Privacy Policy

1. Who controls your personal data

Yellow Cube Kft., Kosztolányi u. 14/A, Ajka 8400, Hungary, is the controller for this website and for processing carried out in its own business relationship with you. Where another associated Yellow Cube company is identified as the seller, contracting party or relationship owner, that company is the controller for its own processing. Each Yellow Cube company acts as a separate controller unless a different arrangement is expressly stated.

Questions and data-protection requests may be sent to privacy@yellowcube.eu. You may ask us to identify the Yellow Cube company responsible for a particular processing activity.

2. Personal data we process

Depending on how you interact with Yellow Cube, we may process:

• identity and professional information, such as name, role, employer and business contact details;
• account and authentication information used to provide and secure access to the Portal;
• Customer, opportunity, Quote and Order information supplied by a Reseller, Customer or Vendor;
• product, licence, subscription, entitlement, delivery, support, invoice and payment information;
• correspondence, meeting records, preferences and other information you provide to us;
• credit and compliance information obtained from appropriate business-information, sanctions-screening or credit-assessment sources; and
• technical request and security information, such as IP address, browser and device information, requested pages, timestamps and diagnostic or security events.

We receive personal data directly from you, from the organisation you represent, from Resellers, Customers and Vendors involved in a transaction, from our associated companies and service providers, and from lawful public or commercial sources where necessary for credit, compliance or business-contact verification.

3. Why we process personal data

We process personal data for the following purposes and legal bases:

• to respond to enquiries, manage accounts, prepare Quotes, accept and fulfil Orders, deliver licences and services, invoice, collect payment and provide support, where necessary for a contract or steps requested before a contract;
• to manage Reseller, Customer and Vendor relationships, register opportunities, administer partner programmes, secure and improve our services, and communicate relevant business information, based on our legitimate interests and those of the organisations involved;
• to maintain accounting, tax, compliance, export-control, sanctions, fraud-prevention and legal records, and to respond to lawful authority requests, where required by law or necessary for legal claims;
• to send marketing communications where permitted by applicable law, based on legitimate interests or consent as required; and
• for another specific purpose where you have given consent, which you may withdraw at any time without affecting earlier lawful processing.

Where providing personal data is necessary to prepare or fulfil a Quote or Order, failure to provide it may prevent Yellow Cube or the Vendor from completing the requested transaction or support activity.

4. Data received from Resellers and shared with Vendors

A Reseller may provide Customer contact and business information to Yellow Cube for opportunity registration, quoting, ordering, licensing, entitlement management, delivery and support. Yellow Cube may share the minimum necessary data with the Vendor concerned for those purposes.

Yellow Cube, the Reseller and the Vendor normally act as independent controllers for their respective purposes. The Reseller is responsible for having an appropriate lawful basis and giving the required privacy information before sharing personal data. Sharing data for transaction fulfilment does not by itself authorise unrelated marketing.

5. Recipients

We may disclose personal data, where necessary and proportionate, to:

• the relevant Vendor, Reseller, Customer or associated Yellow Cube company involved in a Quote, Order, licence, delivery or support matter;
• hosting, communications, security, payment, logistics, credit-assessment and professional-service providers acting under appropriate contractual and confidentiality obligations;
• auditors, insurers, banks, legal advisers and debt-recovery providers;
• public authorities, courts and regulators where required by law or necessary to establish, exercise or defend legal claims; and
• a prospective buyer or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.

We do not sell or rent personal data.

6. International transfers

Some Vendors or service providers may process personal data outside the European Economic Area. Where the destination does not benefit from an applicable adequacy decision, Yellow Cube uses an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required. Information about the safeguard relevant to a particular transfer is available from privacy@yellowcube.eu.

7. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting, tax, warranty, compliance and limitation periods. In particular:

• Portal account data is retained while the account or business relationship is active and afterwards for the period reasonably required for security, audit and legal claims;
• Quote, Order, invoice, payment, licence and delivery records are retained for the periods required by applicable accounting, tax and commercial laws;
• opportunity, correspondence and support records are retained while relevant to the relationship and any related claims;
• marketing contact data is retained until you object, withdraw consent where consent applies, or the data is no longer current; and
• technical and security logs are retained only as long as reasonably needed to operate, protect and diagnose the services.

Data may be retained longer where required for an active dispute, investigation, legal hold or binding legal obligation. When no longer required, it is deleted or anonymised.

8. Website storage and technical data

The Yellow Cube website stores language and colour-theme preferences in your browser's local storage and uses session storage to avoid repeating automatic language selection during the same browser session. These settings remain on your device and are not advertising cookies.

Our hosting and security infrastructure processes ordinary web-request information needed to deliver and protect the site. The website does not currently use behavioural advertising or cross-site tracking. If we introduce non-essential cookies or comparable tracking that requires consent, we will provide the required information and choice before using it.

9. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and access. Access is limited according to business need. No internet transmission or storage system can be guaranteed completely secure, but we review and improve safeguards proportionate to the risk.

You are responsible for keeping Portal credentials confidential and for notifying Yellow Cube promptly if you suspect unauthorised access.

10. Your rights

Subject to the conditions and exceptions in applicable law, you may request:

• access to your personal data and information about its processing;
• correction of inaccurate or incomplete data;
• deletion of data;
• restriction of processing;
• portability of data you provided where the legal requirements apply;
• objection to processing based on legitimate interests, including an unconditional right to object to direct marketing; and
• withdrawal of consent at any time where processing relies on consent.

You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects where applicable. Yellow Cube does not currently make such decisions through this website.

To exercise a right, contact privacy@yellowcube.eu. We may need to verify your identity and may ask for information needed to locate the relevant records. You may lodge a complaint with your local supervisory authority or, in Hungary, the National Authority for Data Protection and Freedom of Information.

11. Marketing choices

You may object to direct marketing at any time by using the unsubscribe method in the communication or by contacting privacy@yellowcube.eu. We may retain a minimal suppression record so that we can respect the request.

12. Children

Yellow Cube's websites, Portal and business services are intended for organisations and professionals, not children. We do not knowingly collect personal data from children through these services. If you believe a child has provided personal data to us, contact privacy@yellowcube.eu.

13. External websites

Our websites link to third-party websites that have their own privacy practices. Yellow Cube does not control those websites, and this Privacy Policy does not apply to their processing.

14. Changes to this Policy

The current version and effective date are shown above. A new version applies prospectively from its effective date. We will provide appropriate notice of a material change through the website, Portal, email or another durable communication where required.

15. Contact

For questions, requests or complaints about this Privacy Policy or Yellow Cube's processing of personal data, email privacy@yellowcube.eu or write to Yellow Cube Kft., Kosztolányi u. 14/A, Ajka 8400, Hungary, Attention: Privacy.