Privacy policy

1. General provisions

This personal data processing policy is compiled in accordance with the requirements of the Law on Personal Data (hereinafter - the Law on Personal Data) and determines the procedure for processing personal data and measures to ensure the security of personal data used by the Old Mill (hereinafter - the Operator).

1.1. The operator sets the most important goal and condition of its activities to respect the rights and freedoms of man and citizen in the processing of personal data, including the protection of privacy, and personal and family secrets.

1.2. This Operator's policy on personal data processing (hereinafter - the Policy) applies to all information that the Operator may receive about visitors to the website https://stariymlyn.com.ua/eng.

2. Basic concepts used in Politics

2.1. Automated processing of personal data - processing of personal data using computer technology.

2.2. Blocking of personal data - temporary cessation of personal data processing (except in cases where processing requires clarification of personal data).

2.3. Website - a set of graphic and informational materials that ensure their availability on the Internet at https://stariymlyn.com.ua/eng.

2.4. Information system of personal data - a set of personal data contained in databases, and provide their processing of information technology and technical means.

2.5. Impersonality of personal data - actions in which it is impossible to determine without the use of additional information the ownership of personal data to a particular User or other subjects of personal data.

2.6. Processing of personal data - any action (operation) or set of actions (operations) carried out with the use of automation or without the use of such means with personal data, including collection, recording, systematization, accumulation, storage, refinement (update, change), removal, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.7. Operator - a state body, municipal body, legal or natural person who independently or jointly with other persons organizes and (or) carries out personal data processing, as well as determines the purposes of personal data processing, the composition of personal data to be processed, actions (operations) carried out with personal data.

2.8. Personal data - any information that relates directly or indirectly to a specific or specific User of the website https://stariymlyn.com.ua/eng.

2.9. Personal data permitted by the personal data subject for dissemination are personal data to which an unlimited number of persons have been granted access by the personal data subject by consenting to the processing of personal data authorized by the personal data subject for dissemination in accordance with the Law on Personal Data. personal data (hereinafter - personal data, permitted distribution).

2.10. User - any visitor to the site https://stariymlyn.com.ua/eng.

2.11. Provision of personal data - actions created to disclose personal data to a certain person or a certain group of people.

2.12. Dissemination of personal data - any action aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or accessing personal data of an unlimited number of persons, including disclosure of personal data in the media, placement in information and telecommunications networks or providing access to personal data in any other way.

3. Basic rights and responsibilities of the Operator

3.1. The operator has the right to:

- receive from the subject of personal data reliable information and/or documents containing personal data;

- in case of withdrawal of the personal data subject's consent to personal data processing, the Operator has the right to continue personal data processing without the consent of the personal data subject if there are grounds specified in the Personal Data Act;

- Independently determine the composition and list of measures necessary and sufficient to ensure the implementation of obligations under the Personal Data Act and regulations adopted in accordance with it, unless otherwise provided by the Personal Data Act or other federal laws.

3.2. The operator must:

- provide the personal data subject at his request with information on the processing of his personal data;

- Organize the processing of personal data in the manner prescribed by applicable law;

- respond to requests and inquiries of personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Act;

- report to the authorized body for the protection of the rights of personal data subjects at the request of this body the necessary information within 30 days from the date of receipt of such a request;

- publish or otherwise provide unrestricted access to this Personal Data Processing Policy;

- take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access to them, destruction, alteration, blocking, copying, providing, disseminating personal data, as well as from other illegal actions regarding personal data;

- stop the transfer (distribution, provision, access) of personal data, stop the processing and destruction of personal data in the manner and cases provided by the Law on Personal Data;

- Perform other duties provided by the Law on Personal Data.

4. Basic rights and responsibilities of personal data subjects

4.1. Personal data subjects have the right to:

- Receive information regarding the processing of his personal data, except as provided by federal law. The information is provided to the personal data subject by the Operator in an accessible form and should not contain personal data belonging to other personal data subjects, except when there are legal grounds for disclosure of such personal data. The list of information and the procedure for obtaining it is established by the Law on Personal Data;

- require the operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take legal measures to protect their rights;

- to set the condition of prior consent in the processing of personal data in order to promote goods, works and services on the market;

- to revoke consent to the processing of personal data;

- to appeal to the authorized body for protection of the rights of personal data subjects or in court against illegal actions or inaction of the Operator in the processing of his personal data;

- To exercise other rights provided by law.

4.2. Personal data subjects are obliged to:

- provide the Operator with reliable data about himself;

- notify the Operator about the clarification (update, change) of their personal data.

4.3. Persons who have provided the Operator with inaccurate information about themselves or information about another personal data subject without the consent of the latter shall be liable in accordance with the law.

5. The Operator may process such personal data of the User

5.1. Full Name.

5.2. E-mail address.

5.3. Phone numbers.

5.4. The site also collects and processes impersonal data about visitors (including cookies) using Internet statistics services (Google Analytics and others).

6. Principles of personal data processing

6.1. The processing of personal data is carried out on a lawful and fair basis.

6.2. The processing of personal data is limited to the achievement of specific, predetermined and legitimate goals. Processing of personal data incompatible for the purpose of collecting personal data is not allowed.

6.3. It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other.

6.4. Only personal data that meet the purposes of their processing are subject to processing.

6.5. The content and volume of processed personal data correspond to the stated purposes of processing. Excessive processing of personal data in relation to the stated purposes of their processing is not allowed.

6.6. The processing of personal data ensures the accuracy of personal data, their sufficiency, and, if necessary, the relevance of the purposes of personal data processing. The Operator shall take the necessary measures and / or ensure that they are taken to delete or clarify incomplete or inaccurate data.

6.7. The storage of personal data is carried out in a form that allows determining the subject of personal data, no longer than required by the purpose of personal data processing, if the period of personal data storage is not established by federal law, contract to which the beneficiary or guarantor personal data object. The processed personal data shall be destroyed or depersonalized after the achievement of the purposes of processing or in case of loss of the need to achieve these purposes unless otherwise provided by federal law.

7. Purposes of personal data processing

7.1. Purpose of processing the User's personal data:

- informing the User by sending e-mails;

- conclusion, execution and termination of civil law agreements;

- providing the User with access to the services, information and / or materials contained on the website https://stariymlyn.com.ua/eng.

7.2. The Operator also has the right to send the User notifications about new products and services, special offers and various events. The User can always refuse to receive informational messages by sending an Email to the Operator to the e-mail address marynakozak1@gmail.com marked "Refusal to notify about new products and services and special offers."

7.3. Impersonal data of Users, which are collected through Internet statistics services, are used to collect information about the actions of Users on the site, improve the quality of the site and its content.

8. Procedure for collection, storage, transfer and other types of personal data processing

The security of personal data processed by the Operator is ensured by implementing the legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.

8.1. The Operator ensures the preservation of personal data and takes all possible measures to exclude access to personal data of unauthorized persons.

8.2. Under no circumstances will the User's personal data be transferred to third parties, except in cases related to compliance with applicable law or if the personal data subject has given consent to the Operator to transfer data to a third party to fulfill civil obligations. -legal agreement.

8.3. In case of inaccuracies in personal data, the User can update them independently by sending a message to the Operator to the e-mail address of the Operator marynakozak1@gmail.com marked "Update of personal data".

8.4. The term personal data processing is determined by the achievement of the purposes for which personal data were collected unless otherwise provided by contract or applicable law.

The User may at any time revoke his consent to the processing of personal data by sending an e-mail to the Operator to the e-mail address of the Operator marynakozak1@gmail.com marked "Withdrawal of consent to the processing of personal data".

8.5. All information collected by third-party services, including payment systems, communications and other service providers, is stored and processed by such persons (Operators) in accordance with their User Agreement and Privacy Policy. The subject of personal data and / or the User is obliged to get acquainted with the specified documents independently. The Operator is not responsible for the actions of third parties, including the service providers specified in this paragraph.

9. List of actions performed by the Operator with the received personal data

9.1. The operator collects, records, systematizes, accumulates, stores, clarifies (updates, changes), removes, uses, transfers (distributes, provides, accesses), depersonalizes, blocks, deletes and destroys personal data.

9.2. The operator performs automated processing of personal data with or without the receipt of the information received on information and telecommunications networks.

10. Confidentiality of personal data

The Operator and other persons who have gained access to personal data are obliged not to disclose to third parties and not to disseminate personal data without the consent of the personal data subject unless otherwise provided by federal law.

11. Final provisions

11.1. The user can get any clarification on issues related to the processing of his personal data by contacting the Operator by e-mail marynakozak1@gmail.com.

11.2. This document will reflect any changes in the policy of personal data processing by the Operator. The policy is valid indefinitely until it is replaced by a new version.

11.3. The current version of the Policy is freely available on the Internet at https://stariymlyn.com.ua/privacyeng.