Account Deletion

Version 1.0.

CHAPTER I — GENERAL PROVISIONS

Article 1 — Purpose of this page

1.1. This page establishes the means by which the User may delete the „to you." account and the effects of deletion upon the personal data processed through the Platform.

1.2. The account may be deleted at any time, by one of the following two means:

• a) directly from the application, under the conditions provided in Article 3;
• b) by a request submitted by email, under the conditions provided in Article 4, where the User no longer has the application installed or is no longer able to sign in.

1.3. The data which is deleted and the data which is retained following deletion are provided in Chapter III.

Article 2 — The definitive nature of the deletion

2.1. Deletion of the account is definitive and cannot be reversed. The irreversible effects of deletion are provided in Article 10.

CHAPTER II — THE MEANS OF DELETING THE ACCOUNT

Article 3 — Deletion of the account from the application

3.1. Deletion from the application is the recommended means. It is carried out immediately, without being conditional upon the prior intervention of another person.

3.2. Deletion from the application is carried out by following the steps below:

• a) opening the „to you." application and signing in to the account;
• b) pressing the last icon in the bottom bar — the bar has no text beneath the icons, and the last icon leads to the User's account screen;
• c) pressing the Setări (Settings) option;
• d) scrolling to the Ștergerea contului (Account deletion) section and pressing the Șterge contul (Delete account) option. The section expands downwards;
• e) reading the information concerning the data which is deleted and the data which is retained, followed by ticking the box by which the User confirms having taken note of the definitive nature of the deletion;
• f) pressing the Șterge contul definitiv (Delete account permanently) option and confirming in the window displayed. In the application installed on the telephone, the confirmation is given by Șterge contul (Delete account), the other button, Renunț (Cancel), producing no effect; in the version accessed from a browser, the confirmation window and its buttons are those of the browser.

3.3. The account is deleted immediately and the application signs the User out. No confirmation screen is displayed following deletion, the account no longer existing at that moment.

Article 4 — Deletion of the account upon request, by email

4.1. The User who has uninstalled the application, has replaced the telephone or is no longer able to sign in may request the deletion of the account at the address [email protected], with the subject „Account deletion request".

4.2. The processing of the request requires, cumulatively:

• a) the email address of the account whose deletion is requested, indicated in the body of the message. In the absence thereof, the account cannot be identified;
• b) the transmission of the message from that address. This constitutes the usual means by which the Operator verifies that the applicant is the holder of the account.

4.3. A request submitted from an address other than that of the account is processed under the conditions provided in paragraph 4.4.

4.4. The User who no longer has access to the address of the account shall submit the request from another address, mentioning that circumstance in the body of the message. Prior to any deletion, the Operator shall request further information confirming that the applicant is the holder of the account.

4.5. The Operator never requests the password of the account and does not request photographs of the identity document for the processing of a deletion request.

Article 5 — The time limit for processing

5.1. The Operator responds to the request and deletes the account within one month at most of its receipt, the time limit provided in art. 12(3) of Regulation (EU) 2016/679 (GDPR). That time limit may be extended by two months for complex or numerous requests, pursuant to the same article, in which case the User is informed within the first month, with an indication of the reasons.

5.2. In practice, processing occurs earlier. The Operator does not undertake a time limit of 24 hours: requests submitted by email are verified and carried out by a person.

5.3. For the User who has the application installed and is able to sign in, the deletion provided in Article 3 is instantaneous.

CHAPTER III — THE EFFECTS OF ACCOUNT DELETION

Article 6 — The data which is deleted

6.1. Irrespective of the means of deletion chosen, the effect is identical.

6.2. For any account, the following are deleted:

• a) the email address, the field remaining empty, and the display name, which becomes „Cont șters" (Deleted account);
• b) the telephone number of the account, together with the date on which it was confirmed, the two always being emptied together;
• c) the sign-in account held with the Operator's identity provider (Firebase Authentication). Any failure of that deletion does not halt the deletion of the other data and is recorded, with a view to subsequent remedy. Signing in to the deleted account is no longer possible in either case, including from a device on which the User was already signed in, the link between the account and the identity provider having been removed from the database;
• d) the saved addresses, together with their exact coordinates;
• e) the likes given to the posts of other users;
• f) the User's notifications and the notification tokens of the devices on which the User was signed in, which identify a particular telephone;
• g) the blocks, both those made by the User and those made by other users in respect of the User's account;
• h) the reports submitted by the User, whether concerning posts or concerning other accounts;
• i) the User's private conversations, in both directions, together with the messages contained therein, the photographs sent privately and the reports concerning those conversations. The photographs sent by the User are also deleted from the storage space, together with the deletion of the account. Any failure of that deletion does not halt the deletion of the other data and is recorded, with a view to subsequent remedy.

6.3. The consent for personalised emails is withdrawn automatically upon deletion of the account, including where it had been given.

6.4. The deletion provided in paragraph 6.2(i) also produces effects in respect of the other User: the conversation disappears in its entirety from that User's list, together with the messages of both and the photographs contained in it. The content belongs to the person who sent it, and that person's right to erasure prevails over the retention of the content on the screen of another person.

6.5. Reports concerning a conversation are deleted together with it, unlike reports concerning the account, provided in Article 8 paragraph 8.3(c). The messages which are the subject of such a report constitute the very personal data whose erasure is requested and cannot be retained separately from their content.

Article 7 — The data which is deleted in the case of a Professional account

7.1. For the User who has held a Professional account, the following are deleted in addition to the data provided in Article 6:

• a) the public data of the profile: the display name, the description, the contact telephone number, the profile photograph, the city and its coordinates. The contact telephone number of the profile is distinct from the telephone number of the account, provided in paragraph 6.2(b), and both are deleted;
• b) all of the User's posts, together with their photographs and the likes received;
• c) the photographs held in the storage space: both the public portfolio and the avatar, and the private diploma documents. Any failure of that deletion does not halt the deletion of the other data and is recorded, with a view to subsequent remedy, in accordance with paragraph 6.2(i), final sentence;
• d) the data taken from the identity document upon identity verification: the full name, the series and the validity of the document, the identifier of the verification session;
• e) the grounds for rejection drawn up by the Operator's team in respect of the User or of the User's documents.

7.2. The data provided in paragraph 7.1(d) is deleted from the Operator's systems. Identity verification is carried out by a separate provider (Didit), which keeps its own record of the session, in accordance with its retention policy. That record is not deleted by the Operator.

7.3. At the request of the User submitted while the account still exists, that is to say prior to its deletion, the Operator forwards to the provider referred to in paragraph 7.2 the request for deletion, in accordance with art. 34 paragraph 34.6 of the Privacy Policy. The request is submitted to the address provided in Article 11.

7.4. Following the deletion of the account, the Operator is no longer able to forward the request provided in paragraph 7.3. The identifier of the verification session is deleted together with the other data provided in paragraph 7.1(d), and in the absence of that identifier the session can no longer be identified with the provider.

7.5. The deletion of the account entails the termination of the Professional subscription with the payment processor. The termination takes effect immediately, at the moment of deletion, and not upon the expiry of the period paid for, and the period paid for and not used is not refunded. Where the termination cannot be carried out at the moment of deletion, this does not prevent the deletion of the other data and is recorded, with a view to subsequent remedy. The record of payments is retained under the conditions provided in Article 8 paragraph 8.3(a).

Article 8 — The data which is retained following deletion

8.1. The row of the account is not physically removed from the database. It remains emptied of all elements which identify the User: without a name, without an email address, without a telephone number and without any link to the sign-in account.

8.2. Certain records do not concern the deleted account exclusively and are not removed by its deletion. Art. 17 GDPR concerns the erasure of personal data, and not the destruction of accounting records.

8.3. The following remain attached to the anonymised row:

• a) the record of payments, where a Professional subscription has existed: the plan, the amount, the period, the identifiers of the transaction held with the payment processor and the service categories to which they refer, so that the records remain intelligible. That record constitutes the basis of accounting reconciliation and of any refunds or disputes and is retained for the period imposed by the accounting and tax legislation of Romania. In the Operator's systems, the record no longer bears the name and the email address of the User, but remains attached to the anonymised row of the account, and the identifiers of the transaction continue to refer to the records of the payment processor, which are subject to the policy of the latter;
• b) the trace of the verification of diplomas, namely the fact that a document was verified on a given date and the outcome of the verification. The document itself, its address in the storage space and its digital fingerprint are deleted, there remaining exclusively the verdict, which identifies no person. That trace constitutes the record of the fact that the publicly announced verification took place and is retained on the basis of the decision of the Operator, and not of a determined legal obligation;
• c) the reports submitted by other users in respect of that account. Deletion of the account does not have the effect of removing the reports received in respect of the account; reports concerning a conversation are deleted together with it, in accordance with paragraph 6.5. What is retained no longer identifies any person, since it refers to the row already anonymised;
• d) the moderation record, where the „to you." team has ordered any measure in respect of the account (a warning, a restriction, the removal of a post): the measure ordered, its date, its author and its grounds, as well as the grounds for the restriction, which remains on the profile. Retention occurs for the same consideration as at point c): deletion of the account does not have the effect of removing the history of the measures ordered;
• e) the ratings from 1 to 5 stars given and received, which remain in both directions, attached to the anonymised row of the account, deletion not affecting the table of ratings. A rating consists exclusively of a value from 1 to 5, without text and without photographs, and identifies no person. The rating given by the User remains in the account of the person rated: the number of ratings and the sum of the ratings of that person are not recalculated upon deletion of the account of the author, since the link between a rating and its author is not deleted in cascade;
• f) the appointments, which are not deleted. Those confirmed whose start time has not yet passed pass into the cancelled status, the cancellation being attributed to the User who deletes the account, and the time slot is released from the diary of the other person; the remainder stay in the status in which they were. There remain attached to the anonymised row the start time and the end time, the title of the service, its category and its price, as well as the address of the appointment. The address is emptied exclusively in the case of services provided at the address of the Client and only where the User who deletes the account is the Client, that address being the User's own; where the User who deletes the account is the Professional, the address of the Client remains on the appointment, and in the case of services provided at the address of the Professional the address remains in any event. An appointment is the record of a meeting agreed between two Users, and its deletion would remove rows from the diary of the other person;
• g) an anonymous row comprising the role of the account and the date of its creation, for the preservation of the accuracy of previous statistics.

Article 9 — The email address following deletion

9.1. Deletion of the account does not entail the blocking of the email address. Following deletion, the User may at any time create a new account with the same address. That is a new and empty account, without any link to the deleted one and without any element recovered from it.

9.2. The blocking of an address exists in the Operator's systems, however it applies exclusively in the case of the deletion of an account ordered by the „to you." team as a moderation measure, and not in the case of deletion requested by the User. In the former case, the User receives an email indicating the measure ordered and the means of appealing against it.

Article 10 — The irreversible nature of the deletion

10.1. There is no space for the recovery of the deleted account and no option for the reversal of the deletion. Following deletion, the account cannot be reconstituted, the posts cannot be restored and the photographs cannot be recovered, the personal data no longer existing.

10.2. What is retained no longer bears the name and the email address of the User, but remains attached to the anonymised row of the account. The moderation record, if it existed, is retained in its entirety, together with the grounds drawn up by the administrator.

10.3. The User who wishes to keep the posts or the photographs published shall save them to the telephone prior to the deletion of the account.

CHAPTER IV — FINAL PROVISIONS

Article 11 — Contact

11.1. For any matter concerning the deletion of the account or the personal data of the User, the Operator may be contacted at the address [email protected].