Privacy Policy

1. Introduction

Read this before you send anything through ynvesero.world. It records the categories of personal data held by Ynvesero, the purpose each category serves, and the routes by which you can have it corrected or erased.

We have avoided legal shorthand wherever ordinary language works. Where a term has a specific meaning under data protection law, we use it and explain it.

Should our handling of data change, this page changes with it, and the revision date below moves accordingly.

2. Who is responsible for your data

Responsibility for the processing set out below rests with Ynvesero. Our address and email are printed in the last section of this page.

In data protection law the controller is whoever determines the purposes and the means of processing. We hold that role here and cannot delegate the duties attached to it.

Firms brought in to run part of the service receive written instructions and nothing beyond them. Putting your data to a purpose of their own is not permitted.

3. Data we collect

We collect two kinds of information, and it is worth separating them clearly.

What you choose to send. A form submission carries the fields you filled in: the name you used, an address for the reply, a telephone number where you added one, and the question you asked.

Information collected automatically. Like any web server, ours records technical details of each request so the site can work and so we can detect abuse.

• the network address of the connection, shortened where the whole of it is not needed
• the software used to view the page, including its release number and host system
• which document was fetched, where the visit came from, and when it happened
• the display width and the language your browser asks for, so that the layout fits and reads correctly
• where a form is sent, the time it arrived and a note of the consent that accompanied it

We deliberately collect no special category data. If you send it to us unprompted in free text, we delete it once the enquiry is closed.

What we hold is what you gave us and what the server logged. Nothing has arrived from a data vendor or from a scrape of public sources.

4. Legal bases for processing

Every processing activity needs a lawful basis. Ours are these:

• Consent — for non-essential cookies and for any marketing message. Consent can be withdrawn at any time, and withdrawing it is as easy as giving it.
• Performance of a contract — where processing is necessary to give you what you asked for, or to answer a request made with a view to entering into an agreement.
• Legitimate interests — relied on for defensive logging, for blocking abuse, and for reading traffic in the aggregate. Where the interest cannot be shown to outweigh your rights, the processing does not happen.
• Legal obligation — where retention or disclosure is required of us by law.

An objection needs no particular form and costs nothing. We will either halt the processing or set out in writing the compelling reasons that allow it to continue.

5. How we use your data

We use personal data for a short and specific list of purposes, and not for anything else without telling you first.

• dealing with messages sent to us and following them through to a conclusion
• providing the information or service you requested
• maintaining uptime and safety, which includes turning away automated traffic that causes harm
• seeing which pages get read, in totals rather than one visitor at a time, and rewriting those that do not work
• keeping the records that legislation requires us to keep

Personal data is not sold, rented or traded. There is no arrangement under which a third party pays us for access to it.

Nothing here follows you onto other websites, and no advertising profile is assembled out of what we hold.

6. Sharing and disclosure

Disclosure happens in the limited cases listed below. Outside that list your data stays where it is.

• Hosting and infrastructure — the provider that stores the site and its logs.
• Email delivery — the provider that moves correspondence in both directions.
• Analytics — if switched on and agreed to, a statistics provider that sees totals of how pages are used.
• Outside specialists — for example a legal or accounting firm, when a specific matter requires it.
• Authorities — where a valid legal order compels disclosure.

Each supplier is bound by a written agreement that limits them to our instructions and requires appropriate security.

Should ownership of the business change, the data described here would move with it, and the buyer would inherit the obligations written on this page.

7. International transfers

Part of the technical work behind this site happens on machines in other countries. A move of that kind counts as a transfer under applicable data protection law, and is permitted only on the conditions set out there.

• reliance on an official adequacy finding, if the destination already has one
• where none applies, a signed set of the clauses approved for cross-border processing
• practical measures on top of the paperwork: traffic and storage are both encrypted

Details of the arrangement behind any single transfer are available on request.

8. How long we keep data

Every category of record carries an end date. Once the reason for holding something has gone, the record goes with it.

• Written enquiries — retained for the duration of the request and a modest period beyond it.
• Traffic records — cleared on a short schedule once they have served their operational purpose.
• Records of permission given — held while that permission is acted on, and afterwards only as evidence that it existed.
• Anything a statute requires — held for the term named in that statute, then removed.

At the end of a retention period the record is erased, or stripped of identifiers so thoroughly that it cannot be re-associated with a person.

9. Your rights

The list that follows is what applicable data protection law and comparable regimes entitle you to ask of us, at no cost:

• Access — a copy of the personal data we hold about you, with an explanation of what we do with it.
• Rectification — correction of anything inaccurate, and completion of anything incomplete.
• Erasure — deletion, where we no longer have grounds to keep the data.
• Restriction — a pause on processing while a dispute about accuracy or grounds is resolved.
• Portability — the data you gave us, in a structured, commonly used, machine-readable format.
• Objection — to processing based on legitimate interests, and at any time to direct marketing.
• Withdrawal of consent — at any time, without affecting processing already carried out.

Write to the address at the end of this page. We respond within one month and will tell you promptly if a request is complex enough to need longer.

Before anything leaves our hands we may need proof that the person asking is the person concerned. The check works in your favour, since the alternative is releasing records on nothing more than a name.

You are entitled to lodge a complaint with the competent data protection authority at any point, including without contacting us first.

10. Security

The defences described below are the standing minimum. They are reviewed as the site changes, since a setup that was adequate a year ago need not be adequate now.

• every request and reply travels over TLS, including pages that carry no form at all
• accounts are issued to individuals for a stated reason and withdrawn once that reason ends
• the website itself is kept apart from the mailboxes and files behind it
• operating system packages and third-party libraries are patched on a routine cycle
• copies are stored under restricted access and restored periodically to prove they work

No system connected to the internet is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to put your rights at risk, we will notify the competent data protection authority and, where required, you.

11. Children

Everything here is written for an adult audience. No part of the site seeks out younger visitors, and no data belonging to a child is knowingly held.

A parent or guardian who believes a child has provided data can write to us and have it erased promptly.

12. What we do not collect

A list of what is not gathered is often more informative than a list of what is, because the second kind of list tends to be written broadly enough to cover anything.

• Location is not collected beyond the coarse level that any connection reveals; the device is never asked where it is.
• Card and bank details do not appear here at all, there being nothing on the site that would require them.
• We have no reason to see an identity document and never ask to.
• Nothing is purchased from a data broker, and no external source is used to enrich what a visitor has given.

Should any of this change, the change will appear in this document before the practice begins, not afterwards.

13. Keeping what we hold accurate

An incorrect record serves nobody, least of all the individual concerned, and amending one is treated accordingly.

A correction needs only the error and its replacement. Once made, it is passed on to anybody who was given the earlier version.

A disputed record need not simply stand: you may ask us to hold off using it pending resolution, and the objection is stored with it.

14. Changes to this policy

This page always holds the current text. Superseded wording is replaced rather than kept alongside, and the revision date says which text you are reading.

The test is whether the change takes something away from you. If it does, you are told so on the site; if it only tidies the wording, the change is made and left at that.

15. Contact

Questions about this document, or a request concerning your data, can be sent to the address below. We answer written enquiries in the order received and aim to reply within one calendar month.

Ynvesero
538 Old Club Road
522438 Guntur
India
[email protected]
+91 863 9067642