Privacy Policy

1. Data controller

The controller responsible for the processing of personal data described in this Privacy Policy is: YES-EU Switzerland AG, Metallstrasse 8, 6300 Zug, Switzerland Data-protection contact: dataprivacy@yes-eu.com General enquiries: info@yes-eu.com

2. What data we collect

Contact data you give us, when you email us or submit a form: your name, company, email address, phone number and the content of your message. Usage data collected automatically, when you browse the site: IP address (shortened where supported), device and browser type, pages visited, referring page, and approximate location. This is collected via cookies and analytics tools (see our Cookie Policy) and only with your consent where required.

3. Why we process it, and our legal basis

To respond to your enquiries and provide information you request, the legal basis is: your consent and/or steps taken at your request prior to entering a contract (GDPR Art. 6(1)(a)/(b); revFADP). To operate, secure and improve the website, the legal basis is: our legitimate interest in running a functional, secure site (GDPR Art. 6(1)(f)). To measure website usage with analytics, the legal basis is: your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time via the cookie settings.

4. Analytics and third-party processors

We use third-party service providers to host, operate, maintain and support the website and our related IT environment. These providers process personal data on our behalf where they act as processors. We enter into data-processing agreements and implement appropriate international-transfer safeguards where required by applicable law.

Where you consent, we use Google Analytics 4 (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Corporation) to understand how visitors use the site. These tools may set cookies and process usage data, and may transfer data outside Switzerland/the EEA under appropriate safeguards (e.g. EU Standard Contractual Clauses, EU-US Data Privacy Framework). If you subscribe to our newsletter, your email address and any details you provide are processed by Brevo (Sendinblue SAS, France) to manage the mailing list and send you updates. You can unsubscribe at any time via the link in every email. This website is hosted in our IT environment managed by Tactica ehf. (Iceland), with server infrastructure at Advania / THOR Data Center (Iceland, EEA); server logs and delivery data are processed there on our behalf. When you contact us by email or through a form, your enquiry is handled in our IT environment managed by Tactica ehf. (Iceland), using Microsoft 365 (Microsoft Corporation; EEA data centres available, EU Standard Contractual Clauses and EU-US Data Privacy Framework) with supporting infrastructure at Advania / THOR Data Center (Iceland, EEA) and Hetzner Online GmbH (Germany, EU). We enter into data-processing agreements with these providers as required by law. Messages submitted through our contact and application forms are relayed to our mailbox by FormSubmit (formsubmit.co), which processes the submitted data solely to deliver your message to us. Questions that you submit through the website's chat assistant, together with the relevant conversation's context, are processed on our behalf by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China) to generate a response. This involves a transfer of information outside the EEA and Switzerland. Please do not enter personal, confidential or sensitive information into the chat assistant. We do not intentionally collect personal data through the assistant and do not store chat conversations after the response has been generated. If you activate the translation feature, the page content is machine-translated by Google Translate (Google Ireland Ltd.) at that moment; no translation request is made before you choose a language.

5. Cookies

We use strictly necessary cookies to run the site, and, only with your consent, statistics cookies. We do not use preference or marketing cookies. You can accept, deny or adjust your choice at any time. See our Cookie Policy for the full list.

6. How long we keep data

We keep contact data only as long as needed to handle your enquiry and to meet legal retention obligations. Enquiries sent to info@yes-eu.com are deleted after 24 months at the latest. Analytics data (user- and event-level) is retained for 14 months and then deleted or anonymised, in line with our data retention schedule.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact dataprivacy@yes-eu.com. You also have the right to lodge a complaint with a supervisory authority, in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU/EEA, your local data-protection authority.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. The site is served exclusively over encrypted HTTPS.

9. Changes to this policy

We may update this policy to reflect changes to our practices or the law. The current version is always published on this page with its last-updated date.