Privacy Policy 

1 An overview of data protection 

General 

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy below. 

Data collection on our website 

Who is responsible for data collection on this website? 

This website is operated jointly by two organizations (the “joint controllers”). Both organizations jointly determine the purposes and means of processing your personal data, in accordance with Art. 26 GDPR and the equivalent provision of UK GDPR. See Section 2 for full details. 

How do we collect your data? 

We collect your data when you register for the platform to access the website resources and content, when you submit a message via the contact form, and when you participate in optional surveys. 

Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data such as the browser and operating system you are using or when you accessed the page.  

What do we use your data for? 

We collect your name, email, country and type of organization to register you for the platform and to report aggregate, anonymized user statistics to our project donors. We share optional surveys via email to capture feedback on the website and understand the user experience and impact of the implementation guides.  

What rights do you have regarding your data? 

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also file a complaint with the competent regulatory authorities. 

Analytics and third-party tools 

When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in section 6 of this policy. 

 

2. General information and mandatory information 

Data protection 

The joint operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy. 

If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens. 

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible. 

Notice concerning the parties responsible for this website 

The parties responsible for processing data on this website are: 

Yunus Environment Hub Philanthropy gGmbH / Yunus Environment Hub GmbH 

Rheinstraße 109, 65185 Wiesbaden 

Email: Christina.Jaeger@yunuseh.com 

Common House LTD 

Mercury House 19-21 Chapel Street, Marlow, SL73HN, Bucks, England 

Email: josemanuel@wearecommonhouse.com  

Both parties jointly determine the purposes and means of processing your personal data and are therefore joint controllers within the meaning of Art. 26 GDPR and the equivalent provision of UK GDPR. We have entered into a Joint Controller Agreement which sets out our respective responsibilities for compliance with applicable data protection law, including how we handle data subject requests, data breaches, and retention obligations. 

Applicable law 

Yunus Environment Hub is established in Germany and processes data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. 

Common House LTD is established in the United Kingdom and processes data in accordance with the UK GDPR and the UK Data Protection Act 2018. Both regimes apply to the joint processing activities described in this policy and we comply with both. Transfers of personal data between Yunus Environment Hub (EU) and Common House LTD (UK) are covered by the European Commission’s adequacy decision for the United Kingdom, which permits such transfers without additional safeguards. 

Your rights 

Data subjects may exercise their rights against either joint controller. For convenience, Yunus Environment Hub acts as the designated point of contact and will coordinate responses with Common House LTD. Regardless of which party you contact, both are equally responsible for ensuring your rights are fulfilled.  

You have the following rights in respect of your personal data: 

• Right of access – to obtain a copy of your personal data and information about how it is processed (Art. 15 GDPR / UK GDPR). 
• Right to rectification – to have inaccurate data corrected (Art. 16). 
• Right to erasure – to request deletion of your data in certain circumstances (Art. 17). 
• Right to restriction – to request that processing be restricted in certain circumstances (Art. 18). 
• Right to data portability – to receive your data in a structured, machine-readable format (Art. 20). 
• Right to object – to object to processing based on legitimate interests (Art. 21). 
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time with future effect. Withdrawal does not affect the lawfulness of processing before withdrawal. 

To exercise any of these rights, please contact IT@yunuseh.com. An informal email is sufficient. We will respond within one month. 

Right to file complaints with regulatory authorities 

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities.  

For EU/German matters, the competent authority is the data protection authority of the German federal state in which Yunus Environment Hub is headquartered. A directory of German supervisory authorities is available at: https://www.bfdi.bund.de 

For UK matters, the competent authority is the Information Commissioner’s Office (ICO): https://ico.org.uk 

SSL or TLS encryption 

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar. 

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties. 

Opposition to promotional emails 

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received. 

3. Data collection on our website 

Platform registration 

When you register for the ReuseForAll platform, we collect the following personal data: name, email address, country, and type of organization. This data is collected and processed by both joint controllers.  

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR / UK GDPR), given at the point of registration. 

Your registration data will be retained for the duration of your account and for five years thereafter, after which it will be deleted. You may request deletion of your account and associated data at any time.  

Contact form 

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission. 

Please note that messages submitted via the contact form are received by both joint controllers, as both organizations are involved in operating the platform and may need to handle your enquiry. 

The legal basis for processing contact form data is your consent (Art. 6(1)(a) GDPR / UK GDPR). You may withdraw your consent at any time by contacting us. Data processed before withdrawal remains lawfully processed. 

We will retain contact form data for five years from the date of your last contact, after which it will be deleted, unless a statutory retention obligation requires otherwise. 

Survey participation 

From time to time, we may send you links to optional surveys by email. These surveys are used to gather feedback on the ReuseForAll platform and to understand user experience and impact. Participation is entirely voluntary. 

Data collected in surveys (which may include opinions, ratings, and any information you choose to provide) is processed by both joint controllers. The legal basis is your consent (Art. 6(1)(a) GDPR / UK GDPR), given when you choose to complete a survey. 

Survey response data will be retained for five years and then deleted. You may withdraw from survey participation at any time. 

Server log files 

The website provider automatically collects and stores information that your browser automatically transmits to us in “server log files”. These are: 

Browser type and browser version 

Operating system used 

Referrer URL

Host name of the accessing computer 

Time of the server request 

IP address 

These data will not be combined with data from other sources and is not used to identify individual users. The legal basis is Art. 6(1)(f) GDPR / UK GDPR (legitimate interests), as the collection of log files is necessary for the secure and error-free operation of the website. 

Cookies 

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser. 

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site. 

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website. 

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored on the basis of Art. 6(1)(f) GDPR / UK GDPR (legitimate interests in providing a functioning website). If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in Section 6 of this privacy policy. 

4. Analytics and advertising 

Google Analytics 

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

This website currently uses the GA4 version, which automatically anonymize IP addresses by default. We use the Site Kit by Google Plugin: This plugin automatically anonymizes IPs upon activation of the Google Analytics module.

Additionally, Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored based on the basis of Art. 6(1)(f) GDPR / UK GDPR.. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. 

IP anonymization 

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. 

Browser plugin 

You can prevent these cookies from being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. 

Objecting to the collection of data 

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics. 

For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en . 

Outsourced data processing 

We have entered into an agreement with Google as required by Art. 28 GDPR, for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics. 

Demographic data collection by Google Analytics 

This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section 2. 

5. Newsletter 

Newsletter data 

This feature is currently not used.  

6. Plugins and tools 

Google Web Fonts 

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser’s cache to display texts and fonts correctly. 

For this purpose, your browser must establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This is done on the basis of Art. 6(1)(f) GDPR / UK GDPR, as uniform font presentation constitutes a legitimate interest. 

If your browser does not support web fonts, a standard font is used by your computer. 

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/. 

LMS Tutor Plugin 

This website uses the Tutor LMS plugin (developed by Themeum) to provide learning management functionality for the ReuseForAll platform. When you register and use the platform, Tutor LMS stores the following data on our servers: 

• Name and email address 
• Course enrollment status and learning progress 
• Quiz attempts, results, and assignment submissions 
• Questions and answers submitted within courses 
• Automated email notifications related to your course activity 

This data is stored exclusively on our own servers and is processed solely for the purpose of providing and administering the learning platform. The legal basis is your consent (Art. 6(1)(a) GDPR / UK GDPR) given at registration. 

Data is retained for the duration of your account and for five years following account closure, after which it is deleted.