Privacy statement GC Ovostar Union

Introduction

GC Ovostar Union (hereinafter the Company) cares about your privacy.

We aim to inform you about the categories of personal data we collect about you, how we use it and what rights you have regarding your personal data (hereinafter Personal Data).

This Privacy Policy ("Policy", "Privacy Statement") helps you understand how we process the data you provide to us when you visit the Company's websites.

By visiting the Company's website, you accept and agree to the actions described in this policy.

We confirm that we will keep your information secure and that we fully comply with applicable laws.

Please read the following to understand what happens to the personal data that you choose to provide to us or that we collect from you.

In the meaning

To help you understand this policy, we explain the use of the definitions provided here in accordance with international data processing regulations. We use the following definitions:

"GDPR" means the European General Data Protection Regulation, which applies from 25 May 2018 in all Member States to harmonize data privacy laws across Europe.

"Data controller" means the natural or legal person who (individually, jointly or jointly with other persons) determines the purposes and manner of processing of any personal data.

"Data processor" means a natural or legal person that processes personal data on behalf of a data controller.

A "data subject" is any living person who uses our websites or products.

"Personal Data" means any information that relates to you and helps to identify you (directly or indirectly), such as your first name, nickname, surname, e-mail details or details provided in a CV.

"Processing" means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or otherwise making available, matching or combination, restriction, erasure or destruction.

"Personal Data Breach" means a security breach that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access of personal data transmitted, stored or otherwise processed.

"Joint Controllers" means two or more controllers that jointly determine the purposes and means of processing.

Why we collect your data

We collect your personal data through the site as a data controller when you visit our site in such cases:

• you are a visitor when you simply browse our web resources;
• you are the main representative of the customer when you send your contact details through the contact forms of our web sources or with the help of the provided contact details leave any request to ask questions about our services and products, receive quotation calculations;
• you are a potential service provider when you submit personal data, including commercial offers, through the contact forms of web sources to offer us your services and expertise;
• you are a current or prospective employee when you submit personal data, including a resume, through our websites or social media pages to offer us your services and expertise.

When you submit your personal data to the contact forms on our websites, you will be asked to consent to the collection and processing of your personal data as explained in this policy so that we can provide you with the information or service you require, unless another legal right applies. basis.

We only collect your personal data for the purposes set out below:

• to customize our websites, products and services according to your online behavior and individual preferences;
• to process customer requests ;
• send users promotional letters, surveys and participate in other types of marketing research ;
• to process a resume .

We do not collect or share sensitive personal data.

We do not sell personal information.

We do not use automated decision-making and profiling.

What data we collect

As a data controller, the Company may collect, store and use in our operations the following types of personal information about individuals who visit our websites:

• Information you provide to us. You can provide us with information about yourself by filling out forms on our website. This includes information you provide when you request a quote, contact our team, apply for a job, request support, etc. The information you provide to us may include:
  • Your name;
  • e-mail addresses;
  • contacts of partners/clients/company representatives that you can provide to us through the message field in the "Contact Us" form;
  • you can provide us with your personal information provided in the applicant's resume in the appendix of the "Submit an application" form.
• Information Our Websites and Products Automatically Collect About You. For each visit you make to our websites or when you use our products or services, we may automatically collect information, including the following:
  • technical information, including a shortened and anonymized version of your Internet Protocol (IP) address;
  • browser type and version;
  • operating system and platform;
  • information about your visit, including which pages you visit, when you log in, how long you stay on the site, how you got to the site (including date and time);
  • page recall hour;
  • duration of the visit;
  • what you press.

Cookies

Our website uses cookies.

"Cookies" are small data files that are transferred to your computer and allow us to remember certain information about you. We use them to distinguish you from other users when you browse our websites or use our products, to improve your user experience and to provide a significant level of protection for your personal data.

We need your consent to use cookies before you can visit our websites for the first time.

You may not accept cookies . However, remember that blocking necessary cookies may impair the website's functionality (some functions will be unavailable or will not work properly). Also note that cookies do not in any way allow us to gain control over your computer. They are used solely for performance, readability and experience, and to track which pages you find useful and which you do not, so that we can provide you with the best possible experience.

You can find more detailed information about the categories of cookies we use in our Cookie Policy.

Please note that our website may contain links to and from third party websites. If you link to any of these websites, please note that they have their own privacy and cookie policies and that we are not responsible for them. Check the policies of third-party websites before providing them with any personal information.

Grounds for processing

We collect and process your personal data in accordance with the provisions of the GDPR (more information can be found here https://gdpr.eu/ ). The GDPR provides an exclusive list of grounds that allow us to process your personal data, namely:

• Section 6.1(a): Consent

  We only collect the information you choose to provide to us and process it with your consent. We need the minimum amount of your personal data necessary to achieve the purpose of your interaction with our website (provide you with a quote, view your resume, send you an offer or newsletter, etc.).

  You can withdraw your consent to the processing of your personal data at any time by sending us an e-mail at info@marketing.ovostar.ua.

  Remember that weather feedback does not automatically mean. Processing before feedback is considered illegal.

• Article 6.1(b): performance of the contract

  When you send us your CV or use the feedback form to contact us to discuss our services that you would like to purchase, this may be considered a request by the data subject to enter into a contract. However, we may ask you to give us express consent in case of doubt.

• Section 6.1(c): Legal Obligation

  We process your personal data to comply with relevant legal obligations arising mainly from the GDPR.

  If you send us a request to exercise your rights under the GDPR, we may ask you to provide some personal data we already have to identify you and to comply with applicable law.

• Article 6.1(f): Legitimate Interests

  We process your personal data to prevent any fraudulent activity and to provide you with the information and services you want. In addition, we need certain data to ensure the smooth operation of our website and to provide a pleasant user experience. We only use data that is absolutely necessary.

Security and data protection

We have implemented organizational, technical, administrative and physical security measures to protect your personal data from unauthorized access, disclosure, use and alteration. We regularly review our security procedures to consider relevant new technologies and practices.

We will retain and process your personal data until we need it for any of the purposes set out in this policy, except where longer retention is required or permitted by law. We cannot delete or anonymize your data if we are required to retain it by applicable law.

Data Sharing and Disclosure

We do not intentionally share or sell any personal information we collect through our websites or social media pages. We use it solely for the purposes of our business operations. We may provide your personal data to third parties only in cases where at least one of the following applies:

• you give us your express consent to such disclosure;
• disclosure of your personal data is required by relevant legislation;
• the disclosure serves our legitimate interests that do not override your rights and freedoms;
• the disclosure of your personal data is necessary for government bodies to perform their duties and responsibilities.

Sharing of personal data with other Shared Data Controllers

Sometimes we can be seen as joint controllers. Because we are committed to providing you with a variety of opportunities to explore our services and share experiences, we use third-party products to act as controllers. For example, when you use social media buttons to share our blog post or see targeted advertising while scrolling through your news feed, we may become shared controllers of the social networks you use. You can usually make Facebook , Instagram , LinkedIn , YouTube our shared controllers by using their Like and Share buttons.

We may share your personal data with the following Shared Data Controllers:

• - Google, LLC: Use of data analytics to improve our website and your experience, and to provide website functionality. You can read its privacy policy here.
• - Social Networks: Allow users to connect with us on social networks or share any Company news on their pages. You can read the Privacy Policy of most popular social media platforms here: LinkedIn, Facebook і Instagram, YouTube.

Your rights

You can exercise such rights under the General Data Protection Regulation (GDPR) by contacting us at info@marketing.ovostar.ua:

• the right of access means that you can ask us to send you a copy of your personal data collected together with information about the nature, processing and disclosure of that personal data;
• the right to rectification means that you can ask us to update and correct false data, missing or incomplete personal data;
• the right to erasure ("to be forgotten") means that you can ask us to delete the personal data we have collected about you, except where this is prohibited by applicable laws. We usually delete your personal data immediately after your request. We may anonymize or retain your personal data for a little longer after a deletion request;

• the right to restrict processing means that you can ask us to restrict processing if:

  • your personal data is incorrect or out of date;
  • the processing is unlawful;
• the right to object to processing means that you can object on grounds relevant to your particular situation;
• the right to data portability means that you can ask us to send a copy of your personal data to another organization or to you;
• the right to express consent to the processing of your personal data (see the section "Grounds for processing");
• the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data (you can file a complaint with the data protection supervisory authority specified in this Policy);

Data Protection Authority

Our organization was founded in Ukraine. Thus, any privacy violations are governed by the data protection legislation of Ukraine. Given that data processing by our company does not include the processing of special categories of personal data on a large scale, we decided not to appoint a Data Protection Officer - these duties in the Company are performed by the Compliance Officer (contact e-mail: info@marketing.ovostar.ua).

In the event of a personal data breach (if there is a possibility of risk for data subjects), the company reports the personal data breach to the supervisory authority without undue delay. Breach notices can be sent by email, phone or letter.

If a breach of personal data may result in a high risk to the rights and freedoms of the data subject, the company shall immediately notify the affected data subjects by e-mail.

Changes to the privacy policy

We may change this policy from time to time in connection with the introduction of new technologies, legal requirements or for other purposes. We will notify you if these changes are dramatic and, if required by applicable law, we will obtain your consent. Such notice may be sent via your email address, posted on our social media accounts or website announcements, and/or in any other manner consistent with applicable law. In addition, we encourage you to review this policy regularly to check for any changes.

Contacts

Please contact us at the address info@marketing.ovostar.ua if you have any questions about your personal data or any specific data protection concerns, complaints or wish to delete your personal information.

Last update: 01 May 2023