Maxfiylik siyosati (versiya 9)

This says what happens to your personal data when you use Ollinter. It is written to be read, not to be survived.

The company responsible for it is:

Bu yerda Ollinter xizmatidan foydalanganingizda shaxsiy ma'lumotlaringiz bilan nima sodir bo'lishi tushuntiriladi. U qiynalib o'qish uchun emas, balki oson tushunish uchun yozilgan.

Bunga mas'ul kompaniya:

CS Konstruktions-Planung OÜ

Viru väljak 2, Kesklinna linnaosa, 10111 Tallinn, Estonia

Registration number: 17452901

VAT number: EE102970135

Email: legal@ollinter.com

Write to that address with any question about your data, to ask for a copy, or to ask us to correct or delete something.

We do not sell personal data. We have advertising and statistics tags from other companies ready. No advertising or statistics tag runs until we switch them on, and we will update this policy when we do. After that, in the EU, the EEA, the UK and Switzerland they load only if you say yes to the cookie banner; everywhere else they load without asking. The cookie policy names every one of them.

## What we hold

Depending on how you use the platform:

- Your name, email address, and a telephone number if you give us one.

- Your date of birth, which we ask once to check you are an adult.

- Your language and time zone.

- Your account and profile, and for a professional the public profile: photo, introduction video, description, qualifications, experience, prices, availability.

- For a professional, identity documents, a selfie, proof of address and proof of qualifications.

- Bookings, sessions, payments, refunds and payouts.

- Messages, files shared in a session, and what is drawn on the board.

- Recordings, transcripts and translated captions, where everyone in the room agreed to them.

- Reviews you write and replies to them.

- For a professional, the private note and rating they may keep about a learner they teach, which the learner does not see.

- Which profiles you looked at recently.

- Support requests, complaints, appeals and disputes.

- Technical data needed to keep the platform safe: sign-in and session records, the address a request came from, a device identifier we generate, and a log of what our staff did.

Card numbers and bank details never reach our servers. Our payment company holds them.

## Why we may hold it, in law

- To give you the service you asked for and to perform our agreement with you (Article 6(1)(b) of the GDPR).

- To meet a legal obligation, such as tax and accounting records (Article 6(1)(c)).

- For our legitimate interests in keeping the platform safe and free of fraud (Article 6(1)(f)).

- With your consent, for anything you are asked about separately, such as recording a session (Article 6(1)(a)).

## Your account

We use your name, email address, telephone number, date of birth, language and time zone to create and run your account, to check you are an adult, to show the site in your language, and to let you book.

The platform is for adults. If the date of birth you give says otherwise, the account is held and the date is kept as the record of why.

## Signing in

We do not store passwords. You sign in with a six-digit code sent to your email, with a connected Google account, or with a passkey. Our sign-in provider, Stytch, handles it, and we store your email address once they confirm the sign-in.

After that you have a session that lasts seven days from your last visit.

## Booking and payment

To run a booking we hold the professional, the service, the date, the length, the price, the state of the booking, the payment, and the messages that go with it.

We use Stripe for payments and payouts. Card numbers do not reach us. A professional's bank details are given to Stripe, not to us. We keep the amounts, the booking, the status, who paid whom, refunds and any card dispute, along with the payment company's own reference for each movement.

For a card dispute we send the card network what it asks for: the name and email address on the account, what the booking was, when the session was, and whether each side joined the room.

## Public profiles

A professional's profile is public: photo, introduction video, description, qualifications, experience, services, prices and availability. That is the point of it. What they publish is theirs to get right.

## Checking who a professional is

Before a professional can be paid, we check who they are. We may process an identity document, a selfie, proof of address and certificates.

Those files are encrypted before they are stored. A person reviews them. We run no face recognition and no automated biometric comparison anywhere.

From the machine-readable strip of an identity document we keep the issuing country, the document type, the nationality and the expiry date. The name, the document number and the date of birth from that strip are not stored as text. We do keep a one-way fingerprint made from them, which lets us notice the same document on two accounts and cannot be turned back into the document.

Identity documents are deleted five years after the professional relationship ends or after a rejection. An open case delays that until it is closed.

## Messages and sessions

We process the messages and files you exchange here, and what is drawn on the board, so that the service works and so there is a record either side can point to.

Before a paid booking exists between two people, the system hides contact details such as phone numbers and email addresses in messages and profile text. It is a measure against fraud and against taking the work off the platform.

The video and audio run on our own servers, using the open-source LiveKit. Your browser gets a short-lived key to enter a room, and it stops working when the session ends or you leave.

## Recording, transcripts and AI

A session is not recorded automatically. Before anyone joins, each person answers four separate questions: recording, a written transcript, AI help, and translated captions.

A feature is only switched on if the answers allow it. One refusal keeps it off for that room, except in a lecture, where the audience is not on stage and the rule covers the people speaking.

You can withdraw an answer at any point up to the end of the session. Withdrawing the transcript deletes that session's transcript at once. Withdrawing the recording stops it there; what was already recorded is deleted on the ordinary schedule.

Where you have agreed in a session, text from that session may be sent to Google to translate captions and to help with flashcards.

Some features send text to Google without a separate question, to make these features work:

- Messages, room chat, homework and answers in live activities, to translate them for the person reading.

- Profiles and reviews, to show them in other languages.

- What a professional writes in their profile, and what you type in the search box, to find professionals by meaning.

- A word you save as a flashcard, to add its meaning in your language.

- Messages, room chat, homework and answers in live activities, to work out which language they are written in.

Before we send text, we try to take out email addresses, phone numbers, links and messenger handles, and we put them back in the translation. We do not take out names. Google says it processes the text in the European Union, and its terms say it does not train its models on our data without our permission. If Google's safety checks flag a request as possible abuse, Google may keep a copy of that request for up to 90 days, in the European Union, so a person can check it. Google does not use that copy to train its models. There is a daily limit on how much we translate.

## Recently viewed profiles

We keep the list of professionals you looked at recently, so you can find them again. Only you see it, you can clear it, it expires after 30 days, and it is part of your export and your erasure.

## Statistics

We count how the platform is used: how many searches lead to a profile, a message, a booking. Those tables cannot hold a user, a session, an address or a device, and a test fails if anyone tries to add a column that could.

We also count where visits come from. When you open one of our pages from outside our site, we add one to a counter. The counter keeps the hour, the first page you opened, the kind of site that sent you, your country, whether you use a phone or a computer, and the language of the site. The first page is one of six: home, search, a professional's profile, an offering, the teaching page, or another page. The kind of site is one of six: a search engine, a social network, an AI assistant, an e-mail service, another site, or none.

We learn your country from the network that serves our site. It reads the country from your address and gives us two letters. The counter does not keep your address. The counter holds no name, no account and no device number. We delete the counts after two years.

If you come from one of our ads, the link carries words that the advertiser chose: the source, the medium, the name of the ad and the search word. We keep these words with the visit. If you book a lesson or buy a package after that visit, we keep the words with that booking, so we can see which ads pay. We keep a word only if it passes a check that refuses e-mail addresses, phone numbers and long codes. The words on your bookings and packages are part of your data export. When you delete your account, we delete the words from your bookings and packages.

If you apply to teach after an ad, we keep the name of the ad campaign on your account. It is part of your data export. We delete it when you delete your account.

None of this puts a cookie or any file on your device.

One list keeps typed words: the searches that found nothing, which tells us which professionals to look for. It holds no trace of who typed them and is deleted after 180 days.

## Keeping the platform safe

We process technical data to spot fake accounts, stop automated attacks, limit sign-in attempts, keep requests under control, and detect abuse. The basis is our legitimate interest in running a platform that is not overrun by it.

Server logs are kept for 90 days.

## Who inside the company can see what

Our staff hold one or more roles: identity checks, finance, moderation, support, translation, audit, and administration. Each role opens only what its work needs, and identity documents open only for the roles that review them.

Every administrative change and every look at sensitive data, such as opening an identity document, is written to a record the database itself refuses to alter or delete. It holds who acted, when, on what, from which address and from which device. We keep it for seven years.

## How we protect it

- Encrypted connections, and the servers refuse outdated encryption.

- Identity documents and tax numbers encrypted before storage.

- Access by role, with a separate sign-in for the staff tools.

- Limits on requests and on upload sizes.

- Every incoming field checked before it is used.

- Answers built from a fixed list of fields, never a raw database row.

- Encrypted backups.

- Automated checks for known holes in the software we use.

- Separate administrative and user access to the servers.

## Where the data lives

The database, the application and the video run on two servers we rent from Hetzner in Helsinki, Finland, inside the EU. Our error tracker is our own and sends nothing outside.

Uploaded files and recordings live in Cloudflare's storage, in its EU region. Identity documents arrive there already encrypted.

We make a backup every night, encrypted before it leaves the server. Daily copies are kept for 30 days and weekly copies for 90.

## Companies that help us

Each one receives only what its job needs:

- Hetzner (Germany, servers in Finland): the servers and the backup storage.

- Cloudflare (United States): file storage, protection against attacks, and the gate in front of our staff tools.

- Stytch (United States): sign-in, including Google sign-in and passkeys.

- Stripe (United States, Irish company for Europe), including its own wallet Stripe Link: payments and payouts.

- Brevo (France): sending our email.

- Google Cloud (United States), which runs Vertex AI in the European Union: translation, search by meaning and the AI features you agreed to.

- Google Firebase (United States): push notifications.

- Google (United States): sign-in, and reading when you are busy if you connect a calendar. We never see the titles or details of your events.

- ntfy.sh: alerts about our own servers, such as disk space and backups. No personal data.

Where one of the companies listed above is outside the EU, the transfer rests on the European Commission's standard contractual clauses, on the EU-US Data Privacy Framework where the company is listed under it, or on another basis allowed by Articles 44 to 49 of the GDPR. We have a written agreement with each of them under Article 28.

## Statistics and advertising tags

Four tags from other companies are ready. None of them runs until we switch them on, and we will update this policy when we do. They are Google Analytics and Google Ads from Google, the Meta Pixel from Meta, and the TikTok Pixel from TikTok. The Google in the list above is there for sign-in and calendars. These two Google tags are a separate matter, and this section covers them.

Once the tags are on, they send the pages you visit here, whether you signed up, and whether you paid and how much, so we can measure our ads. They never send your name, your email or your messages from us. In the EU, the EEA, the UK and Switzerland this happens only if you said yes to the cookie banner, and a no stops all of it. Everywhere else we do not ask. The cookie policy lists each tag.

Each company has a different role:

- Google Analytics counts visits for us. Google handles that data on our behalf and only as we tell it to.

- Google Ads tells Google which ad brought you here. Google decides for itself how it uses that data, under Google's privacy policy.

- Meta and TikTok. We and the company are joint controllers for one step: collecting the data on our site and sending it to them. Once it arrives, the company decides on its own what it does with it, under its own privacy policy.

For Meta and TikTok, the joint arrangement works like this:

- Each company's business terms, which we accept before we switch its tag on, say who does what under the GDPR for that one step.

- We tell you about it, here and in the cookie policy, and where the law needs your yes, we ask for it.

- The company handles your requests to see, correct, delete or move the data it keeps once it has received it.

- You can use your rights with us or with the company, as you prefer. If you write to us about data the company holds, we send your request on to them.

Meta's side is Meta Platforms Ireland. Its privacy policy is at facebook.com/privacy/policy and the arrangement itself at facebook.com/legal/controller_addendum. TikTok's privacy policy is at tiktok.com/legal/page/eea/privacy-policy.

Google, Meta and TikTok may move this data outside the EU. Google and Meta are listed under the EU-US Data Privacy Framework. TikTok says it relies on the European Commission's standard contractual clauses.

## Cookies

Most of what we store on your device is needed for the service: signing you in, keeping you signed in, remembering your language, and spotting batches of fake accounts. Once we switch on the tags above, Google, Meta and TikTok also set cookies for statistics and advertising. In the EU, the EEA, the UK and Switzerland we ask before any of them loads, and a no keeps them off; everywhere else they load without asking. Every cookie is listed in the cookie policy, which also says how to change your answer.

## How long we keep things

- A guest in a practice room, with the messages and files the guest added: 1 day.

- The subtitles of a practice lesson and their translations: 1 day.

- Recently viewed profiles: 30 days.

- Recordings of sessions: 30 days.

- A closed account before it is erased: 30 days.

- Server logs: 90 days.

- Transcripts and translated captions of other sessions: 6 months.

- Notifications, announcements and support requests: 12 months.

- Messages: 18 months.

- Files shared in a session: 24 months.

- Identity documents: 5 years after the relationship ends.

- The staff action record, suspensions and appeals: 7 years.

- Payment, booking and tax records: 10 years.

A nightly job enforces these, and an hourly job enforces the practice room items. The law can require us to keep something longer, and an open dispute holds it until it is settled.

## Getting a copy of your data

Ask for it in your settings and the system builds one file, in JSON, with the data we hold about you. It stays available for three days and is then removed, because a full copy of a person's data should not sit around.

## Closing your account

You can close your account in your settings. Access stops at once.

For 30 days nothing is erased, so a closure by mistake can still be undone. After that we erase the identity behind the account: the name, the email address, the telephone number, the photo, the date of birth and the profile text. The email address is replaced by a meaningless value rather than removed, because records the law makes us keep, such as payment records and our own log of staff actions, cannot be edited once written.

Private messages you sent are deleted. Messages in a lesson room or a group chat are a shared record of that session, so they stay without your name against them and are deleted on the ordinary schedule for messages. The one exception is a practice room: the messages a guest sent there are deleted with the guest after 1 day, and the subtitles of the practice lesson and their translations are deleted after 1 day too.

If a dispute is open or a paid session has not happened yet, erasure waits until the money is settled. The page tells you so.

## Your rights

Under the GDPR you can:

- Ask what we hold about you, and get a copy (Articles 15 and 20).

- Correct what is wrong (Article 16). Much of it you can edit yourself.

- Have your data erased (Article 17), unless the law makes us keep it.

- Restrict or object to processing based on our legitimate interests (Articles 18 and 21).

- Withdraw consent at any time, for anything given by consent (Article 7). What was done before you withdrew stays lawful.

Write to legal@ollinter.com and we answer within the month the law allows.

## Complaining to the authority

You can complain to a data protection authority: the one where you live, the one where you work, or the one where you think something went wrong. Because we are established in Estonia, the authority that supervises us is:

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)

Tatari 39, 10134 Tallinn, Estonia

Email: info@aki.ee

Telephone: +372 627 4135

You can complain whether or not you have written to us first.

## If something goes wrong

We take measures to prevent, detect and limit a breach of personal data. If one happens, we tell the authority without undue delay and within 72 hours of becoming aware of it where the law requires, and we tell the people affected where the risk to them is high.

## When the law asks us for data

We hand over personal data when a legal obligation, a court decision or a binding order from a competent authority requires it, and only as far as it requires.

## Changes to this policy

We update this policy when the law, the platform, the companies we work with or the purposes change. The current version is always here, and when a change matters to you we tell you.

Ro'yxatdan o'tish raqami: 17452901

QQS raqami: EE102970135

Elektron pochta: legal@ollinter.com

Ma'lumotlaringiz bo'yicha har qanday savol bilan, ularning nusxasini so'rash yoki biror narsani tuzatish yoxud o'chirishni talab qilish uchun ushbu manzilga yozing.

Biz shaxsiy ma'lumotlarni sotmaymiz. Bizda boshqa kompaniyalarning reklama va statistika teglari tayyor turibdi. Biz ularni yoqmagunimizcha hech qanday reklama yoki statistika tegi ishlamaydi va buni amalga oshirganimizda ushbu siyosatni yangilaymiz. Shundan so'ng, Yevropa Ittifoqi, Yevropa iqtisodiy hududi, Buyuk Britaniya va Shveytsariyada ular faqat cookie banneriga rozilik bersangizgina yuklanadi, qolgan barcha joylarda esa so'ramasdan yuklanadi. Cookie siyosati ularning har birini nomma-nom ko'rsatadi.

## Biz nimalarni saqlaymiz

Platformadan qanday foydalanishingizga qarab:

- Ismingiz, elektron pochta manzilingiz va agar bizga bergan bo'lsangiz, telefon raqamingiz.

- Voyaga yetganingizni tekshirish uchun bir marta so'raladigan tug'ilgan kuningiz.

- Tilingiz va vaqt mintaqangiz.

- Hisobingiz va profilingiz, professionallar uchun esa ommaviy profil: rasm, tanishuv videosi, tavsif, malaka, tajriba, narxlar, bo'sh vaqtlar.

- Professionallar uchun shaxsni tasdiqlovchi hujjatlar, selfi, yashash joyini tasdiqlovchi hujjat va malakani tasdiqlovchi hujjat.

- Band qilishlar, sessiyalar, to'lovlar, pul qaytarishlar va to'lov o'tkazmalari.

- Xabarlar, sessiya davomida ulashilgan fayllar va doskada chizilgan narsalar.

- Xonadagi hamma rozi bo'lgan taqdirda, yozuvlar, transkriptlar va tarjima qilingan subtitrlar.

- Siz yozgan sharhlar va ularga berilgan javoblar.

- Professionallar uchun ular o'qitayotgan o'quvchi haqida yozishi mumkin bo'lgan va o'quvchi ko'rmaydigan shaxsiy eslatma va baho.

- Yaqinda qaysi profillarni ko'rganingiz.

- Qo'llab-quvvatlash so'rovlari, shikoyatlar, apellyatsiyalar va nizolar.

- Platforma xavfsizligini ta'minlash uchun zarur bo'lgan texnik ma'lumotlar: tizimga kirish va sessiya yozuvlari, so'rov yuborilgan IP-manzil, biz yaratadigan qurilma identifikatori va xodimlarimiz tomonidan amalga oshirilgan ishlar jurnali.

Karta raqamlari va bank rekvizitlari hech qachon bizning serverlarimizga yetib bormaydi. Ularni to'lov kompaniyamiz saqlaydi.

## Nima uchun biz uni qonuniy ravishda saqlashimiz mumkin

- Siz so'ragan xizmatni ko'rsatish va siz bilan tuzilgan shartnomamizni bajarish uchun (GDPRning 6(1)(b) moddasi).

- Soliq va buxgalteriya hisobotlari kabi qonuniy majburiyatlarni bajarish uchun (6(1)(c) moddasi).

- Platformani xavfsiz va firgarlikdan xoli saqlash bo'yicha qonuniy manfaatlarimiz uchun (6(1)(f) moddasi).

- Sizning roziligingiz bilan, alohida so'ralgan har qanday narsa uchun, masalan, sessiyani yozib olish (6(1)(a) moddasi).

## Sizning hisobingiz

Hisobingizni yaratish va yuritish, voyaga yetganingizni tekshirish, saytni tilingizda ko'rsatish hamda band qilish imkonini berish uchun ismingiz, elektron pochta manzilingiz, telefon raqamingiz, tug'ilgan kuningiz, tilingiz va vaqt mintaqangizdan foydalanamiz.

Platforma voyaga yetganlar uchun mo'ljallangan. Agar siz ko'rsatgan tug'ilgan kun buning aksini ko'rsatsa, hisobingiz vaqtincha to'xtatiladi va bu sana sababni tasdiqlovchi dalil sifatida saqlab qolinadi.

## Tizimga kirish

Biz parollarni saqlamaymiz. Siz elektron pochtangizga yuborilgan olti xonali kod, ulangan Google hisobi yoki kirish kaliti (passkey) orqali tizimga kirasiz. Tizimga kirish provayderimiz Stytch buni amalga oshiradi va ular kirishni tasdiqlaganidan keyin biz sizning elektron pochta manzilingizni saqlaymiz.

Shundan so'ng sizda oxirgi tashrifingizdan boshlab etti kun davom etadigan seans mavjud bo'ladi.

## Band qilish va to'lov

Band qilishni amalga oshirish uchun biz mutaxassis, xizmat, sana, davomiylik, narx, band qilish holati, to'lov va unga ilova qilingan xabarlarni saqlaymiz.

To'lovlar va pul o'tkazmalari uchun Stripe xizmatidan foydalanamiz. Karta raqamlari bizgacha yetib kelmaydi. Mutaxassisning bank rekvizitlari bizga emas, Stripe tizimiga beriladi. Biz har bir pul harakati uchun to'lov kompaniyasining o'z tranzaksiya raqami bilan birga summalarni, band qilishni, holatni, kim kimga to'laganini, qaytarilgan mablag'larni va kartaga doir har qanday nizolarni saqlaymiz.

Karta bo'yicha nizo yuzaga kelganda, biz karta tarmog'i so'ragan ma'lumotlarni yuboramiz: hisob qaydnomasidagi ism va elektron pochta manzili, band qilingan xizmat nima bo'lgani, sessiya qachon bo'lib o'tgani va har ikki tomon xonaga qo'shilgan yoki qo'shilmagani.

## Ommaviy profillar

Mutaxassisning profili ommaviydir: rasm, tanishtiruv videosi, tavsif, malaka, tajriba, xizmatlar, narxlar va bo'sh vaqtlar. Buning maqsadi ham shunda. Ular e'lon qilgan ma'lumotlarning to'g'riligi o'zlarining mas'uliyatidir.

## Mutaxassisning shaxsini tekshirish

Mutaxassisga to'lov amalga oshirilishidan oldin biz uning shaxsini tekshiramiz. Biz shaxsni tasdiqlovchi hujjatni, selfi suratini, yashash manzili tasdiqini va sertifikatlarni qayta ishlashimiz mumkin.

Ushbu fayllar saqlanishidan oldin shifrlanadi. Ularni inson ko'rib chiqadi. Biz hech qayerda yuzni tanish texnologiyasidan yoki avtomatlashtirilgan biometrik taqqoslashdan foydalanmaymiz.

Shaxsni tasdiqlovchi hujjatning mashina o'qiydigan qismidan biz faqat hujjat berilgan mamlakat, hujjat turi, fuqarolik va amal qilish muddatini saqlab qolamiz. Ushbu qismdagi ism, hujjat raqami va tug'ilgan sana matn ko'rinishida saqlanmaydi. Biz ulardan yaratilgan bir tomonlama raqamli izni saqlab qolamiz, bu bizga bitta hujjatni ikkita hisobda aniqlash imkonini beradi va uni qaytadan hujjat ma'lumotlariga aylantirib bo'lmaydi.

Shaxsni tasdiqlovchi hujjatlar mutaxassis bilan hamkorlik tugaganidan keyin yoki rad etilganidan keyin besh yil o'tgach o'chiriladi. Hal qilinmagan nizo mavjud bo'lsa, bu muddat nizo yopilgunga qadar uzaytiriladi.

## Xabarlar va sessiyalar

Biz bu yerda almashadigan xabarlaringiz va fayllaringizni, shuningdek, doskada chizilgan narsalarni qayta ishlaymiz. Bu xizmat ishlashi va har ikki tomon ham tayanishi mumkin bo'lgan yozuv mavjud bo'lishi uchun kerak.

Ikki kishi o'rtasida pullik bandlov amalga oshirilgunga qadar, tizim xabarlar va profil matnidagi telefon raqamlari hamda elektron pochta manzillari kabi aloqa ma'lumotlarini yashiradi. Bu firibgarlikka qarshi va ishlarni platformadan tashqariga olib chiqib ketishning oldini olish chorasidir.

Video va audio ochiq kodli LiveKit dasturidan foydalangan holda o'z serverlarimizda ishlaydi. Brauzeringiz xonaga kirish uchun qisqa muddatli kalit oladi va sessiya tugaganda yoki siz undan chiqqaningizda u ishlashdan to'xtaydi.

## Yozib olish, transkriptlar va sun'iy intellekt

Sessiya avtomatik ravishda yozib olinmaydi. Kimdir qo'shilishidan oldin, har bir kishi to'rtta alohida savolga javob beradi: yozib olish, yozma transkript, sun'iy intellekt yordami va tarjima qilingan subtitrlar.

Funksiya faqat javoblar bunga ruxsat bersagina yoqiladi. Bitta rad etish o'sha xona uchun uni o'chirilgan holda qoldiradi, bundan ma'ruza mustasno, chunki unda tinglovchilar sahnada bo'lmaydi va qoida faqat gapirayotgan odamlarga tegishli bo'ladi.

Sessiya tugagunga qadar istalgan vaqtda javobingizni qaytarib olishingiz mumkin. Transkriptga berilgan rozilikni qaytarib olish o'sha sessiyaning transkriptini darhol o'chirib tashlaydi. Yozib olishga berilgan rozilikni qaytarib olish uni o'sha joyda to'xtatadi, allaqachon yozib olingan qismi esa odatiy jadvalga muvofiq o'chiriladi.

Sessiyada rozilik bergan bo'lsangiz, subtitrlarni tarjima qilish va flesh-kartalar bilan yordam berish uchun o'sha sessiyadagi matn Google kompaniyasiga yuborilishi mumkin.

Ba'zi funksiyalar ishlashi uchun alohida savolsiz ham matnni Google kompaniyasiga yuboradi:

- Xabarlar, xona chatlari, uy vazifalari va jonli mashg'ulotlardagi javoblar, ularni o'qiyotgan odam uchun tarjima qilish maqsadida.

- Profillar va sharhlar, ularni boshqa tillarda ko'rsatish maqsadida.

- Mutaxassis o'z profilida yozgan narsalar va siz qidiruv maydoniga yozgan narsalaringiz, mutaxassislarni ma'nosiga qarab topish maqsadida.

- Siz flesh-karta sifatida saqlagan so'z, uning ma'nosini o'z tilingizda qo'shish maqsadida.

- Xabarlar, xona chatlari, uy vazifalari va jonli mashg'ulotlardagi javoblar, ularning qaysi tilda yozilganini aniqlash maqsadida.

Matnni yuborishdan oldin biz elektron pochta manzillari, telefon raqamlari, havolalar va messenjer nomlarini olib tashlashga harakat qilamiz va ularni tarjimaga qayta joylashtiramiz. Biz ismlarni olib tashlamaymiz. Google matnni Yevropa Ittifoqida qayta ishlashini aytadi va uning shartlariga ko'ra, u bizning ruxsatimizsiz o'z modellarini bizning ma'lumotlarimizda o'qitmaydi. Agar Google xavfsizlik tekshiruvlari so'rovni ehtimoliy suiiste'mol deb belgilasa, Google inson tekshirishi uchun ushbu so'rov nusxasini Yevropa Ittifoqida 90 kungacha saqlashi mumkin. Google ushbu nusxadan o'z modellarini o'qitish uchun foydalanmaydi. Biz qancha tarjima qilishimiz bo'yicha kunlik cheklov mavjud.

## Yaqinda ko'rilgan profillar

Siz ularni qaytadan osongina topishingiz uchun biz siz yaqinda ko'rgan mutaxassislar ro'yxatini saqlab qo'yamiz. Bu ro'yxatni faqat o'zingiz ko'ra olasiz, uni tozalashingiz ham mumkin. Ro'yxat 30 kundan keyin o'chib ketadi hamda u ma'lumotlaringizni yuklab olish va butunlay o'chirish huquqingiz doirasiga kiradi.

## Statistika

Biz platformadan qanday foydalanilishini hisoblab boramiz: qancha qidiruv profilga, xabarga yoki band qilishga olib kelishini. Ushbu jadvallarda foydalanuvchi, sessiya, manzil yoki qurilma haqidagi ma'lumotlar saqlanishi mumkin emas va agar kimdir shunday ma'lumot saqlanishi mumkin bo'lgan ustun qo'shishga urinsa, testdan o'tolmaydi.

Shuningdek, biz tashriflar qayerdan kelayotganini ham hisoblaymiz. Saytimizdan tashqaridagi biror joydan sahifalarimizni ochganingizda, hisoblagichga bitta son qo'shamiz. Hisoblagich soatni, siz ochgan birinchi sahifani, sizni yo'naltirgan sayt turini, mamlakatingizni, telefon yoki kompyuterdan foydalanayotganingizni va sayt tilini saqlab qoladi. Birinchi sahifa oltitadan biri bo'ladi: bosh sahifa, qidiruv, mutaxassis profili, taklif, o'qitish sahifasi yoki boshqa sahifa. Sayt turi ham oltitadan biri bo'ladi: qidiruv tizimi, ijtimoiy tarmoq, sun'iy intellekt yordamchisi, elektron pochta xizmati, boshqa sayt yoki hech qaysisi.

Mamlakatingizni saytimizga xizmat ko'rsatadigan tarmoq orqali bilib olamiz. U mamlakatni sizning manzilingizdan o'qiydi va bizga ikkita harfni beradi. Hisoblagich sizning manzilingizni saqlamaydi. Hisoblagichda ism, hisob qaydnomasi yoki qurilma raqami saqlanmaydi. Biz ushbu hisob-kitoblarni ikki yildan keyin o'chirib tashlaymiz.

Agar bizning reklamalarimizdan biri orqali kelgan bo'lsangiz, havolada reklama beruvchi tanlagan so'zlar bo'ladi: manba, vosita, reklama nomi va qidiruv so'zi. Biz ushbu so'zlarni tashrif bilan birga saqlaymiz. Agar ushbu tashrifdan keyin dars band qilsangiz yoki paket sotib olsangiz, qaysi reklamalar foyda keltirishini ko'rishimiz uchun ushbu so'zlarni o'sha band qilish bilan birga saqlaymiz. Biz so'zni faqat elektron pochta manzillari, telefon raqamlari va uzun kodlarni rad etadigan tekshiruvdan o'tsagina saqlab qolamiz. Band qilishlaringiz va paketlaringizdagi so'zlar ma'lumotlaringiz eksportining bir qismidir. Hisob qaydnomangizni o'chirganingizda, ushbu so'zlarni band qilishlaringiz va paketlaringizdan o'chirib tashlaymiz.

Agar reklamadan keyin o'qitish uchun ariza topshirsangiz, reklama kampaniyasi nomini hisob qaydnomangizda saqlab qolamiz. Bu ma'lumotlaringiz eksportining bir qismidir. Hisob qaydnomangizni o'chirganingizda uni ham o'chirib tashlaymiz.

Bularning hech biri qurilmangizga kuki yoki biron bir fayl joylashtirmaydi.

Bitta ro'yxatda yozilgan so'zlar saqlanadi: hech narsa topilmagan qidiruvlar, bu bizga qaysi mutaxassislarni izlash kerakligini aytadi. Unda buni kim yozgani haqida hech qanday iz qolmaydi va 180 kundan keyin o'chirib tashlanadi.

## Platforma xavfsizligini ta'minlash

Biz soxta akkauntlarni aniqlash, avtomatlashtirilgan hujumlarni to'xtatish, tizimga kirish urinishlarini cheklash, so'rovlarni nazorat ostida ushlab turish va suiiste'molliklarni aniqlash uchun texnik ma'lumotlarni qayta ishlaymiz. Bunga asos platformamizning bunday muammolardan xoli bo'lishini ta'minlashga bo'lgan qonuniy manfaatimizdir.

Server jurnallari 90 kun davomida saqlanadi.

## Kompaniya ichida kim nimani ko'ra oladi

Bizning xodimlarimiz bir yoki bir nechta rollarga ega: shaxsni tasdiqlash, moliya, moderatsiya, qo'llab-quvvatlash, tarjima, audit va ma'muriyat. Har bir rol faqat o'z ishiga kerak bo'lgan ma'lumotlarni ochadi, shaxsni tasdiqlovchi hujjatlar esa faqat ularni ko'rib chiquvchi rollar uchun ochiladi.

Har bir ma'muriy o'zgarish va maxfiy ma'lumotlarga har bir qarash, masalan, shaxsni tasdiqlovchi hujjatni ochish, ma'lumotlar bazasining o'zi o'zgartirish yoki o'chirishni rad etadigan qaydnomaga yoziladi. Unda kim, qachon, nima ustida, qaysi manzildan va qaysi qurilmadan harakat qilgani saqlanadi. Biz uni etti yil davomida saqlaymiz.

## Biz uni qanday himoya qilamiz

- Shifrlangan ulanishlar va serverlar eskirgan shifrlash usullarini rad etadi.

- Shaxsni tasdiqlovchi hujjatlar va soliq raqamlari saqlashdan oldin shifrlanadi.

- Rollarga asoslangan kirish huquqi, xodimlar vositalari uchun alohida tizimga kirish joyi mavjud.

- So'rovlar va yuklanadigan fayllar hajmiga cheklovlar qo'yilgan.

- Har bir kiruvchi maydon ishlatilishidan oldin tekshiriladi.

- Javoblar ma'lumotlar bazasining xom qatoridan emas, balki maydonlarning qat'iy ro'yxatidan tuziladi.

- Shifrlangan zaxira nusxalari yaratiladi.

- Biz foydalanadigan dasturiy ta'minotdagi ma'lum zaifliklar avtomatik ravishda tekshiriladi.

- Serverlarga ma'muriy va foydalanuvchi kirish huquqlari alohida ajratilgan.

## Ma'lumotlar qayerda saqlanadi

Ma'lumotlar bazasi, ilova va video Yevropa Ittifoqi hududidagi Xelsinki shahrida (Finlyandiya) joylashgan, Hetzner kompaniyasidan ijaraga olingan ikkita serverda ishlaydi. Xatolarni kuzatish tizimimiz o'zimizniki bo'lib, tashqariga hech narsa yubormaydi.

Yuklangan fayllar va yozuvlar Cloudflare kompaniyasining Yevropa Ittifoqi hududidagi omborida saqlanadi. Shaxsni tasdiqlovchi hujjatlar u yerga shifrlangan holda yetib boradi.

Biz har kecha zaxira nusxasini yaratamiz va u serverdan chiqishidan oldin shifrlanadi. Kundalik nusxalar 30 kun davomida, haftalik nusxalar esa 90 kun davomida saqlanadi. Shuningdek, ma'lumotlar bazasidagi har bir o'zgarishning shifrlangan nusxasini taxminan besh hafta davomida saqlaymiz, shunda uni o'sha vaqt ichidagi istalgan daqiqaga qaytara olamiz. Agar biz qachondir eskiroq nusxani qaytarsak, o'sha vaqtdan beri ma'lumotlarini o'chirishni so'ragan barcha foydalanuvchilarning ma'lumotlarini qaytadan o'chirib tashlaymiz. Shuningdek, yuklangan fayllar va yozuvlarni har kecha shifrlangan holda o'sha zaxira omboriga nusxalaymiz. Siz o'chirib tashlagan fayl taxminan sakkiz hafta ichida o'sha nusxadan butunlay o'chib ketadi.

## Bizga yordam beradigan kompaniyalar

Ularning har biri faqat o'z ishiga kerak bo'lgan ma'lumotlarni oladi:

- Hetzner (Germaniya, Finlandiyadagi serverlar): serverlar va zaxira nusxalarini saqlash joyi.

- Cloudflare (AQSh): fayllarni saqlash, hujumlardan himoya qilish va xodimlarimiz asboblari oldidagi kirish eshigi.

- Stytch (AQSh): tizimga kirish, jumladan Google orqali kirish va kirish kalitlari.

- Stripe (AQSh, Yevropa uchun Irlandiya kompaniyasi), shu jumladan o'zining Stripe Link hamyoni: to'lovlar va pul o'tkazmalari.

- Brevo (Fransiya): elektron xatlarimizni jo'natish.

- Google Cloud (AQSh), Yevropa Ittifoqida Vertex AI xizmatini ishlatadi: tarjima, ma'no bo'yicha qidiruv va siz rozilik bergan sun'iy intellekt funksiyalari.

- Google Firebase (AQSh): push-bildirishnomalar.

- Google (AQSh): tizimga kirish va agar siz taqvimni ulagan bo'lsangiz, band bo'lgan vaqtingizni o'qish. Biz tadbirlaringiz nomlari yoki tafsilotlarini hech qachon ko'rmaymiz.

- ntfy.sh: disk maydoni va zaxira nusxalari kabi shaxsiy serverlarimiz haqidagi ogohlantirishlar. Shaxsiy ma'lumotlar yo'q.

Yuqorida sanab o'tilgan kompaniyalardan biri Yevropa Ittifoqidan tashqarida bo'lsa, ma'lumotlarni uzatish Yevropa Komissiyasining standart shartnoma shartlariga, agar kompaniya uning ro'yxatida bo'lsa, Yevropa Ittifoqi va AQSh o'rtasidagi Ma'lumotlar maxfiyligi kelishuviga yoki GDPRning 44-moddasidan 49-moddasigacha ruxsat berilgan boshqa asosga tayanadi. Biz ularning har biri bilan 28-moddaga muvofiq yozma shartnoma tuzganmiz.

## Statistika va reklama teglari

Boshqa kompaniyalarning to'rtta tegi tayyor holatda turibdi. Biz ularni yoqmagunimizcha ularning hech biri ishlamaydi va buni amalga oshirganimizda ushbu qoidalarni yangilaymiz. Bular: Google kompaniyasidan Google Analytics va Google Ads, Meta kompaniyasidan Meta Pixel hamda TikTok kompaniyasidan TikTok Pixel. Yuqoridagi ro'yxatda keltirilgan Google tizimga kirish va taqvimlar uchun mo'ljallangan. Ushbu ikkita Google tegi alohida masala bo'lib, mazkur bo'lim aynan ularni qamrab oladi.

Teglar yoqilgandan keyin, reklamalarimiz samaradorligini o'lchashimiz uchun ular siz bu yerda tashrif buyurgan sahifalar, ro'yxatdan o'tganingiz yoki o'tmaganingiz hamda to'lov qilganingiz va qancha to'laganingiz haqidagi ma'lumotlarni yuboradi. Ular hech qachon sizning ismingizni, elektron pochtangizni yoki biz orqali yuborilgan xabarlaringizni yubormaydi. Yevropa Ittifoqi, Yevropa iqtisodiy hududi, Buyuk Britaniya va Shveytsariyada bu holat faqat siz kuki fayllari bannerida rozilik berganingizdagina yuz beradi, rad etish esa bularning barchasini to'xtatadi. Qolgan barcha joylarda biz rozilik so'ramaymiz. Kuki qoidalari sahifasida har bir teg ro'yxati keltirilgan.

Har bir kompaniya alohida rolga ega:

- Google Analytics biz uchun tashriflarni hisoblaydi. Google ushbu ma'lumotlarni bizning nomimizdan va faqat biz ko'rsatganimizdek qayta ishlaydi.

- Google Ads qaysi reklama sizni bu yerga olib kelganini Google kompaniyasiga ma'lum qiladi. Google ushbu ma'lumotlardan qanday foydalanishni Google maxfiylik siyosati asosida mustaqil ravishda hal qiladi.

- Meta va TikTok. Biz va ushbu kompaniyalar bir bosqich uchun birgalikda mas'ulmiz: saytimizda ma'lumotlarni yig'ish va ularga yuborish. Ma'lumotlar yetib borgach, kompaniya o'zining maxfiylik siyosatiga muvofiq ulardan qanday foydalanishni mustaqil ravishda hal qiladi.

Meta va TikTok uchun birgalikdagi kelishuv quyidagicha ishlaydi:

- Biz tegishli tegni yoqishdan oldin qabul qiladigan har bir kompaniyaning biznes shartlarida o'sha birgina bosqich uchun GDPR doirasida kim nima qilishi belgilab qo'yilgan.

- Biz bu haqda sizga shu yerda va kuki qoidalarida ma'lum qilamiz, qonun bo'yicha roziligingiz talab qilinadigan joylarda esa uni so'raymiz.

- Kompaniya ma'lumotlarni qabul qilib olgandan keyin, ularni ko'rish, tuzatish, o'chirish yoki ko'chirish bo'yicha so'rovlaringizni o'zi ko'rib chiqadi.

- Siz o'z huquqlaringizdan foydalanish uchun xohishingizga ko'ra bizga yoki ushbu kompaniyaga murojaat qilishingiz mumkin. Agar siz kompaniya ixtiyoridagi ma'lumotlar bo'yicha bizga yozsangiz, biz so'rovingizni ularga yuboramiz.

Meta tomoni bu Meta Platforms Ireland hisoblanadi. Uning maxfiylik siyosati facebook.com/privacy/policy manzilida, kelishuvning o'zi esa facebook.com/legal/controller_addendum sahifasida joylashgan. TikTok maxfiylik siyosati tiktok.com/legal/page/eea/privacy-policy manzilida keltirilgan.

Google, Meta va TikTok ushbu ma'lumotlarni Yevropa Ittifoqidan tashqariga ko'chirishi mumkin. Google va Meta Yevropa Ittifoqi va AQSh o'rtasidagi ma'lumotlar maxfiyligi dasturi (EU-US Data Privacy Framework) ro'yxatiga kiritilgan. TikTok esa Yevropa Komissiyasining standart shartnomaviy shartlariga tayanishini bildiradi.

## Cookie-fayllar

Qurilmangizda saqlaydigan ma'lumotlarimizning aksariyati xizmat ko'rsatish uchun zarur: tizimga kirishingiz, tizimda qolishingiz, tilingizni eslab qolish va soxta akkauntlar guruhlarini aniqlash uchun. Yuqoridagi teglarni yoqqanimizdan so'ng, Google, Meta va TikTok ham statistika va reklama uchun cookie-fayllarni o'rnatadi. Yevropa Ittifoqi, Yevropa iqtisodiy hududi, Buyuk Britaniya va Shveytsariyada biz ularning har biri yuklanishidan oldin rozilik so'raymiz va rad javobi ularni o'chiq qoldiradi. Boshqa barcha joylarda ular so'rovsiz yuklanadi. Har bir cookie-fayl cookie-fayllar siyosati sahifasida ko'rsatilgan, u yerda javobingizni qanday o'zgartirish ham tushuntirilgan.

## Ma'lumotlarni qancha vaqt saqlaymiz

- Amaliyot xonasidagi mehmon, u qo'shgan xabarlar va fayllar: 1 kun.

- Amaliyot darsining subtitrlari va ularning tarjimalari: 1 kun.

- Yaqinda ko'rilgan profillar: 30 kun.

- Sessiyalar yozuvlari: 30 kun.

- Yopilgan hisob o'chirilishidan oldin: 30 kun.

- Server jurnallari: 90 kun.

- Boshqa sessiyalarning transkriptlari va tarjima qilingan subtitrlari: 6 oy.

- Bildirishnomalar, e'lonlar va qo'llab-quvvatlash so'rovlari: 12 oy.

- Xabarlar: 18 oy.

- Sessiyada ulashilgan fayllar: 24 oy.

- Shaxsni tasdiqlovchi hujjatlar: munosabatlar tugaganidan keyin 5 yil.

- Xodimlarning harakatlari jurnali, cheklovlar va shikoyatlar: 7 yil.

- To'lov, band qilish va soliq hisobotlari: 10 yil.

Tungi dastur ushbu qoidalarni bajaradi, har soatlik dastur esa amaliyot xonasi ma'lumotlarini tozalaydi. Qonun bizdan biror narsani uzoqroq saqlashni talab qilishi mumkin, shuningdek, hal qilinmagan nizo mavjud bo'lsa, u hal bo'lgunga qadar ma'lumotlar saqlanadi.

## Ma'lumotlaringiz nusxasini olish

Uni sozlamalaringizdan so'rang va tizim siz haqingizda bizda mavjud bo'lgan ma'lumotlardan iborat bitta JSON formatidagi faylni tayyorlaydi. U uch kun davomida yuklab olish uchun ochiq turadi va keyin o'chirib tashlanadi, chunki inson shaxsiy ma'lumotlarining to'liq nusxasi uzoq vaqt saqlanib turmasligi kerak.

## Hisobingizni yopish

Hisobingizni sozlamalaringizda yopishingiz mumkin. Kirish huquqi darhol to'xtatiladi.

30 kun davomida hech narsa o'chirilmaydi, shuning uchun xatolik tufayli yopilgan hisobni qayta tiklash mumkin. Shundan so'ng biz hisob ortidagi shaxsiy ma'lumotlarni o'chiramiz: ism, elektron pochta manzili, telefon raqami, fotosurat, tug'ilgan sana va profil matni. Elektron pochta manzili o'chirilish o'rniga ma'nosiz qiymat bilan almashtiriladi, chunki qonun bo'yicha saqlashimiz shart bo'lgan yozuvlarni, masalan, to'lov yozuvlari va xodimlarimiz harakatlarining shaxsiy jurnalini yozilgandan keyin tahrirlab bo'lmaydi.

Yuborgan shaxsiy xabarlaringiz o'chiriladi. Dars xonasi yoki guruh chatidagi xabarlar o'sha sessiyaning umumiy yozuvi hisoblanadi, shuning uchun ular ismingiz ko'rsatilmagan holda qoladi va xabarlar uchun odatiy jadvalga muvofiq o'chiriladi. Yagona istisno bu mashg'ulot xonasi: mehmon u yerda yuborgan xabarlar mehmon bilan birga 1 kundan keyin o'chiriladi, mashg'ulot darsining subtitrlari va ularning tarjimalari ham 1 kundan keyin o'chiriladi.

Agar nizo ochiq bo'lsa yoki pullik sessiya hali bo'lib o'tmagan bo'lsa, o'chirish jarayoni pul hisob-kitob qilinmaguncha kutiladi. Sahifada bu haqda sizga xabar beriladi.

## Huquqlaringiz

GDPR qoidalariga ko'ra siz quyidagilarni amalga oshirishingiz mumkin:

- Bizda siz haqingizda qanday ma'lumotlar borligini so'rash va ulardan nusxa olish (44 va 49-moddalar o'rniga: 15 va 20-moddalar).

- Noto'g'ri ma'lumotlarni tuzatish (16-modda). Ularning ko'p qismini o'zingiz tahrirlashingiz mumkin.

- Ma'lumotlaringizni o'chirib tashlashni talab qilish (17-modda), qonun hujjatlarida ularni saqlashimiz shart qilib qo'yilgan hollar bundan mustasno.

- Bizning qonuniy manfaatlarimizga asoslangan qayta ishlashni cheklash yoki unga e'tiroz bildirish (18 va 21-moddalar).

- Rozilik asosida berilgan har qanday narsa uchun rozilikni istalgan vaqtda qaytarib olish (7-modda). Siz rozilikni qaytarib olishingizdan oldin qilingan ishlar qonuniy bo'lib qoladi.

legal@ollinter.com elektron pochta manzili orqali bizga yozing va biz qonunda belgilangan bir oy muddat ichida javob beramiz.

## Vakolatli organga shikoyat qilish

Siz ma'lumotlarni himoya qilish organiga shikoyat qilishingiz mumkin: o'zingiz yashaydigan, ishlaydigan yoki biror narsa noto'g'ri bajarilgan deb hisoblagan joydagi organga. Biz Estoniyada joylashganimiz sababli, bizni nazorat qiluvchi organ:

Andmekaitse Inspektsioon (Estoniya ma'lumotlarni himoya qilish inspeksiyasi)

Tatari 39, 10134 Tallinn, Estoniya

Elektron pochta: info@aki.ee

Telefon: +372 627 4135

Siz bizga oldindan yozgan bo'lishingizdan qat'i nazar shikoyat qilishingiz mumkin.

## Agar biror narsa noto‘g‘ri ketsa

Biz shaxsiy ma’lumotlar daxlsizligi buzilishining oldini olish, aniqlash va cheklash choralarini ko‘ramiz. Agar shunday holat yuz bersa, qonun talab qilgan hollarda bu haqda bilganimizdan keyin asossiz kechikishlarsiz va 72 soat ichida tegishli organga xabar beramiz, shuningdek, xavf darajasi yuqori bo‘lgan hollarda jabrlangan odamlarni ham ogohlantiramiz.

## Qonun bizdan ma'lumotlarni so'raganda

Biz shaxsiy ma'lumotlarni qonuniy majburiyat, sud qarori yoki vakolatli organning majburiy buyrug'i talab qilganda va faqat ushbu talab doirasida topshiramiz.

## Ushbu qoidaga kiritiladigan o'zgarishlar

Qonunchilik, platforma, biz hamkorlik qiladigan kompaniyalar yoki maqsadlar o'zgarganda, biz ushbu qoidani yangilab boramiz. Amaldagi tahrir har doim shu yerda bo'ladi va siz uchun muhim o'zgarishlar yuz berganda, biz sizni xabardor qilamiz.

Biz nimalarni saqlaymiz

Nima uchun biz uni qonuniy ravishda saqlashimiz mumkin

Sizning hisobingiz

Tizimga kirish

Band qilish va to'lov

Ommaviy profillar

Mutaxassisning shaxsini tekshirish

Xabarlar va sessiyalar

Yozib olish, transkriptlar va sun'iy intellekt

Yaqinda ko'rilgan profillar

Statistika

Platforma xavfsizligini ta'minlash

Kompaniya ichida kim nimani ko'ra oladi

Biz uni qanday himoya qilamiz

Ma'lumotlar qayerda saqlanadi

Bizga yordam beradigan kompaniyalar

Statistika va reklama teglari

Cookie-fayllar

Ma'lumotlarni qancha vaqt saqlaymiz

Ma'lumotlaringiz nusxasini olish

Hisobingizni yopish

Huquqlaringiz

Vakolatli organga shikoyat qilish

Agar biror narsa noto‘g‘ri ketsa

Qonun bizdan ma'lumotlarni so'raganda

Ushbu qoidaga kiritiladigan o'zgarishlar

Barcha versiyalar

8 va 9 versiyalari o'rtasida nima o'zgardi