1. General ProvisionsThis Personal Data Processing Policy (hereinafter, the “Policy”) sets out the procedure for processing personal data and the measures taken to ensure its security by Individual Entrepreneur Kostiantyn Skliarenko (hereinafter, the “Operator”) in the course of providing services to visitors and customers of the website
https://skliarenko.pro.
1.1. The Operator considers the observance of human rights and freedoms in the processing of personal data, including the protection of the rights to privacy and to personal and family confidentiality, to be its paramount objective and a condition of carrying out its activities.
1.2. This Policy applies to all information that the Operator may obtain about visitors to the website
https://skliarenko.pro.
1.3. The Operator processes personal data in accordance with applicable personal data protection legislation, including, where applicable, the principles of the General Data Protection Regulation (GDPR) with respect to data subjects from the European Union.
2. Key Definitions Used in the Policy2.1.Automated processing of personal data means the processing of personal data by means of computer technology.
2.2. Blocking of personal data means the temporary suspension of the processing of personal data (except where processing is necessary to rectify the personal data).
2.3. Website means a set of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the internet at
https://skliarenko.pro.
2.4. Anonymization of personal data means actions as a result of which it becomes impossible, without the use of additional information, to determine whether the personal data belongs to a specific User.
2.5. Processing of personal data means any action (operation) or set of actions (operations) performed on personal data, including collection, recording, systematization, accumulation, storage, rectification, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
2.6. Operator means Individual Entrepreneur Kostiantyn Skliarenko, who independently organizes and carries out the processing of personal data and determines the purposes and scope of the personal data to be processed.
2.7. Personal data means any information relating directly or indirectly to an identified or identifiable User of the website
https://skliarenko.pro.
2.8. User means any visitor to the website
https://skliarenko.pro.
2.9. Provision of personal data means actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.10. Destruction of personal data means any actions as a result of which personal data is irretrievably destroyed, making it impossible to restore its content.
3. Key Rights and Obligations of the Operator3.1. The Operator has the right to:
- receive accurate information and/or documents containing personal data from the data subject;
- independently determine the scope and list of measures necessary and sufficient to ensure the protection of personal data.
3.2. The Operator has the right to send the User notifications about new products and services, special offers, and various events. The User may opt out of receiving such messages by sending an email to
privacy@skliarenko.pro with the subject “Unsubscribe from notifications.”
3.3. The Operator is obliged to:
- provide the data subject, upon request, with information concerning the processing of their personal data;
- organize the processing of personal data in accordance with the procedure established by applicable law;
- respond to inquiries and requests from data subjects within a reasonable time;
- publish this Policy and ensure unrestricted access to it;
- take legal, organizational, and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, dissemination, and other unlawful actions;
- cease processing and destroy personal data upon a justified request from the data subject.
4. Key Rights and Obligations of Data Subjects4.1.Data subjects have the right to:
- receive information concerning the processing of their personal data in an accessible form;
- require the Operator to rectify their personal data, or to block or destroy it, if the data is incomplete, outdated, inaccurate, or not necessary for the stated purpose of processing;
- withdraw consent to the processing of personal data at any time;
- appeal against the actions or omissions of the Operator in the processing of their personal data.
4.2. Data subjects from the European Union (under the GDPR) additionally have the following rights: the right of access to their data, the right to rectification, the right to erasure (“right to be forgotten”), the right to restriction of processing, the right to data portability, and the right to object to processing. The Operator undertakes to consider such a request and respond within a reasonable time not exceeding 30 days.
4.3. Data subjects are obliged to:
- provide the Operator with accurate information about themselves;
- notify the Operator of any rectification (update, change) of their personal data.
4.4. Persons who have provided the Operator with false information about themselves, or with information about another data subject without that person’s consent, shall bear liability in accordance with applicable law.
5. Principles of Personal Data Processing5.1. Personal data shall be processed lawfully and fairly.
5.2. Personal data processing shall be limited to the achievement of specific, predetermined, and lawful purposes. Processing of personal data that is incompatible with the purposes for which it was collected is not permitted.
5.3. Merging databases containing personal data that is processed for purposes incompatible with one another is not permitted.
5.4. Only personal data that is relevant to the purposes of its processing shall be processed; excessive data is not permitted.
5.5. In processing personal data, its accuracy and adequacy shall be ensured. The Operator takes the necessary measures to delete or rectify incomplete or inaccurate data.
5.6. Personal data shall be stored for no longer than the purposes of processing require, unless the storage period is established by contract. Processed personal data shall be destroyed or anonymized upon achievement of the purposes of processing or if the need to achieve them is lost.