Version 2.0 | Updated on: 10 June 2026
Purpose of this privacy policy
This privacy policy explains how Yon E Global B.V. (“Yon E”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit our website, interact with us, complete a survey, express interest in our products or services, or apply for a role with us.
This policy also functions as a privacy notice for job applicants and candidates (whether directly or via recruitment agencies/platforms). It should be read together with any shorter privacy notice, consent statement or fair processing notice that we provide at the point where we collect personal data from you. Those notices are intended to supplement, not override, this policy.
Our website is not intended for children and we do not knowingly collect personal data relating to children. We also do not knowingly collect data relating to applicants under 18 years of age.
Controller
Yon E Global B.V. is the controller responsible for the personal data described in this policy, unless a specific notice states otherwise.
Contact us
We have appointed a Data Privacy Manager to oversee compliance with this policy. If you have any questions about this policy or how we handle your personal data, please contact:
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would, however, appreciate the opportunity to address your concerns first, so please contact us in the first instance.
Changes to this policy
We may update this policy from time to time. Where we make material changes, we will take appropriate steps to bring those changes to your attention, which may include publishing an updated version on our website or notifying you through another appropriate channel.
Please keep us informed if your personal data changes during your relationship with us, so that the information we hold remains accurate and current.
Third-party links
Our website may include links to third-party websites, plug-ins or applications. We do not control those third-party sites and are not responsible for their privacy practices. We encourage you to read the privacy notice of every third-party website you visit.
From time to time, we may invite individuals to complete surveys to help us understand user needs and preferences, evaluate product concepts, support early-stage research and development, and improve our products and services.
Participation in any survey is voluntary. You may choose not to answer a survey or any individual survey question, unless the question is marked as mandatory for the survey to function. Where a survey includes sensitive health-related questions, we will ask for your explicit consent before you proceed with such question.
Personal data means any information relating to an identified or identifiable individual. It does not include anonymous information where the individual can no longer be identified.
We may collect, use, store and transfer the following categories of personal data:
We may also collect, use and share Aggregated Data, such as statistical or demographic data. Aggregated Data may be derived from personal data, but it does not directly or indirectly identify you i.e., your name shall not be disclosed. Where we combine Aggregated Data with personal data in a way that can identify you, we treat the combined data as personal data and use it in accordance with this policy.
Some information you provide through our survey, such as menstrual cycle data, fertility information or vaginal health indicators, reproductive health may be considered sensitive personal data or special category personal data under applicable data protection laws.
We only collect and process sensitive health-related information where you have provided your explicit consent. We do not require you to provide this information to browse our website, receive general information from us, or apply for a role with us.
Sensitive health-related survey responses will be used only for the purposes described in this policy and any survey-specific notice. We will not use this information for employment decisions, targeted advertising, or unrelated marketing. Where reasonably possible, we will anonymise or aggregate survey responses before analysis or wider internal reporting.
Please do not provide sensitive health-related information unless you are comfortable doing so and have read the notice presented to you at the point of collection. We rely on your explicit consent, freely given after you have understood the applicable terms and conditions, for the receipt and processing of such data.
We collect personal data through the following channels:
We use personal data only where we have a lawful basis to do so. Depending on the context, we may rely on performance of a contract, steps taken at your request before entering a contract, compliance with legal obligations, our legitimate interests, your consent, or, for sensitive health-related information, your explicit consent.
We use your information to understand user needs and preferences, support early-stage product research and development, and invite you to participate in future testing or feedback where you opt in. We do not sell your personal data.
| Purpose / activity | Categories of personal data | Lawful basis |
|---|---|---|
| To enable you to download Yon E reports or content, submit forms, or complete a general survey | Identity Data, Contact Data, Profile Data, Survey Data, Usage Data, Marketing and Communications Data | Performance of a contract or steps taken at your request; legitimate interests in understanding users, improving our services and growing our business; consent where required. |
| To collect and analyse sensitive health-related survey responses | Survey Data and Sensitive Health Data | Explicit consent. Where applicable under GDPR, Article 9(2)(a) explicit consent for special category data, together with consent or legitimate interests for associated non-sensitive processing. |
| To understand user needs, preferences and product opportunities, and to support research and product development | Identity Data, Contact Data, Profile Data, Survey Data, Usage Data and, where explicitly consented, Sensitive Health Data | Legitimate interests in product research and development for non-sensitive data; explicit consent for sensitive health-related data. |
| To invite you to future testing, research interviews or feedback opportunities where you opt in | Identity Data, Contact Data, Profile Data, Survey Data, Marketing and Communications Data | Consent or legitimate interests, depending on the context and the nature of the communication. |
| To administer and protect our business, website and IT systems | Identity Data, Contact Data, Technical Data | Legitimate interests in running our business, providing administration and IT services, network security and fraud prevention; compliance with legal obligations. |
| To deliver relevant website content, measure campaign effectiveness and conduct surveys | Identity Data, Contact Data, Profile Data, Usage Data, Technical Data, Marketing and Communications Data | Legitimate interests in improving our website, services and marketing strategy; consent where required for cookies or direct marketing. |
| To use data analytics to improve our website, services, marketing, user relationships and experiences | Technical Data, Usage Data, Aggregated Data | Legitimate interests in keeping our website relevant, improving services and informing our business strategy; consent where required for analytics cookies. |
| To process and manage feedback, comments and enquiries | Identity Data, Contact Data, Technical Data, Usage Data, Profile Data | Legitimate interests in responding to and managing enquiries and feedback. |
| To assess and manage job applications, conduct interviews, make hiring decisions and maintain candidate records | Identity Data, Contact Data, Recruitment Data, references and, where legally required or voluntarily provided, limited special category data | Steps prior to entering into an employment contract; compliance with legal obligations; legitimate interests in recruiting and managing staffing needs; explicit consent where required by law. |
Change of purpose
We will use personal data only for the purposes for which we collected it, unless we reasonably consider that another purpose is compatible with the original purpose. If we need to use personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so. Where we rely on consent, we will not process the relevant personal data for a new purpose without obtaining fresh consent where required.
We aim to give you choices regarding marketing and advertising. You may receive marketing communications from us if you have requested information from us, purchased goods or services from us, downloaded a report, registered for an event, entered a survey or promotion, or otherwise provided your details and have not opted out of receiving marketing.
We will obtain your express opt-in consent before sharing your personal data with any company outside the Yon E group or third-party resellers for their own marketing purposes.
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links in those messages or by contacting us. Opting out of marketing will not affect processing carried out for service, transactional, recruitment, legal or security purposes.
We will not use Sensitive Health Data for direct marketing or targeted advertising.
Our website uses cookies and similar technologies to distinguish you from other users, provide website functionality, understand how the website is used, and improve user experience. Some cookies are strictly necessary for the operation of the website. Others, such as analytics, functionality or targeting cookies, may require your consent depending on applicable law and your location.
You can manage cookie preferences through the cookie banner or your browser settings. If you block all cookies, including essential cookies, parts of our website may not function properly.
Third parties, such as analytics providers, advertising networks or providers of external services, may also use cookies over which we have limited control. You should review the relevant third-party privacy and cookie notices where applicable.
We may share personal data with the following categories of recipients where necessary for the purposes described in this policy:
We require service providers to respect the confidentiality and security of personal data and to process it only for specified purposes and in accordance with our instructions. We do not permit service providers to use personal data for their own independent purposes unless they have a separate lawful basis and provide their own privacy notice.
Where we share Sensitive Health Data with a service provider, we will do so only where necessary for the survey, research, analysis, security or storage purposes described in this policy, and subject to appropriate contractual and security protections.
We may transfer personal data within the Yon E group and to external service providers located outside the European Economic Area. Whenever we transfer personal data outside the EEA, we will ensure that an appropriate transfer mechanism is in place where required by applicable law.
These safeguards may include transferring personal data to countries that have been recognised as providing an adequate level of protection, entering into standard contractual clauses approved by the European Commission, or relying on another lawful transfer mechanism.
The same approach applies to recruitment data and survey data where our service providers, such as applicant tracking systems, survey platforms, analytics tools or hosting providers, are located outside the EEA.
We have implemented appropriate technical and organisational measures designed to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. We limit access to personal data to employees, agents, contractors and service providers who have a business need to know and who are subject to confidentiality obligations.
We maintain procedures to deal with suspected personal data breaches and will notify affected individuals and applicable regulators where legally required.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, reporting, regulatory or dispute-resolution requirements.
To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the risk of harm from unauthorised use or disclosure, the purposes of processing, whether we can achieve those purposes through other means, and applicable legal requirements.
We retain survey responses only for as long as necessary for research and analysis. Where possible, we anonymise or aggregate responses. Once survey responses have been anonymised so that individuals can no longer be identified, we may use the anonymised information for research, statistical and product development purposes without further notice.
Recruitment Data will generally be retained for 12 months after completion of the recruitment process, unless you become an employee, a longer period is required by law, or you consent to us keeping your CV or candidate profile on file for future opportunities.
Depending on your location and applicable law, you may have rights in relation to your personal data, including the right to:
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn. If you withdraw consent for processing Sensitive Health Data, we will stop processing that data for consent-based purposes unless another legal basis permits or requires continued processing, for example to comply with law or defend legal claims.
To exercise any of your rights, please contact data.protection@yone.global. We may need to request information from you to confirm your identity and ensure that personal data is not disclosed to a person who has no right to receive it.
We try to respond to all legitimate requests within one month. Occasionally, it may take longer if a request is complex or if you have made multiple requests. In that case, we will notify you and keep you updated.
These rights apply equally in the context of recruitment, although certain rights may be limited where we need to retain information for legal compliance, regulatory requirements or the establishment, exercise or defence of legal claims.
Lawful bases
Consent means that you have given a clear, affirmative indication that you agree to the processing of your personal data for a specific purpose. Explicit consent requires a clear and specific statement of consent, particularly for sensitive health-related or other special category personal data.
Legitimate interest means our business interest in conducting and managing our business to provide secure, relevant and effective products, services and experiences. We consider and balance any potential impact on you and your rights before relying on legitimate interests.
Performance of a contract means processing personal data where it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Compliance with a legal obligation means processing personal data where it is necessary for compliance with a legal or regulatory obligation that applies to us.
Internal third parties
Other companies in the Yon E group that provide IT, system administration, leadership reporting, research, business operations or other group support services.
External third parties
