Privacy notice

Draft for legal review. A lawyer with practice in Croatia and Germany reviews this text before the launch.

Controller

Connectimus Project d.o.o., Ulica Vjekoslava Novotnija 12, 10110 Zagreb, Croatia. Email: ivo.brandic@connectimus.com. YVOO is its product.

Data protection contact: to be completed: data protection contact, and whether YVOO must appoint a data protection officer

Visiting this website

This website sets no cookies, loads no fonts or scripts from other companies and runs no web analytics. When you open a page, our hosting provider processes your IP address, the time, the page and your browser details to deliver the page and to protect the service. Legal basis: our legitimate interest in a secure website (Art. 6(1)(f) GDPR).

Hosting provider: to be completed: website hosting provider and region. Retention of server logs: to be completed: log retention period.

If you pause motion on the website, your browser stores this choice in its local storage. The home page notes in your session storage that you have seen its opening, so it plays once per visit. Both stay on your device and never reach us.

Requests through our forms

When you request a Verification Sprint or a vendor inspection, send a message or ask for our PDFs, we process the details you enter: name, business email, company, role and the details of your case. The form also sends the page you used, the campaign parameters of the link you came from, the website you came from, the time you started the form and a marker whether you used a free email service. We use these details to answer your request, to prepare a quote and to understand which pages lead to requests.

Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in understanding our reach (Art. 6(1)(f) GDPR). We store requests in a database at to be completed: forms database provider and region. Retention: to be completed: retention period for requests without a contract.

We send a confirmation to you and a notification to us by email through Resend, Inc., USA, under the EU-U.S. Data Privacy Framework and standard contractual clauses. When you ask for the PDFs, we use your address only to send them and add it to no newsletter.

To block spam, our form service keeps a salted hash of your IP address for 24 hours. Legal basis: our legitimate interest in a service free of abuse (Art. 6(1)(f) GDPR).

We need your name, business email and company to answer you. Without them, we cannot answer your request.

Booking a call

Our booking links open the scheduling page of Calendly LLC, USA. Calendly processes the details you enter there to book the call. Calendly LLC holds a certification under the EU-U.S. Data Privacy Framework. Its data processing addendum applies the EU standard contractual clauses if the framework ceases to apply. Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR).

Applications from auditors and inspectors

When you apply to our network, we process your name, contact details, certificates, scope, experience, languages, travel radius, work status, liability insurance and your LinkedIn profile. We use them to review your application, to check your certificates with the issuer and to show your qualification to the client of an assignment.

Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR). We ask for no criminal record, no date of birth and no ID document with the application. If we decline your application, we delete your data after to be completed: retention period after a declined application, council proposal six months. We keep your data longer for future assignments only with your consent.

Suppliers and users of the platform

Suppliers who answer a verification and users of the YVOO platform receive a separate privacy notice in the platform: to be completed: link to the platform privacy notice.

Recipients and transfers

We share personal data with the companies that process it for us and with the expert of an assignment. For applicants, we also share data with the client of an assignment and with the issuer of a certificate we check. The list of subprocessors names each company, its purpose, its region and the basis for any transfer outside the EU. You can ask us for a copy of the standard contractual clauses we use.

If we contact you about our network

If we contact you about our network of auditors and inspectors, we use the details of your public LinkedIn profile. Legal basis: our legitimate interest in finding qualified experts (Art. 6(1)(f) GDPR). You can object at any time, and we then delete your details.

Automated decisions

We take no decision about you based only on automated processing. People at YVOO decide on requests, applications and assignments.

Your rights

You can ask for access, correction, deletion, restriction and a copy of your data. Where you gave consent, you can withdraw it at any time. Write to ivo.brandic@connectimus.com.

Your right to object

You can object at any time to processing based on our legitimate interest (Art. 21 GDPR). We then stop, unless we show compelling legitimate grounds or need the data to establish, exercise or defend legal claims.

You can also complain to a supervisory authority, in Croatia the Personal Data Protection Agency (AZOP, azop.hr), or the authority where you live or work.

Changes

We update this notice when our processing changes. Version: to be completed: date of the approved legal texts