are engaged exclusively on the basis of an agreement on order processing in accordance with Art. 28 (3) GDPR.

Status: May 2025