Privacy Commitment and Policy at Y Soft

Business Partners
If you are accessing this Privacy Statement or the Sites via a link provided by one of Y Soft’s third-party resellers or other business partners (“Reseller”) through an agreement for the purchase of Y Soft’s products with that Reseller, the privacy policy of that Reseller applies to the exchange of information between you and that Reseller. This Privacy Statement only governs Y Soft’s use of your personal information. Please contact the Reseller who provided you access to this Privacy Statement or the Sites if you have any questions about the Reseller’s privacy policy.


Introduction
In this Privacy Statement, “users,” “you,” “your,” and “yours” refer to the individual accessing the Sites and, where applicable, to the company or legal entity on whose behalf the individual is viewing this Privacy Statement. Y Soft Corporation, a.s. and its subsidiaries are together referred to as “Y Soft,” “us,” “we,” and “our.” Y Soft is committed to protecting your privacy. This Privacy Statement describes how your privacy is protected and how your personal data is processed when you visit our websites or use an online application that contains a link to this statement (“Sites”). It also contains information about your rights with respect to the processing of your personal data. By visiting the Sites or by providing us with your personal data via an online application form, you acknowledge that your personal data will be processed under the terms and conditions of this Privacy Statement.

Personal Data Controller
The personal data controller is Y Soft Corporation, a.s., registered in the Commercial Register maintained by the Regional Court in Brno under Section B, Entry No. 8045, ID No.: 26197740, with its registered office at Brno, Technická 2948/13, Postcode: 616 00. We process your personal data in accordance with the Czech laws and the General Data Protection Regulation (EU) 2016/679 (“GDPR”). If needed to fulfill the respective purpose of the processing as described below, your personal data will be transferred to another personal data controller from the Y Soft group of companies that will process your personal data in accordance with the terms and conditions of this Privacy Statement. For such transfers to countries that do not have privacy and data protection laws equivalent to the EU privacy laws requirements, we rely on standard contractual data protection clauses.

Data Protection Officer
Y Soft designated the data protection officer (DPO) for the Y Soft group of companies. If you have any questions or concerns about our use of your personal information, please contact us at:

Y Soft Corporation, a.s.
Brno, Technická 2948/13, 616 00, Czech Republic
attn: DPO, or at dpo@ysoft.com

Consent and Opt-out
Where your personal data is processed based on your consent to the processing, you can withdraw your consent at any time in writing to the address of the DPO or by email sent to dpo@ysoft.com. You can opt out of receiving our marketing communication at any time via the unsubscribe link contained in each email we send you.

Means of Processing
The processing is carried out in electronic form by our IT systems automatically or manually by authorized personnel.

Your Rights with Respect to Personal Data Processing
Under the applicable data protection laws, you have the following rights in connection with the processing of your personal data:

a)    right to access the personal data;
b)    right to correct the personal data;
c)    right to object to personal data processing;
d)    right to request the remedy of a situation in conflict with the law, for example, by suspending the processing of, correcting, completing, or destroying the personal data;
e)    right to file a complaint with the supervisory authority – the Office for Personal Data Protection, and
f)    the right to the erasure of personal data and the right to restriction of the processing of personal data.

Purpose and Legal Grounds of Processing
We will process your personal data for the purposes and on the lawful grounds as listed below:

a)    User accounts. If you are a user of our products and you have received log-in instructions for use of the password-protected portion of the Sites, you may use those instructions to log in. Upon log-in, you may be asked to register and, following the prompts, supply your contact information to let us communicate with you and to carry out actions you request on the Sites, such as purchase our products, requests for support, and track the transactions that are performed on a Site. Lawful ground for processing, according to article 6, section 1 of the GDPR, is pursuing our legitimate business interest.

b)    Processing requests received via an online application form. If you decide to contact us using one of the contact forms on our websites, we will process your personal data to fulfill your request. Lawful ground for processing, according to Article 6, section 1 of the GDPR, is taking steps at the request of the data subject prior to entering into a contract.

c)    Evaluation of job application. If you submitted your job application via the career section of our websites or your application results from our job referral program, we will process your personal data to evaluate it. Lawful ground for processing, according to Article 6, section 1 of the GDPR, is taking steps at the request of the data subject prior to entering into a contract, which converts into the pursuit of our legitimate interest in case your application is not successful.

d)    Job referral program. If you were recommended as a potential job candidate by one of our employees, we will process your personal data to contact you and verify your interest in the offered job position. Lawful ground for processing according to the article 6, section 1 of the GDPR is pursuing of our legitimate interest.

e)   Newsletter subscription. If you subscribed to one of our newsletters, the purpose of processing of your personal data is to send you marketing information about our products, events and news or to send you information with future job openings you might be interested in, if you subscribed to our HR newsletter. Lawful ground for processing according to the article 6, section 1 of the GDPR for this purpose is your consent.
We are not merging your personal data collected for different purposes.

Term of Processing
Unless a specific processing period is stated for the particular purpose of processing, we retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). We store personal information needed to process your requests received via an online application form until your request is processed. For newsletter subscriptions, your personal data will be processed for 5 years from the date of collection or until you choose to opt out from our marketing communication via the unsubscribe link contained in each email we send you. For job application submission, your personal data will be processed until your application is evaluated and for an additional 6 months in case we notify you that your application was not successful. For the job referral program, we process your personal data for 6 months or until we contact you with a job offer, whichever comes sooner. When you no longer have an ongoing legitimate business need to process your personal information or the processing period expires, your personal data is either anonymized (where permitted by applicable law), deleted, or destroyed. If this is not possible (for example, because your personal information has been stored in backup archives), your personal information will be securely stored and isolated from any further processing until deletion is possible.

Categories of personal data processed.
Personal data entered by you is processed as collected via corresponding fields of the online form application. For job applications, we also process your CV and cover letter if you provide them. For the job referral program, we process your contact information as received by the referring person. If you subscribe to our newsletter(s), we will also process your usage data (actions you take on our websites (www.ysoft.com and its subdomains). Your usage data may be subject to automated profiling that will score your potential interest in our products.

Automatically Collected Information.
We collect information about your use of the Sites, including the pages you view, the number of bytes transferred, links you click upon, the materials you access, and other actions taken within the Sites. We may combine this information with your personal information to use the combined information in accordance with this Privacy Statement. We also collect certain standard information that your browser sends to websites you visit, such as your Internet Protocol (IP) address, your browser type and capabilities, language, your operating system, the date and time you accessed the site, and the website from which you arrived to our site(s). We do not combine this standard information with other personal information.

Personal Data Processors.
If needed to fulfill the particular purpose of processing, your personal data will be processed by our 3rd party suppliers in a position of personal data processors. We use personal data processors of the following categories:

• providers of IT services and infrastructure for the administration and maintenance of the Sites
• career portals (if you chose to respond to our job opening)
• web analytics providers
• internal ATS system (job applicant tracking system)

We take full responsibility in line with the applicable personal data protection regulations to safeguard the same level of protection for your personal data when processed by such 3rd parties.

1. What are Cookies
Cookies are small text files that are stored on your device and help us accumulate data on your activities. In particular, cookies allow us to save your settings and preferences, to remember your access data and to provide targeted content and marketing communication. They also help us to understand which part of our website is the most popular and to analyze how it works. Cookies can originate from us („first-party cookies“) or from third parties whose services we use („third-party cookies“).

Thanks to their default settings, most browsers accept cookies automatically. Even then, a customer is able to set up the browser so that the cookies are displayed before saving or that they are completely blocked. Details on the setting up of cookies and related changes in the most common browsers are available here:

• Google Chrome
• Internet Explorer
• Microsoft Edge
• Mozilla Firefox
  
• Opera
  
• Safari
  

Y SOFT would like to point out that any setting change is always related to a given browser only. If a customer uses multiple browsers, they must change the settings in each browser individually. In addition, customers may erase cookies from their media memory whenever they like. More information is available in the browser functions or operating system.

 You can set up your browser at any time to accept all cookies, block them, or determine when they should be sent. Please bear in mind that a website is set up so that it works with the cookies allowed so that in case of a blockage, several features of the website may not work correctly.

.2. Which Cookies Do We Use?

3. What kind of data do we process using cookies?
We can process data on how you use the website on your computer, telephone, or any other device through which you access the website. For example, we can process the following:

• Device data: hardware model, unique device identifiers, MAC address, IP address, OS version and device settings.
• Logs: time and duration of website usage, search data, and any other information stored in the cookies that uniquely identify your browser or account
• Location data: data on your whereabouts obtained with the help of various technologies to determine location, such as, e.g., GPS, access points to Wi-Fi, or other sensors that can provide nearby device data
• Other data: data on your website usage, which we can process if you visit or use our website or third-party application with the purpose of cooperating with us, and data on how you participate in our website content.

 
If the data stored via cookies consists of personal data, the conditions of their processing shall be subject to the relevant provisions of this PRIVACY POLICY.

4. What is the purpose of these obtained data, and how do you work with them?
We process and use the data obtained through cookies for the following purposes:
 
To ensure the website's basic functions, such as navigation, access to secured parts of the website, swift loading of web content, or user verification, essential data must be processed. Without this data, the website cannot function properly.
 
The storage of user preferences at the domain for the duration of the session or for an appropriately short period of time. These data are used to improve user comfort by storing your settings such as language, region, screen resolution, consent to cookies, etc.
 
The storage of user preferences across websites. The stored data are used to improve user comfort by linking associated websites with settings such as language, region, screen resolution, etc.
 
Monitoring website traffic. First-party analytical cookies are used to monitor traffic. These cookies do not contain any unique user identification.
 
Statistics and analyses of user behavior. The data are used to create statistics and to monitor and analyze user behavior on various websites. The data can be used to create anonymized notifications.
 
Product marketing and social network connections. Your personal data are used to inform you of Y SOFT products and services, content and third-party checks, offers, competitions, information bulletins, advertisements, and catalogs. Some personal data are used to target the above messages. Your personal data are also used to link websites to social networks and to share their content through these networks.
 
5. Provision of data gained through third-party cookies 
In the case of analytical and marketing cookies, we can, with your consent, provide other parties with access to any provided and obtained data, in particular marketing agencies, companies from the Y Soft group, and analytical and statistical service providers.
 
In particular:
Google Analytics
 
This website uses the Google Analytics services, provided by the company Google, Inc. (hereafter “Google”), which uses cookies for analyzing how users use this website.
 
Specifically, the website uses the following modules:

• Google Analytics – monitoring the status and performance of an account, visitor overview, active users, user explorer, visitor analytics, user quality, conversion probability, comparative reports, demographic data and interests, user flow overview, AdWords overviews;
• DoubleClick Digital Marketing – integration of the Doubleclick Campaign Manager service, activation of remarketing and reporting functions of adverts in analytics, the optimization of content marketing, optimization of marketing search tools, web speed;
• AdSense – AdSense in analytics, content grouping, website search, events, behavior flow overview, target creation and management, target flow, assignment, acquisition overviews, and user behavior.

 
Information generated by a cookie on website usage (including your IP address) can be sent and stored on servers in the United States.
 
Google uses this information for the purpose of evaluating the usage of a website and creating reports on such usage for the website operator and for the provision of further services related to activities on the website and for internet use generally. Google can also provide this information to third parties, should it be a legal requirement, or should such third parties process this information for Google. You can deactivate the use of cookies on a website as described above or change the browser settings. Nonetheless, if you do this for all cookie types, you will be unable to make full use of all the functions of this website.
 
If you wish to log out of monitoring via the Google Analytics service on all websites, please visit GA Opt Out
 
You can find detailed information on Google Analytics and personal data protection at GA Privacy Policy
 
6. What should I do if I have doubts about the correct processing of cookies? 
Should you need to contact us regarding the exercise of your rights in relation to the processing of cookies, please contact our Data Protection Officer. In such a case, please give your consent ID which you can find in website information.
 
7. Warning 
We have no control over the content of external websites to which the website provides hyperlinks. We are not responsible for the processing of your personal data on external websites. These hyperlinks are provided as a service to users and are accessible at one’s own risk.

In order for us to ensure the maximum protection from unauthorized access or unauthorized change and from the publication or destruction of data that we collate and process, we have taken appropriate organizational and technical measures, including physical, electronic, and organizational procedures, leading to the protection and safeguarding of information obtained via this website. The sensitive data or personal data that you have entered on our website are encrypted and protected by an SSL certificate. Notwithstanding the above, we cannot guarantee that your data are safe, should they be sent somewhere by you, or should you not handle your personal data securely.

Changes to this Privacy Statement.
Business needs and information technology are constantly evolving. To adopt such changes, Y Soft may update this Privacy Statement from time to time. Please check this Privacy Statement periodically to inform yourself of any changes. Every change to the Privacy Statement will be reflected by changing the version and the release date at the top of the document.