Privacy policy

This document explains how the administration of the review platform allwin.lviv.ua (hereinafter — the Platform) collects, processes, stores and protects the information it receives from visitors. The policy has been drawn up taking account of the requirements of the Ukrainian Law on the Protection of Personal Data and of the provisions of the EU General Data Protection Regulation (GDPR) as they apply to visitors from the relevant jurisdictions. By continuing to use the Platform, you confirm your agreement with the rules set out below.

What data we collect

During your visit to the Platform, the following information may be recorded:

• Hardware and software characteristics — IP address, device type, browser and operating system version, screen resolution, interface language, time zone.
• Navigation data — the list of pages viewed, the order of transitions, time spent, the URL the visit came from, and the date and time of each request.
• Contact details — the name, email address and message text that a visitor enters into the feedback form on their own initiative.
• Cookie markers — session identifiers, personalisation parameters, tags belonging to analytics and affiliate systems.

The purposes the data is processed for

The information collected is used for clearly defined purposes:

1. Technical operation — keeping the Platform running reliably, detecting and fixing faults, optimising the performance of the server infrastructure.
2. Analytics — studying behavioural patterns to improve navigation, to decide which topics take priority and to adapt content to what the audience is looking for.
3. Communication — handling enquiries received through the contact form and preparing answers to visitors' questions.
4. Cyber security — countering bot activity, spam, attempts at unauthorised access and other malicious actions.
5. Legal compliance — meeting statutory requirements and responding to well-founded requests from authorised bodies.

Legal grounds

Processing rests on at least one of the following grounds: the visitor's consent, expressed by the fact of using the Platform or by completing the contact form; the administration's legitimate interest in keeping the project working, secure and developing; and the need to meet obligations imposed by the law in force.

Cookies

The Platform uses cookies of several categories:

• Functional — these keep the basic mechanisms working correctly: saving the session and language settings, preventing duplicate form submissions. Disabling them may limit the Platform's functionality.
• Analytical — these allow anonymised statistics to be collected in order to assess how effective the content is and to diagnose technical problems. They may involve third-party tools, including Google Analytics.
• Affiliate — these record clicks on partner links and measure the results of commercial cooperation with operators.

Cookies can be managed through your browser settings. Deleting or blocking individual categories may affect how correctly elements of the Platform are displayed.

Disclosure of data to third parties

The administration does not sell visitors' personal data and grants no commercial access to it. Limited disclosure is possible only in the following circumstances:

• Engaging contractors — hosting providers or analytics services — which process data on the administration's behalf under contracts containing information protection obligations.
• Complying with mandatory orders from law enforcement, judicial or regulatory bodies in accordance with the law in force.
• Protecting the rights, property or safety of the administration or of third parties in the event of a dispute or a threat.

Storage and protection

Data is kept for as long as is needed to achieve the stated purposes of processing, or for the period set by law. A set of measures is in place to protect the information: traffic encryption over TLS, role-based access separation, systematic updates of the server software, periodic security audits and backups. At the same time, the administration acknowledges that no method of electronic transmission or storage guarantees absolute security.

Visitors' rights

The law in force gives you the following rights in respect of personal data:

• To find out exactly which of your data is being processed and for what purpose.
• To require the correction of inaccurate information or the completion of incomplete information.
• To require the deletion of data where the grounds provided by law are present.
• To withdraw consent to processing given earlier.
• To lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or another competent body.

To exercise these rights, it is enough to send a request through the Platform's contact form. The review period is no more than thirty calendar days from the date the request is received.

Updates to the policy

The administration may revise this document in connection with changes in the legislative environment or with the development of the project. The current version is always published on the relevant page of the Platform. Continuing to use the Platform after an updated version has been published is taken as acceptance of the changes made.