This Privacy Notice (” Privacy Notice “) provides you with the information regarding the processing of our customers’ users’ and visitors’ (“ You ” or “ User ”) personal data carried out by
Gravity Research and Development Zrt. (Company reg. no.: 08-10-001848; registered seat: Bálint Mihály str. 64., H – 9025 Győr, Hungary; postal address: 1113 Budapest, Villányi út.
40/b, Hungary; tax no: HU23841901; “ We ” or ” Gravity “) via the yuspify.com website (” Website “) and the Yuspify application (” Application “, or “ Services ”) provided by Us.

This notice does not have effect on the way we handle personal data transferred by You as a user of the Services to Gravity (e.g. personal data of your website’s visitors). For personal data transferred to Gravity as a data processor our Data Processing Agreement will be applicable, which you can find separately on the following link: www.yuspify.com/dataprocessing-agreement.

Please be aware that a data protection officer is operating in relation to data processing carried out by Us. For any inquires regarding data protection please contact our data protection officer on the following contact details: dpo@yusp.com, +36309274204 .

Definitions used in this Notice

In this section you can find the definitions for the purpose of this Privacy Notice.

Personal Data​: means any information relating to you through which We can identify you directly or indirectly; it means in particular your name, identification number, location data, online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of yours;

Data Processing​: means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

You​: means any user of the website or the application whose data is processed by Us.

Service(s)​: without regard to whether it is provided through the Website or the Application, means all the services described in the Controller’s Terms of Use, available online at https://yuspify.com/en/terms-and-conditions/ for Hungarian legal entities, and https://yuspify.com/en/terms-and-conditions/ for all other legal entities.

I. Data Processing Principles

a) We process your Personal Data in compliance with all the relevant laws, fairly and in a transparent manner.

b) We process your Personal Data only for specified and legitimate purposes as described in this Privacy notice.

c) We do not process your Personal Data which is not adequate, relevant or necessary for the purposes set out in this Privacy Notice.

d) We do our best to keep your Personal Data accurate and up to date. We take every reasonable step to ensure that inaccurate Personal Data is erased or rectified without delay.

e) We keep your Personal Data in a form which enables Us to identify You for no longer than needed, for the purposes for which your Personal Data is processed.

f) We process your Personal Data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

II. Why, and how are We processing your Personal Data?

In most cases, We are processing your Personal Data in order to provide You with our Services. However, other purposes may apply (e.g., to fulfil our statutory obligations). Please find detailed information on the purpose and other relevant circumstances of processing categorised by the purposes below.

We will always process your Personal data in compliance with the highest European standards on data protection. We provide an adequate level of protection to your Personal Data by E.U. standards, even in cases when We transfer your Personal Data outside the European Economic Area.

Please note, that in the event of any inquiries coming from state, administrative or investigative authorities, We may be obliged to provide these authorities with your Personal Data if they request Us to do so.

We do not carry out any automated decision-making or profiling activities while processing your Personal Data, unless directly stated otherwise in our information provided to You.

a. Registration

The purpose of processing your Personal Data: Registration on the Website and use of the Application offered on the website.

The legal basis for the processing: your consent.

The categories of personal data concerned: Data provided by you, in the course of the registration.

The period for which the personal data will be stored: This data will be deleted 5 years following the termination of the Service Agreement.

The recipients of the Personal Data: 

We may transfer your data in a secure way to hosting service providers such as:

• Amazon Web Services, Inc. 410 Terry Ave North Seattle , WA 98109-5210 , US
• DigitalOcean 101 Avenue of the Americas, 10th Floor New York, NY 10013
• Rackspace US, Inc. 1 Fanatical Place City of Windcrest San Antonio, Texas 78218 Mail Stop: US 109-2301
• DoclerNet Hosting Korlátolt Felelősségű Társaság, székhely: 1101 Budapest, Expo tér 5-7
• Leaseweb Netherlands BV. Luttenbergweg 8, 1101 EC Amsterdam, The Netherlands and affiliates

We may use additional hosting service providers in the course of providing the services.

b. Using the Application

The purpose of processing your Personal Data: We process your Personal Data while You are using our Services. This data is necessary for providing our Services to You, enhancing our Services, as well as for information security purposes.

The legal basis for the processing: The processingis necessary for the performance of the service contract concluded between You and Gravity.

The categories of personal data concerned: Data provided by You, in the course of the registration, or while you are using our Services, logged event data.

The period for which the personal data will be stored: This data will be deleted 5 years following the termination of the Service Agreement.

The recipients of the Personal Data:

We may transfer your data in a secure way to hosting service providers such as:

• Amazon Web Services, Inc. 410 Terry Ave North Seattle , WA 98109-5210 , US
• DigitalOcean 101 Avenue of the Americas, 10th Floor New York, NY 10013
• Rackspace US, Inc. 1 Fanatical Place City of Windcrest San Antonio, Texas 78218 Mail Stop: US 109-2301
• DoclerNet Hosting Korlátolt Felelősségű Társaság, székhely: 1101 Budapest, Expo tér 5-7
• Leaseweb Netherlands BV. Luttenbergweg 8, 1101 EC Amsterdam, The Netherlands and affiliates

We may use additional hosting service providers in the course of providing the services.

c. Payment and invoicing

The purpose of processing your Personal Data: We process your personal data for payment and invoicing purposes.

The legal basis for the processing: processing is necessary for compliance with a legal obligations to which Gravity is subject.

The categories of personal data concerned: Data provided by You, This may include data We collect while you are using our Services.

The period for which the personal data will be stored: This data will be deleted 8 years] following the termination of the Service Agreement.

The recipients of the Personal Data:

Your data may be transferred to our payment service provider: PayPal (Europe) S.à r.l. et Cie, (address: S.C.A.,  L-1150 Luxembourg).

d. Newsletters and direct marketing offerings

The purpose of processing your Personal Data: Informing our users about Our news, and our best offers.

The legal basis for the processing: your consent.

The categories of personal data concerned: Data provided by You (e.g. e-mail address).

The period for which the personal data will be stored: We will store the relevant Personal Data until you revoke your consent (i.e., unsubscribe from our newsletter).

The recipients of the Personal Data:

Your data may be securely processed using the marketing solutions provided by the following vendors:

• MailChimp provided by The Rocket Science Group, LLC, (address: 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308)

e. Costumer support.

The purpose of processing your Personal Data: We use Intercom (https://www.intercom.com) to provide more efficient and timely support to You when using our services. By using the support chatbox on our Webiste you consent to this data processing activity. In case you do not wish to use the chatbox, feel free to write an e-mail to Us at hello@yusp.com

The legal basis for the processing: your consent.

The categories of personal data concerned: Data provided by you, your IP address, data collected by Intercom from publicly available sources.

The period for which the personal data will be stored: This data will be deleted 5 years following the termination of the Service Agreement (if you are our customers), or the day your message (if you are not our customer).

The recipients of the Personal Data:

We are using the Intercom messaging platform provided by Intercom Inc. (address: San Francisco 55 2nd Street 4th Floor San Francisco, CA 94105) for customer support purposes.

III. Transferring your Personal Data

Please note, that We are using data processors for business related support services and these data processors receive your Personal Data for the purpose of providing Us with such services. Section II. above describes the data processor We use.

In a few cases using data processors will result in the transfer of your personal data outside of the European Economic Area. In these cases, we apply appropriate safeguards to ensure that Your data is processed safely. For the types of safeguards used see the table below.

For additional information on the above please contact us at: dpo@yusp.com, +36309274204 

IV. Your rights regarding the Data Processing carried out by Us

You have the following rights regarding Data Processing carried out by Us in relation to your Personal Data:

• right to access

You have the right to request from Us access to your Personal Data processed by Us and obtain information regarding the purpose of processing, what categories of Personal Data are processed, for or towards who We are transferring or disclosing your Personal Data, for what period We are processing your Personal Data, your rights in connection with Data Processing carried out by Us regarding your Personal Data, your right to lodge a complaint with a supervisory authority regarding the processing. Additionally, in the case We collect your Personal Data from other sources than from You, any available information as to the source, and the existence of automated decision-making and related information, including the logic involved, as well as the significance and the envisaged consequences of such processing for You, whether your Personal Data is transferred outside the EEA, and the conditions of these transfers.

We provide You with a copy of your personal Data processed by Us in case You require Us to do so.

• right to rectification

You have the right to request Us to rectify your inaccurate Personal Data and to request Us to complete your incomplete Personal Data by means of providing Us with a supplementary statement.

• right to erasure

We erase any of your Personal Data without delay if You request Us to do so in the event of the following:

1. Your Personal Data is no longer necessary for the concerning purpose;
2. You withdraw your consent and there is no other legal basis for the processing;
3. You object to the processing and there are no overriding legitimate grounds for the processing;
4. Your Personal Data has been processed unlawfully;
5. Your Personal Data has to be erased according to relevant laws.

Please note that We are entitled to not erase your Personal Data if it is necessary – among others – for exercising the right of freedom of expression and information, compliance with legal obligation, establishment, exercise or defense of legal claims.

• right to restriction of processing

You have the right to obtain from Us restriction of processing where one of the following applies:

1. You have contested the accuracy of your Personal Data, for a period enabling Us to verify the accuracy of your Personal Data;
2. the processing is unlawful and You oppose the erasure of your Personal Data and request the restriction of their use instead;
3. We need no longer your Personal Data for the purposes of the processing, but they are required by You for the establishment, exercise or defense of legal claims.

Where processing has been restricted, such Personal Data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

• right to object to processing

Where Personal Data is processed for direct marketing purposes, You have the right to object at any time to the processing of Personal Data concerning You for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You also generally have the right to object to the processing of Personal Data where the legal basis of the processing activity is Our legitimate interest, or the legitimate interest of a third party.

• right to data portability

You have the right to receive your Personal Data, which You have provided to Us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from Us. You also have the right to have your Personal Data transmitted directly from Us to another controller, where technically feasible.

• right to withdraw your consent

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.

We take actions requested in relation to exercising your above rights without undue delay and in any event within one month of receipt of your request.  This period may be extended by two months where necessary, with a reasoned notification to You, taking into account the complexity and number of requests.

In the event when You make such a request by electronic means, We provide You with information by electronic means where possible, unless You request otherwise.

In case We do not take any action regarding your request, We inform You as to the reasons within one month of receipt of your request. We take the necessary actions regarding exercising your rights in relation to the processing free of charge except when your request is manifestly unfounded or excessive.

In case We have reasonable doubts as to the identity of the natural person making the request, We may request additional information necessary to confirm the identity of such person.

V. Remedies

In case You would not agree with our response or action or if You consider that your rights have been infringed, You have the possibility to lodge your complaint with the Hungarian National Authority for Data Protection and Freedom of Information

H-1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Telephone: +36 -1-391-1400

Fax: +36-1-391-1410

E-mail: privacy@naih.hu

VI. Miscellaneous

Please not that We review this Privacy Notice on occasions and amend it as necessary. In case We amend this Privacy Notice, We announce and publish it by the usual means (e.g., via e-mail, or on the Website). We would like to encourage You to review this Privacy Notice occasionally.