1. RECITALS

Scope of Application

1.1. This Policy refers only and exclusively to personal data collected and processed via this web page according to GDPR (as defined hereinafter) and other legal act regulating data protection rights and obligations, including the data protection in electronic communications services.

1.2. Personal data is any information relating to an identified or identifiable natural person. Therefore, if the YVOO’s User (as defined hereinafter) is a legal person, this Policy will be applicable only to contact data (email and phone) of the User’s contact person. On the other side, would the YVOO’s User be a natural person - e.g. a buyer who is consumer - this Policy will be applicable to all User’s data collected via this web page.

1.3. Any other data which is not personal data, including data related to legal persons are not subject to this Policy.

Definitions

“GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation)

“Policy” means this privacy policy regulating the data protection matters on this webpage according to GDPR and other applicable legal acts regulating data protection matters

“YVOO” or “Controller” means the company defined hereinafter in Art 2 who defines the purposes and means of processing the personal data on this web page

“Processor” means YVOO’s business partner who processes personal data on behalf of YVOO, including those to whom the data collected via YVOO’s web page is made available (e.g. hosting provider/ IT service etc.)

“User” means all registered users i.e. buyers and suppliers having the registered profile at YVOO’s web page

“Supervisory authority” means the state body authorized to monitor the behaviors of data controllers in the country and to undertake investigative, corrective and advisor measures for any breach of GDPR and any other relevant data protection law

“Recipient” means any person other than YVOO to whom the YVOO will forward and/or make available the personal data collected on YVOO’s web page

“Cross-border transaction” means any transaction of personal data to the country and/or international organization being established outside the country of the establishment of YVOO

2. WHO ARE WE?

Company:

YVOO Technologies d.o.o.

Address:

Zagreb, Ulica Vjekoslava Novotnija 12

Contact:

contact@yvoo.io

Supervisory authority:

Croatian Personal Data Agency

3. WHAT TYPE OF PERSONAL DATA DO WE PROCESS?

YVOO processes the data given by the Users themselves, either via Users' profiles and activities within the profile, or via verification proceedings.

YVOO processes certain data related to internal messaging between the Users. YVOO will not have the access to the content of the correspondence. However, YVOO will have the access to the metadata – e.g. time and duration of messaging.

4. WHY DOES YVOO PROCESS USER’S DATA?

Contacting for the purposes of service provision

All of the Users registered on YVOO web page agreed on Terms of Use defining the terms and conditions under which YVOO will provide the service to the User. While having the registered account on YVOO web page, User is in contractual relationship with YVOO. YVOO will process the User’s data only on contractual basis i.e. only for purposes necessary to perform the contract.

YVOO will be profiling i.e. will offer the specific services to the Users based on their preferences in case where the User will accept such option

YVOO will erase the User’s data upon User deactivates the account or loses the User’s right for any reason.

Contacting for the purposes of service provision

YVOO will send the newsletter to Users/visitors on basis of User’s/visitor’s consent (opt-in). Users/visitors can opt-out from the consent to receive the newsletter at any time. Opt-out does not affect the validity of processing which had occurred before the consent was revoked.

5. THIRD PARTIES

Recipients of personal data

All registered Users can see all personal data published in User’s profile. Other visitors of YVOO who are not the Users can see the following data published on other Users’ company profile: company name, contact data (email, phone), company address YVOO uses only reliable business partners for Processors who satisfy high privacy standards. Categories of YVOO’s Processors are:

- hosting service

- newsletter service

- IT support

- YVOO service partners - business partners of YVOO who will perform certain YVOO’s services on spot

Recipients of personal data

Since YVOO is a global service platform, data collected via YVOO’s web page will inevitably be transferred outside EEA countries. Where applicable, YVOO will adopt appropriate safeguards (e.g. standard contractual clauses issues by European Commission). Where general appropriate safeguard as defined in GDPR are not applicable, YVOO will transfer the data only in order to fulfill the contractual obligation to registered user (to perform the service ordered by the user via YVOO web page)

Links to other web pages and social media

YVOO can publish link to other web pages. It can happen e.g. when YVOO publishes informative articles/news including the links to other pages. It can also happen when other Users publish the company’s link on its User’s profile. YVOO can not warrant for appropriate protection of data protection right on those pages. Therefore, the User should and is encouraged to get familiar with the privacy terms and conditions on respective web pages. YVOO will not be held liable for any unlawfulness, including unlawfulness connected to data privacy rights, found of the web page of third party.

YVOO can put on its web page the links to social media i.e. to YVOO’s profile on Facebook, Linkedin, Instagram, Twitter. By clicking on social media icons on YVOO’s official web page, the data collected on YVOO can be transferred to related social media provider. Please note that YVOO is not liable for the purpose/manner and any other features of data processing by social media. Therefore, Users should get familiar with privacy terms of social media to which they approached through YVOO web site.

6. USER’S RIGHTS

In any case, you have a right to access, rectification, restriction of processing your data. Depending on legal basis and manner of processing, you can have right on data portability, objection to processing and to revoke the consent.

You can send your inquiries on info@yvoo.io. Besides, you can send the objections to Croatian Personal Data Protection Agency (Croatian Supervisory authority) on azop@azop.hr, or to Supervisory authority established in User’s country.

7. MISCELLANEOUS

YVOO reserves right to update this Policy. All updates will be created and published in the same manner as this Policy. All Users will be specifically informed of any amendment of the Policy either in first next occasion when they visit YVOO, or via email.

Each amendment of this Policy will designate the date as of which the amendments will be applicable.

Last time updated on 23.08.2021