PRIVACY POLICY

Date of last update: 07 June 2024

1. This Policy regarding the processing and protection of personal data (hereinafter referred to as the "Policy") was developed by Lyudmila Andriivna Rybchuk, an entrepreneur, code EDRPOU

We respect your privacy and are committed to protecting it by complying with this Privacy Policy and all applicable laws and regulations.
With this Policy, we want to inform you about what personal data we process and how we process it, as well as the purposes and means of processing and protecting personal data, as well as about your rights that you may have in connection with such information.

This Policy applies to all types of personal data provided by the user when visiting the website https://sweet-kraft.com (hereinafter - "Website", "Site") or ordering any services on the Website.
By using and registering on the Website, as well as when ordering services through the Website, You confirm, warrant and declare that You have read and understood this Policy and give your unequivocal consent to Us processing Your personal data in accordance with this Policy . If you do not agree with this Policy in its entirety, please do not use the Website or order services.
We may amend or otherwise change this Policy from time to time. We may make changes to this Policy without prior notice to you, so we recommend that you regularly check this Policy on the Website and thereby agree to any changes to the Policy.
This Policy is written in Ukrainian and can be translated into English.

2. Personal data / personal information - all information related to you that We process.

Processing – all actions performed on your personal data. For example: collecting, storing, updating, sending you messages, deleting data.GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 On the protection of natural persons during the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46 / EU (General Data Protection Regulation).UK GDPR – GDPR incorporated into the law of the United Kingdom of Great Britain as amended by the Data Protection, Privacy and Electronic Communications (Amendment, etc.) (Withdrawal from the EU) Regulations 2019.
CCPA - The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020.
Legal basis for processing your personal data
The grounds on which we process your personal data are as follows (where required by law).
Where it is necessary to obtain your prior consent for the relevant processing in order for us to be allowed to do so (for example, some direct marketing activities), we will obtain your consent and process in accordance with it (see below on how to withdraw your consent to processing).
Otherwise, we will process your personal data only where processing is necessary:
for the execution of a transaction to which you are a party, or for the implementation of measures at your request, preceding the conclusion of such a transaction;
to fulfill a duty prescribed by law to which we are subject; or for the purposes of legitimate interests pursued by us or another person, provided that this will only be in circumstances where your interests or fundamental rights and freedoms requiring the protection of personal data do not prevail over these interests (most cases of personal data processing in relation to the relationship we have with the person you work for falls into this category).
Other applicable legal grounds may be noted below in the country-specific sections.
We may process personal data received directly from you or from any other source. Thus, your personal data may be processed:
- if you have provided us with personal data through any communication channels (for example, by sending a request / offer by e-mail, phone or through a form on our website or using messengers or social networks);
- when signing or executing a transaction, including when your personal data was provided to us as a contact for the purposes of its execution;
- if we receive your personal data from other sources.

Your provision of information is usually voluntary, but may sometimes be necessary, for example, to enter into or perform a transaction, to respond to your inquiry, or to enable us to contact you.
What personal We can process:
2.1. Surname, first name, patronymic,
2.2. E-mail address,
2.3. phone numbers,
2.4. other personal data voluntarily provided by the site visitor.
2.5. Depersonalized data about visitors (including cookies) that can be collected using Internet statistics services (Google Analytics and others).
2.6. The data listed above are combined further in the text of the Policy under the general term Personal data.

Whose personal data we do not collect - children.
We do not knowingly solicit data online from children under 18, nor do we offer services to them. We do not knowingly collect personal data from children under the age of 18. If we learn that a child under the age of 18 has provided us with personal information without parental consent, we will take steps to delete that information.
The personal data we automatically receive from you when you use our website includes:
● technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone settings, browser plug-in types and versions, operating system and platform;
● information about your visit, including full Uniform Resource Locators (URLs), history of visits to and movements through our website, history of transitions from our website (including date and time), services you viewed or searched for, page response times, loading errors, how long you stayed on certain pages, information about page activity (such as scrolling, clicks, and mouseovers), how you left the page, and your phone number or the social network account you used to contact us.
Where permitted by law, certain information we collect comes from unrelated sources, including in some cases information that is publicly available, provided or purchased from partners that provide marketing business intelligence services, or resides on platforms social networks.

3. Why do we process personal data:

3.1. Purpose of personal data processing:
informing you by sending emails about news and services; conclusion, execution and termination of civil law contracts; providing access to services, information and/or materials contained on the Website – advertising, promotion, as well as providing information about our services;
responses to complaints/lawsuits or submission of complaints/lawsuits;
administering our website in accordance with our terms and to carry out internal processes, including error correction, data analysis, testing, research, statistical collection and surveys;
improving our website to ensure content is presented in the most effective way for you and your computer;
ensuring the security of our website and other systems;
evaluating and determining the effectiveness of advertising that we display to you and others, as well as to serve relevant advertising (tailored to your preferences);
providing advice and recommendations about services that may be of interest to you or the person you work for, which would suit your preferences where possible;
compliance with applicable legislation and regulatory obligations, including maintaining relevant documentation and providing answers to appropriate requests from government bodies;
we may process certain personal information to fulfill any other business or commercial purposes at your direction or with your consent.

3.2. Also, according to this Policy, We have the right to send you messages about new products and services, special offers and various events. You can always refuse to receive informational messages by sending us a letter to the e-mail address ten.rku%4088kihcrol marked "Rejection of messages".
3.3. Depersonalized data about you, collected with the help of Internet statistics services, serve to collect information about the actions of users on the Website, to improve the quality of the site and its content.

4. On what basis do we process personal data:

4.1. We process personal data only if they are filled in and/or sent by you through special forms located on the Website. By filling out the appropriate forms and/or sending your personal data to Us, You agree to this Policy.4.2. We process depersonalized data about you if this is allowed in your browser settings (including the storage of cookies and the use of JavaScript technology).

5. Why we receive your consent and how it can be withdrawn:

5.1. By accepting the terms of this Policy, You give Us unambiguous consent to the collection, use and processing of personal data in accordance with this Policy and confirm that, by giving such consent, You are acting on your own will and in your own interests.Consent to the processing of personal data is granted for the implementation of any actions on personal data that are necessary to achieve the above-mentioned purposes, including, but not limited to: collection, systematization, accumulation, storage, adaptation, clarification (updating, changing), use, cross-border transfer, depersonalization, destruction, as well as carrying out any other actions with personal data in accordance with the current legislation of Ukraine.
5.2. The foregoing consent also includes Your consent to be added to the Website's user base on the day of registration on the Website.

6. How We collect, store and transfer personal data:

6.1. The security of personal data processed by Us is ensured by the implementation of legal, organizational and technical measures necessary for the full implementation of the requirements of the current legislation of Ukraine in the field of personal data protection.
6.2. We ensure the preservation of personal data and take all possible measures to exclude access to personal data by unauthorized persons.
6.3. Your Personal Data will never and under no circumstances be transferred to third parties, except for cases related to the fulfillment of the requirements of the current legislation of Ukraine.
6.4. If you find inaccuracies in your personal data, you can update them yourself by sending us a corresponding message to the e-mail address ten.rku%4088kihcrol marked "Update personal data".
6.5. The term of personal data processing is reasonable to the extent that it will give us the opportunity to provide you with services without additional clarifications. You can withdraw your consent to the processing of personal data at any time by sending Us a message to the e-mail address ten.rku%4088kihcrol marked "Revocation of consent to the processing of personal data".We process personal data only for as long as is necessary for the purpose(s) for which it was collected, after which the data will be destroyed or archived, unless it is necessary to continue processing to comply with our legal obligations to which we are took themselves or for other legitimate and lawful purposes. If necessary, the above terms can be extended in the event of any complaints/lawsuits and court proceedings - during the consideration of these cases and their resolution.
Sometimes your data may be available on media such as the Internet for an indefinite period of time.
6.6. How do we share your personal data?
We may share your personal data if permitted by law:
● when we work together.
● when we work with service providers.
● when sharing helps us comply with security and legitimate interests.
● We may disclose your information if we are required to disclose or share your personal information to comply with any duty required by law or to enforce or enforce our terms and other dealings with you. This includes sharing information with other companies and organizations (including law enforcement) for fraud protection and other risk prevention purposes.● when we work with marketing service providers.We may share your information with marketing service providers to evaluate, develop and provide you with promotions and special offers that may be of interest to you, to administer contests, sweepstakes and events, or for other promotional purposes when you consent. We may share information about you with other companies if you give us permission or instruct us to share that information.● when the information does not identify you. We may share your information without identifying you, including by combining it with similar information about other people and sharing aggregated information for statistical analysis and other business purposes. For example, we may share information about your use of our Sites.
To whom we share your personal data:
Access to your data is limited to those who need it for the purposes set out above and will generally only have access to that part of your data that is relevant to that particular purpose.We may share your data with our duly authorized employees or persons who help us conduct our business and who are subject to security and privacy obligations.
Whenever personal data is disclosed to a third party in this way, it will only be to the extent necessary for the performance of their duties, the performance of our transaction with you or for the purposes of our legitimate interests.

We may share your personal data:
● Regarding data received through our website, to our advertisers and ad networks, who need the data to select and serve ads that are relevant to you and other users.We do not disclose personally identifiable information to our advertisers, but we do provide them with aggregate information about our users. We may also use such aggregate information to help advertisers show ads to their target audience.We may use your personal data to display our advertisers' advertisements to their target audience, subject to the provisions of the cookie section of this Policy;
● providers of analytics and search engines that help us improve and optimize our Sites in accordance with the provisions of the section on the use of cookies of this Policy.

7. Regarding cross-border transfer of personal data

7.1. We guarantee that before starting the cross-border transfer of personal data, we undertake to make sure that the foreign country, to the territory of which the transfer of personal data is planned, provides reliable protection of the rights of the subjects of personal data.Personal data may be processed in countries that may not have such strict data protection regulations as yours, including the United States and Ukraine. We will transfer information to other countries in accordance with applicable privacy laws, including GDPR.We apply all necessary safeguards, including standard data protection provisions adopted by relevant authorities. We may also transfer your data to a country that provides an adequate level of protection as determined by the European Commission.
7.2. Cross-border transfer of personal data on the territory of foreign countries that do not meet the above-mentioned requirements can be carried out only in the case of the User's written consent to the cross-border transfer of his personal data and / or the performance of a contract to which the subject of personal data is a party.Personal data may be used in countries outside the EU / EEA and may not have the same strict data protection regulations as in the EEA. By providing us with data, you agree to their transfer outside of Ukraine and the EEA. In any case, we ensure that such transmissions are subject to appropriate safeguards regarding non-interference with your private and family life.

8. Your rights in the field of personal data

To exercise your rights, please contact us at https://sweet-kraft.weblium.site or in any other way convenient for you.We respect all relevant privacy laws and your rights under applicable law – in particular, you can request that we destroy your data or withdraw your consent to the processing of personal data. You may also opt out of receiving marketing communications by using the "unsubscribe" link included in the emails we send you or by contacting us as described below.Please note that we are required by law to establish your identity before we can process your request, so you may be asked to provide additional information.

9. Cookies and similar technologies

We may use various technologies to collect information about your device and use of our Sites. These technologies include our cookies and those of third parties, as well as web beacons. Most web browsers can be configured to accept or reject some or all of these technologies, but you will need to take additional steps to do so.
If you want to know how to change your browser settings, please use the "Help" menu in your browser or see the instructions provided by the following browsers: Internet Explorer, Google Chrome, Mozilla Firefox, Safari Desktop, Safari Mobile and Android browser. For more information on how to opt out of tracking technology from Google Analytics, click here.
Cookies files. The use of cookies to process personal data is explained in our Cookie Notice (insert active link), please read it.Interest-based advertising. Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI). On the websites of these organizations, users may opt out of interest-based advertising offered by such members. To opt out of interest-based advertising on websites provided by the respective member companies of these organizations, visit the DAA opt-out portal available at http://optout.aboutads.info/ or visit the NAI opt-out portal at http:/ /optout.networkadvertising.org/?c=1.
Residents of the EEA, including the European Union, Switzerland and the United Kingdom, may opt out of online behavioral advertising offered by member organizations of the European Interactive Digital Advertising Alliance by visiting https://www.youronlinechoices.eu/.
To opt-out of data collection for interest-based advertising in participating companies' mobile applications, download the DAA opt-out mobile application here: https://youradchoices.com/appchoices.
Do not track. Some newer web browsers have a "Do Not Track" setting that sends a "Do Not Track" header to the websites you visit, telling you that you don't want your activities tracked. We do not currently respond to Do Not Track browser signals because there is no standard for how online services should respond to such signals. As standards develop, we may develop a process for responding to such signals, which we will outline in this Policy.

10. Security

We adhere to generally accepted industry standards to protect the personal information provided to us, both during transmission and after receipt.
All personal data is stored on secure servers. If we have given you (or you have set) a password to access certain parts of our website or systems, you are responsible for keeping that password confidential. We ask that you do not share this password with anyone.

Unfortunately, the transmission of information over the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted to our website, so any transmission is at your own risk.
Once we receive your information, we will implement strict procedures and security measures to prevent unauthorized access. You should be aware that other Internet sites linked from our website(s) or from emails may have different privacy policies than this Privacy Policy. To ensure that your privacy is protected, we encourage you to read the privacy statements of those websites, applications or other digital resources.

11. Additional information for residents of Ukraine

Objection - you have the right to object to some of the actions we take on your personal data for reasons specific to your personal situation. If, despite your objection, we find that there are compelling legal grounds for processing that override your interests, rights and freedoms, or grounds for establishing, enforcing or defending within the scope of legal requirements, we will continue to process the data specified in the objection in within the limits of necessity. If you do not agree with this assessment of the situation, you can use your right to file a complaint with the relevant state authority (more information below).Destruction of data - you can request the destruction of data if it is unreliable, or processed illegally, or if otherwise required by law.Complaints to the relevant government authority – in connection with our actions as the controller (owner) of your personal data, you have the right to file a complaint with the relevant regulatory authority or in court. For Ukraine, such a body is the Human Rights Commissioner of the Verkhovna Rada of Ukraine. You can find his contacts at https://www.ombudsman.gov.ua/. Of course, we encourage you to contact us first at https://sweet-kraft.com.

12. Final provisions

12.1. You can get any clarifications on issues related to the processing of your personal data by contacting Us at the email address .ten.rku%4088kihcrol
12.2. Any changes to the Personal Data Processing Policy will be reflected in this Policy. The policy is valid indefinitely until it is replaced by a new version. 12.3. The current version of the Policy is freely available on the Internet at https://sweet-kraft.com/politika-konfidenciynosti.