Collecting, Using, and Sharing Your Personal Information
Yolla eSIM may collect Personal Information as you interact with the Product, the Services, and the Site as described below. We endeavor to collect only the information that is necessary for the purposes of processing, to provide our users with all means to rectify the information, and delete information that is no longer necessary for the purposes for which the data is processed.
(I) Types of Personal Information Yolla eSIM Collects
Yolla eSIM collects Personal Information regarding its current, prospective, and former users, visitors, guests. (a) Information you provide directly to Yolla eSIM through interacting with the Product, the Services, and the Site, participating in surveys, and contacting support. Yolla eSIM collects information when you register, sign in and use our Product and Service. Yolla eSIM also collects your email in order to send you important updates about your account changes and payment confirmations. You may also opt in to receive information about Yolla eSIM special offers and bonuses. (b) Yolla eSIM may collect certain information automatically. Yolla eSIM may collect certain information through the Product, the Services, and the Site, or methods of web analysis and technologies, such as your IP address (an IP address is a number that can identify a specific computer or other network device on the internet), cookie identifiers (“cookies”), mobile advertising identifiers, and other identifiers that are automatically assigned to your Device, location data, browser type, operating system, Internet service provider, mobile carrier, pages that you visit before and after using the Site, the date and time of your visit, the amount of time you spend on each page of the Site, information about the links you click and pages you view on the Site, and other actions taken on the Site. We analyze this data for trend, statistics and security reasons, e.g. to identify the location of users from different countries and to block disruptive and fraudulent use. Yolla doesn't store bank card data – card information is securely processed by the payment processing system. For your convenience, you may still opt to use the same card for subsequent payments. In this case, you will not be required to enter the card details again. The payment processing system will use the payment details you have already provided. We may also use mobile advertising identifiers to recognize your device and perform the services. Depending on your device, you can choose to change or limit the transmission of your mobile advertising identifiers from within your device settings. If you would like to opt out of other technologies we employ to collect certain types of information, you may do so by blocking, deleting, or disabling them as your browser or device permits. (c) Yolla eSIM may also obtain information about you through third-party services as described below to supplement information provided by you. This supplemental information allows us to verify information that you have provided to Yolla eSIM, enhance our ability to communicate with you, and to detect, investigate, prevent, and address fraud and other illegal activity, security, or technical issues. We may use your personal data to provide our Services, including improving your satisfaction and loyalty. The purpose of data processing is to improve co-operation, promote loyalty and maintain satisfaction (loyalty call, service call with the goal of improving a user's experience, identifying desires and needs, determining a user's level of satisfaction). We may occasionally ask you to provide information on your experience using the Product and the Services. Such information is used to improve the quality of the Services.
(II) Cookies and Tags
(III) Analytics Information
(IV) The Purposes of the Processing
(V) Sharing of Personal Information
The Site, the Product, and the Service are restricted to individuals over the age of 16. We do not knowingly collect, maintain, or use Personal Information from children under 16 years of age (and in certain jurisdictions under the age of 13), and no part of the Site, the Product or the Service is directed to children under the age of 16 (and in certain jurisdictions under the age of 13). If you learn that your child has provided us with Personal Information without your consent, you may alert us at firstname.lastname@example.org. If we learn that we have collected any Personal Information from children under 16 (and in certain jurisdictions under the age of 13), we will promptly take steps to delete such information and terminate the account.
Data Retention Periods
We process your personal data no longer than it is necessary and relevant for us to achieve the purposes referred to above or to enable us to comply with our legal data protection retention obligations. The retention period may be based on agreements with you, the legitimate interest of Yolla eSIM or applicable law (such as laws related to bookkeeping, statute of limitations, civil law, etc.). Upon deactivation of your account, we will minimize the personal data about you that we keep only to such data that we are required to keep to comply with laws, or for other legal reasons.
We take reasonable precautions to protect personal information including physical, electronic, and procedural safeguards. Private information is stored on servers with limited access in controlled facilities, and payment information is protected with Secure Socket Layer (SSL) encryption when transferred over the internet. Although we cannot guarantee that personal information will not be subject to unauthorized access as no method of transmission over the Internet, or method of electronic storage, is 100% secure.
Geographical Area of Processing
We may, for the purposes set forth herein, transfer, process and store your information in Estonia, Germany, or any other country in which Yolla eSIM or its affiliates, subsidiaries, suppliers or agents maintain facilities. Information collected within the European Union/European Economic Area (EU/EEA) may, for example, be transferred to and processed in a country outside of the EU/EEA, which may not provide the same level of protection for personal data as within the EU/EEA. Transfer and processing of personal data outside the EU/EEA can take place provided there is a legal ground, i.e. legal requirement conclusion or performance of an agreement or client’s consent and appropriate safeguards are in place.
Rights of Users from the EU/EEA
If you use Yolla eSIM Services from the EU/EEA, you have the following rights regarding your personal information: to access your personal information, to rectify the information we hold about you, to erase your personal information, to restrict our use of your personal information, to object to our use of your personal information, to receive your personal information in a usable electronic format and transmit it to a third party (right to data portability), to lodge a complaint with your local data protection authority. If you would like to understand or exercise such rights, please contact us using the above details. Our legal basis to process your personal information will be one of the following:
(a) to fulfill our contractual obligations to you, for example to provide the services;
(b) consistent with your consent, which you can revoke at any time;
(c) to comply with our legal obligations to which we are subject;
(d) to meet our legitimate interests. When we process personal information to meet our legitimate interests, we put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms;
(e) to protect the vital interests of the data subject or of another natural person;
(f) necessary for the performance of a task carried out in the public interest.
We may obtain your consent to collect and use certain types of personal information when we are required to do so by law (for example, in relation to Cookies or when we process accurate location data for purposes other than performing the service). If we ask for your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details provided above or by changing your settings within the Site or Product. By withdrawing your consent to the processing of Personal Data, we will no longer process your Personal Data. However, if you have withdrawn any of your consent, you must take into account that the data-processing associated with this consent will no longer be secured and you may no longer have access to available options at the previous level. Withdrawal of consent will not affect the legality of your Personal Data processing prior to the withdrawal of consent. It is important for us that we have truthful and up-to-date information about your personal data. If your personal data has changed, and if you have found that we have processed inaccurate or incomplete personal data, we ask you to inform us within a reasonable period of time about the need to make corrections. In the context of communication and cooperation, we may ask you to provide additional identifying information if necessary to ensure that communication or cooperation takes place directly with you as a data subject, and that you are the person who has submitted and signed the request. If you do not provide us with the additional requested information or we have any doubts about the identity of the applicant, in this case we may postpone your request until we have confirmed your identity. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to submit a complaint to your data protection authority.
Last update: December 2023
06 Dec 2023