1. General Provisions

1.1. This Policy has been developed in compliance with the requirements of the Law of Ukraine "On Personal Data Protection". The terms used in this Policy are interpreted in accordance with their definitions in the law and taking into account the "Terms and Definitions" section. https://tiara.in.ua/ guarantees confidentiality regarding the personal data received from Website Visitors.

1.2. Please note that this Policy has been prepared taking into account the latest changes in data protection legislation, specifically meeting the requirements of the General Data Protection Regulation (EU Regulation No. 2016/679 of April 27, 2016, or GDPR).

2. Terms and Definitions

2.1. Personal Data — information or a set of information about an individual who is identified or can be specifically identified based on provided data.

2.2. Website — an online information resource located at https://tiara.in.ua/.

2.3. Website Visitor — a personal data subject, a person who accesses the Website via the Internet and uses its materials and information, and who may subsequently become a Buyer under the Public Offer Agreement.

2.4. Website Administration (hereinafter – Administration) — employees who control and manage the resources of the Website. Specifically, they represent the interests of and act on behalf of https://tiara.in.ua/, process and organize the processing of personal data provided by Visitors, and determine the purposes of such processing, composition, and type of data subject to processing; hereinafter referred to as the Seller in accordance with the Public Offer Agreement.

2.5. IP Address — a unique network address of a node in a computer network built under the IP protocol.

3. Methods of Personal Data Processing

3.1. The Administration processes personal data of Website Visitors using the following methods: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, usage, transfer (provision), erasure, and destruction of personal data.

3.2. Personal data of Website Visitors is stored exclusively on electronic media and is used for the purposes specified in clause 4.3 of this Policy.

3.3. The Administration reserves the right to entrust the processing of personal data to a third party in compliance with the requirements provided by the Law of Ukraine "On Personal Data Protection".

3.4. The disclosure of personal data of Website Visitors upon request of state or local government authorities is performed in accordance with current Ukrainian legislation.

4. Concept and Scope of Personal Data, Purpose of Processing

4.1. The list of personal data subject to protection by the Administration is formed on the basis of the Law of Ukraine "On Personal Data Protection".

4.2. While browsing the Website or reading information, certain technical data about the computer used by the personal data subject is automatically logged. When visiting the Website, the Administration collects the following technical information: IP address; cookies information; browser type and operating system; access time; and the referrer URL from which the visitor arrived.

4.3. The Administration processes and protects the personal data of individuals who complete any feedback forms on the Website for the following purposes:

  • Providing interested persons with information regarding products specified on the Website and order processing;
  • Fulfilling contract obligations;
  • Sending informational, marketing, and promotional messages to Website Visitors with their consent via SMS/phone or email;
  • Providing consultations to Website Visitors on purchasing products listed on the Website;
  • Reporting and statistical analysis;
  • Website administration;
  • Verifying the completeness and accuracy of data provided by the Visitor;
  • Updating the Visitor on the status of their placed order.

4.4. List of processed personal data: full name, contact phone number, and email address.

4.5. Any individual who fills out an application form on the Website voluntarily provides the Administration with the personal data specified in clause 4.4 of this Policy.

4.6. By submitting any forms on the Website, the personal data subject voluntarily agrees to this Policy and consents to the processing of personal data listed in clause 4.4.

4.7. Processing of personal data is carried out without time limitation, by any legal means, including automated personal data processing systems.

4.8. The Administration implements necessary organizational and technical measures to protect the Visitor's personal information from unauthorized or accidental access, destruction, blocking, copying, distribution, or other unlawful actions by third parties.

4.9. If a Visitor disagrees with the terms of this Privacy Policy, they must immediately stop using the Website and leave it.

4.10. The Administration does not verify the authenticity of the personal data provided by Visitors.

5. Rights and Obligations of the Data Subject (Website Visitor)

5.1. The personal data subject has the right to:

  • Request clarification, updating, blocking, or destruction of their personal data;
  • Request notification to all persons who were previously informed of incorrect or incomplete personal data regarding any corrections or additions made;
  • Appeal unlawful actions or omissions regarding the processing of their personal data in accordance with the law;
  • Exercise other rights provided under Article 8 of the Law of Ukraine "On Personal Data Protection".

5.1.5. Website Visitors undertake to provide accurate and truthful personal data.

5.1.6. Consent to personal data processing is granted by the Website Visitor for the entire duration required by the Administration to achieve processing goals.

5.2. Consent to personal data processing may be revoked by the Visitor at any time by submitting a written request to the Administration's electronic or mobile communication channels.

5.3. Persons who transfer information about another personal data subject through the Website without having proper consent bear liability in accordance with Ukrainian legislation.

6. Rights and Obligations of the Website Administration

6.1. The Administration does not process any special categories of personal data.

6.2. The Visitor's personal data may be transferred to authorized state and judicial bodies only on lawful grounds and upon an official legal request.

6.3. The Administration is obligated to ensure confidentiality and protection of the Visitor's personal data.

6.4. The Administration undertakes to notify third parties receiving the Visitor's personal data that such data may only be used for the specified purposes and require confirmation that this rule is obeyed.

6.5. The Administration reserves the right to use information obtained during the performance of a public offer agreement and/or sales contract.

7. Ensuring Protection and Security of Personal Data

7.1. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. To fully guarantee data protection within Ukraine, this Privacy Policy complies with Ukrainian laws, including the Law "On Personal Data Protection", "On Electronic Commerce", "On Information", and other relevant regulatory acts.

7.2. The Administration applies technological and operational security measures to protect information provided by Visitors against unauthorized access, disclosure, alteration, blocking, or destruction.

7.3. The protective measures used by the Administration include:

  • Application of legal, technical, and organizational measures to ensure personal data safety;
  • Usage of anti-virus software on Administration equipment;
  • Implementation of access control rules regarding Personal Data and ongoing monitoring of security protocols;
  • Restricting personal data access exclusively to authorized personnel who have signed non-disclosure agreements.
8. Dispute Resolution

8.1. The Visitor and the Administration resolve all disputes and disagreements arising under this Privacy Policy through amicable negotiations.

8.2. If an agreement cannot be reached, the dispute may be submitted for judicial review in accordance with applicable procedural laws.

9. Final Provisions

9.1. This Policy is subject to amendment or supplementation in the event of relevant changes to Ukrainian personal data protection legislation.

9.2. This Policy may be amended unilaterally by the Administration at any time at its sole discretion.

9.3. All relations involving the Administration regarding personal data processing that are not directly addressed in this Policy are governed by current Ukrainian data protection laws.

9.4. This Policy is publicly available for review on the Website.

9.5. Compliance monitoring with this Policy is conducted by the Administration or the designated person responsible for personal data processing organization.