Y
YTM

Privacy Policy

YouToMe (“we”, “us”, “the Platform”), operated via the domain youtome.biz, is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable EU data protection legislation.

1. Data Controller

The data controller responsible for the processing of your personal data is the operator of the YouToMe platform, reachable at [email protected].

2. Personal Data We Collect

We collect and process the following categories of personal data:

  • Account data: username, email address, phone number, password (hashed), geographic location (city/country).
  • Business profile data: company name, company description, delivery and payment options, product listings.
  • Communication data: chat messages between buyers and suppliers, proposal descriptions.
  • Technical data: IP address, browser type, device information, cookies, access timestamps.
  • Transaction data: order details, contract conditions, review ratings and comments.

3. Legal Basis for Processing

We process your personal data on the following legal bases (Article 6 GDPR):

  • Performance of a contract (Art. 6(1)(b)) — to provide you with the Platform services, manage your account, facilitate orders, proposals, chats, and contracts.
  • Legitimate interests (Art. 6(1)(f)) — to improve the Platform, prevent fraud, and ensure security.
  • Consent (Art. 6(1)(a)) — for optional cookies, marketing communications, and SMS notifications. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)) — to comply with applicable laws and regulations.

4. How We Use Your Data

  • To create and manage your user account.
  • To facilitate communication between buyers and suppliers.
  • To process orders, proposals, and contracts.
  • To send transactional notifications (SMS, email) related to your activity.
  • To verify your phone number for account security.
  • To display supplier profiles and product listings publicly on the Platform.
  • To generate anonymised analytics to improve our services.

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Other Platform users: your public profile, company information, and product listings are visible to other users. Contact details are shared only when explicitly permitted within the chat system.
  • Service providers: SMS delivery, hosting, and infrastructure providers who process data on our behalf under Data Processing Agreements.
  • Legal authorities: when required by EU or member state law.

6. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

  • Account data: retained for the lifetime of your account plus 12 months after deletion.
  • Chat messages: retained for the lifetime of the associated chat/contract plus 12 months.
  • OTP verification codes: automatically deleted after 10 minutes.
  • Technical logs: retained for a maximum of 90 days.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15) — obtain a copy of your personal data.
  • Right to rectification (Art. 16) — correct inaccurate data.
  • Right to erasure (Art. 17) — request deletion of your data (“right to be forgotten”).
  • Right to restriction (Art. 18) — restrict processing in certain circumstances.
  • Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
  • Right to object (Art. 21) — object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies

We use essential cookies required for the Platform to function (session cookies, CSRF protection). We may also use analytics cookies with your consent. You can manage cookie preferences through our cookie consent banner.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, access controls, secure authentication, and regular security audits.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform. The effective date at the top indicates the latest revision.

12. Contact & Complaints

For any questions or concerns about this Privacy Policy or our data processing practices, contact us at [email protected].

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.