Maxfiylik siyosati (versiya 3)

This says what happens to your personal data when you use Ollinter. It is written to be read, not to be survived.

The company responsible for it is:

Bu hujjat Ollinterdan foydalanganingizda shaxsiy ma'lumotlaringizga nima bo'lishini tushuntiradi. U o'qish uchun yozilgan, uni tushunish qiyin bo'lmasligi kerak.

Unga mas'ul kompaniya:

CS Konstruktions-Planung OÜ

Viru väljak 2, Kesklinna linnaosa, 10111 Tallinn, Estonia

Registration number: 17452901

VAT number: EE102970135

Email: legal@ollinter.com

Write to that address with any question about your data, to ask for a copy, or to ask us to correct or delete something.

We do not sell personal data. We run no advertising trackers and no third-party analytics scripts.

## What we hold

Depending on how you use the platform:

- Your name, email address, and a telephone number if you give us one.

- Your date of birth, which we ask once to check you are an adult.

- Your language and time zone.

- Your account and profile, and for a professional the public profile: photo, introduction video, description, qualifications, experience, prices, availability.

- For a professional, identity documents, a selfie, proof of address and proof of qualifications.

- Bookings, sessions, payments, refunds and payouts.

- Messages, files shared in a session, and what is drawn on the board.

- Recordings, transcripts and translated captions, where everyone in the room agreed to them.

- Reviews you write and replies to them.

- For a professional, the private note and rating they may keep about a learner they teach, which the learner does not see.

- Which profiles you looked at recently.

- Support requests, complaints, appeals and disputes.

- Technical data needed to keep the platform safe: sign-in and session records, the address a request came from, a device identifier we generate, and a log of what our staff did.

Card numbers and bank details never reach our servers. Our payment company holds them.

## Why we may hold it, in law

- To give you the service you asked for and to perform our agreement with you (Article 6(1)(b) of the GDPR).

- To meet a legal obligation, such as tax and accounting records (Article 6(1)(c)).

- For our legitimate interests in keeping the platform safe and free of fraud (Article 6(1)(f)).

- With your consent, for anything you are asked about separately, such as recording a session (Article 6(1)(a)).

## Your account

We use your name, email address, telephone number, date of birth, language and time zone to create and run your account, to check you are an adult, to show the site in your language, and to let you book.

The platform is for adults. If the date of birth you give says otherwise, the account is held and the date is kept as the record of why.

## Signing in

We do not store passwords. You sign in with a six-digit code sent to your email, with a connected Google account, or with a passkey. Our sign-in provider, Stytch, handles it, and we store your email address once they confirm the sign-in.

After that you have a session that lasts seven days from your last visit.

## Booking and payment

To run a booking we hold the professional, the service, the date, the length, the price, the state of the booking, the payment, and the messages that go with it.

We use Stripe for payments and payouts. Card numbers do not reach us. A professional's bank details are given to Stripe, not to us. We keep the amounts, the booking, the status, who paid whom, refunds and any card dispute, along with the payment company's own reference for each movement.

For a card dispute we send the card network what it asks for: the name and email address on the account, what the booking was, when the session was, and whether each side joined the room.

## Public profiles

A professional's profile is public: photo, introduction video, description, qualifications, experience, services, prices and availability. That is the point of it. What they publish is theirs to get right.

## Checking who a professional is

Before a professional can be paid, we check who they are. We may process an identity document, a selfie, proof of address and certificates.

Those files are encrypted before they are stored. A person reviews them. We run no face recognition and no automated biometric comparison anywhere.

From the machine-readable strip of an identity document we keep the issuing country, the document type, the nationality and the expiry date. The name, the document number and the date of birth from that strip are not stored as text. We do keep a one-way fingerprint made from them, which lets us notice the same document on two accounts and cannot be turned back into the document.

Identity documents are deleted five years after the professional relationship ends or after a rejection. An open case delays that until it is closed.

## The yearly report to the tax office

EU rules (Council Directive 2021/514, known as DAC7) make a platform report each year what it paid the people who earn through it.

Before a professional's first payout we ask for what that report needs: their address, their tax number, the country that issued it, and for a company its legal name and registration number. The tax number is encrypted and never shown back in full, only its last characters.

Once a year we build one file for the tax authority: each professional we paid, what we credited them each quarter, our share, how many lessons that was, and the account the money went to. Every professional sees the same figures for their own closed years on their Money page, which is what the rules ask us to give them by 31 January.

The legal basis is Article 6(1)(c), a legal obligation. The details and the report copies are kept for as long as tax law requires.

## Messages and sessions

We process the messages and files you exchange here, and what is drawn on the board, so that the service works and so there is a record either side can point to.

Before a paid booking exists between two people, the system hides contact details such as phone numbers and email addresses in messages and profile text. It is a measure against fraud and against taking the work off the platform.

The video and audio run on our own servers, using the open-source LiveKit. Your browser gets a short-lived key to enter a room, and it stops working when the session ends or you leave.

## Recording, transcripts and AI

A session is not recorded automatically. Before anyone joins, each person answers four separate questions: recording, a written transcript, AI help, and translated captions.

A feature is only switched on if the answers allow it. One refusal keeps it off for that room, except in a lecture, where the audience is not on stage and the rule covers the people speaking.

You can withdraw an answer at any point up to the end of the session. Withdrawing the transcript deletes that session's transcript at once. Withdrawing the recording stops it there; what was already recorded is deleted on the ordinary schedule.

Where you have agreed, text may be sent to Google Gemini to translate captions or profile and message text. There is a daily limit on it.

## Recently viewed profiles

We keep the list of professionals you looked at recently, so you can find them again. Only you see it, you can clear it, it expires after 30 days, and it is part of your export and your erasure.

## Statistics

We count how the platform is used: how many searches lead to a profile, a message, a booking. Those tables cannot hold a user, a session, an address or a device, and a test fails if anyone tries to add a column that could.

One list keeps typed words: the searches that found nothing, which tells us which professionals to look for. It holds no trace of who typed them and is deleted after 180 days.

## Keeping the platform safe

We process technical data to spot fake accounts, stop automated attacks, limit sign-in attempts, keep requests under control, and detect abuse. The basis is our legitimate interest in running a platform that is not overrun by it.

Server logs are kept for 90 days.

## Who inside the company can see what

Our staff hold one or more roles: identity checks, finance, moderation, support, translation, audit, and administration. Each role opens only what its work needs, and identity documents open only for the roles that review them.

Every administrative change and every look at sensitive data, such as opening an identity document, is written to a record the database itself refuses to alter or delete. It holds who acted, when, on what, from which address and from which device. We keep it for seven years.

## How we protect it

- Encrypted connections, and the servers refuse outdated encryption.

- Identity documents and tax numbers encrypted before storage.

- Access by role, with a separate sign-in for the staff tools.

- Limits on requests and on upload sizes.

- Every incoming field checked before it is used.

- Answers built from a fixed list of fields, never a raw database row.

- Encrypted backups.

- Automated checks for known holes in the software we use.

- Separate administrative and user access to the servers.

## Where the data lives

The database, the application and the video run on two servers we rent from Hetzner in Helsinki, Finland, inside the EU. Our error tracker is our own and sends nothing outside.

Uploaded files and recordings live in Cloudflare's storage, in its EU region. Identity documents arrive there already encrypted.

We make a backup every night, encrypted before it leaves the server. Daily copies are kept for 30 days and weekly copies for 90.

## Companies that help us

Each one receives only what its job needs:

- Hetzner (Germany, servers in Finland): the servers and the backup storage.

- Cloudflare (United States): file storage, protection against attacks, and the gate in front of our staff tools.

- Stytch (United States): sign-in, including Google sign-in and passkeys.

- Stripe (United States, Irish company for Europe), including its own wallet Stripe Link: payments and payouts.

- Brevo (France): sending our email.

- Google Gemini (United States): translation and the AI features you agreed to.

- Google Firebase (United States): push notifications.

- Google (United States): sign-in, and reading when you are busy if you connect a calendar. We never see the titles or details of your events.

- ntfy.sh: alerts about our own servers, such as disk space and backups. No personal data.

Where one of them is outside the EU, the transfer rests on the European Commission's standard contractual clauses, on the EU-US Data Privacy Framework where the company is listed under it, or on another basis allowed by Articles 44 to 49 of the GDPR. We have a written agreement with each of them under Article 28.

## Cookies

We set no advertising cookies and load no third-party analytics. Everything we store on your device is needed for the service: signing you in, keeping you signed in, remembering your language, and spotting batches of fake accounts. Each one is listed in the cookie policy.

## How long we keep things

- A guest in a practice room: 1 day.

- Recently viewed profiles: 30 days.

- Recordings of sessions: 30 days.

- A closed account before it is erased: 30 days.

- Server logs: 90 days.

- Transcripts and translated captions: 6 months.

- Notifications, announcements and support requests: 12 months.

- Messages: 18 months.

- Files shared in a session: 24 months.

- Identity documents: 5 years after the relationship ends.

- The staff action record, suspensions and appeals: 7 years.

- Payment, booking and tax records: 10 years.

A nightly job enforces these. The law can require us to keep something longer, and an open dispute holds it until it is settled.

## Getting a copy of your data

Ask for it in your settings and the system builds one file, in JSON, with the data we hold about you. It stays available for three days and is then removed, because a full copy of a person's data should not sit around.

## Closing your account

You can close your account in your settings. Access stops at once.

For 30 days nothing is erased, so a closure by mistake can still be undone. After that we erase the identity behind the account: the name, the email address, the telephone number, the photo, the date of birth and the profile text. The email address is replaced by a meaningless value rather than removed, because records the law makes us keep, such as payment records and our own log of staff actions, cannot be edited once written.

Private messages you sent are deleted. Messages in a lesson room or a group chat are a shared record of that session, so they stay without your name against them and are deleted on the ordinary schedule for messages.

If a dispute is open or a paid session has not happened yet, erasure waits until the money is settled. The page tells you so.

## Your rights

Under the GDPR you can:

- Ask what we hold about you, and get a copy (Articles 15 and 20).

- Correct what is wrong (Article 16). Much of it you can edit yourself.

- Have your data erased (Article 17), unless the law makes us keep it.

- Restrict or object to processing based on our legitimate interests (Articles 18 and 21).

- Withdraw consent at any time, for anything given by consent (Article 7). What was done before you withdrew stays lawful.

Write to legal@ollinter.com and we answer within the month the law allows.

## Complaining to the authority

You can complain to a data protection authority: the one where you live, the one where you work, or the one where you think something went wrong. Because we are established in Estonia, the authority that supervises us is:

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)

Tatari 39, 10134 Tallinn, Estonia

Email: info@aki.ee

Telephone: +372 627 4135

You can complain whether or not you have written to us first.

## If something goes wrong

We take measures to prevent, detect and limit a breach of personal data. If one happens, we tell the authority without undue delay and within 72 hours of becoming aware of it where the law requires, and we tell the people affected where the risk to them is high.

## When the law asks us for data

We hand over personal data when a legal obligation, a court decision or a binding order from a competent authority requires it, and only as far as it requires.

## Changes to this policy

We update this policy when the law, the platform, the companies we work with or the purposes change. The current version is always here, and when a change matters to you we tell you.

Ro'yxatga olish raqami: 17452901

QQS raqami: EE102970135

Elektron pochta: legal@ollinter.com

Ma'lumotlaringiz haqidagi har qanday savol, nusxa so'rash yoki biror narsani tuzatish yoki o'chirishni so'rash uchun ushbu manzilga yozing.

Biz shaxsiy ma'lumotlarni sotmaymiz. Bizda boshqa kompaniyalarning reklama va statistika teglari tayyor. Biz ularni yoqmagunimizcha hech qanday reklama yoki statistika tegi ishlamaydi va biz buni qilganimizda ushbu siyosatni yangilaymiz. Shundan so'ng, Yevropa Ittifoqi, Yevropa Iqtisodiy Hududi, Buyuk Britaniya va Shveysariyada ular faqat siz cookie banneriga ha desangiz yuklanadi; boshqa joylarda ular so'ramasdan yuklanadi. Cookie siyosati ularning har birini nomlaydi.

## Biz nimani saqlaymiz

Platformadan qanday foydalanishingizga qarab:

- Ismingiz, elektron pochta manzilingiz va agar bizga bersangiz, telefon raqamingiz.

- Tug'ilgan sanangiz, biz sizning voyaga yetganligingizni tekshirish uchun bir marta so'raymiz.

- Til va vaqt mintaqangiz.

- Hisobingiz va profilingiz, va professional uchun ommaviy profil: fotosurat, tanishtiruv videosi, tavsif, malaka, tajriba, narxlar, mavjudlik.

- Professional uchun shaxsni tasdiqlovchi hujjatlar, selfi, yashash joyini tasdiqlovchi hujjat va malaka tasdiqlovchi hujjatlar.

- Bandlovlar, sessiyalar, to'lovlar, qaytarishlar va to'lovlar.

- Xabarlar, sessiyada almashilgan fayllar va doskada chizilgan narsalar.

- Yozuvlar, transkriptlar va tarjima qilingan sarlavhalar, agar xonadagi hamma ularga rozi bo'lsa.

- Siz yozgan sharhlar va ularga javoblar.

- Professional uchun, ular o'qitadigan o'quvchi haqida saqlashi mumkin bo'lgan shaxsiy eslatma va reyting, uni o'quvchi ko'rmaydi.

- Yaqinda ko'rgan profillaringiz.

- Qo'llab-quvvatlash so'rovlari, shikoyatlar, apellyatsiyalar va nizolar.

- Platformani xavfsiz saqlash uchun zarur bo'lgan texnik ma'lumotlar: kirish va sessiya yozuvlari, so'rov kelgan manzil, biz yaratgan qurilma identifikatori va xodimlarimiz nima qilganligi haqidagi jurnal.

Karta raqamlari va bank ma'lumotlari hech qachon serverlarimizga yetib bormaydi. Ularni bizning to'lov kompaniyamiz saqlaydi.

## Nima uchun biz uni qonuniy ravishda saqlashimiz mumkin

- Siz so'ragan xizmatni taqdim etish va siz bilan shartnomamizni bajarish uchun (GDPRning 6(1)(b) moddasi).

- Soliq va buxgalteriya yozuvlari kabi qonuniy majburiyatni bajarish uchun (6(1)(c) moddasi).

- Platformani xavfsiz va firibgarlikdan xoli saqlashdagi qonuniy manfaatlarimiz uchun (6(1)(f) moddasi).

- Sizning roziligingiz bilan, alohida so'ralgan har qanday narsa uchun, masalan, sessiyani yozib olish (6(1)(a) moddasi).

## Hisobingiz

Biz sizning ismingiz, elektron pochta manzilingiz, telefon raqamingiz, tug'ilgan sanangiz, tilingiz va vaqt mintaqangizdan hisobingizni yaratish va boshqarish, voyaga yetganligingizni tekshirish, saytni sizning tilingizda ko'rsatish va bandlov qilish imkoniyatini berish uchun foydalanamiz.

Platforma voyaga yetganlar uchun. Agar siz bergan tug'ilgan sana boshqacha bo'lsa, hisob bloklanadi va sana buning sababi sifatida saqlanadi.

## Kirish

Biz parollarni saqlamaymiz. Siz elektron pochtangizga yuborilgan olti xonali kod, ulangan Google hisobi yoki parolsiz kalit bilan kirasiz. Bizning kirish provayderimiz, Stytch, buni boshqaradi va ular kirishni tasdiqlagandan so'ng biz sizning elektron pochta manzilingizni saqlaymiz.

Shundan so'ng sizning oxirgi tashrifingizdan boshlab yetti kun davom etadigan sessiyangiz bo'ladi.

## Bandlov va to'lov

Bandlovni amalga oshirish uchun biz professionalni, xizmatni, sanani, davomiyligini, narxini, bandlov holatini, to'lovni va u bilan bog'liq xabarlarni saqlaymiz.

Biz to'lovlar va to'lovlar uchun Stripe'dan foydalanamiz. Karta raqamlari bizga yetib bormaydi. Professionalning bank ma'lumotlari bizga emas, Stripe'ga beriladi. Biz summalarni, bandlovni, holatni, kim kimga to'laganini, qaytarishlarni va har qanday karta nizosini, shuningdek, har bir harakat uchun to'lov kompaniyasining o'z ma'lumotnomasini saqlaymiz.

Karta nizosi uchun biz karta tarmog'iga u so'ragan narsani yuboramiz: hisobdagi ism va elektron pochta manzili, bandlov nima bo'lganligi, sessiya qachon bo'lganligi va har bir tomon xonaga qo'shilganligi.

## Ommaviy profillar

Professionalning profili ommaviy: fotosurat, tanishtiruv videosi, tavsif, malaka, tajriba, xizmatlar, narxlar va mavjudlik. Buning maqsadi shu. Ular nashr etgan narsa ularning to'g'ri qilishlari uchun.

## Professional kimligini tekshirish

Professionalga to'lov amalga oshirilishidan oldin, biz ularning kimligini tekshiramiz. Biz shaxsni tasdiqlovchi hujjat, selfi, yashash joyini tasdiqlovchi hujjat va sertifikatlarni qayta ishlashimiz mumkin.

Bu fayllar saqlanishdan oldin shifrlanadi. Bir kishi ularni ko'rib chiqadi. Biz hech qayerda yuzni tanish va avtomatlashtirilgan biometrik taqqoslashni ishlatmaymiz.

Shaxsni tasdiqlovchi hujjatning mashina o'qiydigan chizig'idan biz beruvchi mamlakatni, hujjat turini, millatni va amal qilish muddatini saqlaymiz. Ushbu chiziqdagi ism, hujjat raqami va tug'ilgan sana matn sifatida saqlanmaydi. Biz ulardan yaratilgan bir tomonlama barmoq izini saqlaymiz, bu bizga ikki hisobda bir xil hujjatni aniqlash imkonini beradi va uni hujjatga qaytarib bo'lmaydi.

Shaxsni tasdiqlovchi hujjatlar professional munosabatlar tugaganidan yoki rad etilgandan keyin besh yil o'tgach o'chiriladi. Ochiq ish u yopilmaguncha kechiktiriladi.

## Soliq idorasiga yillik hisobot

EI qoidalari (Kengash direktivasi 2021/514, DAC7 nomi bilan tanilgan) platformani har yili u orqali pul topgan odamlarga to'lagan narsalarini hisobot berishga majbur qiladi.

Professionalning birinchi to'lovidan oldin biz ushbu hisobot uchun zarur bo'lgan narsalarni so'raymiz: ularning manzili, soliq raqami, uni bergan mamlakat va kompaniya uchun uning yuridik nomi va ro'yxatga olish raqami. Soliq raqami shifrlanadi va hech qachon to'liq ko'rsatilmaydi, faqat uning oxirgi belgilarigina ko'rsatiladi.

Bir yilda bir marta biz soliq idorasi uchun bitta fayl yaratamiz: biz to'lagan har bir professional, har chorakda ularga qancha pul o'tkazganimiz, bizning ulushimiz, bu qancha dars bo'lganligi va pul qaysi hisobga o'tkazilganligi. Har bir professional o'zining yopilgan yillari uchun bir xil raqamlarni O'z pul sahifasida ko'radi, bu qoidalar bizdan 31 yanvargacha ularga berishni talab qiladi.

Qonuniy asos 6(1)(c) moddasi, qonuniy majburiyatdir. Tafsilotlar va hisobot nusxalari soliq qonunlari talab qilgan muddat davomida saqlanadi.

## Xabarlar va sessiyalar

Biz siz bu yerda almashadigan xabarlar va fayllarni, shuningdek, doskada chizilgan narsalarni qayta ishlaymiz, shunda xizmat ishlaydi va har ikki tomon ham ko'rsatishi mumkin bo'lgan yozuv bo'ladi.

Ikki kishi o'rtasida pullik bandlov mavjud bo'lmasdan oldin, tizim xabarlardagi va profil matnidagi telefon raqamlari va elektron pochta manzillari kabi aloqa ma'lumotlarini yashiradi. Bu firibgarlikka va ishni platformadan tashqariga olib chiqishga qarshi choradir.

Video va audio bizning serverlarimizda, ochiq manbali LiveKit yordamida ishlaydi. Brauzeringiz xonaga kirish uchun qisqa muddatli kalit oladi va sessiya tugagach yoki siz chiqqaningizda u ishlamay qoladi.

## Yozib olish, transkriptlar va AI

Sessiya avtomatik ravishda yozib olinmaydi. Har kim qo'shilishidan oldin, har bir kishi to'rtta alohida savolga javob beradi: yozib olish, yozma transkript, AI yordami va tarjima qilingan sarlavhalar.

Funktsiya faqat javoblar ruxsat bersa yoqiladi. Bir rad javobi uni o'sha xona uchun o'chirib qo'yadi, ma'ruza bundan mustasno, u yerda auditoriya sahnada emas va qoida gapirayotgan odamlarni qamrab oladi.

Sessiya tugagunga qadar istalgan vaqtda javobni qaytarib olishingiz mumkin. Transkriptni qaytarib olish o'sha sessiyaning transkriptini darhol o'chiradi. Yozib olishni qaytarib olish uni shu yerda to'xtatadi; allaqachon yozib olingan narsa odatiy jadval bo'yicha o'chiriladi.

Siz rozi bo'lgan joyda, sarlavhalarni yoki profil va xabar matnini tarjima qilish uchun matn Google Gemini'ga yuborilishi mumkin. Bunda kunlik cheklov mavjud.

## Yaqinda ko'rilgan profillar

Biz yaqinda ko'rgan professionallar ro'yxatini saqlaymiz, shunda siz ularni yana topishingiz mumkin. Uni faqat siz ko'rasiz, uni tozalashingiz mumkin, u 30 kundan keyin tugaydi va u sizning eksportingiz va o'chirishlaringizning bir qismidir.

## Statistika

Biz platformadan qanday foydalanilishini hisoblaymiz: qancha qidiruv profilga, xabarga, bandlovga olib keladi. Bu jadvallar foydalanuvchini, sessiyani, manzilni yoki qurilmani saqlay olmaydi va agar kimdir qo'shishi mumkin bo'lgan ustun qo'shishga harakat qilsa, test muvaffaqiyatsiz tugaydi.

Bir ro'yxat yozilgan so'zlarni saqlaydi: hech narsa topmagan qidiruvlar, bu bizga qaysi professionallarni qidirish kerakligini aytadi. U kim yozganligi haqida hech qanday iz qoldirmaydi va 180 kundan keyin o'chiriladi.

## Platformani xavfsiz saqlash

Biz soxta hisoblarni aniqlash, avtomatlashtirilgan hujumlarni to'xtatish, kirish urinishlarini cheklash, so'rovlarni nazorat ostida ushlab turish va suiiste'mollarni aniqlash uchun texnik ma'lumotlarni qayta ishlaymiz. Asosiy sabab, platformani bunday holatlardan himoya qilishdagi qonuniy manfaatimizdir.

Server jurnallari 90 kun davomida saqlanadi.

## Kompaniya ichida kim nimani ko'rishi mumkin

Bizning xodimlarimiz bir yoki bir nechta rollarga ega: shaxsni tekshirish, moliya, moderatsiya, qo'llab-quvvatlash, tarjima, audit va ma'muriyat. Har bir rol faqat o'z ishiga kerakli narsani ochadi va shaxsni tasdiqlovchi hujjatlar faqat ularni ko'rib chiqadigan rollar uchun ochiladi.

Har bir ma'muriy o'zgarish va sezgir ma'lumotlarga har bir qarash, masalan, shaxsni tasdiqlovchi hujjatni ochish, ma'lumotlar bazasining o'zi o'zgartirish yoki o'chirishni rad etadigan yozuvga yoziladi. U kim harakat qilganini, qachon, nima ustida, qaysi manzildan va qaysi qurilmadan ekanligini saqlaydi. Biz uni yetti yil davomida saqlaymiz.

## Uni qanday himoya qilamiz

- Shifrlangan ulanishlar va serverlar eskirgan shifrlashni rad etadi.

- Shaxsni tasdiqlovchi hujjatlar va soliq raqamlari saqlashdan oldin shifrlanadi.

- Rol bo'yicha kirish, xodimlar vositalari uchun alohida kirish.

- So'rovlar va yuklash hajmlariga cheklovlar.

- Har bir kiruvchi maydon ishlatilishidan oldin tekshiriladi.

- Javoblar maydonlarning qat'iy ro'yxatidan tuziladi, hech qachon xom ma'lumotlar bazasi qatoridan emas.

- Shifrlangan zaxira nusxalar.

- Biz foydalanadigan dasturiy ta'minotdagi ma'lum teshiklarni avtomatlashtirilgan tekshirishlar.

- Serverlarga alohida ma'muriy va foydalanuvchi kirishi.

## Ma'lumotlar qayerda joylashgan

Ma'lumotlar bazasi, ilova va video Yevropa Ittifoqi ichidagi Finlyandiyaning Xelsinki shahridagi Hetznerdan ijaraga olgan ikkita serverda ishlaydi. Bizning xato kuzatuvchimiz o'zimizniki va tashqariga hech narsa yubormaydi.

Yuklangan fayllar va yozuvlar Cloudflare'ning saqlash joyida, uning EI mintaqasida joylashgan. Shaxsni tasdiqlovchi hujjatlar u yerga allaqachon shifrlangan holda keladi.

Biz har kecha zaxira nusxasini yaratamiz, u serverdan chiqishdan oldin shifrlanadi. Kunlik nusxalar 30 kun, haftalik nusxalar esa 90 kun davomida saqlanadi.

## Bizga yordam beradigan kompaniyalar

Har biri faqat o'z ishiga kerakli narsani oladi:

- Hetzner (Germaniya, Finlyandiyadagi serverlar): serverlar va zaxira saqlash joyi.

- Cloudflare (Amerika Qo'shma Shtatlari): fayl saqlash, hujumlardan himoya va xodimlarimiz vositalari oldidagi darvoza.

- Stytch (Amerika Qo'shma Shtatlari): kirish, shu jumladan Google orqali kirish va parolsiz kalitlar.

- Stripe (Amerika Qo'shma Shtatlari, Yevropa uchun Irlandiya kompaniyasi), shu jumladan uning o'z hamyoni Stripe Link: to'lovlar va to'lovlar.

- Brevo (Fransiya): elektron pochtamizni yuborish.

- Google Gemini (Amerika Qo'shma Shtatlari): tarjima va siz rozi bo'lgan AI funksiyalari.

- Google Firebase (Amerika Qo'shma Shtatlari): push bildirishnomalari.

- Google (Amerika Qo'shma Shtatlari): kirish va agar siz kalendarni ulasangiz, band bo'lganingizda o'qish. Biz sizning tadbirlaringizning sarlavhalarini yoki tafsilotlarini hech qachon ko'rmaymiz.

- ntfy.sh: o'z serverlarimiz haqidagi ogohlantirishlar, masalan, disk maydoni va zaxira nusxalari. Shaxsiy ma'lumotlar yo'q.

Yuqorida sanab o'tilgan kompaniyalardan biri EI tashqarisida bo'lsa, ma'lumot uzatish Yevropa Komissiyasining standart shartnoma shartlariga, agar kompaniya uning ostida ro'yxatga olingan bo'lsa, EI-AQSh Ma'lumotlar Maxfiyligi Doirasiga yoki GDPRning 44-49-moddalari ruxsat bergan boshqa asosga tayanadi. Biz ularning har biri bilan 28-modda bo'yicha yozma kelishuvga egamiz.

## Statistika va reklama teglari

Boshqa kompaniyalarning to'rtta tegi tayyor. Biz ularni yoqmagunimizcha hech biri ishlamaydi va biz buni qilganimizda ushbu siyosatni yangilaymiz. Ular Google'dan Google Analytics va Google Ads, Meta'dan Meta Pixel va TikTok'dan TikTok Pixel. Yuqoridagi ro'yxatdagi Google kirish va kalendarlar uchun mavjud. Bu ikkita Google tegi alohida masala va ushbu bo'lim ularni qamrab oladi.

Teglar yoqilgandan so'ng, ular siz bu yerda tashrif buyurgan sahifalarni, ro'yxatdan o'tganligingizni va to'laganligingizni hamda qancha to'laganingizni yuboradi, shunda biz reklamalarimizni o'lchay olamiz. Ular hech qachon sizning ismingizni, elektron pochtangizni yoki bizdan kelgan xabarlaringizni yubormaydi. EI, Yevropa Iqtisodiy Hududi, Buyuk Britaniya va Shveysariyada bu faqat siz cookie banneriga ha desangiz sodir bo'ladi va yo'q degan javob barchasini to'xtatadi. Boshqa joylarda biz so'ramaymiz. Cookie siyosati har bir tegni ro'yxatga oladi.

Har bir kompaniyaning roli har xil:

- Google Analytics biz uchun tashriflarni hisoblaydi. Google bu ma'lumotlarni bizning nomimizdan va faqat biz aytganimizdek boshqaradi.

- Google Ads Google'ga sizni bu yerga qaysi reklama olib kelganini aytadi. Google bu ma'lumotlardan qanday foydalanishni o'zi hal qiladi, Google'ning maxfiylik siyosati ostida.

- Meta va TikTok. Biz va kompaniya bir qadam uchun birgalikda nazoratchimiz: saytimizda ma'lumotlarni yig'ish va ularga yuborish. U yetib kelgach, kompaniya o'zining maxfiylik siyosati ostida u bilan nima qilishni o'zi hal qiladi.

Meta va TikTok uchun birgalikdagi kelishuv quyidagicha ishlaydi:

- Har bir kompaniyaning biznes shartlari, biz tegini yoqishdan oldin qabul qilamiz, o'sha bir qadam uchun GDPR bo'yicha kim nima qilishini aytadi.

- Biz sizga bu haqda bu yerda va cookie siyosatida aytamiz va qonun sizning roziligingizni talab qilgan joyda, biz uni so'raymiz.

- Kompaniya sizning ma'lumotlarni ko'rish, tuzatish, o'chirish yoki ko'chirish so'rovlaringizni, u ularni qabul qilgandan so'ng, boshqaradi.

- Siz o'z huquqlaringizni biz bilan yoki kompaniya bilan, xohlaganingizcha ishlatishingiz mumkin. Agar siz kompaniya saqlaydigan ma'lumotlar haqida bizga yozsangiz, biz sizning so'rovingizni ularga yuboramiz.

Meta tomoni Meta Platforms Ireland. Uning maxfiylik siyosati facebook.com/privacy/policy manzilida va kelishuvning o'zi facebook.com/legal/controller_addendum manzilida. TikTokning maxfiylik siyosati tiktok.com/legal/page/eea/privacy-policy manzilida.

Google, Meta va TikTok bu ma'lumotlarni EI tashqarisiga ko'chirishi mumkin. Google va Meta EI-AQSh Ma'lumotlar Maxfiyligi Doirasi ostida ro'yxatga olingan. TikTok Yevropa Komissiyasining standart shartnoma shartlariga tayanadi.

## Kukilar

Biz qurilmangizda saqlaydigan narsalarning aksariyati xizmat uchun zarur: sizni tizimga kiritish, tizimda qolishingizni ta'minlash, tilingizni eslab qolish va soxta hisoblar partiyalarini aniqlash. Yuqoridagi teglar yoqilgandan so'ng, Google, Meta va TikTok ham statistika va reklama uchun kukilar o'rnatadi. EI, Yevropa Iqtisodiy Hududi, Buyuk Britaniya va Shveysariyada biz ularning har biri yuklanishidan oldin so'raymiz va yo'q degan javob ularni o'chirib qo'yadi; boshqa joylarda ular so'ramasdan yuklanadi. Har bir kuki cookie siyosatida ro'yxatga olingan, u shuningdek, javobingizni qanday o'zgartirishni ham aytadi.

## Narsalarni qancha muddat saqlaymiz

- Amaliyot xonasidagi mehmon: 1 kun.

- Yaqinda ko'rilgan profillar: 30 kun.

- Sessiyalarning yozuvlari: 30 kun.

- O'chirilishidan oldin yopilgan hisob: 30 kun.

- Server jurnallari: 90 kun.

- Transkriptlar va tarjima qilingan sarlavhalar: 6 oy.

- Bildirishnomalar, e'lonlar va qo'llab-quvvatlash so'rovlari: 12 oy.

- Xabarlar: 18 oy.

- Sessiyada almashilgan fayllar: 24 oy.

- Shaxsni tasdiqlovchi hujjatlar: munosabatlar tugaganidan 5 yil o'tgach.

- Xodimlar harakati yozuvi, to'xtatishlar va apellyatsiyalar: 7 yil.

- To'lov, bandlov va soliq yozuvlari: 10 yil.

Har kechagi ish bularni amalga oshiradi. Qonun bizdan biror narsani uzoqroq saqlashni talab qilishi mumkin va ochiq nizo u hal qilinmaguncha uni ushlab turadi.

## Ma'lumotlaringiz nusxasini olish

Sozlamalaringizda so'rang va tizim siz haqingizda saqlaydigan ma'lumotlar bilan bitta faylni JSON formatida yaratadi. U uch kun davomida mavjud bo'ladi va keyin o'chiriladi, chunki shaxsning to'liq ma'lumotlari nusxasi uzoq vaqt saqlanmasligi kerak.

## Hisobingizni yopish

Hisobingizni sozlamalaringizda yopishingiz mumkin. Kirish darhol to'xtatiladi.

30 kun davomida hech narsa o'chirilmaydi, shuning uchun xato bilan yopishni bekor qilish mumkin. Shundan so'ng biz hisob ortidagi shaxsni o'chiramiz: ism, elektron pochta manzili, telefon raqami, fotosurat, tug'ilgan sana va profil matni. Elektron pochta manzili o'chirilish o'rniga ma'nosiz qiymat bilan almashtiriladi, chunki qonun bizdan saqlashni talab qiladigan yozuvlar, masalan, to'lov yozuvlari va xodimlar harakatlarining o'z jurnalimiz, yozilgandan keyin tahrirlanmaydi.

Siz yuborgan shaxsiy xabarlar o'chiriladi. Dars xonasidagi yoki guruh chatidagi xabarlar o'sha sessiyaning umumiy yozuvi bo'lib, ular sizning ismingizsiz qoladi va xabarlar uchun odatiy jadval bo'yicha o'chiriladi.

Agar nizo ochiq bo'lsa yoki pullik sessiya hali bo'lmagan bo'lsa, o'chirish pul hal qilinmaguncha kutadi. Sahifa sizga bu haqda aytadi.

## Sizning huquqlaringiz

GDPR bo'yicha siz quyidagilarni qilishingiz mumkin:

- Biz siz haqingizda nimani saqlayotganimizni so'rash va nusxasini olish (15 va 20-moddalar).

- Noto'g'ri narsani tuzatish (16-modda). Ko'pini o'zingiz tahrirlashingiz mumkin.

- Ma'lumotlaringizni o'chirish (17-modda), agar qonun bizdan uni saqlashni talab qilmasa.

- Bizning qonuniy manfaatlarimizga asoslangan qayta ishlashni cheklash yoki unga e'tiroz bildirish (18 va 21-moddalar).

- Rozilik bilan berilgan har qanday narsa uchun istalgan vaqtda rozilikni qaytarib olish (7-modda). Siz qaytarib olishdan oldin qilingan ish qonuniy bo'lib qoladi.

legal@ollinter.com manziliga yozing va biz qonun ruxsat bergan oy ichida javob beramiz.

## Hokimiyatga shikoyat qilish

Siz ma'lumotlarni himoya qilish organiga shikoyat qilishingiz mumkin: siz yashaydigan joydagi, siz ishlaydigan joydagi yoki biror narsa noto'g'ri ketgan deb hisoblagan joydagi. Biz Estoniyada tashkil etilganligimiz sababli, bizni nazorat qiluvchi organ:

Andmekaitse Inspektsioon (Estoniya Ma'lumotlarni Himoya qilish Inspeksiyasi)

Tatari 39, 10134 Tallinn, Estoniya

Elektron pochta: info@aki.ee

Telefon: +372 627 4135

Siz avval bizga yozgan bo'lsangiz ham, yozmagan bo'lsangiz ham shikoyat qilishingiz mumkin.

## Agar biror narsa noto'g'ri ketsa

Biz shaxsiy ma'lumotlarning buzilishini oldini olish, aniqlash va cheklash choralarini ko'ramiz. Agar bunday holat yuzaga kelsa, biz qonun talab qilgan joyda bu haqda xabar topganimizdan so'ng 72 soat ichida va asossiz kechiktirmasdan organga xabar beramiz va ularga yuqori xavf tug'ilgan odamlarga xabar beramiz.

## Qonun bizdan ma'lumot so'raganda

Biz shaxsiy ma'lumotlarni qonuniy majburiyat, sud qarori yoki vakolatli organning majburiy buyrug'i talab qilganda va faqat u talab qilgan darajada topshiramiz.

## Ushbu siyosatga o'zgartirishlar

Biz ushbu siyosatni qonun, platforma, biz ishlaydigan kompaniyalar yoki maqsadlar o'zgarganda yangilaymiz. Joriy versiya har doim shu yerda bo'ladi va o'zgarish siz uchun muhim bo'lsa, biz sizga xabar beramiz.

Biz nimani saqlaymiz

Nima uchun biz uni qonuniy ravishda saqlashimiz mumkin

Hisobingiz

Kirish

Bandlov va to'lov

Ommaviy profillar

Professional kimligini tekshirish

Soliq idorasiga yillik hisobot

Xabarlar va sessiyalar

Yozib olish, transkriptlar va AI

Yaqinda ko'rilgan profillar

Statistika

Platformani xavfsiz saqlash

Kompaniya ichida kim nimani ko'rishi mumkin

Uni qanday himoya qilamiz

Ma'lumotlar qayerda joylashgan

Bizga yordam beradigan kompaniyalar

Statistika va reklama teglari

Kukilar

Narsalarni qancha muddat saqlaymiz

Ma'lumotlaringiz nusxasini olish

Hisobingizni yopish

Sizning huquqlaringiz

Hokimiyatga shikoyat qilish

Agar biror narsa noto'g'ri ketsa

Qonun bizdan ma'lumot so'raganda

Ushbu siyosatga o'zgartirishlar

Barcha versiyalar

2 va 3 versiyalari o'rtasida nima o'zgardi