Privacy policy

Introduction

Below you will find our complete privacy policy ('the Policy') in accordance with the requirements of the various regulations relating to the protection of personal data, including but not limited to European Regulation 2016/679 ('the GDPR'), as well as any legislation adopted under that regulation or the Lei Geral de Proteção de Dados No. 13.709/2018 in Brazil.

The terms 'we' or 'our' refer to the Voltalia Group and its affiliates, and 'you' and 'your' refer to the User of the Site. Through this policy, Yusco undertakes to:

• —Respect your privacy and your choices.
• —Ensure that all privacy and security matters are at the heart of our activities.
• —Work only with partners who share our values.
• —Respect your rights and respond to your requests as far as possible.

Data controller

The Data Controller for personal data is Yusco and can be contacted at the following address: privacy@yusco.io.

Yusco is responsible for determining the purposes and means of processing Personal Data. Yusco undertakes to protect the data collected, not to share it with third parties without the User's knowledge, and to respect the purposes for which the data was collected. In the event of any breach of the integrity, confidentiality or security of the User's Personal Data, Yusco undertakes to inform the User by any means.

Personal data collected and processed

Personal Data means any information relating to an identified or identifiable natural person. Yusco processes the following personal data:

• —Personal and professional contact details: last name, first name, gender, postal address, email address and telephone number.
• —Information about your activity on the Yusco site: the nature and specifics of your project, preferences and characteristics sought.
• —Browsing data collected automatically when you use the website.
• —Transaction details: bank account or credit card information and the tax reference number.

We may collect your information directly (when you contact Yusco via the site, by telephone, email or newsletter) or indirectly (using cookies, to produce anonymous statistics). The site may contain links to social networks; Yusco is not responsible, directly or indirectly, for the data collected by these third parties.

Use of cookies

Cookies are small files placed on a visitor's computer hard drive when they visit a site. They allow the site operator to know whether the visitor has already browsed the site and to track how often they visit as well as their preferences.

These cookies may also be used to keep you logged in, remember your preferences and provide you with relevant local information. Yusco uses cookies on this site.

Why is your data processed?

In accordance with regulatory requirements, Yusco relies on at least one of the following legal bases to process your data:

• —The User has expressly consented to the processing.
• —The processing is necessary for the proper performance of a contract and for pre-contractual steps.
• —The processing meets a legal obligation.
• —The processing is necessary to pursue Yusco's legitimate interests (recruitment, site optimisation, account management, support, statistics, email marketing, etc.).

Data security

We ensure that only authorised persons have access to this data. We maintain reasonable physical, technical and administrative security standards to protect your data against loss, unauthorised access, misuse, alteration, destruction or damage. Despite these efforts, Yusco cannot guarantee that this protection is infallible against any data leak due to the risks associated with the Internet. You are responsible for keeping your password and account information confidential.

Data recipients and transfers to third parties

Yusco may share your Personal Data with Group employees and/or with duly authorised service providers and subcontractors, solely in order to achieve the purpose for which it was collected.

Subject to your prior express consent, we may also pass your personal data to commercial partners. Finally, Yusco may be legally required to disclose your data to the competent authorities, in the event of a dispute or an order from a public authority.

How long do we keep your data?

We will keep your personal data for as long as necessary for the purposes for which it is processed, or until you inform Yusco that you no longer consent to its use. When the data is no longer needed, it is permanently deleted or encrypted, unless its retention is legally required.

Your rights

In accordance with the regulations, the User has the rights listed below. For the data controller to respond to the request, the User must provide: last name, first name and email address. The data controller must respond within a maximum of 30 (thirty) days.

• —Rights of access, rectification and erasure. The User can view, update, modify or request the deletion of data concerning them by sending an email to privacy@yusco.io, stating the reason for the request.
• —Right to data portability. The User has the right to request the portability of their data to another site by sending an email to contact@yusco.io.
• —Right to restrict and object to processing. The User has the right to request the restriction of, or to object to, the processing of their data, which the Site may not refuse except on compelling legitimate grounds.