Privacy Policy

1. General Provisions.

1.1. This Privacy and Personal Data Policy (hereinafter referred to as the “Policy”) is an official document of PFA Company OÜ (hereinafter referred to as the “Company”/ “Controller”) and sets forth the procedures for processing and protecting information about individuals (hereinafter referred to as “Customers”) who use the information, services, software, and products of PFA Company OÜ.

1.2. By providing their personal data, the Customer grants the Operator consent to collect, process, and use their personal data in accordance with the Law of Ukraine “On the Protection of Personal Data” in various ways for the purposes specified in these Terms and Conditions.

2. What constitutes personal data?

2.1. According to the Law “On the Protection of Personal Data,” personal data refers to information or a set of information about a natural person who is identified or can be specifically identified.

The operator may collect various types of data and information, including:
— first and last name;
— date of birth;
— mailing address;
— phone number;
— email address.

Personal data may also include information provided by Customers at the Operator’s request for the purpose of enabling the Operator to fulfill its obligations to Customers arising from other regulatory documents entered into between the Operator and the Customer.

The Operator has the right, in particular, to request from the Client a copy of an identification document or any other document containing the Client’s first name, last name, a photograph of the Customer, as well as other additional information that, in the Operator’s discretion, is necessary and sufficient to identify such Customer and to prevent abuse and violations of the rights of third parties.

2.2. When a Customer involves other individuals in the Company’s events and activities or invites them to communicate with the Company, the Company may collect personal data provided by the Customer regarding those individuals, such as: first name, last name, date of birth, mailing address, email address, and phone number.

2.3. Information about website visitors (such as IP address, domain name, browser type and operating system, date and time of visit, etc.) is collected and stored for the purpose of compiling visitor statistics. This information is publicly available; therefore, the Company is not liable for its disclosure.

3. Procedures for the collection, storage, use, and other forms of processing of personal data.

3.1. The personal data collected allows us to send Clients notifications about new offers and various events organized by the Company, as well as to confirm and coordinate the Client’s participation in such events. The Company may use the Customer’s personal data to send important notifications containing information about changes to the Company’s regulatory documents. Personal data may also be used to improve the products and services provided, as well as the quality of content and communications.

3.2. Customers’ personal data is stored exclusively on electronic media and processed without any time limit, by any lawful means, including in personal data information systems, with or without the use of automation tools.

3.3. The operator has established a list of individuals who process personal data or have access to it. The operator ensures the security of personal data and takes measures to prevent unauthorized access to personal data.

3.4. Personal data may be disclosed to third parties at the Client’s request or with the Client’s consent. In particular, the Operator is entitled to disclose personal data to third parties, including, but not limited to, courier services, postal service providers, telecommunications operators, etc., exclusively for the purposes specified in Section 3.1 of this Privacy Policy and Personal Data Handling Policy.

3.5. In all other cases not provided for in paragraphs 3.3–3.4 of these Regulations, the Customer’s data may not be disclosed to third parties.

4. Modification and Destruction of Personal Data.

4.1. If a Customer does not wish to be included in the Company’s mailing list, they may unsubscribe at any time by notifying the Company through the contact information provided.

4.2. Personal data may be deleted in the following cases:

• When the Customer deletes data on their own using the features of the Company’s website available to the Customer through their profile settings;
• When the Operator deletes information posted by the Client, as well as the Client’s personal page, in cases specified by other regulatory documents;
• If the Customer withdraws their consent to the processing of personal data.