Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

SHIINSAN GmbH
Friedberger Anlage 1–3
60314 Frankfurt am Main
Germany

Phone: +49 69 77039901
Email: info@yichi.de

Represented by its Managing Directors Chengcheng Wang, Li Lixin and Arthur Wirtzfeld.

2. General Information on Data Processing

We treat personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person. When you visit this website, in particular technically necessary data may be processed in order to provide the website securely and ensure its proper functioning.

Unless otherwise stated below, processing carried out for the purposes of our legitimate interests is based on Article 6(1)(f) GDPR. Where processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.

3. Hosting and Server Log Files

This website is hosted externally by:

Vautron Rechenzentrum AG
Obermünsterstr. 9
93047 Regensburg
Germany

When you access our website, the web server may process, in particular, the IP address of the accessing device, the date and time of access, the pages or files requested, the referrer URL, browser type, operating system and other technical connection data required for operating the website.

This processing is carried out on the basis of Article 6(1)(f) GDPR in our legitimate interest in providing our website securely, reliably and without technical errors.

Where the hosting provider processes personal data on our behalf, such processing is carried out in accordance with the applicable data protection requirements relating to commissioned data processing.

The data is deleted once it is no longer required for the purposes stated above, unless a longer retention period is necessary due to a security incident or statutory requirements.

4. Website Security – Wordfence

We use Wordfence Security to protect our WordPress website against unauthorised access, malware, attacks and other security risks.

The provider is:

Defiant, Inc.
1700 Westlake Ave N, Suite 200
Seattle, WA 98109
USA

As part of its security functions, Wordfence may process, in particular, IP addresses, proxy IP addresses, URLs accessed, HTTP headers, technical request data and information relating to security-relevant access attempts. Wordfence may also log server-side access data in order to identify attacks and suspicious activity.

The processing is based on our legitimate interest in effectively securing our website pursuant to Article 6(1)(f) GDPR.

Where personal data is transferred to Defiant in the United States, Defiant provides, among other safeguards, Standard Contractual Clauses and a Data Processing Addendum for customers subject to the GDPR.

Wordfence may also use security-related cookies. The standard Wordfence login and two-factor authentication cookies documented by the provider are primarily set for users who are able to log in to the WordPress administration area. Ordinary visitors to the restaurant website do not normally receive these login cookies.

5. Language Selection with Polylang

Our website is available in German and English. We use Polylang to manage the different language versions.

By default, Polylang uses the cookie pll_language. This cookie stores the language code of the language version last viewed or selected. According to the provider, the standard lifetime of this cookie is one year.

The cookie is used solely for the language functionality of the website and not for analytics or advertising purposes.

Where storage on or access to the user’s device is necessary in order to provide the language function expressly requested by the user, this is based on Section 25(2) no. 2 TDDDG.

6. Adobe Fonts

We use Adobe Fonts to ensure the consistent presentation of typefaces on our website. We currently use, in particular, the “Quasimoda” font family through the Adobe Fonts service.

For users outside North America and Japan, the responsible Adobe entity is:

Adobe Systems Software Ireland Limited
4–6 Riverwalk
Citywest Business Campus
Dublin 24
Ireland

When you access our website, your browser establishes a connection to Adobe’s systems in order to retrieve the required font resources or stylesheets. In this context, Adobe may process, in particular, information relating to the web font project used, the hostname of the website accessed and the IP address of the accessing device.

Adobe states that its Adobe Fonts service for websites does not set cookies for the delivery of fonts and that the IP address received when the fonts are retrieved is not stored.

We use Adobe Fonts on the basis of our legitimate interest in providing a consistent and visually appealing presentation of our website pursuant to Article 6(1)(f) GDPR.

As part of its global infrastructure, Adobe may also transfer personal data to countries outside the European Economic Area, including the United States. Adobe states that it uses, among other safeguards, Standard Contractual Clauses and adequacy decisions as transfer mechanisms.

Further information on data processing is available in Adobe’s privacy information.

7. Contacting Us

If you contact us by email or telephone, we process the information you provide for the purpose of handling your enquiry.

If your enquiry relates to an order, reservation, delivery or another contractual relationship, the processing is based on Article 6(1)(b) GDPR.

For general enquiries, the processing is based on our legitimate interest in handling communications appropriately pursuant to Article 6(1)(f) GDPR.

The data will be deleted once your enquiry has been fully dealt with and there are no statutory retention obligations or other legitimate reasons requiring further storage.

8. External Links to Google Maps and Uber Eats

Our website contains links to external services, in particular Google Maps for directions and Uber Eats for ordering and delivery services.

These services are only linked from our current website and are not embedded as interactive services within the website itself.

Simply visiting our website does not therefore establish a connection to the respective external provider through such a link. Only when you click the relevant link and open the provider’s website or app may personal data be processed by that provider.

The respective provider’s privacy policy applies to such processing.

9. SSL/TLS Encryption

Our website uses SSL/TLS encryption for security purposes.

This protects data transmitted between your browser and our server against unauthorised interception during transmission.

You can recognise an encrypted connection, in particular, by the fact that our website address begins with https://.

10. Data Retention

Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as it is required for the respective processing purpose.

Where statutory retention obligations apply, or where data is required for the establishment, exercise or defence of legal claims, the data may be retained for a correspondingly longer period.

11. Your Rights

Subject to the applicable statutory requirements, you have, in particular, the right to:

• obtain information about the personal data processed concerning you;
• request the rectification of inaccurate data or the completion of incomplete data;
• request the erasure of personal data;
• request restriction of processing;
• receive data in a portable format where the statutory requirements are met;
• object to processing based on Article 6(1)(e) or (f) GDPR;
• withdraw consent previously given at any time with effect for the future; and
• lodge a complaint with a competent data protection supervisory authority.

The right to object to processing based on legitimate interests arises, in particular, from Article 21 GDPR.

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

For private companies established in the German federal state of Hesse, the competent supervisory authority is, in particular:

The Hessian Commissioner for Data Protection and Freedom of Information
(Der Hessische Beauftragte für Datenschutz und Informationsfreiheit)
Postfach 3163
65021 Wiesbaden
Germany

Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

13. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place on this website.

Last updated: 9 September 2026