Version 20261013 — effective 13 October 2026
This Privacy Policy explains how Yellow Cube processes personal data through its websites, Partner Portal and business relationships, including personal data received from Resellers for quoting, ordering, licensing, delivery and support.
1. Who controls your personal data
Yellow Cube Kft., Kosztolányi u. 14/A, Ajka 8400, Hungary, is the controller for this website and for processing carried out in its own business relationship with you. Where another associated Yellow Cube company is identified as the seller, contracting party or relationship owner, that company is the controller for its own processing. Each Yellow Cube company acts as a separate controller unless a different arrangement is expressly stated.
Questions and data-protection requests may be sent to privacy@yellowcube.eu. You may ask us to identify the Yellow Cube company responsible for a particular processing activity.
2. Personal data we process
Depending on how you interact with Yellow Cube, we may process:
- identity and professional information, such as name, role, employer and business contact details;
- account and authentication information used to provide and secure access to the Portal;
- Customer, opportunity, Quote and Order information supplied by a Reseller, Customer or Vendor;
- product, licence, subscription, entitlement, delivery, support, invoice and payment information;
- correspondence, meeting records, preferences and other information you provide to us;
- audio, video, screen sharing and chat while an online meeting on Yellow Cube Meet takes place, the recorded meeting audio and the transcript and meeting notes made from it, and attendance and connection-quality data (see section 9);
- credit and compliance information obtained from appropriate business-information, sanctions-screening or credit-assessment sources; and
- technical request and security information, such as IP address, browser and device information, requested pages, timestamps and diagnostic or security events.
We receive personal data directly from you, from the organisation you represent, from Resellers, Customers and Vendors involved in a transaction, from our associated companies and service providers, and from lawful public or commercial sources where necessary for credit, compliance or business-contact verification.
3. Why we process personal data
We process personal data for the following purposes and legal bases:
- to respond to enquiries, manage accounts, prepare Quotes, accept and fulfil Orders, deliver licences and services, invoice, collect payment and provide support, where necessary for a contract or steps requested before a contract;
- to manage Reseller, Customer and Vendor relationships, register opportunities, administer partner programmes, secure and improve our services, and communicate relevant business information, based on our legitimate interests and those of the organisations involved;
- to maintain accounting, tax, compliance, export-control, sanctions, fraud-prevention and legal records, and to respond to lawful authority requests, where required by law or necessary for legal claims;
- to send marketing communications where permitted by applicable law, based on legitimate interests or consent as required; and
- for another specific purpose where you have given consent, which you may withdraw at any time without affecting earlier lawful processing.
Where providing personal data is necessary to prepare or fulfil a Quote or Order, failure to provide it may prevent Yellow Cube or the Vendor from completing the requested transaction or support activity.
5. Recipients
We may disclose personal data, where necessary and proportionate, to:
- the relevant Vendor, Reseller, Customer or associated Yellow Cube company involved in a Quote, Order, licence, delivery or support matter;
- hosting, communications, security, AI transcription and summarisation, payment, logistics, credit-assessment and professional-service providers acting under appropriate contractual and confidentiality obligations;
- auditors, insurers, banks, legal advisers and debt-recovery providers;
- public authorities, courts and regulators where required by law or necessary to establish, exercise or defend legal claims; and
- a prospective buyer or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
We do not sell or rent personal data.
6. International transfers
Some Vendors or service providers may process personal data outside the European Economic Area. Where the destination does not benefit from an applicable adequacy decision, Yellow Cube uses an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required. Information about the safeguard relevant to a particular transfer is available from privacy@yellowcube.eu.
7. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting, tax, warranty, compliance and limitation periods. In particular:
- Portal account data is retained while the account or business relationship is active and afterwards for the period reasonably required for security, audit and legal claims;
- Quote, Order, invoice, payment, licence and delivery records are retained for the periods required by applicable accounting, tax and commercial laws;
- opportunity, correspondence and support records are retained while relevant to the relationship and any related claims;
- marketing contact data is retained until you object, withdraw consent where consent applies, or the data is no longer current; and
- technical and security logs are retained only as long as reasonably needed to operate, protect and diagnose the services.
Data may be retained longer where required for an active dispute, investigation, legal hold or binding legal obligation. When no longer required, it is deleted or anonymised.
8. Website storage and technical data
The Yellow Cube website stores language and colour-theme preferences in your browser's local storage and uses session storage to avoid repeating automatic language selection during the same browser session. These settings remain on your device and are not advertising cookies.
Our hosting and security infrastructure processes ordinary web-request information needed to deliver and protect the site. The website does not currently use behavioural advertising or cross-site tracking. If we introduce non-essential cookies or comparable tracking that requires consent, we will provide the required information and choice before using it.
9. Online meetings (Yellow Cube Meet)
Yellow Cube runs its own online meeting service, Yellow Cube Meet, for meetings with Resellers, Customers, Vendors and guests. Meetings run on infrastructure operated by Yellow Cube in the European Union, not on a third-party meeting platform such as Microsoft Teams or Zoom.
What we process. Depending on how you take part, we process:
- your name, as you enter it or as held in your Portal account;
- your invitation;
- the audio, video, screen sharing and chat of the meeting while it takes place;
- the times you join and leave;
- technical connection data, such as IP address, browser, device and connection quality (round-trip time, packet loss).
Video, screen sharing and chat are never recorded: video and screen sharing pass through our media server only while the meeting takes place, and chat messages stay in participants' browsers. Meeting audio is recorded automatically to prepare meeting notes, as described below.
Who can access meeting data. Access is limited to a small number of named Yellow Cube meeting administrators, and every access is logged. The organiser and the invited participants who are Yellow Cube staff can see the meetings they took part in. Partner participants can see the transcript and minutes of meetings they attended, but not the recording. No outside support organisation has access to your meetings.
Quality and security monitoring. To troubleshoot call quality and to protect the service against misuse, Yellow Cube's meeting administrators may observe a meeting in progress without taking part in it. They cannot speak, show video or write in the chat. Monitoring is done only by these administrators, never by third parties, and every monitoring session is logged. The legal basis is our legitimate interest in providing a secure and reliable service.
Automatic audio recording for meeting notes. The audio of every Yellow Cube Meet meeting is recorded automatically so that our assistant Q can prepare a transcript and meeting notes after the meeting.
- You are told before you join: the join screen says that the meeting is recorded, and a recording indicator stays visible in the meeting while it is recorded.
- Only microphone audio is recorded. Q records each participant's microphone separately and only while someone speaks; a muted microphone is not recorded. Video, screen sharing and chat are never recorded.
- Nothing is processed live. The transcript and meeting notes are prepared after the meeting has ended.
- To create them, we use AI service providers acting for Yellow Cube under contract. They receive only what that one meeting needs: its recorded audio, to produce the transcript, and that transcript with the meeting subject, to write the meeting notes. They do not receive earlier meetings or long-term recordings. We do not intentionally send them personal details such as participants' e-mail addresses or phone numbers; such details reach a transcript only if someone says them aloud in the meeting.
- Where such a provider processes data outside the European Economic Area, section 6 (International transfers) applies.
- The legal basis is our legitimate interest in keeping accurate records of business meetings and in giving participants reliable meeting notes. You may object at any time (section 11). If you do not wish to be recorded, please tell the organiser before the meeting or keep your microphone muted. Where your objection prevails, we delete the recording and the transcript made from it.
Retention. A meeting's recorded audio is deleted 7 days after its transcript and meeting notes are ready, or 30 days after the meeting if processing fails. Transcripts and meeting notes are kept as meeting records under section 7. Attendance records are kept for 90 days, as are acknowledgement records from meetings held before automatic recording was introduced. Connection-quality data and the access and monitoring logs are kept only as long as needed to operate, secure and troubleshoot the service.
10. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and access. Access is limited according to business need. Access to online meeting data is limited to a small number of named administrators and is logged (see section 9). No internet transmission or storage system can be guaranteed completely secure, but we review and improve safeguards proportionate to the risk.
You are responsible for keeping Portal credentials confidential and for notifying Yellow Cube promptly if you suspect unauthorised access.
11. Your rights
Subject to the conditions and exceptions in applicable law, you may request:
- access to your personal data and information about its processing;
- correction of inaccurate or incomplete data;
- deletion of data;
- restriction of processing;
- portability of data you provided where the legal requirements apply;
- objection to processing based on legitimate interests, including an unconditional right to object to direct marketing; and
- withdrawal of consent at any time where processing relies on consent.
You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects where applicable. Yellow Cube does not currently make such decisions through this website.
To exercise a right, contact privacy@yellowcube.eu. We may need to verify your identity and may ask for information needed to locate the relevant records. You may lodge a complaint with your local supervisory authority or, in Hungary, the National Authority for Data Protection and Freedom of Information.
12. Marketing choices
You may object to direct marketing at any time by using the unsubscribe method in the communication or by contacting privacy@yellowcube.eu. We may retain a minimal suppression record so that we can respect the request.
13. Children
Yellow Cube's websites, Portal and business services are intended for organisations and professionals, not children. We do not knowingly collect personal data from children through these services. If you believe a child has provided personal data to us, contact privacy@yellowcube.eu.
14. External websites
Our websites link to third-party websites that have their own privacy practices. Yellow Cube does not control those websites, and this Privacy Policy does not apply to their processing.
15. Changes to this Policy
The current version and effective date are shown above. A new version applies prospectively from its effective date. We will provide appropriate notice of a material change through the website, Portal, email or another durable communication where required.
16. Contact
For questions, requests or complaints about this Privacy Policy or Yellow Cube's processing of personal data, email privacy@yellowcube.eu or write to Yellow Cube Kft., Kosztolányi u. 14/A, Ajka 8400, Hungary, Attention: Privacy.