Privacy Policy

Last update:  19/07/2024
Overview


Yuno is committed to safeguarding your privacy and protecting your data. The purpose
of this document is to clarify  which information is collected from users of our websites
and respective services, as well as how this data is used.

1. WHAT DO I NEED TO KNOW TO UNDERSTAND THIS POLICY?


For the purposes of this Policy, the following definitions, when appearing with their initial
letter capitalized, have the meanings indicated below:

a) “Personal  Data”:  refers  to  any  and  all  information  related  to  an  identified  or
identifiable  natural  person,  obtained  through  online  or  offline  means,  including
identifying numbers, location data, electronic identifiers, sensitive data, or any data
that, when combined with other information, is capable of identifying a natural person,
making them identifiable, or individualizing them.

b) “Data Subject”: refers to the natural person to whom the Processed Personal Data
relates.  In  the  context  of  this  policy,  it  may  be  the  visitors  of  our  websites,  a  legal
representative of a legal entity, or end customers of Yuno, depending on the specific
case.

c) “Processing”:  refers  to  any  operation  performed  with  Personal  Data,  including
collection, production, reception, classification, use, access, reproduction,
transmission,  distribution,  processing,  archiving,  storage,  deletion,  evaluation,  or
control  of  information,  modification,  communication,  transfer,  dissemination,  or
extraction.

d) “Applicable Local Legislation”: refers to any legislation applicable to the context of
the Processing of Personal Data carried out by Yuno, including, but not limited to,
the GDPR, and the Personal Data Protection Laws of Brazil (LGPD) and Argentina
(PDPA).

e) “Yuno Group” or “Yuno”: refers to all companies that are part of the Yuno economic
group, including Yuno Intermediação de Serviços Ltda., Yuno Colombia SAS, Yuno
Tecnologías S.A.P.I. de C.V, Yuno Payments LLC, and Yuno Payments Limited.

2. HOW DOES YUNO PROCESS PERSONAL DATA?

In  general,  Yuno  may  collect  the  following  Personal  Data  from  Data  Subjects  for  the
provision of services offered and the performance of its business activities:

• First and last name;
• Identification numbers;
• Address;
• Country of residence;
• Nationality;
• Marital status;
• Date of birth;
• Date of entry;
• Gender;
• Cell phone number;  
• Corporate or personal email;
• Banking/financial information;
• Transactional information;
• Participation in compensation
funds.

The collected personal data may be used for, among others, the following purposes:

• Collect Personal Data and incorporate it into Yuno's database.
• Facilitate  transactional  flow  between  payment  process  actors  and  assist  in
processing payment transactions.
• Provide services and carry out contracted activities with Yuno.
• Authenticate data to validate, mitigate, and provide protection in cases of identity
theft or fraud.
• Send promotional messages and communications.
• Develop new products or services.
• Collect, maintain, manage, and use received information to establish customer
or supplier relationships.
• Carry out operations and management related to invoice generation and
payment, certificate issuance, and accounting.
• Enter into, execute, and manage business proposals and contracts related to the
provided services.
• Use  the  data  for  internal  or  commercial  administrative  purposes,  such  as
preparing and presenting quotations, invoices, trade references, market
research, and statistical analysis.
• Study and analyze the provided information for monitoring and improving service
and customer support by Yuno.
• Fulfill legal duties and obligations.

3. DOES YUNO PERFORM INTERNATIONAL TRANSFERS OF PERSONAL DATA?

International data transfer refers to any transfer or sharing of personal data that takes
place to a foreign country. For example, the hiring of a server located in the United States
for  hosting  personal  data  can  constitutes  an  international  transfer.  In  this  regard,
personal data processed by Yuno may be shared with other companies within the Yuno
group, ensuring the security of the information during the transfer and compliance with
the Applicable Local Legislation.

4. HOW CAN I EXERCISE MY RIGHTS AS A DATA SUBJECT?

When a data subject requests the exercise of any of their rights regarding privacy and
the protection of their Personal Data, Yuno will follow specific procedures to comply with
such  rights  in  accordance  with  obligations  defined  in  the  Applicable  Local  Legislation.
Below are brief explanations of some rights that may be requested, depending on the
Applicable Local Legislation:

4.1. What are the Data Subject rights?


Confirmation  of  the  existence  of  processing:  This  right  allows  the  Data
Subject  to  request  and  receive  confirmation  about  the  collection,  storage,
sharing, or any type of processing carried out by Yuno with the  Data Subject's
Personal Data.

Access  to  Personal  Data:  This  right  allows  the  Data  Subject  to  request  and
receive a copy, in an accessible format, of the Personal Data processed by Yuno.

● Rectification of Personal Data: If the Data Subject identifies any inaccuracies
or  errors  in  their  Personal  Data  processed  by  Yuno,  they  may  request  the
rectification of such information.

Anonymization, blocking, or deletion of Personal Data: This right allows for
the anonymization, blocking, or deletion of Personal Data from Yuno's database
when  it  is  unnecessary,  excessive,  or  has  been  processed  in  violation  of  the
Applicable Local Legislation.

Data portability: This right allows the Data Subject to request the portability of
their  Personal  Data,  with  Yuno  being  required  to  share  it  with  a  third  party
indicated by the Data Subject.

● Withdrawal of consent: The Data Subject has the right to withdraw their consent
or, if applicable, not provide it and be informed about the consequences of the
refusal,  considering  that  Yuno  may  not  be  able  to  provide  certain  products  or
services to the Data Subject in such cases.

● Review of automated decisions: The  Data Subject has the right to request a
review of decisions based solely on automated processing of Personal Data and
to receive clear and adequate information about the criteria used in the decision.

● Objection to processing: The Data Subject also has the right to object to certain
purposes of the processing of Personal Data.

4.2. How should the Data Subject's request be analyzed?

Every  request  to  exercise  Data  Subject  rights  should  be  sent  to  the  email  address
datospersonales@y.uno,  which  will  analyze  the  Data  Subject's  request  and  promptly
review Yuno's actions in the specific case.

In  some  situations,  Yuno  may  only  act  as  a  data  processor  for  the  Personal  Data
processed. In such cases, you may need to directly contact the company responsible for
processing your Personal Data in order to exercise your rights.

Furthermore,  as  a  security  measure  to  ensure  that  Personal  Data  is  not  disclosed  to
anyone  who  is  not  entitled  to  receive  it,  it  may  be  necessary  to  request  specific
information  from  the  Data  Subject  to  confirm  their  identity  and  ensure  the  effective
exercise of their rights. This is a security measure to ensure that your Personal Data is
not disclosed to anyone who is not entitled to receive it.


5. HOW LONG DOES YUNO STORE YOUR DATA?

At Yuno, Personal Data is stored only for as long as necessary to fulfill the purposes for
which  it  was  collected,  unless  there  is  any  other  reason  for  its  retention,  such  as
compliance with legal, regulatory, contractual obligations, among others permitted by the
Applicable  Local  Legislation.  Yuno  always  conducts  a  technical  analysis  to  determine
the appropriate retention period for each collected Personal Data, considering its nature,
the  need  for  collection  and  its  purpose,  as  well  as  any  retention  requirements  for
compliance with obligations or the protection of rights.

6. DOES YUNO PROCESS SPECIAL CATEGORIES OF DATA OR DATA OF
CHILDREN AND ADOLESCENTS?


If Yuno processes special categories of data or data of children or adolescents, the Data
Subject will always be informed about the specific purposes for which such information
will be used. In the case of children and adolescents, in particular, Yuno will process the
Personal  Data  considering  the  best  interests  of  the  minor.  In  both  cases,  Yuno  will
process the data in compliance with the Applicable Local Legislation and always based
on the best available information security measures and for the purpose of providing the
services contracted by the Data Subject or partner commercial establishment.

7. HOW TO CONTACT YUNO?

If the Data Subject believes that their personal information has been used in a manner
inconsistent  with this  Policy,  or  if they  have  any questions,  comments,  or  suggestions
regarding this Policy, the Data Subject may contact Yuno through the following channel:
datospersonales@y.uno.

8. CHANGES TO THIS POLICY

This Policy may be reviewed, updated, and changed annually or at any time, at the sole
discretion of Yuno, whenever any relevant fact or event warrants its early revision.

COL: Authorization for the processing of personal data, suppliers and customers.

MEX: Comprehensive privacy notice to users and prospects.

Personal data protection policy

Data Management Manual Yuno Brazil

Yuno Colombia S.A.S. Data Processing Policy