Privacy Policy

Version 2020:2

Updated on the 14th February 2020

This Privacy Policy ("Privacy Policy") complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR"), and explains how Ytrade Group AB ("Yaytrade", “Our” and “We”) collects, uses, protects and shares the personal data We have about Our members and others who access Our Services and Applications (as defined in Yaytrade´s general terms and conditions (“General Terms and Conditions”) which you can find on Our website www.yaytrade.com (the “Website”), meaning the services Yaytrade provide through its application and website).

We take all appropriate technical and organizational security measures required to protect your personal data from improper access, change or destruction.

If you have no answer to any question, please feel free to contact Yaytrade.

1 DATA CONTROLLER

1.1 When We process a member’s Personal Data (as defined below) in connection with the provision of the Services and Applications, We are responsible for Personal Data according to GDPR. Below are Our contact details. Our contact details are also available on the Website under the contact tab.

Data controller:Ytrade Group AB

Registration number:559026-0963

Address:Östermalmsgatan 87A, 114 59 Stockholm

Email:support@yaytrade.com

2 WHEN AND HOW DO WE USE AND COLLECT YOUR PERSONAL DATA?

2.1 General

2.1.1 Personal data means any kind of information that can be directly or indirectly attributed to a natural living person (“Personal Data”). Sensitive Personal Data is information that discloses racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, and personal or health information. We do not process any sensitive Personal Data related to you.

2.1.2 Yaytrade strives to ensure the security of your Personal Data. When Yaytrade collects Personal Data about you, Yaytrade also makes sure that your Personal Data is protected from unauthorized access, loss, manipulation, falsification, destruction and unauthorized disclosure. Yaytrade will not share, sell, convey or otherwise disclose Personal Data other than as stated in this Privacy Policy, unless it is required to do so by law or you have given your explicit consent to do so. Below is a description of when your Personal Data is processed.

2.2 Member registration

2.2.1 When you register yourself as a member or create a member profile at the Services and Applications, you also agree that Yaytrade stores and uses the Personal Data, such as your name, phone number and email address, provided by you. We also document all communications that We have with you via email. We process the Personal Data in order to fulfill Our commitments to you as a user of the Services and Applications. The Personal Data you elect to make publicly available through you member profile, such as name and profile picture, will be available to view for others. The legal basis for the processing of Personal Data related to members registration is completion of agreement.

2.3 Communication with other members

2.3.1 Members and others can communicate with each other through the Services and Applications. Yaytrade collects communication data and SBA (meaning a Seller Buyer Agreement as further defined in the General Terms and Conditions) (including Personal Data) made between a Buyer and Seller in accordance with what is set out in the General Terms and Conditions. The legal basis for the processing of Personal Data related to the communication with other members is completion of agreement.

2.4 Payment

2.4.1 When you choose to use a third party processing service (as further defined in the General Terms and Conditions) for payment processing services, Yaytrade may collect the Personal Data you share for such usage, such as your date of birth, ID-number, home address and bank account number. The legal basis for the processing of Personal Data related to the payment is both completion of agreement and applicable law.

2.5 Brand Store Subscriptions

2.5.1 If you sign up and pay for a Brand Store Subscription (as defined in General Terms and Conditions meaning a subscription that can be purchased by a legal entity registered in the EU / EEA), Yaytrade collects your billing details, such as credit card information, banking information and/or a billing address in order to fulfil Yaytrades obligations pursuant to the agreement. Furthermore, Yaytrade can, with the support of balancing interests as a legal basis, treat employees’ of such legal entity Personal Data in order to ensure that resources are linked together with the appropriate assignment or project.

2.6 SNS

2.6.1 Yaytrade collects Personal Data if you register or log in to your member profile with a social network site of third parties (“SNS”), as further defined in the General Terms and Conditions, including, but not limited to, Facebook. By authorizing Yaytrade to connect with an SNS, you authorize Yaytrade to access and store Personal Data such SNS makes available to Yaytrade. Yaytrade does not control which Personal Data the SNS shares with Yaytrade. To understand what Personal Data such SNS makes available to Yaytrade, check your privacy settings on such SNS and make changes as appropriate. Please note that your relationship with the SNS is associated with your SNS-Account (as defined in the General Terms and Conditions) and is governed solely by your agreements with such SNS. Please review such SNS´s terms of use and privacy policy carefully before using their services and connecting to the Services and Applications. Yaytrade cannot be liable or responsible for wrong or unauthorized data transfers from such SNS. The legal basis for the processing of Personal Data related to the SNS is both completion of agreement and a balance of interest.

2.7 Customer support

2.7.1 If you contact Yaytrade on support@yaytrade.com, Yaytrade collects Personal Data about you to help solve any issues you might be facing. Please note that if you contact Yaytrade via Facebook Messenger your Personal Data regarding such message will be collected and governed by Facebook and their terms of use and privacy policy. The legal basis for the processing of Personal Data related to support is completion of agreement.

2.8 Recruitment

2.8.1 Yaytrade processes personal data relating to job applicants in order to be able to evaluate and register candidates, book interviews and manage contact with the job applicants. The applicant's Personal Data that is processed by Yaytrade will be deleted within nine (9) months after the end of the recruitment process. The legal basis for the processing of Personal Data related to recruitment is completion of agreement.

2.9 Newsletter

2.10 After (and only after) your consent, We send newsletters for marketing purposes. We may also analyse your Personal Data in order to send you interesting and personalized marketing. You can give Yaytrade your consent by ticking the box regarding receiving newsletters when you sign up to Yaytrades Services and Applications. You may at any time withdraw your consent to Yaytrade processing your Personal Data for marketing purposes by sending an email to support@yaytrade.com or by clicking on the unsubscribe-link in any newsletter.

2.10 For legal reasons

2.11.1 In some cases, Yaytrade may have a legal obligation to process Personal Data related to Our members. This applies, for example, to the processing of Personal Data that We carry out in order to meet the requirements of the Swedish Accounting Act, prevent fraud and carry out risk management.

2.11.2 Yaytrade will share your Personal Data if required to do so by law, if subject to a legal proceeding or if Yaytrade reasonably believe that such action is necessary to meet any applicable law, regulation, legal process or enforceable governmental request. The legal basis for the processing of Personal Data related to legal reasons is the legal obligation to do so.

2.12 Embedded content from other websites

2.12.1 Articles on the Services and Applications may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited such other website.

2.12.2 The Website features plug-ins for easy sharing and following Our social media pages, such as Facebook, LinkedIn, Twitter and Instagram. Being on the Website does not automatically result in sharing data on these social media platforms.

2.12.3 Other websites and social media platforms may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to such website.

2.13 Cookies

2.13.1 Yaytrade uses Google Analytics, a web analytics service provided by Google Inc, and cookies in order to improve the Applications and Services, user experience and analyse how the Yaytrade Website is used. Yaytrade uses cookies and Google Analytics to remember your settings as well as for authentication and analytics. Aside from the approximate location (IP-address), the information collected by Google Analytics is anonymous traffic data including browser information and device information. The collected information is used to provide an overview of how people are accessing and using the Services and Applications. It is not used for any additional purpose, such as to profile those who access the Services and Applications. For the avoidance of doubt, Yaytrade will not use your IP-address to collect Personal Data.

3 MORE ABOUT PROCESSING PERSONAL DATA THROUGH THE SERVICES AND APPLICATIONS

3.1 More about processing Personal Data

3.1.1 The Services and Applications are not directed to children under the age of 18, and Yaytrade does not knowingly collect Personal Data from children under the age of 18 without obtaining parental consent. If Yaytrade learns that Personal Data has been collected on the Services and Applications from persons under 18 years of age and without verifiable parental consent, Yaytrade will take the appropriate steps to delete this Personal Data. If you are a parent or guardian and discover that your child under 18 years of age has obtained a Member Registration, you may alert Yaytrade at support@yaytrade.com and request that We delete such child’s Personal Data from Our systems.

3.1.2 Yaytrade reserves the right to change this Privacy Policy from time to time. Yaytrade constantly review this Privacy Policy and strive towards making it better. If Yaytrade modifies the Privacy Policy, Yaytrade will post it and make it available through the Applications and indicate the date of the latest revision. If the changes are significant, Yaytrade will provide a more prominent notice (including email notification of privacy policy changes).

3.1.3 If Yaytrade is involved in a merger, acquisition or asset sale, Yaytrade will continue to ensure the confidentiality of any Personal Data and affected users notice before Personal Data is transferred or becomes subject to a different privacy policy.

3.2 More about how long We save your Personal Data

3.2.1 If a member deletes its member account, or if Yaytrade deletes a member’s account in accordance with what is set out in the Terms and Conditions, this will be seen as an ending of the agreement between Yaytrade and the member, and the Personal Data collected with completion of agreement as legal basis will be deleted. To delete your account please go to settings on your member profile and delete your account. Yaytrade will start the deletion of your Personal Data within thirty-six (36) hours after such deletion request, and the Personal Data will be deleted from Our servers within nine (9) months.

3.2.2 If you contact Yaytrade through support@yaytrade.com your Personal Data will be processed and stored for nine (9) months, so that it is possible for Yaytrade to contact and respond to your request, and/or allow you access to the Services and Applications.

3.2.3 Personal Data processed to fulfill Our legal obligations will be deleted within seven (7) years after We have fulfilled all of Our obligations under the applicable agreement.

3.3 Access to your Personal Data

3.3.1 The Personal Data is available in its entirety for selected parts of Our staff. Only certain employees have access to Personal Data.

3.3.2 We use third party service for help with payments, web development, storage services, inventory management and similar services to which We disclose Personal Data or We provide limited access of Personal Data to ("Third-Party Service"). Cooperation between Yaytrade and Third-Party Service is regulated in accordance with the GDPR through Personal Data assistance and processing agreements.

3.3.2 We use third party service for help with payments, web development, storage services, inventory management and similar services to which We disclose Personal Data or We provide limited access of Personal Data to ("Third-Party Service"). Cooperation between Yaytrade and Third-Party Service is regulated in accordance with the GDPR through Personal Data assistance- and processing agreements.

3.3.3 We always strive to ensure that your Personal Data is processed within the EU / EEA. All Our own IT systems are located in the EU / EEA. When you use Our Services and Applications, your Personal Data may be transferred to a country outside the EU / EEA. At each such transfer, We will ensure that the transfer is in accordance with the GDPR's regulations regarding transfer of Personal Data to countries outside the EU / EEA.

4 PERSONAL DATA INCIDENT

4.1 If there is a Personal Data incident, which means that Personal Data for which We are responsible comes in wrong hands, We will immediately report this to the Swedish Data Protection Authority. We will decide in each case whether We will notify the member.

5 YOUR RIGHTS

5.1 You always have the right to:

  1. access your Personal Data. You can request a copy of the Personal Data you would like to have and verify the Personal Data We have about you. A copy is free to request. When requesting access to your Personal Data, you can send an email to support@yaytrade.com through your email address which is linked to your member profile;
  2. update, correct and delete your member profile (including adjusting how your member profile appears to others) at any time by accessing your member profile settings page on the Applications. Please note that while any changes you make will be reflected in Yaytrade’s database instantly or within a reasonable period of time, We may retain the Personal Data you submit for legal obligations;
  3. get your Personal Data deleted if your Personal Data is no longer necessary for the purposes for which they were collected or if you wish to no longer have a member account. To delete your Personal Data, go to settings on your member profile and delete your account;
  4. at any time withdraw your consent to Yaytrade processing your Personal Data for marketing purposes by sending an email to support@yaytrade.com or by clicking on the unsubscribe-link in any newsletter;
  5. decline to share certain Personal Data with Yaytrade. Please note that Yaytrade may not be able to provide you some of the features and functionality of the Services and Applications;
  6. receive and transfer Personal Data to another person or entityY responsible for personal information in some cases (data portability). In order to receive and transfer your Personal Data, please send an email to support@yaytrade.com;
  7. object to the processing of your Personal Data based on a balance of interests. Continued processing of your Personal Data requires, in such a case, that We may display mandatory justifications that outweigh your interests, rights and freedoms or whether it is for the purposes of the determination, exercise or defence of legal claims; or
  8. present a complaint regarding the processing of your Personal Data by Yaytrade to the Swedish Data Protection Authority or other competent supervisory authority within the EU.