Personal data processing policy of the ARTRYNOK project

Appendix No. 2 to the Public Offer
of the ARTRYNOK project for buyers

1. Terms

1.1. The personal data processing policy (hereinafter - the Policy) is drawn up in accordance with the requirements of the Law of Ukraine "On the Protection of Personal Data" dated 01.06.2010 No. 2297-VI and the Standard Procedure for the Processing of Personal Data, approved by the order of the Commissioner of the Verkhovna Rada of Ukraine for Human Rights dated 01.08.2014 No. 1 /02-14 and determines the procedure for the processing and protection of personal data of the subjects of personal data carried out by the Public Organization "Ksi Prostir" (code 43669716, address 92 Smolenska St., Dnipro, Ukraine) (hereinafter - the Operator).

1.2. The operator defines as the principle and main goal of its own activity the observance of human rights and freedoms during the processing of personal data, in particular, the right to inviolability of its private and family life.

1.3. This Policy applies to all information that may be obtained by the Operator about visitors to the ARTRYNOK website https://artrynok.ksiprostir.org (hereinafter - Users).

2. Definition of terms

2.1 Automated processing of personal data – processing of personal data using computer equipment;

2.2 Blocking of personal data – stopping the processing of personal data temporarily (does not cover cases where processing is necessary to clarify personal data);

2.3 The site is a collection of graphic and informational materials, as well as programs for computers and databases, which ensure their availability on the Internet at the network address https://artrynok.ksiprostir.org ;

2.4 Depersonalization of personal data – actions, as a result of which it is impossible to determine the ownership of specific personal data to the User or another subject of personal data without the use of additional information;

2.5 Destruction of personal data – actions, as a result of which personal data are destroyed (deleted) irrevocably with the impossibility of further renewal of personal data in the information system and (or) all physical media on which specific personal data are recorded are destroyed;

2.6 Information system of personal data – a set of personal data contained in relevant databases, and information technologies and technical means that ensure their processing;

2.7 User – a visitor to the site who is a natural person;

2.8 Processing of personal data – any action (operation) or set of actions (operations) performed in relation to personal data with or without the use of automation tools, including their collection, recording, systematization, accumulation, storage, use, distribution (transmission) , depersonalization, blocking, deletion, destruction of personal data;

2.9 Operator – a natural or legal person who independently or jointly with other authorized persons organizes and/or processes personal data, and also determines the purpose of processing personal data, the composition of this data and the procedures for their processing;

2.10 Personal data (PD) – any information about the identified or directly or indirectly identifiable person of the User of the site;

2.11 Cross-border transfer of personal data – transfer of personal data across the national border of Ukraine using any means.

3. Composition of personal data

3.1. The operator can process the User's personal data as follows:

- Full Name;

- e-mail addresses;

- phone numbers or other means of communication.

3.2. The site may also collect for further processing depersonalized visitor data (including cookies) using Internet statistics services in cases where this is permitted by the User's browser settings.

4. Purpose of personal data processing

4.1. The purpose of processing the User's personal data is:

- conclusion and execution of transactions to which the User is a party, as well as implementation of measures preceding their conclusion;

- informing the User by sending emails (notifications).

4.2. The Operator has the right to send the User notifications about new products, services and special offers, other events. The user, on his part, can refuse to receive informational messages by sending an e-mail to the Operator with the note "Rejection of notifications about new products, services and special offers".

4.3. Depersonalized data collected using Internet statistics services about the actions of Users on the site are intended to improve its quality and content.

5. Legal basis for processing personal data

5.1. Processing of personal data is carried out on the basis of the consent of their subject - the User, which is provided for the emergence and proper fulfillment of obligations regulated by the civil and economic legislation of Ukraine, as well as its international treaties.

5.2. The PD subject voluntarily and for his own benefit decides to grant permission for the processing of his PD to the Operator and persons authorized by him without restrictions to achieve the purpose of their processing.

5.3. The Operator processes the User's personal data only if they are entered and (or) sent by the User using special forms posted on the site or sent to the Operator's e-mail.

5.4. By filling out the appropriate forms and/or providing their personal data to the Operator in another way, the User agrees to the terms of the Policy.

6. The procedure for processing personal data

6.1. The operator ensures the security of personal data being processed by implementing a set of technical, organizational and legal measures necessary in accordance with the requirements of legislation in the field of personal data protection.

6.2. The operator ensures the preservation of personal data and takes all possible measures to prevent access to personal data by unauthorized persons.

6.3. Personal data are never and under any circumstances transferred to third parties, except for cases covered by the consent of the subject of personal data or expressly provided by current legislation.

6.4. In case of self-discovery of inaccuracies in their personal data, the User can update them by sending a letter to the Operator's e-mail with the note "Update of personal data".

6.5. The term of PD processing is determined by the achievement of its goal.

6.6. The User may at any time withdraw his consent to the processing of personal data by sending a letter to the Operator's e-mail with the note "Revocation of consent to the processing of personal data".

6.7. The conditions for stopping the processing of personal data can be, in particular, the achievement of the purpose for which they were processed, the expiry of the period determined by the consent to their processing, or the withdrawal of consent by the subject of personal data in the manner established by the Policy, detection of the illegality of personal data processing.

7. Cross-border transfer of personal data

7.1. Before starting the cross-border transfer of PD, the operator is obliged to make sure that the foreign state, to whose territory this transfer is intended, ensures adequate protection of the rights of subjects of PD.

7.2. Cross-border transfer of PD can be carried out if the subject of PD gives written consent to their transfer and in other cases established by law or international treaty of Ukraine.

8. final provisions

8.1. The User can receive any clarifications on all issues related to the processing of his personal data by contacting the Operator at the e-mail address ksiprostir@gmail.com.

8.2. This Policy reflects any changes to the order of PD processing by the Operator. The policy is valid indefinitely.

8.3. The current version of the Policy is freely available on the Internet at the address