Privacy Policy and Personal Data Processing

Regulations on the Processing and Protection of Personal Data in Databases Owned by the Seller

General Provisions and Scope of Application
List of Personal Data Databases
Purpose of Collecting and Processing Personal Data
Procedure for Obtaining Consent, Notification, and Actions with Personal Data
Location of the Personal Data Database
Conditions for Disclosing Personal Data to Third Parties
Protection of Personal Data: Methods, Responsible Person, Employee Access, and Data Retention Periods
Rights of Personal Data Subjects
Procedure for Processing Requests from Personal Data Subjects
Registration of Personal Data Databases

1. General Provisions and Scope of Application

1.1. Definition of Key Terms:

Personal Data Database – a structured system of information containing personal data stored electronically or in the form of card files.
Responsible Person – an employee designated to organize measures for protecting personal data.
Owner of the Personal Data Database – a legal or natural person who has the right to process data and determines the purpose of its use.
Personal Data Registry – a state information system that contains records of registered personal data databases.
Publicly Available Sources of Personal Data – directories, catalogs, lists, registries containing open information. Internet resources and social networks are not considered public sources unless otherwise specified by the personal data subject.
Consent of the Personal Data Subject – voluntary authorization for the processing of personal data for a specific purpose.
Processing of Personal Data – any actions with personal data, including collection, systematization, storage, modification, use, transfer, or deletion.
Personal Data – information that allows the identification of an individual.
Personal Data Subject – an individual whose personal data is being processed.
Third Party – any person to whom personal data may be transferred, except for the data owner and administrator.
Special Categories of Personal Data – information about race, political views, religious beliefs, health status, etc.

1.2. Application of the Document

This document is mandatory for all company employees who work with personal data or have access to it in the course of their duties.

2. List of Personal Data Databases

The company maintains records of personal data in the following databases:

Personal data database of contractors.

3. Purpose of Collecting and Processing Personal Data

The main purpose of collecting and processing personal data is to ensure the fulfillment of contractual obligations, conduct financial settlements for goods and services, and comply with applicable laws, including tax and accounting regulations.

4. Procedure for Obtaining Consent, Notification, and Actions with Personal Data

4.1. Consent for Personal Data Processing

Consent from the personal data subject must be voluntary and contain a clear confirmation of their decision.

4.2. Forms of Consent May Include:

A written document signed by the data subject.
An electronic document with a digital signature.
A checkbox on a web page or an electronic file.

4.3. Notification of the Personal Data Subject

The personal data subject is informed about the inclusion of their data in the database, as well as their rights and the conditions of data transfer.

4.4. Restrictions on Processing Special Categories of Data

The company does not process data related to race, political opinions, religious beliefs, health status, etc.

5. Location of the Personal Data Database

Personal data databases are stored at the company’s legal address.

6. Conditions for Disclosing Information to Third Parties

The transfer of personal data to third parties is only possible with the consent of the data subject or in accordance with the law.

7. Protection of Personal Data

The company implements technical and organizational measures to protect personal data from unauthorized access.

8. Rights of the Personal Data Subject

The personal data subject has the right to:

✔️ Know where their data is stored and who manages it.
✔️ Request correction or deletion of their personal data.
✔️ Challenge unlawful data processing in court.

9. Procedure for Processing Requests from Personal Data Subjects

Requests regarding access to personal data are reviewed by the company within 10 business days. A response to the request is provided within 30 calendar days.

10. Registration of Personal Data Databases

Personal data databases are registered in accordance with Article 9 of the Law of Ukraine "On Personal Data Protection".

Viber

Write to mail