Legal
Privacy Policy (GDPR / DSGVO)
Controller
YS Global Trade Partners, Yahya Yacoob, Trauns Allee 15, 22043 Hamburg, Germany · yahya@ystradepartners.com. No data protection officer is required under § 38 BDSG.
What we process, why, and on which legal basis
- Contact and prequalification forms (name, company, email, phone, message and — depending on the form — revenue band, EBITDA band, sector, ownership objective, timeline, product category, certifications, shelf life, capacity): to assess whether your company fits our mandates and to contact you. Legal basis: Art. 6 (1) b GDPR (pre-contractual steps). Forms are transmitted and stored via Netlify Forms (Netlify Inc., San Francisco, USA — EU Standard Contractual Clauses).
- Onboarding data after the engagement is confirmed (financial statements, ledger extracts, supplier and trade-term data, product files, company information): to prepare the diagnostic, the blind teaser, valuation range and buyer shortlist, or to present your product to our Gulf distributor. Legal basis: Art. 6 (1) b GDPR. Shared only in anonymised form until you approve an introduction, and thereafter only with the counterparty you approved, under NDA.
- E-mail delivery of our replies and status messages runs through Resend (Plus Five Five, Inc., San Francisco, USA) on the basis of EU Standard Contractual Clauses: your name, e-mail address, company and the content of the message. Legal basis: Art. 6 (1) b GDPR. No payment data is collected on this website; fees are invoiced and settled by bank transfer.
- Appointment booking via Calendly LLC, Atlanta, USA (EU Standard Contractual Clauses): name, email and chosen time. Legal basis: Art. 6 (1) b GDPR. Calendly opens in a new window only when you click a booking link.
- Newsletter: name, email, company — only with your consent, Art. 6 (1) a GDPR; withdrawable at any time via the link in every email or by writing to us.
- Server logs and hosting: Netlify, Inc., San Francisco, USA, on EU Standard Contractual Clauses — IP address, browser, timestamps for secure operation, Art. 6 (1) f GDPR; deleted after 30 days. Form submissions are stored in Netlify Forms in the same way.
- Fonts are hosted on our own servers. No connection to Google Fonts is made and no IP address is transmitted for this purpose.
- Reach measurement and advertising: Google Analytics 4 and Google Ads (Google Ireland Ltd., Dublin; transfer to Google LLC, USA, on EU Standard Contractual Clauses and the EU-US Data Privacy Framework) — only after you accept them in the cookie banner. Legal basis: Art. 6 (1) a GDPR, § 25 (1) TDDDG; withdrawable at any time via "Cookie settings" in the footer.
- WhatsApp and LinkedIn links open those providers' services only when you click them; nothing is transmitted before that.
Cookies and consent
Essential local-storage entries (language preference ystp_lang, consent record ys_consent) are set without consent, § 25 (2) TDDDG. Analytics or marketing scripts run only after you accept them in the cookie banner (Art. 6 (1) a GDPR) and can be withdrawn there at any time. You can reopen the banner via "Cookie settings" in the footer.
Retention
Prequalification and contact data of companies that did not proceed: 12 months, then deleted. Onboarding, contract and payment data: for the duration of the engagement and thereafter as required by commercial and tax law (6 / 10 years, §§ 257 HGB, 147 AO). Newsletter data: until you unsubscribe.
Your rights
Access, rectification, erasure, restriction, data portability, objection (Art. 15–21 GDPR) and withdrawal of consent with effect for the future. Contact: yahya@ystradepartners.com. You may lodge a complaint with a supervisory authority, e.g. Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg.