Privacy Policy

Effective date: August 19, 2025

1. Introduction

Sole Proprietor Dymura N. A., operating under the trade name web-studio BUSINESS SITE (hereinafter referred to as the “Company”, “we”, “Data Controller”) respects your privacy and is committed to protecting personal data. This Policy has been developed in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable law.

By using our website and services, you acknowledge that you have read this Policy and agree to its terms.

2. Data Controller (full contact details)

Trade name: web-studio BUSINESS SITE
Legal name (full): Sole Proprietor Dymura Nataliia Anatoliivna
Legal name (short): Sole Proprietor Dymura N. A.
TIN: 2317216482
Address: 03115, Kyiv, Beresteiskyi Avenue, 108/1, apt. 59
Phone: +38 (044) 495-31-30
E-mail: office@site2b.ua
Business field: website development, online business promotion

3. What data we process

Identification and contact details: name, company name, phone number, e-mail, postal address.
Interaction data with the site: inquiry history, feedback form contents, subscriptions.
Technical data: IP address, cookies, browser information, device, OS, geolocation (if configured by the user).
Marketing preferences: consent/opt-out for mailings.
Data from public sources or counterparties: as necessary and within the law.

4. Purposes and legal bases for processing

We process personal data for the following purposes:

providing and improving services, communication and feedback;
contract performance and request handling;
compliance with legal obligations;
website security, prevention of abuse and fraud;
analytics and service development;
marketing communications with your consent.

Legal bases under Article 6(1) of the GDPR:

consent of the data subject (item a) — you may withdraw it at any time;
contract or pre-contractual actions (item b);
legal obligation (item c);
legitimate interests of the Company (item f), including ensuring security and improving services.

5. Data transfers and categories of recipients

partners and contractors (IT providers, hosting, analytics, communication services) — based on contracts and confidentiality obligations;
consultants and other counterparties — if necessary and lawful;
government authorities — if such transfer is required by applicable law.

6. International data transfer

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards (e.g., standard contractual clauses of the European Commission) and conduct transfer impact assessments when necessary.

7. Cookies and similar technologies

We use cookies for website functionality, personalization, and analytics. Details are provided in our Cookie Policy. You can manage cookies via the consent banner and your browser settings. Consent to non-essential cookies can be withdrawn at any time.

8. Retention periods

We retain personal data no longer than necessary for the purposes for which it was collected or as required by law. Once the purposes are achieved, data is deleted or anonymized, unless otherwise required by legislation (including limitation periods and accounting obligations).

9. Data security

We apply technical and organizational security measures (including SSL/HTTPS encryption, access restriction, backups). Despite these measures, no method of data transmission or storage can guarantee absolute security.

10. Automated decisions and profiling

We do not make decisions based solely on automated processing that produce legal effects or significantly affect you. Content and marketing personalization may occur based on your preferences, where a legal basis exists.

11. Children

Our website is not intended for individuals under the age of 16. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us for its deletion.

12. Your rights under the GDPR

Access: obtain a copy of your personal data.
Correction: request correction of inaccurate or incomplete data.
Erasure: request deletion of data (“right to be forgotten”) in applicable cases.
Restriction of processing: request restriction under certain conditions.
Objection: object to processing based on legitimate interests or direct marketing.
Data portability: receive data in a structured, machine-readable format and transmit it to another controller.
Withdrawal of consent: withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
Complaint to supervisory authority: lodge a complaint with the relevant data protection authority.

To exercise your rights, contact us using the details in Section 2.

13. Third-party websites and embedded content

Our website may contain links or embedded content from third-party resources. We do not control their policies and are not responsible for their data processing practices. We recommend reviewing the privacy policies of the respective sites.

14. Changes to this Policy

We may update this Policy. The current version is published on the website with the effective date. Please check periodically for updates.

15. Contact for data protection matters

Controller: Sole Proprietor Dymura Nataliia Anatoliivna
Address: 03115, Kyiv, Beresteiskyi Avenue, 108/1, apt. 59
Phone: +38 (044) 495-31-30
E-mail: office@site2b.ua