PRIVACY AND PERSONAL DATA PROTECTION POLICY
1. GENERAL PROVISIONS
1.1. The administration of the website https://kcck.com.ua (hereinafter referred to as the “Website”) is carried out by the Public Organization “Beauty Salon Standards Committee” (hereinafter – the “BSSC”), which is registered and operates in accordance with the laws of Ukraine.1.2. The BSSC respects the privacy of visitors to the Website and users of its services. Accordingly, the BSSC makes every effort to maintain the confidentiality of data by creating and ensuring the most comfortable conditions for the use of the Website’s services.1.3. This Privacy and Personal Data Protection Policy (hereinafter – the “Policy”) establishes the principles and procedures for the processing of personal data, the categories of data collected, the purposes for which such data are used, the procedure for the BSSC’s interaction with third parties, security measures for information protection, the conditions for access to personal data, as well as contact information for inquiries regarding access, modification, blocking, or deletion of one’s personal data, and for addressing any other questions that may arise concerning the protection of personal data.
2. COLLECTION AND USE OF PERSONAL DATA
2.1. The owner and controller of the personal data of Website users is the Public Organization “Beauty Salon Standards Committee.”2.2. When using the Website’s services, the BSSC processes users’ personal data, including but not limited to: information provided by the user during registration and in the course of using the services;IP addresses;cookie files;parameters and settings of Internet browsers (User-Agent).2.3. The BSSC collects only such personal data (for example: name and surname, login and password, e-mail address, contact number, date of birth, gender, etc.) as are knowingly and voluntarily provided by the user for the purpose of using the Website’s services. The provision of such data, in accordance with the requirements of the law, shall be deemed voluntary consent to the processing of personal data for the purposes defined in this Policy. 2.4. When visiting the Website, all logins to the system are recorded. Other user traffic data are neither processed nor stored.2.5. Please note that the BSSC limits the collection of personal data to the minimum necessary amount sufficient solely to fulfill the request of the personal data subject. 2.6. The BSSC does not collect any information whose processing is restricted by law, including information on racial or ethnic origin, political, religious, or philosophical beliefs, membership in political parties or trade unions, criminal convictions or sentences, as well as data relating to health, sexual life, biometric or genetic data (in accordance with Article 7 of the Law of Ukraine “On Personal Data Protection”).2.7. The BSSC collects statistical data on Website visits, including information about connections, traffic, the user’s browser, as well as the date, time, duration of Internet use, and Website activity.
3. PROCESSING OF PERSONAL DATA3.1. The processing and storage of data provided by users are carried out in data centers where the equipment ensuring the operation of the Website’s services is located. Personal data are processed and may be stored in the BSSC Personal Data Database or in a separate table within the Website’s Database.
4. PURPOSES OF PERSONAL DATA USE
4.1. Users’ personal data are used to ensure the provision of the Website’s services, for information exchange, advertising, and communication purposes, and in compliance with the laws of Ukraine, including but not limited to the Law of Ukraine “On Personal Data Protection,” the Law of Ukraine “On Ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data and the Additional Protocol to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data regarding Supervisory Authorities and Transborder Data Flows,” the Law of Ukraine “On Information,” the Law of Ukraine “On Advertising,” the Law of Ukraine “On Telecommunications,” the Law of Ukraine “On the Protection of Information in Information and Telecommunication Systems,” the Law of Ukraine “On State Support of Mass Media and Social Protection of Journalists,” as well as in accordance with the Website Terms of Use and other documents governing the activities of the BSSC.
5. RETENTION PERIOD OF PERSONAL DATA
5.1. Users’ personal data shall be stored for no longer than is necessary in accordance with the purpose of their processing.
6. SAFETY OF MINORS
6.1. The Website is not intended for independent use by minors. The use of the Website by minors is permitted only with the consent and under the supervision of parents or legal guardians. 6.2. The BSSC pays special attention to the safety of children and urges parents to explain to their children the rules for using the Internet, as well as the purpose and necessity of using the Website’s various services.
7. INTERACTION WITH THIRD PARTIES REGARDING PERSONAL DATA
7.1. The BSSC does not transfer personal data to third parties, except in cases where such transfer is mandatory under the laws of Ukraine, at the request of the personal data subject, or in other cases specified in this Policy. The BSSC recognizes that personal information constitutes a value and an integral element of an individual’s personal non-property rights; therefore, it takes all possible measures to protect users’ personal information that has been voluntarily and knowingly provided to the BSSC.7.2. The Website may contain links to other websites (for informational purposes only). When following such links, the provisions of this Policy shall not apply to those websites, and the Organization shall not be responsible for the manner in which personal data are processed on them.
8. PROTECTION OF PERSONAL DATA
8.1. The BSSC employs generally accepted technological and organizational standards for the protection of information and personal data to prevent their loss, misuse, alteration, or destruction. However, despite all efforts, the BSSC cannot guarantee absolute protection against threats that arise beyond its regulatory control.8.2. The BSSC ensures the implementation of all relevant confidentiality obligations, as well as technical and organizational security measures to prevent unauthorized or unlawful disclosure or processing of personal information and data, and to prevent their accidental loss, destruction, or damage.8.3. The transfer or dissemination of personal data without the consent of the personal data subject or their authorized representative is permitted only in cases provided for by applicable law and solely (where necessary) in the interests of national security, economic welfare, or the protection of human rights.
9. CONDITIONS OF ACCESS TO PERSONAL DATA
9.1. The procedure for granting access to personal data to third parties shall be determined by the terms of the consent provided by the user to the personal data owner, as well as in accordance with the requirements of the applicable laws of Ukraine.9.2. A user has the right to obtain any information about themselves from any entity involved in personal data relations, provided that they specify their surname, first name, patronymic, place of residence (or stay), and the details of the identity document of the individual submitting the request, except in cases established by law.9.3. Access by a user to their own personal data shall be provided free of charge.9.4. Deferral of a user’s access to their own personal data shall not be permitted.9.5. Deferral of access to personal data by third parties is permissible if the requested data cannot be provided within 30 calendar days from the date of receipt of the request. In such cases, the total period for resolving the issues raised in the request shall not exceed 45 calendar days.9.6. A written notification regarding the deferral shall be provided to the third party that submitted the request, explaining the procedure for appealing such a decision.9.7. A decision to defer or deny access to personal data may be appealed to the Commissioner of the Verkhovna Rada of Ukraine for Human Rights or to a court of law.9.8. To update, correct, access, block, or delete your personal data, as well as to withdraw your consent to the processing of personal data provided to the BSSC under this Policy, or in case of any comments, requests, or complaints regarding your personal data processed by the BSSC, please contact the BSSC via e-mail at: .moc.liamg%40aukcck
10. AMENDMENTS TO THE POLICY
10.1. This Policy may be periodically amended or supplemented by the BSSC without prior notice to the user, particularly in the event of changes in legislation or improvements in operational procedures.10.2. In the event of significant amendments to this Policy, the BSSC shall publish a corresponding notice on the Website indicating the date on which such amendments take effect. If no written objection to the amendments is received within the specified period, it shall be deemed that the user agrees to the amended Policy.