Questa-AI Terms & Conditions

Privacy Terms

Last Updated: 25.11.2025

1

GENERAL PROVISIONS

El-Monde Inc, the parent company of Questa-AI cares about your privacy and the security of your personal data, which is why we have prepared this privacy policy (hereinafter referred to as the "Privacy Policy"), which explains how we process and protect your personal data, what your rights are, and provides other information about the processing of your personal data.

The term "personal data" ("Personal Data") as used in this Privacy Policy corresponds to the definition given in the GDPR and means, among other things, any information or set of information from which we can directly or indirectly identify you, such as your name, surname, email address, telephone number, geo-location etc.

The American Federal Data Safety Standards and the European Union General Data Protection Regulation 2016/679 (EU) ("GDPR") sets out the basic principles and requirements for us and other data controllers regarding the processing of Personal Data. When processing your Personal Data, we comply with the requirements of the GDPR and other applicable laws, as well as the instructions of supervisory authorities.

This Privacy Policy applies when you visit the website https://www.questa-ai.com/ (hereinafter referred to as the "Website"), visit our social network accounts on Facebook, Instagram, YouTube, LinkedIn, Reddit (hereinafter referred to as "Social Media Accounts"), view information provided by us, order and use services offered by us, contact us by phone, through email communication channels, inquire about our offers or contact us with any other questions.

The Website and Social Media Accounts may contain links to external websites (such as those of our partners or suppliers). This Privacy Policy does not apply to websites accessible through such links. Please review their privacy policies before browsing such sites or submitting your Personal data to them.

If you order and receive our services, visit the Website or Social Media Accounts, contact us with questions, we consider that you have read and agreed to the terms of the Privacy Policy and the purposes, means and procedures for the use of Personal Data set out therein. If you do not agree to the Privacy Policy, you may not use the Website, the Social Media Accounts, or contact us about our service offerings.

We may change our Privacy Policy, so please visit the Website regularly and read the latest version of the Privacy Policy posted. In some cases, we may provide you with separate privacy notices specific to certain services we provide. Such notices should be read in conjunction with this Privacy Policy.

2

WHO ARE WE?

We are El-monde Inc ("Company"), a private joint stock company incorporated in the State of Delaware in the United States of America, with registered address at 1013 Centre Rd Ste 403A, Wilmington, Delaware 19805-1270, United States.

We manage the Website. We act as a Personal Data Controller when providing and offering our services, carrying out the Company's day-to-day business or complying with legal requirements.

3

WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

We process your Personal Data received in the following ways:

When you provide Personal Data to us, for example, by registering on the Website, ordering our services, otherwise using the Website, contacting us by email, telephone, etc.;

When we collect your Personal Data when you use the Website, Social Media Accounts, such as your service order history, your IP address, cookies, website visit history, preferences, opened URL links, etc.;

Where we receive Personal Data from other people, for example, where we receive information from public registers, state or local authorities or bodies, our partners, other third parties such as payment institutions about payments made, etc.;

Where your personal data is provided to us by others with your consent, for example, by naming you as a contact or authorized person etc.

The person who provides Personal Data to us is responsible for the accuracy, completeness and timeliness of such Personal Data, as well as for the consent of the data subject to the transfer of data to us. We may ask you to confirm that the person has the right to provide us with Personal Data (for example, by completing service orders or registration forms). If necessary (for example, if the individual enquires about our receipt of his or her Personal Data), we will identify the provider of such data.

4

HOW DO WE USE YOUR PERSONAL DATA AND WHAT PRINCIPLES DO WE FOLLOW?

We only collect and process Personal Data that is necessary to achieve our stated purposes for processing Personal Data.

In processing your Personal Data, we comply with the requirements of applicable and valid legislation, including the GDPR:

We collect your Personal Data for specified, clearly defined and legitimate purposes and do not process it in a way that is incompatible with those purposes, except to the extent permitted by law;

We process your Personal Data in a lawful, fair and transparent manner;

We take all reasonable steps to ensure that Personal Data that is not accurate or complete in relation to the purposes for which it is processed is promptly rectified, supplemented, suspended or destroyed. You have the right to amend and update the information you provide to us. In some cases (for example, in order to deliver goods to you), we need to have accurate and up-to-date information relating to you, and we may ask you to confirm periodically that the information we hold about you is correct;

We keep them in such a form that your identity can be established for no longer than is necessary for the purposes for which the Personal Data is processed;

We do not disclose Personal Data to third parties and will not disclose it other than as set out in the Privacy Policy or applicable law;

We ensure that your Personal Data is processed securely and is protected against loss, unauthorized use and alteration. We have put in place physical and technical measures to protect the information we collect from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as any other unauthorized processing. The security measures for Personal Data shall be determined considering the risks involved in the processing of Personal Data.

Our employees are under a written obligation not to disclose or distribute your Personal Data to third parties.

5

TO WHOM AND WHEN DO WE TRANSFER YOUR PERSONAL DATA?

We will only transfer your Personal Data as set out in this Privacy Policy.

We may transfer your Personal Data: Our partners or consultants (auditors, lawyers, etc.), other institutions, companies, people, organizations with whom we work or cooperate in the provision of our services or activities.

The Personal Data Processors we use, such as: Providers of connectivity (internet and telephone) and IT (general IT services, workstation maintenance, Microsoft Office365 license provision and administration, server services) services; For providers of website solutions and support services; For marketing and advertising service providers.

We provide data to the operators of these social networking platforms in order to publish content on Social Media Accounts: Meta Platforms Ireland Ltd (Ireland) and Meta Platforms, Inc., (USA) (data is securely transferred to the service provider under the EU Standard Contractual Clauses for Data Transfers Outside the European Economic Area approved by the European Commission); Google LLC (USA) (data is securely transferred to the service provider under the EU Standard Contractual Clauses for Data Transfers Outside the European Economic Area approved by the European Commission); LinkedIn Inc. (USA) (data is securely transferred to the service provider under the EU Standard Contractual Clauses for Data Transfers Outside the European Economic Area approved by the European Commission). Reddit Inc (USA), owned by Advance Publications, is the majority shareholder. Data if transferred is as per EU security laws.

Law enforcement and pre-trial investigation authorities, courts and other dispute resolution authorities, other persons performing functions assigned by law, in accordance with the procedure provided for by the legislation of the State of Delaware, United States. We provide these entities with information required by law or specified by the entities themselves;

If necessary, to companies that intend to buy or purchase the Company's business or to enter into joint ventures or other forms of cooperation with us, as well as to companies established by us.

We generally process Personal Data in the EU/EEA, but in some cases your Personal Data may be transferred outside the EU/EEA. Your Personal Data is only transferred outside the EU/EEA under the following conditions: The data is only passed on to our trusted partners who help us ensuring provision of our services to you; Such partners have data processing or data provision agreements with which they guarantee the security of your Personal Data; the Commission of the European Union has issued a decision on the suitability of the country in which our partner is established, i.e. an adequate level of security is ensured; or A special authorization from the Data Protection Inspectorate of the Republic of Estonia has been obtained for such transfers; You have consented to the transfer of your Personal Data outside the EU/EEA.

6

WHAT RIGHTS DO YOU HAVE?

You may submit any request or instruction relating to the processing of Personal Data to us in writing at info@questa-ai.com.

When making such a request, we may ask you to fill in the necessary forms in order to better understand the content of your request, as well as to provide a personal document or other information (for example, to confirm your identity with an electronic signature) that will help us to verify your identity. If you submit your request by email, depending on the content of your request, we may ask you to come to us or to submit your request in writing.

We may refuse to exercise your rights listed above (except for your objection to process your Personal Data for direct marketing purposes or in other cases where the processing of Personal Data is carried out with your consent), where we are permitted under the provisions of the GDPR to refuse to exercise you request, or where, in cases provided by law, it is necessary to ensure the prevention, investigation and detection of criminal offences, breaches of professional or professional ethics, and to protect the rights and freedoms of the data subject, us and other persons.

Upon receipt of your request or instruction regarding the processing of your Personal Data, we will provide you with a response within no later than 1 month from the date of the request and will carry out the actions specified in the request or inform you why we refuse to do so. If necessary, the time limit may be extended by a further 2 months, depending on the complexity and number of requests. In this case, we will inform you of the extension within 1 month of receipt of the request.

If Personal Data is erased at your request, we will only retain copies of the information that is necessary to protect our legitimate interests and those of others, to comply with the obligations of public authorities, to resolve disputes, to identify any discrepancies or to comply with any agreements that you have entered into with us.

7

WILL WE SEND YOU OFFERS?

We may send our offers and information about our services (direct marketing communications) to your email address and/or telephone number if you have given us your consent to do so or if you or the organization you represent is a client of ours and you have not objected to such processing of Personal Data.

If you agree and/or do not object, we will send you news of your choice by email or by text message to the telephone number you have provided, and/or we will ask you about us and the quality of our services and the service we provide.

When we send out newsletters, we may collect information about the people who received them, such as which message they opened, what links they clicked on, etc. This information is collected in order to provide you with more relevant and tailored newsletters.

Your contact details may be passed on to our partners/processors who provide us with newsletters or quality assessment services.

Even if you have consented to the processing of Personal Data for direct marketing purposes, you can easily withdraw this consent at any time for all or part of the processing activities. To do so, you can: Notify us of you opt-out in the manner specified in the electronic communications and/or offers; or Send us a notification to the email address specified in this Privacy Policy. If you request to withdraw your consent in this way, we may ask you to confirm your identity.

If you withdraw your consent, we will endeavor to stop sending newsletters to your contacts immediately.

Withdrawal of consent does not automatically oblige us to destroy your Personal Data or to provide you with information about the Personal Data we process, and you should make separate requests for these actions.

8

HOW WILL WE ORGANISE GAMES, PROMOTIONS, COMPETITIONS?

Participation in games, promotions or competitions published by us is optional. In order to participate in a competition, game or promotion that we run, you must provide the information we have specified, including your Personal Data. Otherwise, you will not be able to participate in the game, contest or promotion.

You have the right to refuse to participate in our games, competitions, promotions and to withdraw your consent to the processing and use of your Personal Data for this purpose at any time. You can do so by emailing us at rom@el-monde.com or by any other means (e.g. by clicking on the relevant link in the email).

If you withdraw your consent or object, you will be removed from the list of participants in the game, promotion or competition and will no longer participate in the game, promotion or competition.

When you participate in our games, competitions and promotions, we have the right to contact you using the contact details you have provided and/or to publish information about you as a winner on the Website, Social Media Accounts or any other information publishing channels we specify in the rules of the game, competition or promotion.

We may use a software application based on automated decision-making to manage the registration and/or determination of winners of a game, promotion or competition. This will be notified in the rules of the game, promotion or competition or will be obvious from the links we provide. In this case, if you do not wish to be subject to automated decision making, you will not be able to participate in the game, promotion or competition.

9

HOW DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Cookies are small text files that store information (often just a sequence of numbers and letters identifying the device, but may also contain other information) that is used in the browser (e.g. Google Chrome, Microsoft Edge, Firefox, Mozilla, Opera, etc.) of your device (computer, tablet, mobile phone, etc.) according to its settings and stored on your device's hard drive. In this Privacy Policy, we use the term "cookies" to refer to cookies and other similar technologies, such as pixel tags, web beacons and clear GIFs.

We use few cookies to analyze information flows and user behavior, to promote trust and ensure security, to ensure the proper functioning of the Website, to improve it, to remember your preferences, to personalize the content shown to you, and to link the Website to your Social Media Accounts or to our mobile application.

You can choose whether to accept cookies. If you do not agree with cookies being placed on your computer or other device's browser, you can tick the cookie consent bar, change the settings of the browser you are using and disable cookies (either all at once, or one at a time, or in groups). If you wish to refuse cookies on your mobile device, you must follow the official instructions for that device. Please note that in some cases, refusing cookies may slow down your browsing speed, restrict the functionality of certain websites or block access to a website.

For more information, please visit http://www.AllAboutCookies.org or https://www.google.com/privacy_ads.html.

You can deactivate the use of third-party cookies for advertising related purposes by visiting the Network Advertising deactivation page at https://thenai.org/opt-out/.

We may use mandatory cookies which are necessary for the operation of the Website, analytical cookies, functional cookies which are designed to analyze the use of the Website, to remember users' preferences and to tailor them to the Website so that we can provide enhanced functionality, performance cookies, third party cookies used by third parties, advertising cookies which are designed to show you personalized and generic advertising.

We and our advertising partners use targeting cookies to show you more relevant personalized advertising. Personalized advertising will be shown to you with your consent. Advertising personalization cookies are used to measure group, activate contextual advertising and/or targeted campaigns.

Some third parties, such as social network operators, may use anonymous cookies created by them to tailor the apps or applications they create to your needs.

We do not control the use of cookies and tracking technologies by third parties, so if you would like to know more detailed information, we recommend that you check the privacy policy of the relevant third party.

We also use the following products and tools that record cookies: Google AdSense: Evaluate and report on the use of the Website in relation to the advertisements displayed. The data collected may be transferred to and stored on a Google server in the USA. If you do not wish to receive tailored advertising, you can change your settings at https://www.google.com/settings/ads as required. In this case, an opt-out cookie will be stored for you. However, if you delete all cookies, the opt-out cookie may also be deleted.

Google Analytics: A web analytics service provided by Google that allows you to analyze your use of the Website, to compile reports based on this analysis, and to plan and forecast the performance of the Website and services. The data collected by Google Analytics may be transmitted to and stored on a Google LLC server in the USA. You can change your browser settings to prevent Google Analytics from analyzing the information. In this case, an opt-out cookie will be stored for you. However, if you delete all cookies, the opt-out cookie may also be deleted. You can also prevent Google from recording data generated by a cookie based on your use of the Website and from processing such data by downloading and installing a browser plug-in from https://tools.google.com/dlpage/gaoptout?hl=en.

Google Ads: Google provides an online advertising service that allows us to serve ads to visitors who search for keywords related to our business or browse websites with content related to our business. Google Ads allows us to create and manage advertising campaigns, choose ad formats, set bids for clicks or impressions and target specific locations, languages and devices. The data collected during advertising campaigns may be transferred to and stored on a Google LLC server in the USA. For further information: https://ads.google.com/intl/lt_lt/home/faq/, https://policies.google.com/technologies/ads.

Meta Pixel: Used for remarketing purposes so that we can contact you again. This allows us to display interest-based advertising (Facebook Ads) when you visit the social networks Facebook, Instagram or other websites that also use this tool. In this way, we try to show advertisements of interest to you. For more information on how Meta Pixel works, visit https://www.facebook.com/business/tools/meta-pixel.

10

CONTACT US

If you have any questions about the information contained in this Privacy Policy, please contact us at rom@el-monde.com.

If you wish to make a complaint about our processing of Personal Data, please submit it to us in writing, providing as much information as possible. We will co-operate with you and endeavor to resolve any issues promptly.

If you believe that your rights have been infringed under the GDPR, you can lodge a complaint with our supervisory authority, the Data Protection Inspectorate, for more information and contact details please visit the Inspectorate's website (https://www.aki.ee/en). We aim to resolve all disputes promptly and amicably, so you are welcome to contact us first.

11

FINAL PROVISIONS

The Privacy Policy shall be reviewed on a regular basis, at least once a year, and, if necessary, changes or additions shall be made to the Privacy Policy. We will notify you of the changes by posting the updated Privacy Policy on the Website, by email if you have provided us with one, or by other customary means of communication.

Changes to the Privacy Policy will be effective as of the date of the update set forth in the Privacy Policy, unless a different effective date is specified.

If you continue to use the Website, order services from us, use our Social Media Accounts or contact us after being notified of a change to the terms of the Privacy Policy, you will be deemed to have accepted the terms of the amended Privacy Policy.