Privacy notice
04 December 2024 version
1. Who are we and how can you get in touch with us?
1.1 Yalantis Limited (“Yalantis”, “we” or “us”) handle your personal data responsibly and with your privacy in mind and in accordance with current data protection legislation (including GDPR and other relevant regulations such as national laws and regulations).
1.2 Affiliates: We may disclose your personal data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with Yalantis Limited. Our affiliates may use the personal data we share in a manner totally consistent with this Privacy Notice.
1.3 Yalantis is the personal data controller for the personal data processing that takes place within the framework of our business or other activities. This Privacy Notice explains which categories of personal data we collect and process, why they are processed, and which rights you do have. You also receive information on how you can assert your rights. You will always find the most recently updated version of this information on our website www.yalantis.com.
1.4 Contact us for any questions regarding our processing of your personal data, or if you wish to exercise any of your rights:
Yalantis Limited (HE 426115)
Email: [email protected]
Postal address: Arch. Makariou ΙΙΙ, 95, 1st floor, Flat/Office 102, 1071 Nicosia, Cyprus
2. How we process your personal data
2.1 We obtain your personal information from:
-
Directly from you
-
Browser
2.2 The Notice extends to:
-
Yalantis Website: www.yalantis.com Yalantis’s presence on various platforms (LinkedIn, Twitter, Instagram, Facebook)
-
Yalantis recruiting process (including via recruiting platforms and websites)
-
Yalantis events (webinars, seminars, workshops, etc.), Yalantis schools (Python, QA, PM, Node.js, BA, etc.)
Yalantis only collects and processes the personal data that is necessary with respect to the specific purposes set up in advance.
2.3 Yalantis Website: www.yalantis.com and Yalantis’ presence on various social media platforms (LinkedIn, Twitter, Instagram, Facebook, etc.)
| Data | Purpose | Legal ground | Storage period |
| name phone number place of work or business name | business negotiations, to promote our services | Consent | 5 years after the last interaction |
| name address | NDA negotiations and concluding | Performance of a contract | during the effect of NDA + 6 years |
| name, email for newsletter subscription | to promote our services | Consent | Until you withdraw consent |
| correspondence | business negotiations | Consent | 3 years |
| self-made profile of a potential customer | business negotiations | Legitimate interest | 3 years |
| email-receipt reports | business negotiations | Consent | 1 year |
| browser information of a visitor | to enhance the quality of our products and solutions | Legitimate interest/ Consent | see details at Cookies Notice |
| IP address of the website form’s applicant | to locate the country and city of the form’s applicant | Legitimate interest/ Consent | During submitting |
Browser information
When you access our website www.yalantis.com, we may collect standard Internet log information including your IP address, browser type, and language, access times. Please note that when you visit our website, you automatically submit information about your activities, usage, etc. on our website to Yalantis and third parties.
More detailed information on how we use cookies and other tracking technologies and how you can control these can be found in our Cookies Notice.
2.4 Yalantis recruiting process (including via recruiting platforms and websites, website yalantis.com, social media websites)
| Data | Purpose | Legal ground | Storage period |
| candidate’s contact data (personal email, phone, messenger account) | hiring qualification process, background check, the establishment of engagement | Consent | 2 years after the last interaction with Yalantis |
| correspondence with candidates | negotiations, hiring qualification process, background check, the establishment of engagement | Consent | 2 years after the last interaction with Yalantis |
| candidate’s actual location (city, country) | hiring qualification process, background check | Consent | 2 years after the last interaction with Yalantis |
| candidate’s CV copy | hiring qualification process, background check, the establishment of engagement | Consent | 2 years |
| candidate’s personal ID documents copies, personal financial documents copies or data (Tax ID, bank details) | contract negotiations, the establishment of engagement | 1)Performance of a contract, 2) Legal obligation, 3) Legitimate interest | 1) during agreement negotiations, during cooperation (during the effect of the agreement with Yalantis) 2) 10 years after the end of the effect of the signed agreement with Yalantis 3) in case of non-cooperation – 1 month after the last interaction |
| candidates file on vacancy | hiring qualification process, background check | Legitimate interest | up to engagement + 2 years |
| references about candidate | hiring qualification process, background check | Legitimate interest | up to engagement + 2 years |
| candidate’s English tests results | hiring qualification process, background check | Legitimate interest | up to engagement + 2 years |
2.5 Yalantis events (webinars, seminars, workshops, etc.) and Yalantis schools (Python, QA, PM, Node.js, BA, etc.)
| Data | Purpose | Legal ground | Storage period |
| registration data of participants of educational events (registration data and CV’s) | event organization, promotion of other events, hiring qualification process | Consent | 1 year after the event ended |
| professional test / English test results of school candidate | school organization and analytics, hiring qualification process | Legitimate interest | 1 year after the test |
| home tasks materials | school organization and analytics, hiring qualification process | Legitimate interest | 1 year |
| event feedback of a participant | school organization and analytics, hiring qualification process | Legitimate interest | 1 year |
| retrospective data about participant | school organization and analytics, hiring qualification process | Legitimate interest | 2 years |
| photos of an event with a person | school organization and analytics, promotion | Legitimate interest | 2 years after the event occurred |
| video record of an event (may be made public) | school organization and analytics, promotion | Legitimate interest | 3 years |
| postal address | sending promotional materials | Consent | before the start of an event or within 2 months after the end of the event |
| Messenger account | communication after the event | Consent | 1 year after the event ended |
3. How long do we save the personal data
3.1 Yalantis retains personal data for as long as it is needed in relation to the purpose set for the processing and as indicated in this Notice. We are then obliged to delete them.
4. How we protect your personal data
4.1 We use a range of physical, electronic, and managerial measures to keep your personal data secure, accurate, and current. These measures include:
-
education and training to relevant personnel so they are aware of our privacy obligations when handling personal data;
-
administrative and technical controls to restrict access to personal data on a ‘need to know’ basis;
-
technological security measures, including firewalls, encryption, and antivirus software; and
-
physical security measures, such as personnel security passes to access our premises.
4.2 Although we use appropriate security measures once we have received your personal data, the transmission of data over the internet (including by e-mail) is never completely secure. We endeavor to protect personal data, but we cannot guarantee the security of data transmitted to us or by us over the Internet.
5. Who do we share your personal data with
5.1 Yalantis may share your personal data with certain third parties. When we share your personal data, we take all reasonable steps to ensure that your data is treated with an adequate level of protection and in accordance with applicable law.
Who do we share your personal data with?
Information about third parties and their data protection policies:
| Type | Name | Purpose of use |
| Analytics and tracking, marketing services, geolocation | Google CrazyEgg Microsoft Clarity Leadfeeder Pipedrive | To track and analyze a site user’s behavior (for more details please see Cookies Notice) To define the location of the website form’s applicant To manage customers relations To manage customer relations |
| Security services | Palo Alto | To secure data transfer |
| Recruiting services | Cleverstaff DOU Djinni Work.ua Rabota.ua | To hire personnel or to find contractors |
| Email services | Google Yes ware | To communicate, to send emails |
| B2B platforms | Clutch | To promote services |
| Social media services | Facebook | To communicate with the public, to promote services |
| File storage | Google Atlassian Slack | To store data, to deliver software, to communicate |
| Communication services | Telegram Slack Zoom Sonetel | To communicate, to conduct the hiring qualification process, to conduct business negotiations |
| Content hosting | Youtube Zoom | To communicate with the public, to promote services, to conduct the hiring qualification process |
| Subscription for newsletters services | Reply.io MailChimp | To communicate directly with an audience |
| Educational materials and testing services | AcademyOcean | To staff training and development |
| Web hosting | AWS Kinsta | To host the website To promote services |
| Privacy | CookieYes | To obtain consent for the use of cookies |
| Data processing using AI technology | Fireflies.ai OpenAI Grammarly | To transcribe voice conversations To conduct dialogues and to get answers for questions To help with writing texts correctly |
5.2 We may disclose information about you to authorities if we are obliged to do so according to law and authority decisions.
6. Your rights
Below is a list of the rights you have when Yalantis processes personal data about you and you are always welcome to contact us via form or by writing us at [email protected] if you wish to exercise any of these.
6.1 The right to be informed about the collection and use of your personal data
The right to be informed allows you to know what personal data is collected and processed by Yalantis about you, why, how long it will be kept, and with whom Yalantis will share the data.
6.2 Right to obtain access to the personal data held about you
You have a right of access that gives you the possibility to obtain a copy of your personal data, as well as other supplementary information. It may help you to understand how and why Yalantis is using your data and check the lawfulness of the processing.
6.3 Right to ask for incorrect, inaccurate, or incomplete personal data to be corrected
The right to rectification allows you to ask Yalantis to update any inaccurate or incomplete data it has on you.
6.4 Right to request that personal data be erased when they are no longer needed or if the processing is unlawful
You have the right to have personal data erased. This is also known as the ‘right to be forgotten’. There are situations where Yalantis can decline the request. For instance, for reasons in compliance with legal obligations.
6.5 Right to request the restriction of the processing of your personal data in specific cases
You can request Yalantis to limit the use of your personal data in certain situations:
-
If the data is inaccurate (during the verification process);
-
If the processing is unlawful, but you do not want the data to be erased and requests restriction (which is different from the right to be erased);
-
Yalantis no longer needs data, but you want the data to be preserved so the legal claim can be exercised;
Yalantis also may limit the processing of your data if Yalantis is taking measures to verify the data erasure request.
6.6 Right to receive your personal data in a machine-readable format and send them to another controller (‘data portability’)
You have the right to data portability which gives you the right to receive your personal data processed by Yalantis in a structured, commonly used, and machine-readable format. It also gives you the right to request that Yalantis transmit those data directly to another controller.
6.7 Right to object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation
You have the right to object to the processing of your personal data for marketing purposes at any time. You can also object to the processing of data on the grounds of legitimate interest.
6.8 Right regarding automated processing
You have the right not to be subject to automated decision-making if it is producing a legal effect that significantly affects you or not to be subject to profiling. Profiling means evaluating certain personal aspects relating to an individual that analyze or predicts aspects of behavior like performance at work, economic situation, health, personal preferences, interests, reliability, behavior, or location.
In the case of automated decision-making, you also have the right to express your point of view and challenge the decision.
6.9 Right to withdraw your consent at any time
You have a specific right to withdraw consent. You have the right to withdraw your consent via a form or by writing us at [email protected].
6.10 Right to lodge a complaint with a supervisory authority
You have the right to submit a complaint to the Office of the Commissioner for Personal Data Protection, which is the Cypriot supervisory authority for our personal data processing and can be reached using the following details:
Office of the Commissioner for Personal Data Protection
Office address:
Iasonos 1, 1082 Nicosia, Cyprus
Postal address:
P.O.Box 23378, 1682 Nicosia, Cyprus
Tel: +357 22818456
Fax: +357 22304565
Email: [email protected]
Website: https://www.dataprotection.gov.cy
Member: Ms. Irene Loizidou Nikolaidou – Commissioner for Personal Data Protection
You have also the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or where violation of your rights has taken place.
7. Transfer of personal data to a third country
7.1 Yalantis always strives to only process your personal data within the EU/EEA. However, it happens that our contractors/vendors have all or parts of their operations in countries outside the EU/EEA (so-called “third countries”), usually, it may be Ukraine or/and the USA. If the data is transferred outside the EU/EEA, we make sure that the data recipients are bound by data privacy responsibilities as stringent as those in force in the EU. To ensure this, we have or ensure the presence of an EU Commission Standard Contractual Clauses agreement or country adequacy decision in place with such data recipients.
8. Automated decisions (profiling)
Yalantis neither uses automated decision-making nor your personal data to automatically assess aspects of your personality (automated profiling).
9. Verification
9.1 For certain personal data requests, we must first verify your identity before processing your request. To do so, we may ask you to provide us with your full name, contact information, and relationship to Yalantis. Depending on your request, we may ask you to provide additional information. Once we receive this information, we will then review it and determine whether we are able to match it to the information Yalantis maintains about you to verify your identity.
10. Changes to our personal data notice
Yalantis Privacy Notice will be updated on an ongoing basis so that it is always up-to-date. Above you can always find the date of the last updated version of this Notice.