Personal information is information that can be used to identify or contact a single person, like your name, address, e-mail address, phone number, and other non-public information that is associated with this personal information.
Yolla may make some changes to this Policy from time to time without notice. Yolla will publish the changes at www.yollacalls.com/privacy. The changes will be effective when published. You agree to review the Policy periodically so that you are aware of any modifications. If you continue to use the Product and the Service after the date of amendment publication, it shall constitute that you accept the updated Policy. If you do not agree with the amended Policy, you may terminate your relationship with Yolla. If there are any material changes to this Policy, we will notify you by email or as otherwise required by applicable law. Yolla will also post any adjustments to the Policy on this web page, and the revised version will be effective immediately when it is posted (or upon notice as applicable).
Collecting, Using, and Sharing Your Personal Information
Yolla may collect Personal Information as you interact with the Product, the Services, and the Site as described below. We endeavor to collect only the information which is relevant for the purposes of processing, provide our users with all means to rectify the information, and delete the information that is no longer necessary for the purposes for which the data is processed.
(I) Types of Personal Information Yolla Collects
Yolla collects Personal Information regarding its current, prospective, and former users, visitors, guests.
(a) Information you provide directly to Yolla through interacting with the Product, the Services, and the Site, participating in surveys, and contacting the support. Yolla collects information when you register, sign in and use our Product and Service. When you install the Yolla App or register on the Site, you will be required to provide us with your phone number, which is used for identification purposes as your Yolla user ID. Yolla also collects your email in order to send you important updates about your account changes and payment confirmations. You may also opt in to receive information about Yolla special offers and bonuses.
\r\nYou may allow Yolla App to access your mobile device's address book in order to: call your contacts from the applications; receive the notifications when your contacts sign up to Yolla; see which of your contacts already uses Yolla; see the name of contact as it appears in your address book when you receive or make a call; sync your contacts with the web application. To provide these services, the copy of your address book (only names and phones) is stored on the Yolla servers.
\r\nSince other Yolla users may add your Yolla number to their address book and see that you registered to Yolla, we do not consider the fact that your number exists on Yolla as private information.
(b) Yolla may collect certain information automatically. Yolla may read the contents of the activation SMS sent to you by Yolla for the sole purpose of service activation. Yolla will not read the contents of any other messages on your device.
Yolla keeps the phone numbers and/or other identification details of the calling and receiving party, start time, call duration, call quality, and Call Detail Record (CDR) for the calls that are made with the Yolla Product and Service. These are industry standard records used by all phone companies for billing and statistics analysis that only contain technical information about calls. We do not record any part of your call.
Yolla may collect certain information through the Product, the Services, and the Site, or methods of web analysis and technologies, such as your IP address (an IP address is a number that can identify a specific computer or other network device on the internet), cookie identifiers (“cookies”), mobile advertising identifiers, and other identifiers that are automatically assigned to your Device, location data, browser type, operating system, Internet service provider, mobile carrier, pages that you visit before and after using the Site, the date and time of your visit, the amount of time you spend on each page of the Site, information about the links you click and pages you view on the Site, and other actions taken on the Site. We analyze this data for trend, statistics and security reasons, e.g. to identify the location of users from different countries and to block disruptive and fraudulent use.
Yolla doesn't store bank card data – the card information is safely treated by the payment processing system. For your convenience, you may still opt to use the same card for your next payment. In this case, you will not be required to enter the card details again, and the payment processing system will use the payment details you have already provided.
We may also use mobile advertising identifiers to recognize your device and perform the services. Depending on your device, you can choose to change or limit the transmission of your mobile advertising identifier by going into your device settings. If you would like to opt out of other technologies we employ to collect certain types of information, you may do so by blocking, deleting, or disabling them as your browser or device permits.
(c) Yolla may also obtain information about you through third-party services as described below to supplement information provided by you. This supplemental information allows us to verify information that you have provided to Yolla and to enhance our ability to communicate with you, and to detect, investigate, prevent, and address fraud and other illegal activity, security, or technical issues.
We may use your personal data in order to provide our Services, including improving your satisfaction and loyalty. The purpose of data processing is to improve co-operation, promote loyalty and maintain satisfaction (loyalty call, service call for a person with the goal of improving their experience, identifying desires and needs, identifying a person's satisfaction). We may occasionally ask you to provide information on your experiences of using the Product and the Services. Such information is used to improve the quality of the Services.
(III) Analytics Information
Yolla may use Google Analytics and Yandex Metrics to collect, process, and analyze trends regarding Site visitor behavior and demographics. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and Processing of data generated by your use of the Services by going to http://tools.google.com/dlpage/gaoptout. You can also out opt of Yandex Metrics following this link https://yandex.com/support/metrica/general/opt-out.xml
(IV) The Purposes of the Processing
Yolla collects your personal information for the purpose of:
Providing our Services: we use your registration and account data to (i) sign you up for the Product and create your user account for Yolla; (ii) create your profile and make it visible; (iii) process your payments; (iv) provide customer service, give you information about your account, and respond to your requests; (v) indicate which of your contacts is already a Yolla user and notify you when your contacts become active on the Service (vi) display the name of the contact as it appears in your address book when a call is received on the Service, and (vii) sync your contacts with Yolla running on different devices.
(a) Improving our Services: we use call log information and usage information (as described above) to better understand network behavior and trends (numbers of calls made by users, typical destinations, call durations, network type, etc.), detect potential technical issues.
(b) Processing your payments: we may use your information like your name and phone number to process your payments for our Services and mobile top-ups through a secured third-party service provider and, on an aggregate basis to determine charges for our phone carriers and other service providers.
(c) Personalizing and optimizing our Services, promotional content and advertising to you. For example, we may use the information we collect through cookies, ad identifiers and similar technologies to show you ads you may be interested in.
(e) Communicating with you: we use your information to contact you (via message or other means) to maintain the Product, to comply with your stated communication preferences or to provide updates about other Yolla’s services.
(f) As otherwise expressly set out in this Policy or as required by law.
(V) Sharing of Personal Information
In order to provide you with the Service you have requested, enhance your user experience, and improve the Product and Service, Yolla may sometimes, if necessary, share your personal information with trusted partner service providers, including, but not limited to: payment and analytical services, customer support, hosting services, quality control of services, safety and protection, providing organizational management. Yolla will always require these third parties to take all necessary measures to protect your personal data and to observe the relevant legislation. The following is a description of how we may share your personal information with trusted third-party partners:
(a) We use third-party companies in order to send you an authentication SMS when you register with Yolla. In order to send you the SMS, we send one of these third-party companies your phone number and the authentication message. These third parties are obligated to use your phone number for the transmission of the authentication SMS only.
(b) If you don’t receive an SMS you may ask us to call you and read you the authentication code. This is done using a third-party automated phone system. In order to call you, we provide this third-party partner with your phone number and send the "audio content" of the call to them. The third-party partner in turn will typically use another phone provider who may use another phone provider and so on until the call reaches you. This is an industry standard mechanism. The third-party partner is obligated to use your phone number for the completion of the authentication phone call only.
(c) We use third-party companies in order to deliver SMS texts that are sent by users. These third parties are obligated to use your phone number, the phone number of the receiving party, and the text message for the transmission of the text only.
(d) We use payment solution providers to process the payment and/or billing information. We require that these third parties take the appropriate organizational and technical measures to protect your personal information and to comply with relevant laws, but we are not liable or responsible for these third-party transactions. Therefore, you should review such third-party terms and conditions before providing your payment or billing information.
We may disclose your personal information to law enforcement, governmental agencies, or authorized third-parties, in response to a verified request relating to terror acts, criminal investigations or alleged illegal activity or any other activity that may expose us, you, or any other Yolla’s user to legal liability. We also may share your personal information with market supervisory authorities.
The Site, the Product, and the Service are restricted to individuals over the age of 16. We do not knowingly collect, maintain, or use Personal Information from children under 16 (in certain countries under the age of 13) years of age, and no part of the Site, the Product, and the Service is directed to children under the age of 16 (in certain countries under the age of 13). If you learn that your child has provided us with Personal Information without your consent, you may alert us at firstname.lastname@example.org. If we learn that we have collected any Personal Information from children under 16 (and in certain jurisdictions under the age of 13), we will promptly take steps to delete such information and terminate the account.
Data Retention Periods
We process your personal data no longer than it is necessary and relevant for us to achieve the purposes referred to above or to enable us to comply with our legal data protection retention obligations. The retention period may be based on agreements with you, the legitimate interest of Yolla or applicable law (such as laws related to bookkeeping, statute of limitations, civil law, etc.). Upon deactivation of your account, we will minimize the personal data we keep about you only to such data which we are required to keep to comply with laws, or other legal reasons.
We take reasonable precautions to protect personal information including physical, electronic, and procedural safeguards. Private information is stored on servers with limited access in controlled facilities, and payment information is protected with Secure Socket Layer (SSL) encryption when transferred over the internet. Although we cannot guarantee that personal information will not be subject to unauthorized access as no method of transmission over the Internet, or method of electronic storage, is 100% secure.
Geographical Area of Processing
We may, for the purposes set forth herein, transfer, process and store your information in Estonia, Germany, or any other country in which Yolla or its affiliates, subsidiaries, suppliers or agents maintain facilities. Information collected within the European Union/European Economic Area (EU/EEA) may, for example, be transferred to and processed in a country outside of the EU/EEA, which may not provide the same level of protection for personal data as within the EU/EEA. Transfer and processing of personal data outside the EU/EEA can take place provided there is a legal ground, i.e. legal requirement conclusion or performance of an agreement or client’s consent and appropriate safeguards are in place.
Rights of Users from the EU/EEA
If you use Yolla’s Services from the EU/EEA, you have the following rights regarding your personal information: to access your personal information, to rectify the information we hold about you, to erase your personal information, to restrict our use of your personal information, to object to our use of your personal information, to receive your personal information in a usable electronic format and transmit it to a third party (right to data portability), to lodge a complaint with your local data protection authority. If you would like to understand or exercise such rights, please contact us at the details above.
Our legal basis to process your personal information will be one of the following:
(a) to fulfill our contractual obligations to you, for example to provide the services;
(b) consistent with your consent, which you can revoke at any time;
(c) to comply with our legal obligations to which we are subject;
(d) to meet our legitimate interests. When we process personal information to meet our legitimate interests, we put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms;
(e) to protect the vital interests of the data subject or of another natural person;
(f) necessary for the performance of a task carried out in the public interest.
It is important for us that we have truthful and up-to-date information about your personal data. If your personal data has changed, and if you have found that we process inaccurate or incomplete your personal data, we ask you within a reasonable period of time to inform us about the need to make corrections.
In the context of communication and cooperation, we may ask you to provide additional identifying information if this is necessary so that we can make sure that communication or cooperation takes place directly with you as a data subject, as well as you are the person who has submitted and signed the request. If you will not provide us with the additional information requested or we will have any doubts about the identity of the applicant, in this case we may postpone your request until we are fully sure of your identity.
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you have the right to make a complaint to your data protection authority.
Last update: January 2020