PRIVACY POLICY OF ONLYSKILLS PLATFORM

Last updated: 22/05/2025

Welcome to OnlySkills. OnlySkills prioritizes privacy and is dedicated to protecting the personal data of each User. This Policy outlines how personal data is collected, used, and safeguarded while interacting with the OnlySkills Platform. As a consumer-to-consumer platform, OnlySkills is designed to connect individuals directly, allowing Users to offer and acquire services in an efficient and secure manner.

To enable the use of Platform, certain personal data is collected to facilitate account creation, enable transactions, and ensure a secure user experience. Reviewing this Policy carefully is encouraged, as it clarifies OnlySkills' commitment to the responsible handling of personal data.

1. DEFINITIONS

1.1. In this Policy, the following definitions shall apply:

Agreement

the General Terms and Conditions, that regulate the relationship between OnlySkills and the User in relation to the use of the Platform.

Customer or You

a natural person who has registered as a User and uses the Platform to be connected with a Service Provider in order to receive a Service.

GDPR

regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

OnlySkills

onlyskills.com OÜ, a company registered in Estonia under the registry code 16813952, registered address Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551.

OnlySkills is the information society service provider that has developed and operates the OnlySkills Platform.

Service Provider

a natural person who has registered as a User and responds to a Customer's Service Request via the Platform.

Policy

this privacy policy.

Platform

the online platform operated by OnlySkills, accessible via OnlySkills.com and through a mobile application, enabling interactions between Customers and Partners for the provision of Partner Services.

User

the Customer and the Partner.

1.2. In the absence of a specific definition in Clause 1.1 of this Policy, the terms utilized herein shall be interpreted in accordance with their respective definitions ascribed under the GDPR. The complete text of the GDPR is accessible here.

2. DETAILS OF THE CONTROLLER

2.1. According to the GDPR, a controller is a person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The processor, on the other hand, is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

2.2. OnlySkills is processing the personal data of the Users mainly for the performance of the Agreement, to provide an access to the Platform, collect fees, change information, or to improve its services. OnlySkills, as the platform service provider, acts as a controller of any Users' personal data collected and processed through the Platform.

2.3. For questions regarding this Policy or the processing of personal data, Users may contact the support team at www.onlyskills.com with inquiries or complaints.

3. PERSONAL DATA AND THE SOURCE OF PERSONAL DATA

3.1. OnlySkills processes the following categories of personal data related to Users:

Personal Details

Full name (surname and given name), gender, date of birth.

Contact Details

Email address, phone number, home address.

Identification Data

Information extracted from passport copies, including document number, issue date, expiry date, and issuing authority.

Geolocation Data

Geolocation of the address.

Payment Data

Customer's bank card number to process the payment with a third party payment service provider.

Bank Data

Partner's bank account details, provided for the purpose of receiving payment for the provision of Providing Services to the Customer.

Marketing Data

User's preferences for receiving marketing information from OnlySkills.

Profile Data

Data provided in the Users profile, such as previously fulfilled Service Requests, feedback given by the Customers, rating determined by algorithm.

Communication Data

Any correspondence exchanged between the Customer and the Partner through the Platform.

Support Data

Communication records between OnlySkills and the User, including inquiries and complaints.

Complaints and Evaluations

Complaints submitted against the Service Provider by the Customer and decisions made in connection with the complaints, Customer's evaluation of the service provided by the Service Provider.

Device Data

Details about the device used to access the Platform, such as model, name, or identifier, and IP address.

Preference Data

User's preferences within the Platform.

Photos

Photo made by the Service Provider to confirm completion of Service Request, a photo attached to the Customer's complaint.

3.2. OnlySkills primarily processes personal data submitted directly by the User. However, personal data may also be processed when received from a User with whom the User is engaged (e.g., feedback, rating).

3.3. OnlySkills may aggregate personal data collected automatically, personal data obtained from third parties, and personal data provided by the User.

3.4. The disclosure of personal data to OnlySkills is voluntary. However, if the User declines to provide personal data, OnlySkills may be unable to offer services. For instance, OnlySkills cannot register the User on the Platform.

4. PROCESSING PURPOSE AND LEGAL GROUND

Personal data concerned	Purpose	Legal Basis
Personal Details, Contact Details	Facilitating registration as a User on the Platform and providing Platform services Facilitating the submission of Service Requests and the execution of Service Agreements To facilitate communication with the Partner To notify the User of amendments to the General Terms and Conditions governing the Platform To conduct market research	To perform the Agreement (GDPR Art. 6 (1)-b))
Profile Data, Identification Data	To support trust, transparency, and quality control on the Platform, while enhancing service recommendations and helping Users make informed choices.	OnlySkills legitimate interest (GDPR Art. 6 (1)-f))
Geolocation Data	Facilitating the submission of Service Requests and the execution of Service Agreements	Consent (GDPR Art. 6(1)-a))
Payment Data, Bank Data	To facilitate payment from the Customer to the Partner for the Partner Service To fulfill the obligations provided for in the accounting act or the taxation act	To perform the Agreement (GDPR S.6 (1)-b)) Obligation arising from law (GDPR Art. 6(1)-c))
Photos	To initiate payment for a completed Service Request To resolve a complaint	To perform the Agreement (GDPR S.6 (1)-b)) Consent (GDPR Art. 6(1)-a))
Marketing Data	To make third party promotional offers or to inform the User about new features in the Platform To display preferable content to the User on the Platform	Consent (GDPR Art. 6(1)-a))
Communication Data	To mediate complaints between the Users, including investigating the basis of the complaints. To ensure service quality and to measure Customer satisfaction	OnlySkills legitimate interest (GDPR Art. 6 (1)-f))
Support Data	To answer the User's questions To ensure the quality of customer service	To perform the Agreement (GDPR Art.6 (1)-b)) OnlySkills legitimate interest (GDPR Art. 6 (1)-f))
Complaints and evaluations	Complaints submitted against the Partner by the Customer and decisions made in connection with the complaints Customer's evaluation of the service provided by the Partner	OnlySkills legitimate interest (GDPR Art. 6 (1)-f))
Device Data	To improve the quality of the Platform and the services it provides To find possible errors on the Platform	OnlySkills legitimate interest (GDPR Art. 6 (1)-f))
Preference Data	To enhance User experience, streamline interactions, and improve the relevance of Platform offerings for each User	OnlySkills legitimate interest (GDPR Art. 6 (1)-f))

5. AUTOMATED DECISION MAKING

5.1. Automated decision-making involves decisions made solely through the automated processing of a User's personal data, without human intervention. Such processing may involve, for example, algorithms or software code designed to evaluate specific criteria.

5.2. The Platform employs an algorithm that ranks the most suitable Service Providers for each Service Request based on information in the database, identifying Service Providers whose profiles match the specific requirements and attributes of each job.

5.3. The automated processing of Users' data is essential for fulfilling the tasks specified in the General Terms and Conditions. If a User objects to the automated processing of their personal data, acceptance of this Policy is not possible, and consequently, the Platform Services cannot be provided, nor can the User register on the Platform.

6. TRANSFER OF PERSONAL DATA

6.1. Personal data may be transferred to third parties, including:

6.1.1. Payment service provider who assist in the management of payment and the handling of funds;

6.1.2. customer support and customer management service providers;

6.1.3. server hosts that support our Platform;

6.1.4. marketing service providers;

6.1.5. affiliates, including any entity that directly or indirectly controls OnlySkills, is controlled by OnlySkills, or is under common control with OnlySkills (where control means the ownership of over fifty percent of voting rights, or equivalent power to govern financial and operational policies or appoint management);

6.1.6. professional advisors and service providers, such as accountants, auditors, lawyers, IT support, and other outsourcing providers involved in the provision of OnlySkills's services;

6.1.7. Other Users of the Platform, to the extent necessary for the provision of Platform Service, including facilitating the formation of Service Agreement between the Customer and the Service Provider.

6.2. Measures are in place to ensure these data recipients uphold the confidentiality and security of personal data, processing it solely for the provision of services in compliance with applicable laws.

6.3. Certain third-party recipients may be located outside the European Economic Area (“EEA”), where data protection regulations differ and may not meet the standards of the European Union. This includes possible reduced protection against unauthorized access, misuse, disclosure, or alteration of personal data. Transfers of personal data outside the EEA will be safeguarded with appropriate measures. Users may request a copy of these safeguards as specified below.

7. SECURITY

7.1. OnlySkills has implemented the necessary organizational, physical and IT security measures to protect the User's personal data from any misuse, unauthorized access, disclosure, alteration or destruction.

7.2. Only authorized persons have access to the personal data of the Users. Whereas persons with access to personal data undertake to comply with the confidentiality obligation.

8. INTEGRITY AND RETENTION OF PERSONAL DATA

8.1. OnlySkills will not retain personal data for longer than is necessary for the purpose of processing the personal data or under applicable law. Normally, OnlySkills stores the personal data of the User as long as the User has an active account on the Platform. OnlySkills considers a User's account to be an active account until the User deletes its account. In addition to the above, OnlySkills retains the following time limits for the retention of personal data:

8.1.1. Personal Details, Contact Data, Profile Data shall be retained for 3 years after the deletion of the account;

8.1.2. Proof of payment of any fees shall be retained for 7 years from the date of payment of the fee;

8.1.3. Records related to disputes and investigations shall be retained until a decision is made.

8.2. The User understands and agrees that uninstalling the Platform from the smart device will not automatically delete their account and the personal data contained therein. In order to delete personal data, the User must terminate the Agreement in accordance with the procedure provided in the Agreement.

9. RIGHTS RELATED TO PERSONAL DATA

9.1. Users have the following rights regarding the processing of their personal data:

9.1.1. Right to Information – All relevant information is provided in this Policy. The latest version is available on the Platform.

9.1.2. Right to Access – Users may request a copy of their personal data processed by OnlySkills.

9.1.3. Right to Rectification – Users may request corrections to personal data if inaccurate or incomplete.

9.1.4. Right to Erasure – Users may request deletion of personal data unless retention is required by law, contract, or other lawful grounds.

9.1.5. Right to Restriction – Users may request restricted processing if data is inaccurate, incomplete, or processed unlawfully.

9.1.6. Right to Data Portability – Users may request that their personal data, provided to the Platform, be transferred to them or a third party where feasible.

9.1.7. Right to Object – Users may object to processing if lawful grounds for processing are not present.

9.1.8. Right to Withdraw Consent – Users may withdraw their consent for processing at any time, without affecting the lawfulness of prior processing.

9.1.9. Right to File Complaints – Users may file complaints regarding the processing of their personal data.

9.2. To exercise these rights, a written application is required, directed to the contact provided in Section 2. Additionally, the User must verify their identity for each request submitted and provide a contact address for OnlySkills' response. OnlySkills reserves the right to refuse such applications, providing justification for any refusal.

9.3. According to Article 12(3) of GDPR, OnlySkills must respond to applications within one month but will endeavor to respond within one week.

10. RIGHT TO AMEND THIS POLICY

10.1. OnlySkills reserves the right to amend this Policy unilaterally from time to time. Changes to the Policy will be communicated to the User by email. If the revised terms include processing of personal data for new purposes that require consent, OnlySkills will seek the User's consent before initiating such processing.