Who we are
The address of our website is: https://yastrad.com.
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (for example, names, email addresses, etc.).
Data collection on this website
On one hand, data is collected when provided to us. This may include data entered in a contact form, for example. Other data is collected automatically or with consent by our IT systems when visiting the website. These are mainly technical data (for example, internet browser, operating system, or page view time). This data is collected automatically as soon as the website is accessed.
Data we collect:
- Contact form: name, email, message.
- Shop: Name, email, address, payment data (not stored on server), order history, IP address.
- Online courses: registration data (user, email, subscription).
Media
When uploading images to the website, it is recommended to avoid images containing location data (GPS EXIF). Visitors can download and extract any location data from website images.
Cookies
When leaving a comment on the site, name, email address, and website can optionally be saved in cookies for convenience, avoiding re-entry for subsequent comments. These cookies last one year.
When logging into the site with an account, a temporary cookie determines if the browser accepts cookies. This cookie contains no personal data and is deleted when closing the browser.
Upon access, several cookies save login information and screen display options. Login cookies last two days; screen option cookies last one year. Selecting “Remember Me” extends login for two weeks. Logging out deletes login cookies.
When editing or publishing an article, an additional cookie is saved in the browser indicating the edited article ID. This cookie contains no personal data and expires after 1 day.
Embedded content from other websites
Articles may include embedded content (videos, images, articles, etc.). Embedded content from other sites behaves exactly as if the other site had been visited directly.
These sites may collect data, use cookies, embed additional third-party tracking, and monitor interaction with embedded content, including tracking if logged into that site.
With whom we share your data
In our business activities, we collaborate with various external organizations. In some cases, it is also necessary to transmit personal data to these external organizations. Personal data is only transmitted to external entities if necessary for contract fulfillment, legally required (e.g., transmission to tax authorities), if there is a legitimate interest in transmission per Art. 6 para. 1 lit. f GDPR, or if another legal basis permits data transfer.
When using processors, customer personal data is only transmitted based on a valid order processing contract. In joint processing cases, a joint processing agreement is concluded. When requesting a password reset, the IP address is included in the reset email.
External hosting
This website is externally hosted. Personal data collected is stored on hosting provider servers. This may include IP addresses, contact requests, metadata and communication data, contractual data, contact data, names, website accesses, and other data generated through the website.
External hosting fulfills contracts with potential and existing customers (Art. 6 para. 1 lit. b GDPR) and ensures secure, fast, efficient service.
The following host is used:
HOSTINGER operations, UAB
Švitrigailos str. 34, Vilnius 03230 Lithuania
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is done so we can recognize and automatically approve follow-up comments instead of holding them in a moderation queue.
For users who register on the website (if any), we also store the personal information they provide in their user profile. All users can view, edit, or delete their personal information at any time (except their username). Website administrators can also view and edit that information.
If you have given consent to the processing of data, personal data are processed on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, insofar as special categories of data are processed in accordance with Art. 9(1) GDPR. […]
What rights you have over your data
If you have an account or have left comments on this website, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH THE PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data which we process automatically on the basis of your consent or in performance of a contract delivered to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.
Information, rectification, and erasure
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin and recipients, and the purpose of the data processing and, if applicable, a right to rectification or erasure of such data. You may contact us at any time regarding this or any other questions relating to personal data.
Objection to advertising emails
We hereby object to the use of contact data published as part of our legal notice obligations for the purpose of sending unsolicited advertising and informational material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails.
As long as it has not yet been determined which interests prevail, you have the right to request the restriction of the processing of your personal data. If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined which interests prevail, you have the right to request the restriction of the processing of your personal data. If you have restricted the processing of your personal data, these data—apart from their storage—may only be processed with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State