Note that the "Supplementary Terms" contain specific additional regulations for certain jurisdictions such as the EU or California.
Effective Date: August 14, 2021
1. Personal Information We Collect
Information You Provide Directly to Us or Third Parties
We may collect information directly from you or from other companies with whom you have a relationship. For example:
Information about Your Use of Our Service
Links to Other Websites, Devices, Apps and Features
2. Lawful Basis
Under EU and UK data protection laws, we are required to tell you our lawful basis for using your data and we have set this out in the table below. Where the legal basis is consent, you can withdraw consent at any time. Where the legal basis is legitimate interests, you have a right to object to our use of your data. We explain in the relevant sections in this Policy how you can withdraw consent or opt-out of certain data uses (where applicable).
Purpose for which data is used
To provide you with the Hola social networking service
Name, email address, date of birth, location (CCPA Categories A and B)
You provide your name, email address and date of birth to us. We obtain location data from the device that you use to access the service
To facilitate networking opportunities on the Hola App
Optional information that you choose to provide in your profile, including through profile verification, or adding Hola badges, which may include information about your sexual preferences, non-binary gender, religion, ethnic background, photos, interests, etc. (CCPA Categories B, C, H, I, J)
You provide this information to us
Contractual necessity and our legitimate interests – it is in our legitimate interests to facilitate networking opportunities in the Hola app. For special category/sensitive personal data, we rely on your explicit consent.
To verify your identity and prevent fraud and to ensure the safety and security of Users
Phone number and if requested or permitted, photo provided as part of profile verification and for users based in countries where age verification is required by law: photo of Government ID + geolocation and device information (CCPA Categories A, B, C, E, F, G and H)
You provide this information to us, except for the geolocation and device information, which we obtain from the device that you use to access the service
Legitimate interests – it is in our legitimate interests to ensure that accounts are not set up fraudulently and to safeguard Users of the site
To take payment for premium services (not applicable for Users making payments via the Apple App Store)
Payment card details (CCPA Categories B and D)
You provide this information to us
To send you marketing information about our events, offers and services
Name, email address, postal address, Instagram handle and mobile phone number (CCPA Categories A and B)
You provide this information to us
Consent or legitimate interests and in accordance with the laws applying to our marketing activities. We have a legitimate interest in promoting our business and products
To carry out research and analysis to help us improve the App
Log and usage data, including IP address, browser type, referring domain, pages accessed, mobile carrier and search terms, images and video (CCPA Categories F and H)
You provide photos and videos to us. We obtain the log and usage information from the device that you use to access the service
Legitimate interests – it is in our interests to analyse the way in which Users are accessing and using our services so that we can further develop the App, implement security measures and improve the service
To respond to correspondence and queries that you submit to us, including social media queries
Email address and IP address, social media name, phone number (CCPA Categories B and F)
You provide your email address, social media name and phone number to us when you contact us and we obtain your IP address from the device that you use to contact us
Legitimate interests – it is in our legitimate interests to respond to your queries to ensure that we provide a good service to Users and troubleshoot problems
To investigate and block Users for reported infringements of our Terms and Conditions of Use
Name and user registration details, profile information, content of messages and photographs + usage and device data such as IP address and IP session information (CCPA Categories A, B, C, F, and H)
You provide your registration details, profile information, messages and photographs to us. We obtain the other information from the device that you use to access the service.
Legitimate interests - it is in our legitimate interests to prevent unauthorised behaviour and to maintain the safety and integrity of our services
To enable Users to create and enhance their Hola profile and log into the App via third party accounts
Data from Facebook and other third-party accounts (CCPA Categories A, B, C, and H)
We obtain this information from Facebook, or the providers of any other accounts you use to log in or connect with your Hola account
Legitimate interests – it is in our legitimate interests to facilitate access to our services
To block payment transactions as part of our anti-fraud procedures
Name, IP address, email address, mobile number, cardholder name, payments received, type of payment, user ID, country (CCPA Categories, A, B, and D)
You provide your name, email address, mobile number and card details to us. We obtain your IP address from the device that you use to contact us. We obtain your payment information from your interactions with our service
Legitimate interests – it is in our legitimate interests to prevent fraudulent transactions and to maintain the security of our services
To serve promo cards and advertisements on the App
Location, gender, age, and information that you have optionally provided us with via your profile (CCPA Categories A, C and G)
We obtain age, gender and profile information from you, and location data from the device that you use to access the service
Legitimate interests – it is in our legitimate interests to target advertisements so that Users see relevant advertisements and to allow us to generate income from advertising revenue
To serve advertisements on third party networks and measure the effectiveness of such ads
Data about your visit to our Sites or App and action taken on those (for example if you downloaded our App or created an account with Hola), IP address (and your estimated location based on your IP address), age and gender, device ID (CCPA Categories B, C, G, F and K)
We obtain age and gender from you and we obtain other information from the device or browser that you use to access the service
Consent – as indicated by you in your Privacy Settings/Cookies Settings preferences and via your browser or device privacy preferences (where required by your device manufacturer, for example Apple devices using iOS 14.5).
To contact you in order to run surveys for research purposes and to obtain feedback, and to find out if you want to take part in marketing campaigns
Email address and mobile phone number (CCPA Category B)
You provide this information to us
Legitimate interests – it is in our legitimate interests to carry out research so that we can further develop the app and improve the service
To enable video and audio call functions, and the sending of images and video
Video and audio call usage data, images and video (CCPA Categories F and H)
We obtain this information from the device that you use to access the service
Legitimate interests – it is in our legitimate interests to provide these functionalities as part of the services
To defend legal claims, protect legal rights and to protect people from harm
This could include any information that is relevant to the issue
This information may be obtained directly from you, from your device or from third parties, depending on the information involved
Legitimate interests – it is in our legitimate interests to protect our legal rights, defend legal claims and to protect our Users and third parties from harm
3. How We Use this Information
Provision of our Service based on your contractual relationship with us
We process your personal information when this is necessary under our contract with you, to:
Use of information for further purpose
4. Sharing of Information
We transfer or disclose your personal information to third parties as described below:
5. Retention of Personal Information
We take appropriate steps to ensure that we process and retain information in accordance with the following principles:
6. Your Choices
Where permitted we may contact you via email, phone call, text messages or push notifications through our mobile apps. To submit a request concerning the receipt of such communications from us, please contact us using the information specified in the “Contact Us” Section below.
You can unsubscribe from our marketing communications at any time by contacting us directly (see “Contact Us” section below). As noted in the Your Rights section below, you have the right to object to use of personal data for direct marketing purposes at any time.
7. Your Rights
To the extent provided by applicable law, you can request access to your personal information, or correct or update out-of-date or inaccurate personal information we hold about you. You may also have the right to request that we delete personal information that we hold about you. You may access and update some of your information through your account settings. You are responsible for keeping your personal information up-to-date.
To the extent provided by applicable laws, you can also ask us to restrict or limit the processing of your personal information, as well as to provide you with personal information that we have collected from you so that you may use it for your own purposes, and to ask us to share (port) this data to another controller.
In addition, to the extent provided by applicable law, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement).
You also may have the right under applicable law to object at any time to the use of your personal information for direct marketing purposes, including profiling relating to direct marketing.
However, these rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make. To make a request concerning your rights or to make an inquiry, use the contact details under the “Contact Us” section below.
8. How We Protect Personal Information
We take the protection of your information seriously and we have in place safeguards designed to protect the information we collect through our Service. However, please note that although we take reasonable steps to protect your information, no website, Internet transmission, computer system, or wireless connection is completely secure.
Please note, however, that the Service allows you to share text messages, photos, screenshots, videos and other communications in the Service with other users, and if you choose to share these items with other Service users, we may not be able to remove them from our servers or make them unavailable to anyone you have shared them with. Sending and sharing text messages, photos, screenshots, videos or other communications in the Service is your decision. By choosing to share that information, you should understand that you may no longer be able to control how that information is used and that it may become publicly available (depending in part on your actions or the actions of others with whom you have shared the information). The Service is not responsible for any use or misuse of information you share.
9. Personal Information of Children
The Service is not directed to children under the age of eighteen (18) and we do not knowingly solicit or collect personally identifiable information from children under the age of eighteen (18) as part of the Service. Additionally, we do not knowingly sell the personal information of children under the age of eighteen (18). If we become aware that we have inadvertently received personally identifiable information from a user under the age of eighteen (18) as part of the Service, we will immediately delete such information from our records. If you believe that a child under the age of eighteen (18) may have provided us with personal information, please contact us using the information specified in the “Contact Us” section below.
10. Contact Us
For more information about our privacy practices, or to exercise any rights you may have pursuant to applicable law, please contact us at firstname.lastname@example.org
12. Linking Other Accounts To Hola
Using your social media details to sign in to Hola
When you sign in to our App using your Facebook (Meta Platforms, Inc.) account, you givepermission to Facebook (Meta Platforms, Inc.) to share with us your name and profile picture. Unless you opt-out, you also give permission to Facebook (Meta Platforms, Inc.) to share with us your email address (if there is one associated with your Facebook (Meta Platforms, Inc.) account), date of birth (age range), profile photos, gender.
Reasons for us to use your Facebook (Meta Platforms, Inc.) Data:
Facebook Date of birth (age range) permission:
Facebook Gender permission:
If you register or sign in with your Apple ID, you give Apple permission to share your Apple login, a name (that can be edited by you) and an email (you can choose to hide your email and Apple will create a random email address so your personal email can stay private). This email address will be linked to your Hola account and will be used to retrieve your Hola account.
We will then use this personal data to form your Hola account. If you remove the Hola app from your Facebook (Meta Platforms, Inc.) settings, or from your Apple ID, we will no longer have access to this data. However, we will still have the personal data that we received when you first set up your Hola account using your Facebook (Meta Platforms, Inc.) or Apple ID (you must delete your Hola account entirely for us to no longer have access to this data).
Linking social media accounts to your Hola account
You may link your Hola account with your Instagram, Facebook (Meta Platforms, Inc.) or Spotify accounts. This allows you to share some information from those accounts directly to your Hola account (for example, Instagram photos, or your top Spotify artists).
We only receive the limited information that Instagram or Spotify permits to be transferred (as detailed by Instagram/Facebook (Meta Platforms, Inc.)/Spotify and agreed by you when you first connect your account from such platforms with your Hola account).
If you no longer want to link your Hola account to your Instagram, Facebook (Meta Platforms, Inc.) or Spotify account, please visit the settings in your Instagram, Facebook (Meta Platforms, Inc.) or Spotify account and follow the instructions to remove the Hola app access permissions. Please note that any information already added to your Hola account from those platforms will not be deleted unless you delete it within your Hola account as well.
Marketing Services Providers
We partner with providers of marketing services (such as Facebook for example) (‘Marketing Services Providers’) to help us market and advertise our App and services on third party websites and applications and measure the effectiveness of our advertising campaigns. For example:
In some cases, these third parties will also use the data that they collect for their own purposes, for example they may aggregate your data with other data they hold and use this to inform advertising related services provided to other clients.
Where we share data with Facebook as our Marketing Service Provider (including via the Facebook “Like” function), we are Joint Data Controllers with Facebook Ireland for this processing. This arrangement means that HOLA has to provide you this notice, but you should contact Facebook if you wish to exercise your data protection rights. Further information, including how Facebook enables you to exercise your data protection rights, and subsequently processes your information as independent data controller can be found in Facebook Ireland’s Data Policy.
This data referred to above can include actions that you take on our website such as your interactions with our Sites or other information collected from cookies or similar technologies including the Facebook pixel. This allows us to measure the effectiveness of our advertising, improve our marketing practices, and helps us deliver more relevant advertising to you and people like you (including on social media such as Facebook).
For Users Having Usual Residence in European Economic Area (EEA), UK or Switzerland
A. International Transfer of Personal Information
If you are a resident in the EEA (that is in the European Union and Iceland, Lichtenstein, Norway), UK or Switzerland, we will transfer your personal information to Ireland and other countries outside the EEA, UK or Switzerland including Turkey,
We are a company based in Turkey. Though there are no adequacy decisions between Turkey and your country of residence, the data transfer to Turkey is nevertheless justified because all data we collect is also necessary to provide the Services.
Where we share your data with recipients as described, we will take appropriate measures, in compliance with applicable laws, to ensure that your personal information remains adequately protected. Such measures include for instance the use of EU approved Standard Contractual Clauses. In some instances, we will also rely on your explicit consent, where this is appropriate. To request more information or obtain a copy of the contractual agreements or other safeguards in place, use the contact details set out in the “Contact Us” Section.
B. How We Use this Information – additional information
The purposes and legal grounds for processing personal information are described above in section 2. In this section, we describe in which cases we will rely on consent:
C. Personal Information of Children
For the users having usual residence in the EEA, UK or Switzerland, Section 8 should read as follows; Our Service is designed for a general audience and is not directed towards children. In connection with our Service, we do not knowingly collect or maintain personal information from anyone under the age of eighteen (18) or knowingly allow such persons to use our Service. If you are under eighteen (18), please do not attempt to register for our Service or provide us with any personal information. If we learn that a person under the age of eighteen (18) has provided us with any personal information, we will promptly delete such personal information. If you believe that a child under age eighteen (18) may have provided us with personal information, please contact us using the information specified in the “Contact Us” section.