This Privacy Policy and the procedure for processing personal data LLC “Phoenix Relax Park”, EDRPOU code 42815621, Ukraine, 78593, Ivano-Frankivsk region, Nadviryanskyi district, Polyanytsia village, Preluky plot, house 557 (hereinafter referred to as the Supplier), developed in accordance with the Law of Ukraine «On Personal Data Protection» (hereinafter referred to as the Law) and other current legislation of Ukraine in the field of personal data processing and ensuring the confidentiality of information. This Policy comes into force on “02” October 2025, is posted on the Site and is valid until the new version of the Policy comes into force. The Policy contains information on the procedure for processing personal data, the composition of personal data processed, the purpose and grounds for processing personal data, categories of personal data subjects, the Supplier’s interaction with third parties, terms of access to personal data, contact information for the Supplier’s buyers regarding obtaining access, making changes or deleting their personal data and addressing any questions that may arise from the personal data subject regarding the protection of their personal data, as well as requirements for ensuring the confidentiality of information about the Supplier’s pre-contractual/contractual relations with buyers and any third parties. The Supplier processes personal data solely for the purpose specified in the Policy and with the Buyer's Consent.

Definition of terms

Personal database - a named set of organized personal data in electronic form and/or in the form of personal data files; Owner of a personal database - a natural or legal person who, by law or with the consent of the subject of personal data, is granted the right to process these data, who approves the purpose of processing personal data in this database, establishes the composition of these data and the procedures for their processing; Consent - a voluntary expression of the will of an individual (provided that he is informed) to grant permission to process his personal data in accordance with the formulated purpose of their processing, expressed in writing or in a form that allows you to conclude that consent has been granted; Processing of personal data - any action (operation) or set of actions, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision of access), depersonalization, blocking, deletion, destruction, etc. of personal data; Personal data - information or a set of information about an individual who is identified or can be specifically identified; Personal data manager - an individual or legal entity who is granted the right to process this data by the owner of the personal data base or by the Law. A person who is entrusted by the owner and/or the owner of the personal data base to carry out technical work with the personal data base without access to the content of personal data is not a personal data manager; Website - the Supplier's software or a set of software tools used by the Supplier, which allow the latter to accept, process and service orders for remote purchase of goods/services, provide Buyers with information about goods/services, etc. Personal data subject - an individual whose personal data is processed; Third party - any person, except for the subject of personal data, the owner or controller of personal data and the Commissioner of the Verkhovna Rada of Ukraine for Human Rights, to whom the owner or controller of personal data transfers personal data; Personal data that pose a special risk - personal data on racial, ethnic and national origin; political, religious or ideological beliefs; membership in political parties and/or organizations, trade unions, religious organizations or public organizations of ideological orientation; health status; sexual life; biometric data; genetic data; bringing to administrative or criminal liability; application of measures against a person within the framework of a pre-trial investigation; application of measures against a person provided for by the Law of Ukraine "On Operational and Investigative Activities"; commission of certain types of violence against a person; location and/or routes of movement of a person.

Categories of personal data subjects

The Owner and Controller of personal data is the Supplier. The place of processing personal data is located at the location of the Supplier, at the address . The Controller of personal data may also be a natural or legal person who is granted the right by the Supplier or by law to process Personal Data on behalf of the Supplier. The subject of personal data is a natural person who is in pre-contractual/contractual relations with the Supplier regarding the purchase of the Supplier's goods/services (hereinafter referred to as the Buyer). The Buyer agrees that during the processing the Supplier has the right to transfer his Personal Data to Third Parties if this is necessary to achieve the purposes of the processing and provided that such third parties comply with the confidentiality and security of the Buyer's personal data

Purpose and grounds for processing Personal Data

The purpose of processing the Buyers' Personal Data is to ensure civil law, tax and accounting relations, in particular to ensure the implementation of relations in the economic sphere, the provision/reception and payment for purchased goods/services, the sending of information and marketing mailings (news, promotions, information about promotions, promotional codes and discounts, personal recommendations, personal discounts and offers), which contain information about goods and/or services, advertising and commercial offers for such goods and/or services, etc. In the event of a change in the specified purpose of processing Personal Data to a new purpose that is incompatible with the previous one, for further processing of Personal Data, the Supplier, as the Owner and Processor of personal data, must obtain the Buyer's consent to the processing of his data in accordance with the changed purpose. The basis for processing the Buyer's personal data is the Buyer's unconditional, indefinite and irrevocable Consent, which is provided by placing a checkmark to grant permission to process your personal data in accordance with the purpose of their processing/use of the Site as formulated in the Policy. By providing Consent to the processing of his personal data, the Buyer agrees to include his personal data in the Personal Data Base, the owner of which is the Supplier. The Buyer confirms that he has read and agrees with the terms of this Policy, the rights granted to him as a personal data subject in accordance with Article 8 of the Law of Ukraine "On Personal Data Protection", namely:
1) to know about the sources of collection, location of their personal data, purpose of their processing, location or place of residence (stay) of the owner or manager of personal data or to give the appropriate instruction to obtain this information to persons authorized by him, except in cases established by law;
2) receive information about the conditions for providing access to personal data, in particular information about third parties to whom his personal data is transferred;
3) access to your personal data;
4) receive no later than thirty calendar days from the date of receipt of the request, except in cases provided for by law, a response on whether his personal data is being processed, as well as receive the content of such personal data;
5) submit a reasoned request to the personal data controller objecting to the processing of their personal data;
6) submit a reasoned request for the modification or destruction of their personal data by any controller and processor of personal data if these data are processed illegally or are inaccurate;
7) to protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision, as well as to protect against the provision of information that is unreliable or defames the honor, dignity and business reputation of an individual;
8) submit complaints about the processing of their personal data to the Commissioner or to the court;
9) apply legal remedies in case of violation of personal data protection legislation;
10) make reservations regarding the restriction of the right to process their personal data when providing consent;
11) withdraw consent to the processing of personal data;
12) know the mechanism of automatic processing of personal data;
13) to be protected against automated decision-making that produces legal effects for him/her. The Buyer gives his/her consent to the Supplier for the cross-border transfer of his/her personal data and confirms that during the cross-border transfer of Personal Data, the recipients of such personal data may be located in other countries. The Supplier does not process Personal Data that pose a particular risk.

Composition of personal data

The composition of the Buyer's Personal Data includes: last name, first name and (if available) patronymic; – mobile phone number; – email address; – other information that the Supplier receives in connection with entering into contractual and/or pre-contractual relations with the Buyer, including during the term of such relations. The primary sources of information about the Buyer are: documents issued in his name; documents signed by him; information that the Buyer provides about himself, including on the Site. The Buyer undertakes to provide the Supplier with complete, accurate, reliable and up-to-date information, data and data, including personal data, and to bear full responsibility for this. The Buyer is liable (including criminal) for the use of information, data and data of third parties.

Procedure for processing personal data

The Supplier processes personal data using automation tools, as well as without the use of such tools. For the Processing of Personal Data, the Supplier has the right to involve Third Parties, for whose actions the Supplier is responsible as for its own. The period of storage of personal data is the entire period of the contractual relationship between the Buyer and the Supplier, as well as 1 year after termination of contractual relations with the Buyer. The Supplier ensures secure storage of Personal Data using various methods and levels of protection designed to prevent unauthorized access to Personal Data. The Supplier's information protection system includes: installation of technical security and personal data protection equipment; setting passwords for all hardware and software; selection and installation of antivirus programs; other means of personal data protection. The deletion/destruction of the Buyer's personal data is carried out on the basis of a motivated written request of the Buyer and upon the expiration of the period of storage of Personal Data, as well as in other cases specified by the current legislation of Ukraine. The change of personal data is carried out immediately in the event of the detection of information about the Buyer that is not true. The Buyer agrees that during the processing the Supplier has the right to transfer his Personal Data to Third Parties if this is necessary to achieve the purposes of processing and provided that such Third Parties comply with the confidentiality and security of Personal Data. Transfer
Personal data in accordance with this paragraph does not require separate consent or notification of the Buyer and occurs without notification and consent of the Buyer about such transfer. Access to Personal Data is provided to persons who carry out processing, only if the specified person has undertaken obligations to ensure compliance with the requirements of the Law and is able to provide them. Access to the Buyer's Personal Data is provided in response to a request for access to personal data, which indicates: - surname, name and patronymic, place of residence (place of stay) and details of the document certifying the individual submitting the request (for an individual - the applicant); - name, location of the legal entity, EDRPOU code of the legal entity, position, surname, name and patronymic of the person certifying the request; confirmation that the content of the request corresponds to the powers of the legal entity (for a legal entity - the applicant); – surname, first name and patronymic, as well as other information that allows you to identify the Buyer in respect of whom the request is made; – list of Personal Data requested; – purpose and/or legal grounds for the request. The deadline for responding to the request is thirty calendar days from the date of its receipt, unless otherwise provided by the current legislation of Ukraine.

Privacy Policy

The Buyer and the Supplier have agreed that any information, whether written, oral, electronic, visual, graphic or in any other form, provided before, during or after the pre-contractual/contractual relationship between the Buyer and the Supplier is confidential, with the exception of information that is generally known and/or publicly available or obtained on legal grounds from a third party without violating the terms of this Policy. Misuse of confidential information means, in particular, but not exclusively, the use of confidential information for personal purposes not related to the cooperation of the parties, direct or indirect provision or disclosure of confidential information to third parties without the permission of the owner of such information. The Buyer and the Supplier are obliged to keep confidential, not to disclose or disclose (orally and/or in writing, including in electronic form) each other's confidential information, and to take all necessary measures to ensure the safety of confidential information and not to use it for an unlawful purpose. By using the Site, the Buyer consents to the use of Cookies (hereinafter referred to as Cookies). Cookies are small text files stored on the Buyer's device with which he uses the Site. Cookies are stored in a folder designated for them. Cookies allow you to save data entered once in the form fields of the Site, so that they do not need to be entered again the next time you visit the Site or when switching between individual functions of the Site. The Buyer may reject the use of Cookies by setting a corresponding prohibition in the settings of his device. At the same time, the Buyer understands that rejecting and/or prohibiting the use of Cookies on the Buyer's device may lead to restrictions on the use of certain functions of the Site. By using the Site, the Buyer consents to the use of web analytics tools by the Supplier. These tools are used for general analysis of the use of the Site and obtaining raw data to improve the functionality of the Site. Information obtained by the Supplier during the use of web analytics (for example, IP address and browser type) may be transmitted in anonymous form to the web analytics service server, stored and processed there. By using the appropriate settings of his device, the Buyer may prohibit the relevant web analytics service from receiving data and storing Cookies of such services on his computer. In case of any comments, requests or complaints regarding the processing of personal data owned by the Supplier and the confidentiality of information, it is necessary to contact the Supplier by e-mail: +38 097 805 21 06 , or at the address: Ivano-Frankivsk region, Nadviryanskyi district, Polyanytsia village, Preluky plot, house 557.