PRIVACY POLICY

1. General Provisions

This Privacy Policy and Cookie Policy define the principles of processing and protection of personal data provided by Users and Cookie Files, as well as other technologies that may appear in the case of using yosa.ai.
In case of any doubts regarding the provisions of this Privacy Policy and Cookie Policy, please contact us at: office@yosa.ai.
Personal data administrator: Top Online Sp. z o.o.

2. Definitions

User – any entity present on the Site: yosa.ai and present with the Product.
Form – a place on the Site that allows the user to enter personal data, we can detect them in them, e.g. in a purchase, in order to reach an order, in order to contact the user.
GDPR – means the regulation of the European Parliament and the EU Council 2016/679 of 27 April 2016 on the protection of natural persons with regard to the use of personal data and on the free access to such data and the use of the account 95/46/EC (General Data Protection Regulation).
Product – yosa.ai.

3. Personal Data and Principles of their Processing

The User's personal data may be processed for the following purposes and on the following legal bases:
1. ordering a product;
2. issuing an invoice, bill and fulfilling other obligations resulting from tax law;
3. considering complaints or claims related to the agreement;
4. establishing, pursuing or defending against claims;
5. analytical, consisting, among others, in the analysis of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook Pixel, etc.;
6. in order to match the content displayed on the Administrator's websites to individual needs and continuously improve the quality of the services offered,
7. marketing purposes.
Only the data that the user provides himself is collected and processed (except - in certain situations - data collected automatically using cookies, as referred to below).
The User has the rights contained in art. 15-21 of the GDPR at any time, i.e.:
1. the right to: access the content of his/her data, to transfer data, correct data,to rectify data, delete data if there is no basis for their processing, the right to limit processing if it was carried out incorrectly or without a legal basis, object to the processing of data based on the legitimate interest of the administrator, lodge a complaint with the supervisory authority, and the right to be forgotten if further processing is not provided for by the currently applicable provisions of law.
In order to exercise their rights, the User may contact the administrator via e-mail address: office@yosa.ai indicating the scope of their requests. The response will be provided no later than 30 days from the date of receipt of the request and its justification, unless an extension of this period is justified in accordance with the GDPR.
1. for the period of service provision and cooperation, as well as for the limitation period for claims in accordance with the provisions of law - in relation to data provided by contractors and customers or Users,
2. for the period required by law, including tax law,
3. until the consent is withdrawn or the purpose of processing, business purpose is achieved.
By using the Site, the recipients of your data may be
- Third-party providers of AI services integrated into the Site (e.g. OpenAI, Microsoft);
- Hosting and IT infrastructure providers (e.g. OVH);
- Analytical and monitoring services (e.g. Google);
- Our subcontractors and partners, solely for the purpose of maintaining and improving the service;
- Accounting and bookkeeping service providers (for invoicing and compliance with financial obligations);
- Public authorities, if required by applicable law.
Payments will be collected using the Stripe operator. You can read their data protection policy directly : https://stripe.com/en-pl/privacy.
In connection with the use of the application and payments via Stripe, personal data may be transferred outside the European Economic Area under the Privacy Protection Framework (DPF) and Standard Contractual Clauses. Stripe applies appropriate security measures to the processing of data. Additional information can also be found in the Stripe policy: https://stripe.com/en-pl/privacy

4. Forms

Contact form – enables sending a message and contacting the User. Personal data in the form of name, surname, e-mail address and data provided in the message content are processed by the administrator of the Site.
Registration form – The User has the option of creating an account and for this purpose should perform the appropriate registration and provide the following data: name, surname, e-mail address, and then at this point it is also necessary to fill in some information that is useful to us: where did you hear about us, your position in the organization, and the name of the company, company category.

5. Cookie Policy

Like most websites, the Administrator's Website uses so-called tracking technologies, i.e. cookies, which enable the improvement of the website in terms of the needs of users visiting it. When you first enter the Website, you must agree to cookies or take other possible actions indicated in the message in order to continue using the content of the Website. If you do not want to express such consent - leave the Website. You can also always change the settings of your browser, disable or delete cookies.

Cookies (so-called "cookies") are computer data, small text files that are stored on the end device, e.g. computer, tablet, smartphone, when you use the Website.
These may be your own cookies and third-party cookies (originating from other websites).
Cookies allow the content of the website to be tailored to the individual needs of the User and the needs of other Users visiting it. They also enable the creation of statistics that show how users of the website use it and how they navigate it.