Privacy Policy

This Privacy Policy (hereinafter referred to as the “Policy”) governs the processing and protection of personal data of visitors to the website supportoffice.tech (hereinafter referred to as the “Website”), owned by the Public Union “Innovation Support Office” (EDRPOU code: 45647275), located at 8 Knyaziv Ostrozkykh St., Kyiv, 01010, Ukraine (hereinafter referred to as the “Union”).

1. GENERAL PROVISIONS

1.1. Definitions

Personal data – any information relating to an identified or identifiable natural person.
Personal data processing – any operation or set of operations performed on personal data (such as collection, recording, storage, adaptation, use, disclosure, erasure, etc.).
Data subject – an identified or identifiable natural person whose personal data are processed.
Controller – a person or entity which determines the purposes and means of personal data processing (the Union).
Processor – a person or entity which processes personal data on behalf of the Controller.
Cookies – small text files stored in the browser of your device when you visit the Website.

1.2. This Policy informs data subjects about how their personal data are collected, used, stored and protected when they use the Website.
1.3. The processing of personal data is carried out in accordance with the laws of Ukraine, including the Law of Ukraine “On Protection of Personal Data”, and, where applicable, Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) for data subjects located in the European Economic Area (EEA).
1.4. The Union is the data controller for personal data processed via the Website and may engage data processors based on appropriate data protection agreements.
1.5. A data subject is any visitor to the Website who uses its functionality and/or provides personal data (such as name, email address or other contact details).
1.6. The Union adheres to the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
1.7. The purposes of processing personal data include: carrying out the Union’s statutory activities, processing requests and inquiries, administering donations, communicating with users, and informing about the Union’s projects and initiatives.

1.8. Data Protection Officer. The Union has designated a responsible person for data protection matters:
Yuliia Ablitsova, Data Protection Officer (DPO)
Email: info@supportoffice.tech

2. CATEGORIES, PURPOSES AND LEGAL BASES OF PROCESSING

2.1. Categories of data processed

Data you provide: name, email address, contact details and any other information you submit via contact forms, subscription forms, donation forms or other communication channels on the Website.
Automatically collected data: IP address, browser type and version, device information, referring pages, pages visited, time and date of visits, and cookies.
Data from third parties: information collected through integrated services or social media plugins, subject to their own privacy policies.

2.2. Purposes of processing

responding to your inquiries and communications;
processing and documenting donations and related accounting obligations;
providing you with updates, newsletters and information about the Union’s activities (based on your consent);
improving the functionality, security and user experience of the Website;
ensuring compliance with applicable legal obligations and protection of the Union’s rights and legitimate interests.

2.3. Legal bases for processing (GDPR, where applicable)

Consent – for subscriptions, newsletters, and certain cookies or marketing communications.
Performance of a contract or pre-contractual measures – when responding to your requests related to cooperation, support or participation in projects.
Legal obligation – for accounting, tax, reporting or other obligations imposed by law.
Legitimate interests – to ensure the security of the Website, prevent fraud, develop and promote the Union’s activities, provided such interests do not override your fundamental rights and freedoms.

3. COOKIES AND ANALYTICS

The Website may use cookies and similar technologies to:

remember your preferences and settings;
analyze traffic and usage of the Website;
improve performance and security.

On your first visit to the Website, you may be informed about the use of cookies. You can manage or disable cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

4. DATA RETENTION

Personal data are retained for a period of 2 years from the date of the last interaction between you and the Union (such as communication, donation, subscription activity or other meaningful contact).

If, upon expiry of this 2-year period, you do not request deletion of your personal data and continued retention is still necessary for the purposes specified in this Policy, the Union may extend the retention period for an additional 2 years under the same safeguards.

The Union regularly reviews the necessity of storing personal data and deletes or anonymises data that are no longer needed for the purposes for which they were collected, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.

5. DATA SHARING AND INTERNATIONAL TRANSFERS

5.1. Data sharing

The Union may share personal data with:

service providers and contractors (such as IT service providers, hosting providers, email services, payment or donation platforms) acting as data processors under appropriate agreements;
public authorities, if required by applicable law;
other third parties, only with your prior consent or where otherwise permitted by law.

5.2. International data transfers

The Website is operated from Ukraine. If you are located in the EEA or other jurisdictions with specific data transfer rules, your personal data may be transferred to and processed in countries outside your jurisdiction, including Ukraine, where data protection laws may differ.

In such cases, the Union ensures that appropriate safeguards are in place, such as the use of EU Standard Contractual Clauses or other mechanisms recognised by applicable data protection laws, to provide an adequate level of protection for your personal data.

6. DATA SECURITY

The Union implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, among others, the use of HTTPS encryption, access controls, secure infrastructure, logging and backup procedures.

7. RIGHTS OF DATA SUBJECTS

As a data subject, you have the following rights under applicable data protection laws (including GDPR, where applicable):

Right of access – to obtain confirmation whether your personal data are being processed and to receive a copy.
Right to rectification – to have inaccurate or incomplete personal data corrected.
Right to erasure (“right to be forgotten”) – to request deletion of your personal data in cases provided by law.
Right to restriction of processing – to request limiting the processing of your data in certain circumstances.
Right to data portability – to receive your personal data in a structured, commonly used and machine-readable format and transmit them to another controller where technically feasible.
Right to object – to object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint – to submit a complaint to a competent supervisory authority.

To exercise your rights or submit any request regarding your personal data, please contact:

Data Protection Officer: Yuliia Ablitsova
Email: info@supportoffice.tech

If you believe that your rights have been violated, you may also contact:

the Ukrainian Parliament Commissioner for Human Rights (Ombudsman), including via email: hotline@ombudsman.gov.ua;
for individuals in the EEA – the data protection supervisory authority in your country of residence.

8. CHANGES TO THIS POLICY

The Union reserves the right to amend or update this Policy from time to time to reflect changes in legislation or in the Union’s activities. The current version of the Policy is always available on this page.

Last updated: 11 November 2025