Privacy Policy

Last updated 29 August 2026

Controller

Young Adults & Professionals Forum Germany (YAPF Germany)
Ruhrorter Str. 9, 46049 Oberhausen, Germany
Represented by Emmanuel Eze
Email: info@dlyapf.de

We have not appointed a data protection officer, as we are not required to under Art. 37 GDPR or § 38 BDSG.

What this site does not do

We use no analytics, no tracking pixels and no advertising cookies. We do not profile visitors, and we set no cookies that require consent — which is why you see no cookie banner. Fonts are served from our own servers, not from a third party.

Visiting the website

The site is hosted on Cloudflare Workers. When you open a page, your browser necessarily transmits your IP address, the requested URL, the time of the request, and your browser and operating system version. This is technically required to deliver the page and to maintain security and stability.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating a secure, functioning website.
Processor: Cloudflare, Inc., under a data processing agreement including the EU Standard Contractual Clauses.
Retention: Server-side log data is short-lived and is not combined with other data or used to identify you.

If you subscribe through the form in our footer, we ask only for your email address and your explicit consent. We use the double opt-inprocedure: we send you a confirmation link, and you are only added to our mailing list once you click it. This documents that the subscription was genuinely yours.

Legal basis: Art. 6 (1) (a) GDPR — your consent, and § 7 (2) no. 3 UWG.
Processor: Brevo (Sendinblue GmbH / Brevo SAS), which sends the confirmation and our campaigns and stores the list. A data processing agreement under Art. 28 GDPR is in place. Brevo also stores the time and IP of your subscription as proof of consent.
Retention: Until you unsubscribe. Every email carries a one-click unsubscribe link.
Withdrawal: You can withdraw consent at any time with effect for the future, by using the unsubscribe link or by emailing us. Withdrawal does not affect the lawfulness of processing before it.

ASCEND 2026 registration archive

People who registered for our ASCEND 2026 event gave us their contact and registration details. That event has concluded and registration is closed. We keep those records as a closed archive — nothing on this website reads or writes them, and no new records can be added.

Purpose: Documenting who attended, and issuing or re-issuing participation certificates on request.
Legal basis: Art. 6 (1) (b) and (f) GDPR — performing the registration you entered into, and our legitimate interest in being able to evidence and document the event.
Where it is stored: Cloudflare D1, within the Cloudflare network.
Onward transfer: Where a registrant did not object to being contacted, we transferredonly email address, first name, last name and preferred title to Brevo for our newsletter. No other registration field — including any information about religious affiliation — was transferred, and none will be.

Contacting us

The email addresses on this site are plain mailto: links; there is no contact form. If you write to us, we process your message and your address in order to answer, on the basis of Art. 6 (1) (f) GDPR, and keep it as long as needed for that purpose.

Images

Photographs are delivered by ImageKit (ImageKit Pte. Ltd.) and, in places, Unsplash. Loading an image transmits your IP address to those providers, which is technically unavoidable when content is delivered from a content delivery network.

Legal basis: Art. 6 (1) (f) GDPR — efficient and fast delivery of our site.

YouTube video

The ASCEND page contains a video hosted on YouTube. It is not loaded until you click play: until then, no connection to Google is made and no data reaches YouTube. Once you click, the video is loaded fromyoutube-nocookie.com in extended data protection mode, and Google receives your IP address and may process further data under its own privacy policy.

Legal basis: Art. 6 (1) (a) GDPR — your consent, given by clicking play.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Browser storage

We store your language preference in your browser, and register a service worker that caches images so pages load faster on repeat visits. Both stay on your device, are not transmitted to us, and are not used to recognise you. You can clear them at any time through your browser settings.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15)
have inaccurate data corrected (Art. 16)
have your data erased (Art. 17)
restrict processing (Art. 18)
receive your data in a portable format (Art. 20)
object to processing based on legitimate interests (Art. 21)
withdraw consent at any time, with effect for the future (Art. 7 (3))

To exercise any of these, email info@dlyapf.de.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For our location that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

Changes

We update this policy when the site changes. The date at the top tells you which version you are reading.