Privacy Policy

Last updated on July 26, 2023

Main information about the processing of personal data
Data ControllerThe Data Controller is DRUK.UA, LLC, or the entity with which the Subscriber has commercial relations.
Purpose of processing personal dataThe collection of personal data is carried out to provide you with our services, send commercial messages, accomplish internal business purposes, respond to your inquiries, and receive feedback.
Legal grounds for processing

Legal grounds for processing

  • Processing of personal data collected on this website is based on the performance of a contract;
  • Collection of personal data for the purpose of supporting the operation and control of our website, including enhancing the website and the services offered to users, is based on legitimate interest. Necessary permissions will be obtained for the use of non-essential cookies;
  • Direct marketing communications are based on legitimate interest.
Recipients of personal dataAffiliated entities and third-party service providers of DRUK.UA, LLC.
Data subject rightsYou have the right to access, correct, and delete your personal data, as well as other rights as explained in the "Additional Information" section.
Additional informationMore detailed information about the aspects mentioned above and other details are provided in the "Additional Information" section below.

Additional Information

The company DRUK.UA, llc strives to protect the confidentiality of personal data that it collects and processes. The company DRUK.UA, llc operates in accordance with the current data protection legislation. As employees of DRUK.UA, llc, we aim to inform you about how we collect, use, and disclose personal data (information that can identify you).

Who collects and processes personal data?

This Privacy Policy applies to personal data that DRUK.UA, llc may collect through this website ("Website"). This Privacy Policy does not apply to the collection, use, or disclosure of information by any other resources except for the Website. This Privacy Policy does not cover personal data that the company DRUK.UA, llc may process concerning you as a traveler or consumer of products offered in the DRUK System.

What personal data is processed, and how is it collected?

Personal data is information about a person whose identity is known or can be identified. This does not include information that does not allow the identification of an individual, such as non-personal or aggregated data. DRUK.UA, llc processes various types of personal data that can be grouped as follows:

  • Identification data - name and surname, username, or other identifier;
  • Contact data - address, email address, and phone number;
  • Technical data - IP address, login data, browsing history, and usage patterns;
  • Commercial/usage data - information about how company products and services are used;
  • Profile data - information about interests, preferences, feedback, and survey responses;
  • Marketing and communication data - preferences regarding marketing materials from DRUK.UA, llc and communication preferences.

Cookie and Advertising: DRUK.UA, llc or third parties may collect your personal data through cookies. For detailed information about the cookies we use and the purposes for which we use them, please refer to our Cookie Policy. You have the option to consent or decline the use of cookies through the cookie notice when you first visit the Website. Note that once you consent to the use of cookies, this notice will no longer be displayed. However, you can always disable cookies.

For what purposes are your personal data used?

The collected personal data may be used for the following purposes:

  • Providing you with our services and communicating with you regarding the services offered through this Website;
  • Sending you important information about the Website, changes to our terms, rules, and policies, and/or other administrative information;
  • Granting you access to an account in DRUK.UA, LLC products;
  • Pursuing our internal business objectives, including data analysis, auditing, developing new products, improving our website, enhancing our services, and identifying usage trends. Such information may be used as both personal data and non-personal data;
  • Detecting, preventing, or resolving security or technical issues related to the services provided through this Website;
  • Responding to your requests (e.g., sending news and updated information, as well as providing answers to your inquiries);
  • Obtaining feedback (e.g., through conducting surveys);
  • Informing you via email about our products and services, special offers, promotions, and sending any other advertising materials that we believe might interest you.

What are the legal bases for processing personal data?

The legal bases for processing personal data collected through this Website are the provision of access to DRUK.UA, LLC products.

In the case of collecting personal data for direct marketing purposes, the legal basis will be legitimate interest.

In the case of collecting personal data to support the operation of this Website and its control, including improving the website and the services offered to users, the legal basis will be legitimate interest. For the use of non-mandatory cookies, appropriate permissions will be obtained.

Opting out of receiving email marketing messages / Right to opt-out

If you no longer wish to receive advertising messages from us via email, you can opt-out at any time or withdraw your consent to the processing of your personal information using the appropriate tool.

To whom are personal data disclosed?

DRUK.UA, LLC has the right to disclose personal data to its affiliated entities, agents, and third-party service providers, such as providers of information technology services, security services, legal, financial/accounting services, and other similar professional consultants. Additionally, DRUK.UA, LLC may disclose personal data to third parties if the company's management decides to sell, transfer, or merge parts of the business or assets. In the event of a change of business ownership, the person who acquires the business or its part has the right to use personal data in accordance with the terms set forth in this Privacy Notice. In such data transfers, DRUK.UA, LLC will require the implementation of appropriate technical and organizational security measures to protect and lawfully process personal data.

DRUK.UA, LLC allows affiliated entities and third-party service providers to process personal data on behalf of DRUK.UA, LLC only for specified purposes and in accordance with its instructions. Additional information about affiliated entities and third-party service providers engaged by DRUK.UA, LLC to process personal data on its behalf can be obtained using the contact information provided in the "Contact Us" section of this Privacy Notice. To obtain the necessary information, the inquiry should specify the specific affiliated entities and third-party service providers.

In addition, DRUK.UA, LLC may disclose personal data if required by law, court decision, or regulatory request, by a government or law enforcement agency, or in other cases when required or permitted by law.

Transfer of personal data abroad

The transfer of your personal data by DRUK.UA, LLC to its affiliated entities and third-party service providers that process such data on behalf of DRUK.UA, LLC may involve the transfer of Personal Data outside the European Economic Area (EEA). If personal data is transferred to another country outside the EEA, its proper protection is ensured through contractual or other arrangements with affiliated entities and third-party service providers. In the case of such data transfers, one of the following appropriate security measures may be implemented:

  • Personal data is transferred to countries that the European Commission considers reliable in ensuring the adequate protection of personal data;
  • Standard data protection clauses approved by the European Commission, which provide personal data transmitted with the same level of protection as in the EEA;
  • In the case of personal data being transferred to affiliated entities and third-party service providers located in the USA, the EU-US Privacy Shield Program is used, which provides personal data with the same level of protection as in the EEA.

For more detailed information about the appropriate security measures implemented when transferring personal data outside the EEA, please use the contact information provided below in the "Contact Us" section. When making a request for this information, indicate that you are interested in the transfer of personal data outside the EEA.

Personal Data Retention

DRUK.UA, LLC retains personal data for as long as necessary to achieve the purposes for which the data was collected, including compliance with legal requirements, accounting, or reporting.

Please note that in any forms where you provide us with your data, we may specify the time period during which we will retain the data, as defined in the specific proposals in the form.

Security and Integrity of Personal Data

We employ appropriate organizational, technical, and administrative measures to protect personal data under our control from loss and unauthorized processing. However, no data transmission over the internet or data storage system can be considered 100% secure. Please refrain from sending confidential information via email. If you have reason to believe that your communication with us is no longer secure (for example, if you believe that the security of any of your accounts in our system has been compromised), please promptly notify us of the problem in accordance with the contact section of this website. Please be aware that email communication may not have the required level of security, and therefore, you should not include your credit card information in electronic messages to us.

When processing personal data on behalf of DRUK.UA, LLC, access to it is limited to persons who need it to perform official duties and have signed a confidentiality agreement with the company. Personal data is processed in accordance with the instructions of DRUK.UA, LLC.

DRUK.UA, LLC has procedures for responding to personal data breaches and notifies the data owners and the regulatory authority about any breaches, as required by law.

Your Rights

If you wish to access, view, correct, update, or otherwise limit the use (including deletion) of your personal data that you have previously provided to us, you may send us a letter in Ukrainian or English to the email address [email protected]. For security reasons, we reserve the right to verify your identity before providing you with access to personal data. Additionally, DRUK.UA, LLC may not have the authority to grant access, make changes, or delete certain personal data.

DRUK.UA, LLC is committed to carefully review each of your requests and/or claims and to carefully process your Personal Data; however, you have the right to lodge any claim or complaint with the relevant data protection authorities if you are not satisfied with the response provided by DRUK.UA, LLC.

Third-Party Websites and Sending Messages through the Website

This Privacy Policy does not regulate, and we are not responsible for, the privacy, information, or other procedures of any third party, including, among others, third parties operating any websites to which there is a link published on this Website, or any third-party platform, such as a social media platform, to which DRUK.UA, LLC may transfer personal data upon your request. In case personal data is transferred in this way, their use is governed by the terms of the third-party platform to which you requested your personal data to be transferred. The placement of a link on the Website does not mean that we endorse the website to which it leads.

This Website may allow you to send messages to other persons related to the Website's content. If you wish to use this feature, we may ask you to provide us with the email addresses of such persons. By using this feature, you confirm that you have the right to use and provide us with the names and email addresses of such recipients. DRUK.UA, LLC is not responsible for the consequences of sending such messages to recipients, as we execute your request.

Children's Use of the Website

The Website is not intended for children, and we ask them not to provide personal data through the Website.

Contact Us

If you have any questions about this Privacy Policy, please contact us at the email address [email protected]

Updates

This privacy notice was published by DRUK.UA, LLC and may be updated at any time. Date of last update: July 26, 2023.