Terms & Policies

Effective date: April 3, 2023

General Provisions

This Privacy Policy (hereinafter referred to as the "Privacy Policy") defines the principles of processing personal data obtained via the website https://yappi.global (hereinafter referred to as the "Website") and is directed to the users of the Website. The owner of the Website and at the same time the data controller is Yappi Global  LIMITED LIABILITY COMPANY, address: Polska woj.Lubuskie Powiat Zaganski gmina Zagan miesc. Zagan ul.Pl.Slowianski №6 of 3, company registration details: registered in the register of entrepreneurs by the District Court for the capital city of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0001118052, NIP: 9241926382, REGON: 529220597, email: office@yappi.global, contact phone number: +48733933787 (hereinafter referred to as the "Administrator"). The Administrator can be contacted by phone or email.

Personal data collected by the Administrator via the Website is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

The Administrator places great emphasis on protecting the privacy of the Website users and ensuring the security of their personal data processing.

Legal bases of processing, and categories of personal data concent

The Administrator processes your data based on consent.

The Administrator also processes your data based on consent when you agree to the use of cookies other than those necessary for the provision of electronic services, including the installation of cookies by third parties and the transfer of data collected via these cookies to those third parties. You can withdraw your consent to the installation of cookies that are not necessary for the provision of electronic services at any time via the settings of your web browser on the device you use or from the Website in the footer by clicking on the link "Change privacy settings." Withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal. More information on the processing of personal data collected via the Administrator's cookies and third-party cookies, as well as the option to withdraw consent, can be found in the Cookies Policy of https://yappi.global.

We use tools that allow for the display of personalized ads, such as ads in the Google search engine, remarketing, and ads displayed on YouTube and social media platforms. Personalized ads will be displayed if the phrase you enter in the search engine matches the list of phrases we have set up in the campaign; and also if Google's algorithm matches you based on the websites you visit, the videos you watch on YouTube, etc. You can withdraw your consent to our use of the aforementioned tools, including the Google Marketing Platform cookies. You can do this on the Google Marketing Platform opt-out page or on the Network Advertising Initiative opt-out page.

Conclusion and execution of the contract

The Administrator processes your personal data in order to take actions at your request to conclude a contract with the Administrator or when it is necessary to execute an already concluded contract (art. 6 sec. 1 lit. b GDPR), including, among others, when it is necessary for:

  • concluding contracts with the Administrator for the provision of electronic services, as specified in the Regulations and their execution,
  • concluding a Contract for a language course with the Administrator and its execution,
  • sending inquiries to the Administrator via email or contact forms available on the Website.

Legal Obligation

The Administrator processes your personal data in order to fulfill the legal obligation imposed on the Administrator (art. 6 sec. 1 lit. c GDPR).

In practice, this means the need to process your personal data in connection with compliance with obligations arising from legal regulations, particularly those arising from tax laws, accounting laws, the Act on Electronic Services, the Civil Code, and consumer protection laws.

Legitimate interest of the administrator or a third party

The Administrator may process your personal data if it is necessary for purposes arising from the legitimate interests pursued by the Administrator or a third party (art. 6 sec. 1 lit. f GDPR), including, among others, in the following cases:

  • Customer Relationship Management: The Administrator analyzes past cooperation with you for internal purposes to prepare summaries, analyses, and sales statistics. Based on this information, the Administrator gains knowledge helpful in preparing offers, setting prices, better matching offers to your interests, undertaking better-targeted marketing actions, and improving the quality of services provided.
  • Claim Pursuit and Defense: If you fail to fulfill or improperly fulfill a contract concluded with the Administrator, the Administrator, under the applicable law, may pursue claims from you, such as seeking payment for goods/services sold. If you bring claims against the Administrator, the Administrator processes your personal data to defend against such claims.
  • Payment via Payment Services: If you choose an online payment method, the Administrator transfers your personal data to the payment service provider to allow you to make a payment via the method you choose (credit card or transfer).
  • Contact with the Administrator: You can contact the Administrator via email, phone, or online contact forms available on the Website. In such cases, we may process your personal data to communicate with you and handle the issue you have initiated.
  • Data Storage for Accountability: Data is stored to ensure compliance with the regulations concerning personal data processing.

Website Management: The Administrator uses necessary cookies for the proper functioning of the Website. The use of necessary cookies may involve the processing of your personal data, which is based on the legitimate interest of the Administrator in managing the Website.

Creating Target Audiences: If you are a registered customer, your email address stored in the Administrator's mailing database may be transferred to Facebook Ireland Ltd. to create an audience group for advertisements using this email address. During this process, your email address is hashed before it is sent to Facebook and Instagram to create the audience group. Your email address will be used in the matching process conducted by Facebook and Instagram. Facebook and Instagram do not share your email address with third parties or other advertisers and delete the email address immediately after the matching process is completed. Facebook and Instagram have implemented procedures to ensure the confidentiality and security of the transmitted email address and the user identifiers that create the audience group using the email address, through technical and physical safeguards.

Profiling: Based on the information collected about you during the cooperation (i.e., purchase history, activity history on the Website), the Administrator displays personalized advertisements on the Website https://yappi.global.

Marketing of Products and Services Offered by the Administrator: The Administrator sends you marketing information about goods and services offered by the Administrator, provided you have previously consented to be contacted by phone (SMS communications) or via email for direct marketing purposes.

The Administrator does not send spam, i.e., unsolicited commercial information.

The Administrator does not provide any personal data, particularly email addresses or phone numbers, to third parties for direct marketing purposes.

Recipients of personal data

This Privacy Policy (hereinafter referred to as the "Privacy Policy") defines the principles of processing personal data obtained via the website https://yappi.global (hereinafter referred to as the "Website") and is directed to the users of the Website. The owner of the Website and at the same time the data controller is Yappi Global  LIMITED LIABILITY COMPANY, address: Polska woj.Lubuskie Powiat Zaganski gmina Zagan miesc. Zagan ul.Pl.Slowianski №6 of 3, company registration details: registered in the register of entrepreneurs by the District Court for the capital city of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0001118052, NIP: 9241926382, REGON: 529220597, email: office@yappi.global, contact phone number: +48733933787 (hereinafter referred to as the "Administrator"). The Administrator can be contacted by phone or email.

Personal data collected by the Administrator via the Website is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

The Administrator places great emphasis on protecting the privacy of the Website users and ensuring the security of their personal data processing.

Planned data storage period

The Administrator processes your data based on consent.

The Administrator also processes your data based on consent when you agree to the use of cookies other than those necessary for the provision of electronic services, including the installation of cookies by third parties and the transfer of data collected via these cookies to those third parties. You can withdraw your consent to the installation of cookies that are not necessary for the provision of electronic services at any time via the settings of your web browser on the device you use or from the Website in the footer by clicking on the link "Change privacy settings." Withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal. More information on the processing of personal data collected via the Administrator's cookies and third-party cookies, as well as the option to withdraw consent, can be found in the Cookies Policy of https://yappi.global.

We use tools that allow for the display of personalized ads, such as ads in the Google search engine, remarketing, and ads displayed on YouTube and social media platforms. Personalized ads will be displayed if the phrase you enter in the search engine matches the list of phrases we have set up in the campaign; and also if Google's algorithm matches you based on the websites you visit, the videos you watch on YouTube, etc. You can withdraw your consent to our use of the aforementioned tools, including the Google Marketing Platform cookies. You can do this on the Google Marketing Platform opt-out page or on the Network Advertising Initiative opt-out page.

Rights of the data subject

Right of access to data
You have the right to access your data, including the right to obtain a copy of the data, including electronically.

Right to rectification of data
You have the right to request the rectification of incorrect personal data. You also have the right to request the completion of incomplete personal data.

Right to erasure of data
You have the right to request the Administrator to erase your personal data if:

  • The data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • You object to the processing of your personal data based on the legitimate interest of the Administrator or a third party due to your particular situation, and there are no overriding legitimate grounds for processing;
  • You object to the processing of your data for direct marketing purposes;
  • Your personal data has been processed unlawfully;
  • The personal data must be erased in order to comply with a legal obligation under EU or Polish law to which the Administrator is subject.

However, the Administrator points out that this right is subject to significant limitations. The Administrator will not be able to fulfill your request if further processing is necessary for:

  • Compliance with a legal obligation requiring processing under EU or national law (e.g., the statute of limitations for tax obligations arising from a contract between the Administrator and you has not yet passed, or the document retention period for accounting records related to a contract between the Administrator and you has not yet expired);
  • Establishing, pursuing, or defending against claims.

Right to restriction of processing
You have the right to request the restriction of processing of your personal data if:

  • You contest the accuracy of the personal data – for a period allowing the Administrator to verify the accuracy of the data;
  • The processing is unlawful, and you oppose the erasure of the personal data, requesting instead the restriction of its use;
  • The Administrator no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims;
  • You have objected to the processing of your personal data based on the legitimate interest of the Administrator or a third party, pending verification of whether the legitimate grounds of the Administrator override your objection.

Right to data portability
You have the right to receive in a commonly used, machine-readable format the data you have provided to the Administrator, which the Administrator processes by automated means based on a contract with you or on your consent. You also have the right to request that the Administrator transmit this data directly to another data controller, where technically feasible.

Right to object
You have the right to object at any time, for reasons related to your particular situation, to the processing of your personal data based on the legitimate interests of the Administrator or a third party (Part I.4 of this Privacy Policy).

The Administrator has the right to refuse to stop processing your data if it demonstrates:

  • The existence of compelling legitimate grounds for the processing, overriding your interests, rights, and freedoms, or
  • The necessity for the establishment, exercise, or defense of legal claims.

You have the right to object at any time if the Administrator processes your data for direct marketing purposes, including profiling.

The Administrator respects your right to privacy and gives you the ability to decide on the scope of profiling applied to you in relation to personalized advertisements. After logging into your account on the Website, in the "Privacy" tab, you can uncheck the "checkbox," which will result in the cessation of data processing for this purpose. You can re-enable this "checkbox" at any time.

Complaint to the supervisory authority

You have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

Voluntary provision of data

If you are creating an account on the website as a consumer, it is necessary to provide the following data: email address, password for the account, first and last name, phone number, street, house number, postal code, and city. Providing this data is voluntary, but refusal to provide it will prevent the creation of an account on the website.

If you are creating an account on the website as a business (COMPANY), you need to provide the following data: email address, password for the account, first and last name, phone number, NIP (tax identification number), the name under which you conduct business (Field: company name), street, house number, postal code, and city. Providing this data is voluntary, but refusal to provide it will prevent the creation of an account on the website.

When concluding a contract for the sale of goods/services, you may additionally provide a delivery address different from the one provided during registration. Providing this data is voluntary.

If you agree to receive VAT invoices electronically, the Administrator will send them to the email address provided during the account registration on the website, but you can provide another email address during the order process on the website. Providing this data is voluntary, but refusal to provide it will result in invoices being sent to the email address provided when the account was created on the website.

If you place an order for the collection of returned goods via the website, the Administrator will process your data to fulfill the agreement, including: first and last name, phone number, email address, invoice or receipt number related to the returned goods, identification of the returned goods, and the address from which the returned goods should be collected. You may also provide a bank account number for the refund. Providing this data is voluntary, but refusal to provide it will prevent the submission of an order for the collection of returned goods via the return form on the website.

If you want to file a complaint regarding goods/services via the complaint form, you must provide the following personal data: first and last name, company name (if applicable), correspondence address, contact phone number, email address, invoice or receipt number related to the complained goods/services, identification of the goods/services being complained about. You may also provide a bank account number for the refund. Providing this data is voluntary, but refusal to provide it will prevent the filing of a complaint via the complaint form on the website.

If you want to subscribe to the newsletter without creating an account on the website, you must provide your email address and consent to receive commercial information at this address under Article 2(2) of the Act of 18 July 2002 on the provision of electronic services, for direct marketing purposes. Providing this data is voluntary, but refusal to provide it will prevent the newsletter from being sent to you.

If you wish to receive promotional information via telephone (SMS), email, or updates on promotions, new products, and discounts offered by the Administrator, you must consent to telephone contact and to the sending of commercial information to your phone number under Article 2(2) of the Act of 18 July 2002 on the provision of electronic services, for direct marketing purposes. Providing this data is voluntary, but refusal to provide it will prevent the Administrator from contacting you by telephone (sending SMS) or by email.

Sources of data acquisition

The Administrator obtains your personal data directly from you.

Cookies and other tracking technologies

The Administrator informs that the Website uses "cookies" which are saved by the Administrator’s server on the hard drive of your end device (e.g., computer, smartphone, tablet) while you are using the Website. The purpose of using "cookies" is to improve the functioning of the Administrator’s Website on the end devices of its customers. This mechanism does not damage your end device or cause changes to the configuration of this device or the software installed on it. "Cookies" are not intended to identify you personally by the Administrator. The Administrator uses "cookies" for:

  1. Storing information about your end device,
  2. Verifying and improving its offer,
  3. Statistical purposes.

You can disable the "cookies" mechanism at any time in the web browser of your end device. However, the Administrator informs that disabling "cookies" may cause difficulties or prevent the use of the Administrator's Website.

Security of personal data

The Administrator uses technical and organizational measures to protect personal data against unauthorized access, loss, or damage, appropriate to the risks associated with data processing.

To prevent unauthorized access and modification of personal data sent by you during registration and login to the account on the Website, the Administrator ensures that the connection to the Administrator's server is encrypted using an SSL certificate.

The measures taken by the Administrator may not be sufficient if you do not follow security principles yourself. In particular, you should keep your login and password for the website account confidential and not share them with third parties. The Administrator will not ask you to provide them, except when logging in.

To prevent unauthorized persons from using your Account, you should always log out after using the Website.

This Privacy Policy is effective from December 1, 2024.