PRIVACY POLICY

of the VITASAN Online Store

This Privacy Policy sets out the procedures for collecting, using, storing, transferring and protecting the personal data of users of the VITASAN online store.

By using the Website and/or providing personal data when placing an Order, registering, contacting the Seller or using other Website functions, the user confirms that they have reviewed this Privacy Policy.

1. GENERAL PROVISIONS

1.1. Website — the VITASAN online store located at vitasan.com.ua.

1.2. The Personal Data Controller within the operation of the Website is:

Individual Entrepreneur Kateryna Savina
(ФОП Савіна Катерина Олександрівна)

Ukrainian Taxpayer Registration Number (РНОКПП): 2844905948.

1.3. Personal data is processed in accordance with the laws of Ukraine on personal data protection and other applicable laws and regulations.

1.4. The Seller processes personal data only to the extent necessary for the relevant purpose or where another lawful basis for processing exists.

2. PERSONAL DATA THAT MAY BE PROCESSED

2.1. When using the Website, the following data may be processed:

  • first name, surname and patronymic, where applicable;

  • telephone number;

  • email address;

  • address and/or delivery location details;

  • Order information;

  • purchase history;

  • information necessary for processing and confirming payments, to the extent accessible to the Seller;

  • information provided by the user when contacting the Seller;

  • technical data relating to the use of the Website;

  • IP address and information about the user's device and browser where such information is processed by the Website's technical systems;

  • cookies and similar technical identifiers;

  • other information voluntarily provided by the user.

2.2. The Seller does not receive or store the user's full bank card details where payment is processed through a third-party payment service provider.

3. PURPOSES OF PERSONAL DATA PROCESSING

3.1. Personal data may be processed for the following purposes:

  • placing and fulfilling Orders;

  • identifying the Buyer;

  • confirming Orders;

  • processing and confirming payments;

  • arranging delivery;

  • communicating with the Buyer regarding an Order;

  • handling requests, complaints, exchanges and returns;

  • accounting and tax purposes;

  • ensuring the operation and security of the Website;

  • preventing fraud and abuse;

  • maintaining Order history;

  • complying with legal requirements;

  • establishing, exercising and protecting the Seller's rights and legitimate interests;

  • Website statistics and analytics to the extent permitted by law;

  • sending marketing communications where an appropriate lawful basis exists.

4. LEGAL BASIS FOR PROCESSING

4.1. Personal data is processed on the grounds provided for by the laws of Ukraine.

4.2. Depending on the circumstances, the legal basis may include:

  • the necessity to enter into or perform a contract;

  • compliance with a legal obligation applicable to the Seller;

  • the necessity to protect the rights and legitimate interests of the Seller or other persons within the limits permitted by law;

  • the data subject's consent where such consent is required;

  • another legal basis provided by applicable law.

4.3. Providing personal data objectively necessary for placing, paying for and delivering an Order is required for the proper fulfilment of that Order.

5. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

5.1. For the purposes of fulfilling Orders and ensuring operation of the Website, personal data may, to the extent necessary, be disclosed or made accessible to persons involved in the relevant processes, including:

  • postal service operators;

  • delivery services;

  • banks;

  • payment service providers;

  • email and SMS service providers;

  • hosting providers;

  • technical infrastructure providers;

  • CRM systems;

  • analytics services;

  • accountants, consultants and other persons involved in supporting the Seller's business activities;

  • public authorities where disclosure is required by law.

5.2. Personal data shall be disclosed only to the extent necessary for the relevant purpose or where another lawful basis for disclosure exists.

5.3. The Seller does not sell users' personal data to third parties.

5.4. Third-party services may independently determine certain aspects of the processing of data received by them in accordance with their own policies and the laws applicable to their activities.

6. DATA RETENTION

6.1. Personal data shall not be retained for longer than necessary for the purposes for which it is processed unless a longer retention period is required by law.

6.2. Information relating to Orders and payments may be retained for the period necessary for:

  • accounting and tax purposes;

  • compliance with legal requirements;

  • handling complaints and claims;

  • confirming performance of the contract;

  • establishing, exercising or defending legal claims.

6.3. Discontinuing use of the Website or withdrawing consent to a particular type of processing does not automatically result in deletion of information that the Seller is legally required or otherwise lawfully entitled to retain.

7. PERSONAL DATA SECURITY

7.1. The Seller takes organisational and technical measures to protect personal data against unlawful or accidental access, loss, alteration, disclosure, destruction and other unlawful actions.

7.2. Access to personal data is provided only to the extent necessary for the performance of the relevant functions.

7.3. Absolute security of information transmitted over the Internet cannot be technically guaranteed; however, the Seller applies reasonable and available security measures.

8. USER RIGHTS

8.1. Users have rights regarding their personal data to the extent provided by the laws of Ukraine.

8.2. In particular, users have the right to:

  • know the sources from which their personal data is collected and where such data is stored;

  • know the purpose of processing;

  • receive information about the conditions under which access to personal data is provided;

  • access their personal data;

  • receive information concerning the processing of their personal data;

  • submit a reasoned objection to the processing of personal data;

  • request correction or deletion of personal data in cases provided by law;

  • withdraw consent where processing is based specifically on consent;

  • protect their personal data against unlawful processing and accidental loss, destruction or damage;

  • exercise other rights provided by the laws of Ukraine.

8.3. Requests relating to personal data may be submitted to the Seller using the current contact details provided on the Website.

8.4. To protect personal data, the Seller may take reasonable steps to verify the identity of the applicant before responding to a request for access, correction or deletion of data.

9. DELETION OF PERSONAL DATA

9.1. A user may request deletion of their personal data in cases provided by law.

9.2. The Seller may continue to retain or process personal data where this is necessary for:

  • compliance with a legal obligation;

  • performance of a contract;

  • accounting or tax purposes;

  • handling complaints or claims;

  • establishing, exercising or defending legal claims;

  • other purposes permitted or required by law.

10. COOKIES AND SIMILAR TECHNOLOGIES

10.1. The Website may use cookies and similar technologies.

10.2. Cookies may be used for:

  • ensuring the technical operation of the Website;

  • operation of the shopping cart;

  • user authentication;

  • saving user preferences;

  • ensuring security;

  • preventing fraud;

  • statistics and analytics;

  • other permitted purposes.

10.3. Certain cookies may be set by third-party services integrated with the Website.

10.4. Users may restrict or delete cookies through their browser settings.

10.5. Disabling technically necessary cookies may affect the proper operation of certain Website functions.

10.6. Where applicable law requires separate user consent for a particular category of cookies, the relevant technologies shall be used subject to such requirements.

11. TRANSACTIONAL AND MARKETING COMMUNICATIONS

11.1. Communications necessary for placing and fulfilling an Order, including Order confirmation, payment, processing, dispatch, delivery or communications relating to a Buyer's request, may be sent regardless of consent to receive marketing communications where such communications are necessary for the performance of a contract or another lawful purpose.

11.2. Advertising and marketing communications shall be sent on the grounds and in accordance with the procedure established by the laws of Ukraine.

11.3. Where separate user consent is obtained for marketing communications, such consent is voluntary.

11.4. Refusal to receive marketing communications does not affect the user's ability to place Orders or use the main functions of the Website.

11.5. Users may unsubscribe from further electronic marketing communications using the method provided in the relevant communication or on the Website.

12. LINKS AND THIRD-PARTY SERVICES

12.1. The Website may contain links to or integrations with third-party services.

12.2. When a user follows a link to a third-party resource, the processing of personal data by that resource may be governed by its own privacy policy.

12.3. The Seller does not determine the data-processing practices of independent third-party resources unless otherwise arising from the nature of the relevant legal relationship.

13. CHANGES TO THIS PRIVACY POLICY

13.1. The Seller has the right to update this Privacy Policy in connection with changes in legislation, Website functionality, personal data processing practices or services used by the Website.

13.2. The current version of this Privacy Policy shall be published on the Website.

13.3. A new version shall apply from the date of its publication unless otherwise specified in the Privacy Policy itself or required by law.

14. CONTACT DETAILS OF THE PERSONAL DATA CONTROLLER

Personal Data Controller:
Individual Entrepreneur Kateryna Savina
(ФОП Савіна Катерина Олександрівна)

Ukrainian Taxpayer Registration Number (РНОКПП): 2844905948

Website: vitasan.com.ua

For matters relating to the processing of personal data, access to personal data, correction or deletion of personal data, users may contact the Personal Data Controller using the current contact details provided in the “Contacts” section of the VITASAN Website.