Last Updated: 21.10.2025
1. Data Controller & Contact
Yinovia Minerals – Hasan H. Firat
Saseler Damm 46
22395 Hamburg
Germany
Email (Data Protection): hasan.firat@yinoviaminerals.com
Email (General): info@yinoviaminerals.com
2. Introduction
This Privacy Policy explains how we, Yinovia Minerals (“we”, “us”, “our”), process your personal data when you visit our website, contact us, or use our services. We operate in compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Telemedia Data Protection Act (TTDSG).
3. Purposes of Processing
We process your personal data for the following primary purposes:
To respond to your contact inquiries and for business communication (B2B).
To prepare and issue offers, and to initiate and execute contracts.
For quality assurance, IT security, and website analytics (if enabled).
To fulfill legal obligations (in particular, commercial and tax law requirements).
4. Data Collection & Legal Basis
We collect data that you provide to us via contact forms, email, phone, post, or during in-person meetings (e.g., at trade fairs).
The legal bases for processing under Art. 6 GDPR are:
Your consent (a)
Performance of a contract or pre-contractual measures (b)
Compliance with a legal obligation (c)
Our legitimate interests (f), such as IT security, internal administration, and legal enforcement.
We do not process special categories of personal data (Art. 9 GDPR).
5. Cookies & Similar Technologies
What is a cookie?
Cookies are small text files stored on your device (computer, tablet, smartphone) by your browser when you visit our website. They help the website remember your actions and preferences.
Legal Basis under TTDSG:
Storing information on your device or accessing it (e.g., via cookies) requires your consent under § 25 TTDSG, unless it is strictly necessary for the website’s technical functioning.
Types of Cookies We Use:
Strictly Necessary Cookies: Essential for the basic functions of our site (e.g., login, navigation). These cookies do not require your consent.
Performance & Analytics Cookies: Help us understand how visitors use our site (e.g., most visited pages). These cookies are only used with your opt-in consent.
Functionality Cookies: Remember your settings (e.g., language preference) to provide a more personalized experience.
Advertising & Marketing Cookies: Used to show you relevant ads. These may be placed by our advertising partners and require your consent.
How to Control Cookies:
You can manage your cookie preferences at any time through your browser settings. Please note that disabling cookies may cause some website features to malfunction.
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-and-site-data-firefox
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae07
Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
6. Data Recipients & International Transfers
Categories of Recipients:
Processors: IT, hosting, and maintenance service providers.
Other Third Parties: Logistics, customs, legal, tax, and business advisors, where necessary.
International Transfers:
If personal data is transferred to countries outside the EU/EEA (third countries), such transfers will only occur if the European Commission has issued an adequacy decision (Art. 45 GDPR) or, in the absence of such a decision, based on appropriate safeguards like EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR. We will provide further details upon request.
7. Data Storage Period
We store personal data only as long as necessary for the respective purposes or as required by legal retention periods.
Contact/Inquiry Data: Typically 12–24 months after the communication concludes.
Contract/Transaction Data: In accordance with commercial and tax law requirements, typically 6–10 years.
After the purpose ceases to exist or the retention period expires, data is deleted or anonymized.
8. Your Data Subject Rights
Under Articles 15-21 GDPR, you have the right to:
Access your personal data.
Rectify inaccurate data.
Erase your data (“right to be forgotten”).
Restrict the processing of your data.
Data portability.
Object to processing based on legitimate interests.
You can withdraw your consent at any time with future effect. To exercise any of these rights, please contact us at: hasan.firat@yinoviaminerals.com.
You also have the right to lodge a complaint with a supervisory authority, such as The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).
9. Data Processors
We use carefully selected data processors who implement appropriate technical and organizational measures. We have concluded data processing agreements (DPA) with all processors. A current list can be provided upon request. Current processors include:
Hosting & Email: [Provider, Country of operation – e.g., Elster Mediaservice, Germany]
Web Analytics (if used): [Tool/Provider, e.g., Matomo/Google Analytics]
10. Hosting & Server Logs
Our website is hosted by [Elster Mediaservice, Germany]. When you access our site, server log data is automatically collected (e.g., IP address – potentially in truncated form, date/time, URL, referrer, user agent).
Purpose/Legal Basis: IT security and disruption analysis (Art. 6(1)(f) GDPR).
We employ security measures including TLS/HTTPS encryption, role-based access controls, and regular backups/updates.
11. Web Analytics
If active and with your consent, we use the following tool for analytics:
Tool Name: [e.g., Matomo/Google Analytics]
Data Collected: Page views, pseudonymous IDs, truncated IP address, device/browser, session duration, referrer.
Legal Basis: Your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG).
Storage Duration: 12 months.
Withdrawal: You can withdraw your consent at any time via the cookie settings.
12. Communication & Contact Forms
When you contact us via form, email, or phone, we process your information to handle your request and, if applicable, for contract initiation/performance.
Legal Bases: Art. 6(1)(b) (contract/pre-contract) and Art. 6(1)(f) (legitimate interest in efficient communication) GDPR.
13. Minors / B2B Focus
Our online offering is directed exclusively at business customers (B2B). We do not knowingly process data from minors.
14. Updates to This Policy
We may update this policy to reflect changes in legal requirements, our services, or processing activities. The current version will always be available on this website.