Updated on the 14th February 2020
We take all appropriate technical and organizational security measures required to protect your personal data from improper access, change or destruction.
If you have no answer to any question, please feel free to contact Yaytrade.
1.1 When We process a member’s Personal Data (as defined below) in connection with the provision of the Services and Applications, We are responsible for Personal Data according to GDPR. Below are Our contact details. Our contact details are also available on the Website under the contact tab.
Data controller:Ytrade Group AB
Address:Östermalmsgatan 87A, 114 59 Stockholm
2.1.1 Personal data means any kind of information that can be directly or indirectly attributed to a natural living person (“Personal Data”). Sensitive Personal Data is information that discloses racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, and personal or health information. We do not process any sensitive Personal Data related to you.
2.2 Member registration
2.2.1 When you register yourself as a member or create a member profile at the Services and Applications, you also agree that Yaytrade stores and uses the Personal Data, such as your name, phone number and email address, provided by you. We also document all communications that We have with you via email. We process the Personal Data in order to fulfill Our commitments to you as a user of the Services and Applications. The Personal Data you elect to make publicly available through you member profile, such as name and profile picture, will be available to view for others. The legal basis for the processing of Personal Data related to members registration is completion of agreement.
2.3 Communication with other members
2.3.1 Members and others can communicate with each other through the Services and Applications. Yaytrade collects communication data and SBA (meaning a Seller Buyer Agreement as further defined in the General Terms and Conditions) (including Personal Data) made between a Buyer and Seller in accordance with what is set out in the General Terms and Conditions. The legal basis for the processing of Personal Data related to the communication with other members is completion of agreement.
2.4.1 When you choose to use a third party processing service (as further defined in the General Terms and Conditions) for payment processing services, Yaytrade may collect the Personal Data you share for such usage, such as your date of birth, ID-number, home address and bank account number. The legal basis for the processing of Personal Data related to the payment is both completion of agreement and applicable law.
2.5 Brand Store Subscriptions
2.5.1 If you sign up and pay for a Brand Store Subscription (as defined in General Terms and Conditions meaning a subscription that can be purchased by a legal entity registered in the EU / EEA), Yaytrade collects your billing details, such as credit card information, banking information and/or a billing address in order to fulfil Yaytrades obligations pursuant to the agreement. Furthermore, Yaytrade can, with the support of balancing interests as a legal basis, treat employees’ of such legal entity Personal Data in order to ensure that resources are linked together with the appropriate assignment or project.
2.7 Customer support
2.8.1 Yaytrade processes personal data relating to job applicants in order to be able to evaluate and register candidates, book interviews and manage contact with the job applicants. The applicant's Personal Data that is processed by Yaytrade will be deleted within nine (9) months after the end of the recruitment process. The legal basis for the processing of Personal Data related to recruitment is completion of agreement.
2.10 After (and only after) your consent, We send newsletters for marketing purposes. We may also analyse your Personal Data in order to send you interesting and personalized marketing. You can give Yaytrade your consent by ticking the box regarding receiving newsletters when you sign up to Yaytrades Services and Applications. You may at any time withdraw your consent to Yaytrade processing your Personal Data for marketing purposes by sending an email to email@example.com or by clicking on the unsubscribe-link in any newsletter.
2.10 For legal reasons
2.11.1 In some cases, Yaytrade may have a legal obligation to process Personal Data related to Our members. This applies, for example, to the processing of Personal Data that We carry out in order to meet the requirements of the Swedish Accounting Act, prevent fraud and carry out risk management.
2.11.2 Yaytrade will share your Personal Data if required to do so by law, if subject to a legal proceeding or if Yaytrade reasonably believe that such action is necessary to meet any applicable law, regulation, legal process or enforceable governmental request. The legal basis for the processing of Personal Data related to legal reasons is the legal obligation to do so.
2.12 Embedded content from other websites
2.12.1 Articles on the Services and Applications may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited such other website.
2.12.2 The Website features plug-ins for easy sharing and following Our social media pages, such as Facebook, LinkedIn, Twitter and Instagram. Being on the Website does not automatically result in sharing data on these social media platforms.
3.1 More about processing Personal Data
3.1.1 The Services and Applications are not directed to children under the age of 18, and Yaytrade does not knowingly collect Personal Data from children under the age of 18 without obtaining parental consent. If Yaytrade learns that Personal Data has been collected on the Services and Applications from persons under 18 years of age and without verifiable parental consent, Yaytrade will take the appropriate steps to delete this Personal Data. If you are a parent or guardian and discover that your child under 18 years of age has obtained a Member Registration, you may alert Yaytrade at firstname.lastname@example.org and request that We delete such child’s Personal Data from Our systems.
3.2 More about how long We save your Personal Data
3.2.1 If a member deletes its member account, or if Yaytrade deletes a member’s account in accordance with what is set out in the Terms and Conditions, this will be seen as an ending of the agreement between Yaytrade and the member, and the Personal Data collected with completion of agreement as legal basis will be deleted. To delete your account please go to settings on your member profile and delete your account. Yaytrade will start the deletion of your Personal Data within thirty-six (36) hours after such deletion request, and the Personal Data will be deleted from Our servers within nine (9) months.
3.2.2 If you contact Yaytrade through email@example.com your Personal Data will be processed and stored for nine (9) months, so that it is possible for Yaytrade to contact and respond to your request, and/or allow you access to the Services and Applications.
3.2.3 Personal Data processed to fulfill Our legal obligations will be deleted within seven (7) years after We have fulfilled all of Our obligations under the applicable agreement.
3.3 Access to your Personal Data
3.3.1 The Personal Data is available in its entirety for selected parts of Our staff. Only certain employees have access to Personal Data.
3.3.2 We use third party service for help with payments, web development, storage services, inventory management and similar services to which We disclose Personal Data or We provide limited access of Personal Data to ("Third-Party Service"). Cooperation between Yaytrade and Third-Party Service is regulated in accordance with the GDPR through Personal Data assistance and processing agreements.
3.3.2 We use third party service for help with payments, web development, storage services, inventory management and similar services to which We disclose Personal Data or We provide limited access of Personal Data to ("Third-Party Service"). Cooperation between Yaytrade and Third-Party Service is regulated in accordance with the GDPR through Personal Data assistance- and processing agreements.
3.3.3 We always strive to ensure that your Personal Data is processed within the EU / EEA. All Our own IT systems are located in the EU / EEA. When you use Our Services and Applications, your Personal Data may be transferred to a country outside the EU / EEA. At each such transfer, We will ensure that the transfer is in accordance with the GDPR's regulations regarding transfer of Personal Data to countries outside the EU / EEA.
4.1 If there is a Personal Data incident, which means that Personal Data for which We are responsible comes in wrong hands, We will immediately report this to the Swedish Data Protection Authority. We will decide in each case whether We will notify the member.
5.1 You always have the right to: