What is personal data?
Personal data (or “data”) is any information relating to you and that alone or in combination with other pieces of information gives the opportunity to the person that collects and processes such information to identify you as an individual. It can be your name, your identification number, your location data, or information related to your physical, physiological, genetic, mental, economic, cultural or social identity. Processing of the information means any action with your personal data, for example, collection, recording, organization, structuring, storage, use, disclosure by any means and so on.
Processing of your personal data at ysvit
ysvit collects from you only the following data and only for the stated below purposes:
Data from your account
Data from your requests
When you fill the contact form on our Website or send any request to our email, we collect your name, email address, and other data that you may send us. Please note that not all the data from your request will be personal, but all these data are collected and processed in order to communicate with you regarding your request and to provide you with all needed information. You may provide such data only intentionally, so we consider that when filling the contact form or making request via email, you understand that we will have to process such data. Taking into account that we process these data at your request and in order to provide you with information services, the contractual basis is our ground for this processing. We will store personal data from the contact forms until our communication with you ends and 24 months after to ensure that you are satisfied with our response and you have received all needed information.
Subscription to newsletters
When you subscribe to our newsletters, we collect and further process your email address in order to send you messages with some useful information about traveling or with some information of promotional nature. If you request us to do so, we also may send to you updates regarding tickets and accommodation options in some destination and for some dates you have chosen. You may always opt-out from our newsletters, clicking the respective link in each message. Personal data collected when you register on our mailing list will be stored as long as you are interested in receiving our emails. We consider that you’re interested until you unsubscribe from the mailing list (by clicking the respective link contained in each of our emails). In order to send you newsletters, we use the services of the Rocket Science Group LLC (Georgia, the USA) d/b/a Mailchimp, - they help us to do so effectively and in the way that is convenient for you.
In order to improve and optimize the work of our website, in order to understand your needs and provide services and advertisements that are relevant to you, we may collect your Usage Data. Usage Data reflect your behavior on our website, for example such data show which pages you have viewed and for how long. We also may collect Urchin Tracking Module (UTM) parameters of Google Analytics, IP-addresses, randomly generated user's key (associative identifier), the source of the traffic, information regarding the device and operation system, information about the version of the device (mobile or desktop), information about connections regarding identifiers of the one user on different devices/browsers. We may collect such data only if you give us a consent to do so. We collect Usage Data with the help of the following third-party services: Google Analytics and Yandex Metrika. With the use of Google Analytics and Yandex Metrika, we collect such data as IP-Address, your device model, screen resolution and operation system, session durations, your location. Basing on these data, we analyze your needs and interests, evaluate effectiveness of our campaigns and improve our Website to make its content relevant to you and the Website itself available for smooth viewing with your device. Inspectlet. Inspectlet records videos of how you use the Website. With the Inspectlet services, we may see mouse movements, scrolls, clicks, and keypresses on the Website. This is to find the points of interest on our Website, monitor and analyze web traffic and conversion. The full list of data collected and processed by Inspectlet is as follows: current URL, country, time zone, browser type and version, device type and version, operating system type and version, referrer URL, screen size, user last seen date, mouse activity including pixel coordinates for mouse movements and clicks and keyboard activity typed into non-sensitive input fields, HTML content that isn't marked as sensitive content. These data may be stored for 1-24 months.
The cookies are tiny pieces of code that remain in your device after you have visited any website. These pieces then enable the server to provide you with the information that is customized with your needs when you use some platform or website for the next time. By giving the consent to ysvit for using cookies you make our Website more efficient, fast, and safe, you improve its functioning. We may store your cookies identifiers for no more than 5 years. Nevertheless, you may block, delete, or disable saving cookies on your device if your web-browser allows to do this. You can read more on our Cookies Policy.
Processing for statistical purposes
Please note that sometimes we may process your data for the period longer than indicated above. Such processing could be carried by ysvit only for statistical purposes as it is provided for in Article 5 of the GDPR and subject to the appropriate safeguards in accordance with applicable data protection laws. What are statistical purposes? Statistical purposes mean any collection and processing of personal data necessary for statistical surveys or to produce statistical results. Those statistical results may further be used for different purposes, for example, we use them in order to assess our business development, understand the market demands and improve our Services. The statistical purpose implies that such statistical result does not include personal data, but aggregate data. In most cases, we will anonymize your data before starting to process it for the statistical purposes. As a result, such data will be no longer considered personal and its use will be not governed by data protection laws.
Note that we may process your personal data not only on the basis of your consent or at your request, but also when the processing is necessary:
- for the compliance with our legal obligations;
- to protect your vital interests or vital interests of another natural person;
- for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
In all cases, we will notify you about applied legal basis for processing and other relevant details, before we start processing of your personal data on the specific legal basis. However, we will not, if we are forbidden to do so in accordance with our obligations under any applicable legislation. If ysvit decides to change the purposes of processing specified above, we will inform you on such changes prior to the use of your personal data within the newly set purposes. The notification on such changes will be sent to your email and you will have to provide your consent for the amended purposes (unless additional purpose of processing is compatible with those listed above). Please note that in no case we sell your data or make any decision based solely on automated processing that may produce legal effects or similarly significant effects.
Persons accessing your personal data
In order to provide high-quality services, ysvit hires people, enters into agreements with independent contractors as well as cooperates with other services providers, companies and organizations. For those reasons, some of your personal data can be passed to the mentioned persons. First of all, our employees may have access to your data. Then, we may transfer your data to our sub-contractors and affiliates in Ukraine. We secure such transmission by including standard contractual clauses adopted by the European Commission and compliant with the EU data protection laws into our data processing agreements. ysvit uses only secure places of storage, such as servers of Hostinger the Republic of Cyprus. They are committed to comply with the GDPR provisions. You may find commitments to the GDPR of Hostinger host provider In the frames of using third-party services when collecting and processing Usage Data, we may transfer your data to the following companies:
1. Inspectlet, Inc. (the USA)
Inspectlet is a session recording and heat mapping service provided by Inspectlet Ltd. Inspectlet is fully complied with GDPR, as well as with the EU-US Privacy Shield. You may find the commitments to the GDPR of Inspectlet Privacy Impact Assessment under GDPR.
2. Google LLC (the USA)
Google LLC provides ysvit with the services of Google Analytics. The company is located in the United States of America and complies with the requirements of the EU-US Privacy Shield. Google Cloud GDPR is some information on data protection practices of Google LLC.
3. Yandex Oy (Finland)
Your rights regarding your personal data ysvit collects and processes:
Time for reply and reaction
ysvit will provide information on action taken on your request related to your rights specified above within one month of receipt of the request for the longest. That period may be extended by two further months if ysvit is overwhelmed by the number of requests or the request at issue is complicated and requires a lot of action. ysvit will inform you of any such extension within one month of receipt of the request, together with the reasons of such delay. If you have doubts as to our reply or reaction, or absence of such, you have the right to lodge a complaint with a supervisory authority that is empowered to process such complaints in your country.
Protection of your personal data by ysvit
The privacy of children is one of our concerns. Here at ysvit we can provide services only in case you are aged 13 or older. If you are under 13 you will need to get your parent’s/guardian’s permission before submission of any personal data to ysvit. If you are underage, and there are no data as to your parent’s/guardian’s permission to use our Website, please do not provide us with your consent for data processing. In such case, we will not collect or process your personal data that can be processed on the basis of the consent, and you will have a limited use of our Website.