Privacy Policy

01Who we are

YACE International is the controller of the personal data described in this policy.

Address: Agoglu Maslak A-108, Sariyer, Istanbul 34485, Turkey
Email: [email protected]
Phone: +49 177 5833839

02What we collect

Applications: your name, email, phone number, country, date of birth, the programme you are interested in, your answers to our questions and your consent choices.

Email subscription: your name and email address.

Contact and partnership forms: your name, email, organisation and role where relevant, the topic and your message.

Payments: payment details are handled by our payment providers. We receive confirmation of payment but not your full card details.

Technical data: when you submit a form we record the page you used, the campaign link that brought you to us (UTM parameters) and your browser type. Your IP address is used only for security and spam prevention and is stored as a one-way coded value, not in readable form.

03How we use it

We use your data to process applications and scholarships, organise programmes (for example invitation letters and accommodation), communicate with you about your application or booking, send the emails you subscribed to, reply to enquiries and partnership requests, keep our website secure and understand how our website is used.

04Legal bases

We process your data because it is necessary to handle your application or booking (contract), because you gave consent (email subscription and optional cookies), because we have a legitimate interest (security, answering enquiries and improving our programmes), or because the law requires it (for example accounting records).

05Who we share it with

We share data only with service providers who help us run YACE, under agreements that require them to protect it: our website host (Vercel), our database provider (Neon, servers in the European Union), our CRM and email platform (HighLevel / LeadConnector), our payment providers, and analytics providers if analytics are enabled.

For participants, we share what is necessary with host partners, venues and accommodation providers. We disclose data to authorities only when the law requires it. We never sell your personal data.

06International transfers

Some of our providers are based outside the European Economic Area, for example in the United States. Where this happens we rely on safeguards recognised by EU law, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

07How long we keep it

Application and participation records are kept for the duration of the programme and up to 24 months afterwards, unless the law requires longer (for example financial records). Email subscription data is kept until you unsubscribe. Enquiries are kept for up to 24 months. You can ask us to delete your data earlier, as explained in our GDPR Policy.

08Young participants

Some of our programmes are open to people aged 16 and 17. Where the law requires it, we ask for the consent of a parent or legal guardian. If you believe we hold data about a minor without proper consent, contact us at [email protected] and we will act promptly.

09Cookies

Our website uses only the cookies needed for it to work, such as the sign-in cookie for our staff area. If we enable analytics or advertising tools such as Google Analytics or the Meta Pixel, we will only set those cookies with your consent, and you can change your choice at any time.

10Security

Data is encrypted in transit, access is limited to the people who need it, and sensitive credentials are stored encrypted. No system is perfectly secure, but we work to protect your data and will act quickly if something goes wrong.

11Your rights

You can ask to access, correct or delete your data, object to or restrict its use, receive a copy, or withdraw consent at any time. Our GDPR Policy explains these rights and how to use them.

12Changes and contact

We may update this policy; the date at the top shows the latest version. For any privacy question, write to [email protected].