Privacy Policy

of Your Family Entertainment AG, Türkenstraße 87, 80799 Munich, Germany

Version: July 2026 (draft for the new website new.yfe.tv / www.yfe.tv after relaunch)

Your Family Entertainment AG (“YFE”, “we”) takes the protection of your personal data seriously. This privacy policy explains which data we process when you use this website and when you contact us.

Processing is carried out in accordance with the GDPR, the German BDSG and the TDDDG.

1. Who is responsible for your data?

Controller within the meaning of Art. 4(7) GDPR:

Your Family Entertainment AG Management Board: Dr. Stefan Piëch Register court: Local Court of Munich, HRB 164992 Türkenstraße 87 80799 Munich, Germany Phone: +49 (0)89 997271-0 Fax: +49 (0)89 997271-91 Email: info@yfe.tv

Data protection officer:

DataGAP GmbH Bessemerstr. 82 1st floor South 12103 Berlin, Germany Email: team@datagap.de Website: www.datagap.de

2. Scope and website

This policy applies to YFE’s public website under the company domains (including new.yfe.tv and, after cutover, www.yfe.tv), including public subpages (e.g. Business, Channels, legal pages) and the B2B areas Content Acquisition and Book advertising.

Browsing publicly available content generally does not require you to provide personal data.

3. Hosting and server log files

The website runs on servers provided by IONOS SE (1&1 IONOS), Elgendorfer Str. 57, 56410 Montabaur, Germany (VPS / cloud infrastructure in Germany, including Frankfurt am Main). IONOS processes personal data as a processor under Art. 28 GDPR. Hosting takes place in Germany; the hosting setup does not transfer personal data to a third country.

When you access the website, information is automatically stored in server log files transmitted by your browser, which may include:

  • browser type and version
  • operating system
  • referrer URL
  • pages accessed
  • date and time of access
  • IP address
  • internet service provider

These data are not merged with other data sources and are used for technical delivery, stability, security and abuse prevention. Legal basis: Art. 6(1)(f) GDPR. Log files are stored separately from content-related personal data and deleted according to operational retention rules, unless longer retention is required to defend against attacks.

More information on IONOS processing: https://www.ionos.com/terms-gtc/privacy-policy/

4. Cookies and similar technologies

This website does not use Google Analytics, does not use Google Tag Manager for tracking purposes, and does not display a consent/cookie banner.

This website does not claim to use “no cookies”. There is one strictly necessary website session cookie (see 4.2). No analytics, marketing or tracking cookies are set. For anonymous reach measurement see 4.3.

4.1. Public pages (without sign-in)

When you merely visit public pages (without B2B sign-in), no website cookie is set. Language preference (DE/EN), if used, is stored locally in the browser (Local Storage) and is not sent to the server as a cookie.

Short-lived session/security mechanisms of the infrastructure (e.g. TLS, load balancer) may occur at connection time; these are not website tracking cookies.

4.2. Strictly necessary session cookie in the B2B area

Only after a successful B2B login do we set one strictly necessary session cookie named `yfe_b2b_session` (HttpOnly, Secure in production, SameSite=Lax). Purpose: maintaining the login session in the B2B areas (Content Acquisition / Book advertising). It is not used for tracking or advertising. No consent/cookie banner is required for this cookie (strictly necessary, Section 25(2) No. 2 TDDDG; processing legal basis Art. 6(1)(b) GDPR).

Without sign-in, this cookie is not set.

4.3. Reach measurement (cookieless, self-hosted)

For anonymous evaluation of website usage (page views, referrer) we operate a self-hosted, cookieless reach measurement on our servers in Germany (first-party endpoint of this website; optional evaluation via self-hosted Umami on the same VPS/EU). No cookies are set, no localStorage is used for tracking, no fingerprinting is applied, and IP addresses are not stored permanently. There is no disclosure to third parties (e.g. Google Analytics). A consent/cookie banner is not required for this. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding reach and operational stability).

5. Contact

If you contact us by email (e.g. info@yfe.tv) or phone, we process the data you provide (e.g. name, email address, phone number, message content) to handle your request. Legal basis: Art. 6(1)(b) and/or (f) GDPR. Data are deleted when the request has been finally handled, unless statutory retention applies.

There is no website contact form with server submit on this site; the UI offers clipboard/mailto contacts.

6. B2B registration, login and uploads

For B2B features we may process first name, last name, email, phone number, username, password (hashed), optional company data, uploaded files (e.g. trailers, spots) and related metadata. Purpose: providing and processing the requested B2B services. Legal basis: Art. 6(1)(b) GDPR.

7. Fonts

Fonts are self-hosted via Next.js font optimization (at build time). Page views do not fetch fonts from Google or other third parties.

8. External links (social media etc.)

The footer and content may link to external services (e.g. LinkedIn, Instagram, YouTube, Investor Relations on yfe-ag.com). When you click, you leave our website; the providers’ privacy notices apply. Linking does not mean YFE adopts third-party content. Those sites may set their own cookies — outside our offering.

9. Recipients and processors

Recipients may include in particular:

  • hosting provider (IONOS SE) as processor
  • data protection officer (DataGAP GmbH) for related requests
  • authorities where legally required

No transfers to analytics/tracking providers take place for this website (reach measurement is self-hosted, see 4.3).

10. Retention

Personal data are stored only as long as needed for the purposes stated or as required by law:

  • Account data (B2B): until account closure or after a defined period of inactivity followed by deletion.
  • Submissions (content / advertising): after completion of the respective process, unless longer retention is required.
  • Where a contract is involved: 6 or 10 years pursuant to Sections 257 HGB and 147 AO.
  • Otherwise longer where legal claims require retention.

11. Your rights

You may request free of charge: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) — vis-à-vis the controller or the data protection officer.

You also have the right to lodge a complaint with a supervisory authority, in particular:

Bavarian State Office for Data Protection Supervision (BayLDA) Promenadenstr. 27 91522 Ansbach, Germany Phone: +49 981 53-1300 Email: poststelle@ida.bayern.de

12. No automated decision-making

As a rule we do not use automated decision-making within the meaning of Art. 22 GDPR to establish or perform business relationships.

13. Right to object (Art. 21 GDPR)

You may object on grounds relating to your particular situation to processing based on Art. 6(1)(e) or (f) GDPR. If you object to direct marketing, we will stop that processing.

---

Version: July 2026 · Draft – legal final approval pending.