Privacy Policy

1. Data we process

The contact form requests your name, email address, inquiry type and message. Company, telephone number and country are optional. We also receive information you choose to include in subsequent correspondence.

We store the consent indicator, submission time and internal handling status with your inquiry. Technical request data, including IP address, browser information, requested page and errors, may be processed by the website infrastructure for operation and security.

Cloudflare Turnstile processes browser signals to protect against automated submissions. Our server may send Cloudflare an IP address and a single-use verification token; the token is not stored in the inquiry record.

2. Purposes and legal bases

Contact form data is processed to handle and respond to your inquiry on the basis of the consent you give before submission. You can withdraw consent by contacting us; withdrawal does not affect the lawfulness of earlier processing.

If you ask us, as an individual, to take steps to enter into a contract with you or perform your contract, relevant processing may be necessary for those steps or performance. Business correspondence with an organisation’s representatives and website security may rely on legitimate interests in professional communication, preventing misuse and operating the service, balanced against your rights.

Where the GDPR applies, these bases correspond to Articles 6(1)(a), 6(1)(b) and 6(1)(f); compliance with legal obligations may rely on Article 6(1)(c). Withdrawing consent does not end processing for which another appropriate legal basis exists.

3. Providing information

You can browse public pages without submitting the contact form. Mandatory fields and consent confirmation are needed to submit and handle an inquiry; the form cannot be submitted without them. Providing this information does not itself oblige you to enter into a contract. Please avoid unnecessary personal information, passwords, payment details or sensitive information in your message. You can also contact us by email.

4. Access and recipients

Authorised Consortium staff can access inquiries. Hosting, maintenance and infrastructure providers may process data as needed to provide their services. Messages are stored in the administration system; email forwarding is used only when a mail service is configured.

Cloudflare receives technical data necessary for Turnstile and bot protection. The embedded OpenStreetMap on the contact page requests resources from OpenStreetMap services, which receive technical connection data such as IP address and browser information. These third-party requests occur independently of your analytics cookie choice.

External websites, including Google Maps and the Polish branch website, process data under their own policies when you follow links to them. Data may be disclosed to public authorities where there is a legal basis to do so.

5. Processing locations and international transfers

The Ukrainian Consortium is responsible for handling inquiries. Data may be accessible to authorised persons in Ukraine and processed in the countries where the technical infrastructure and service providers are located.

Where an international transfer requires specific legal protections, those requirements must be met before the transfer. You can ask the operator for information about the providers involved, processing countries, applicable safeguards and how to obtain information about those safeguards.

6. Retention

Retention is determined by the inquiry’s purpose, the need to complete correspondence, any subsequent contractual relationship, mandatory legal requirements and the need to establish, exercise or defend legal claims. There is no single retention period for all inquiries.

When data is no longer needed for these purposes and there is no lawful ground for continued retention, it is to be deleted or anonymised. You can ask which criteria apply to your inquiry. Cookie and local storage lifetimes are explained in the separate policy.

7. Your rights

Under Ukrainian law, you can obtain information about processing and access your data, request correction of inaccurate data, object to processing, and request amendment or destruction where the legal conditions are met. You can withdraw consent.

Where the GDPR applies, you can also exercise rights to erasure, restriction, objection to processing based on legitimate interests and data portability where the conditions for the relevant right are met. These rights are subject to applicable legal obligations and the rights of others.

To exercise your rights, email the operator and describe your request. If needed, we will ask only for information proportionately necessary to verify your identity. Requests are handled within applicable legal time limits.

8. Complaints and other information

In Ukraine, you can complain to the Ukrainian Parliament Commissioner for Human Rights or seek a judicial remedy. The Commissioner’s contact details are: 21/8 Instytutska Street, Kyiv 01008, Ukraine; hotline@ombudsman.gov.ua; ombudsman.gov.ua. Where the GDPR applies, you can complain to a competent supervisory authority, including in the EEA country of your habitual residence, place of work or the alleged infringement. The EDPB website lists national authorities.

We do not sell data submitted through the contact form or use it for decisions based solely on automated processing that produce legal or similarly significant effects on a person. Bot protection can prevent form submission; you can contact us by email if this happens.

This policy may be updated when website features, providers or legal requirements change. The current version date appears on this page. Please use the operator’s contact details for questions.