1. General Provisions

This Privacy Policy on the processing of personal data is prepared in accordance with the Law of Ukraine “On Personal Data Protection” (hereinafter referred to as “the Law”) and defines the procedure for processing and measures to ensure the security of personal data on the website apogee-ua.com (hereinafter referred to as “the Operator”).
1.1. PurposeThe Operator undertakes to respect and protect human and civil rights and freedoms in the processing of personal data, including the right to privacy, personal and family confidentiality.
1.2. ScopeThis Policy applies to all information that the Operator may receive about visitors to the website apogee-ua.com.

2. Key Terms

2.1. Automated Processing of Personal DataProcessing of personal data by means of computer technology.
2.2. Blocking of Personal DataTemporary suspension of personal data processing (except when processing is necessary to clarify such data).
2.3. WebsiteA collection of graphic and informational materials, as well as software and databases that ensure their availability on the Internet at apogee-ua.com.
2.4. Personal Data Information SystemA set of personal data databases that allow processing through information technologies and technical means.
2.5. Depersonalization of Personal DataActions that make it impossible to determine the ownership of personal data to a specific user without additional information.
2.6. Processing of Personal DataAny action or set of actions performed with or without automated means, including collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, depersonalization, blocking, deletion, or destruction of personal data.
2.7. OperatorA legal entity or individual that, independently or jointly with others, organizes and carries out the processing of personal data, determines the purposes of processing, the composition of personal data to be processed, and the actions performed with such data.
2.8. Personal DataAny information that relates directly or indirectly to a specific user of the website apogee-ua.com.
2.9. Personal Data Authorized for DistributionPersonal data made available to an unlimited number of persons by the data subject through consent to their processing.
2.10. UserAny visitor of the website apogee-ua.com.
2.11. Provision of Personal DataActions aimed at disclosing personal data to a specific person or group of persons.
2.12. Dissemination of Personal DataAny actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or familiarizing an unlimited number of persons with them, including publication in mass media or on the Internet.
2.13. Cross-border Transfer of Personal DataTransfer of personal data to the territory of a foreign country to a foreign authority, foreign individual, or legal entity.
2.14. Destruction of Personal DataAny actions that result in the irreversible destruction of personal data with the impossibility of further recovery.

3. Main Rights and Obligations of the Operator

3.1. Operator’s Rights● To receive accurate information and documents containing personal data from the data subject.● In case of withdrawal of consent by the data subject, to continue processing without consent when permitted by the Law.● To independently determine the scope and list of measures required to ensure compliance with the Law.
3.2. Operator’s Obligations● To provide the data subject with information regarding the processing of their personal data upon request.● To organize data processing in accordance with the current legislation of Ukraine.● To respond to requests and inquiries of data subjects and their legal representatives.● To provide the authorized data protection body with the requested information within 30 days of receiving such a request.● To publish or otherwise ensure unrestricted access to this Policy.● To adopt legal, organizational, and technical measures to protect personal data against unauthorized or accidental access, destruction, alteration, blocking, copying, provision, or dissemination, as well as other unlawful actions.● To stop transferring and processing personal data and destroy them in cases prescribed by law.● To fulfill other obligations established by the Law.

4. Main Rights and Obligations of Data Subjects

4.1. Rights of Data Subjects● To obtain information related to the processing of their personal data, except as provided by law.● To request clarification, blocking, or destruction of personal data if they are incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the declared purpose of processing.● To require prior consent for processing their data for marketing purposes.● To withdraw consent for personal data processing.● To file a complaint with the authorized data protection body or in court regarding unlawful actions or inactions of the Operator.● To exercise other rights provided by the legislation of Ukraine.
4.2. Obligations of Data Subjects● To provide the Operator with accurate information about themselves.● To notify the Operator of updates or changes to their personal data.
4.3. LiabilityPersons who have provided false information about themselves or about another person without consent are liable under Ukrainian law.

5. Personal Data Processed by the Operator

5.1. Personal DataFull name;Phone numbers.
5.2. Non-personal (Anonymized) DataThe website collects and processes anonymized user data (including cookies) through web analytics services (Google Analytics and others).
5.3. Cross-border TransferCross-border transfer of personal data is carried out only to countries that ensure an adequate level of protection for data subjects’ rights.

6. Principles of Personal Data Processing

6.1. Processing of personal data shall be carried out lawfully and fairly.
6.2. Processing is limited to achieving specific, legitimate purposes.
6.3. Combining databases containing personal data for purposes that are incompatible with each other is not permitted.
6.4. Only personal data that meet the declared purposes of processing shall be processed.
6.5. The content and scope of processed personal data must not exceed what is necessary to achieve the stated purposes.
6.6. When processing personal data, accuracy, sufficiency, and relevance to the purposes of processing shall be ensured.
6.7. Personal data shall be stored in a form that allows identification of the data subject for no longer than is required for the purposes of processing, unless a longer storage period is established by law or by agreement with the data subject. Processed personal data shall be destroyed or depersonalized upon achievement of processing purposes or when such purposes are no longer relevant, unless otherwise provided by law.

7. Purposes of Personal Data Processing

The Operator processes the User’s personal data for the following purposes:

7.1. To identify the User registered on the website for the purpose of placing and managing orders.
7.2. To provide the User with access to personalized website resources.
7.3. To establish feedback with the User, including sending notifications, inquiries regarding the use of the website, and processing requests and applications from the User.
7.4. To determine the User’s location to ensure security and prevent fraud.
7.5. To confirm the accuracy and completeness of the personal data provided by the User.
7.6. To notify the User about the status of their order.
7.7. To process and receive payments, confirm tax or accounting documentation, and resolve payment-related disputes.
7.8. To provide the User with effective customer and technical support in case of issues related to website use.
7.9. To send updates about products, special offers, pricing information, newsletters, and other marketing materials if the User has given consent.
7.10. To provide access to website materials and services from partners.

8. Legal Grounds for Personal Data Processing

8.1. The Operator processes the User’s personal data only if such data have been provided by the User through a web form on the website apogee-ua.com and/or sent to the Operator via email. By completing forms and/or sending personal data, the User gives explicit consent to this Privacy Policy.

8.2. The Operator processes anonymized data about the User if it is permitted in the browser settings (e.g., saving cookies and using JavaScript technology).

9. Procedures for Collecting, Storing, Transferring, and Other Types of Processing of Personal Data

9.1. The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with legal requirements for personal data protection.

9.2. The Operator ensures the protection of personal data and takes all necessary measures to prevent unauthorized access, accidental loss, destruction, alteration, blocking, copying, distribution, and other unlawful actions by third parties.

9.3. Personal data shall not be disclosed to third parties, except in cases provided for by law or if required to fulfill an agreement with the User.

9.4. In the event of inaccuracies in personal data, the User may update them independently by sending a notification to the Operator’s email address moc.au-eegopa%40ofni
marked “Personal Data Update.”

9.5. The processing period of personal data is unlimited. The User may withdraw consent for processing at any time by sending a notification to the Operator via email marked “Withdrawal of Consent to Personal Data Processing.”

9.6. Cross-border transfer of personal data to foreign entities shall be carried out only if the foreign country ensures adequate protection of personal data rights.

9.7. Cross-border transfer of personal data to countries that do not meet the above criteria may take place only with written consent from the data subject or if the transfer is necessary for the performance of a contract to which the data subject is a party.

10. Final Provisions

0.1. The User may obtain any clarifications regarding issues related to personal data processing by contacting the Operator via email moc.au-eegopa%40ofni
.

10.2. This document reflects all current changes in the Operator’s privacy policy. The policy remains in effect indefinitely until replaced by a new version.

10.3. The Operator may update this Privacy Policy at any time without prior notice to the User. The new version of the Policy becomes effective from the moment it is posted on the website, unless otherwise specified.

10.4. All suggestions or questions regarding this Privacy Policy should be sent to the Operator at moc.au-eegopa%40ofni
.

10.5. The current version of the Privacy Policy is available online at the following address:
https://apogee-ua.com/politika-konfidenciynosti