User Agreement and Personal Data Protection Policy

This document defines the rules for processing and protecting personal data in databases owned by the Seller (White Flowers) in accordance with the Law of Ukraine “On Personal Data Protection” .

Contents

  1. General Terms and Scope of Application
  2. List of Personal Data Databases
  3. Purpose of Processing Personal Data
  4. Procedure for Processing Personal Data
  5. Location of the Personal Data Database
  6. Disclosure Conditions
  7. Protection of Personal Data
  8. Rights of the Data Subject
  9. Requests from Data Subjects
  10. State Registration of the Personal Data Database

1. General Terms and Scope of Application

The following terms are used in this Policy:

  • Personal data database — a named set of organized personal data in electronic or physical form.
  • Responsible person — a designated person ensuring protection of personal data during processing.
  • Owner of the personal data database — a person (individual or legal entity) with the right to determine purpose, composition, and methods of processing personal data.
  • Personal data — information or a set of information about an identifiable natural person.
  • Processing of personal data — any action involving the collection, registration, storage, adaptation, modification, use, dissemination, or destruction of data.
  • Consent — a voluntary and documented expression of will allowing processing of personal data for a defined purpose.

This Policy is mandatory for all employees of White Flowers who have access to or process personal data while performing their duties.

2. List of Personal Data Databases

The Seller is the owner of the following personal data databases:

  • Database of clients and business partners.

3. Purpose of Processing Personal Data

The purpose of processing personal data is to ensure the proper performance of civil and commercial relationships, provision and receipt of goods and services, and compliance with accounting and tax obligations in accordance with Ukrainian legislation.

4. Procedure for Processing Personal Data

  • Processing is carried out with the consent of the data subject.
  • Consent can be given in written or electronic form, including through a mark on a website form or document.
  • Notification of inclusion in the database, purpose of data collection, and recipient information is provided when entering into civil-legal relations.
  • Processing of sensitive categories of data (political, religious, health, or sexual information) is prohibited.

5. Location of the Personal Data Database

The databases listed above are stored at the Seller’s registered business address.

6. Disclosure Conditions

  • Disclosure of personal data to third parties is carried out only with the consent of the data subject or in cases provided by law.
  • Third parties are granted access only after confirming compliance with data protection requirements.
  • Decisions to deny or postpone access may be appealed in court.

7. Protection of Personal Data

  • The Seller applies technical and organizational measures to prevent unauthorized access, loss, or modification of data.
  • A responsible person is appointed to monitor compliance with Ukrainian data protection laws.
  • Employees with access to personal data are obliged to maintain confidentiality even after termination of employment.
  • Personal data is stored only for as long as necessary for the processing purpose.

8. Rights of the Data Subject

The data subject has the right to:

  • Know the location, purpose, and owner of the personal data database containing their information;
  • Access their personal data and obtain information about third parties who receive it;
  • Request correction or deletion of inaccurate or unlawfully processed data;
  • Object to processing or withdraw consent;
  • Seek protection through competent authorities or the courts.

9. Requests from Data Subjects

  • Requests regarding personal data may be submitted directly to the data owner.
  • Access to one’s own personal data is provided free of charge.
  • Requests are reviewed within 10 working days and fulfilled within 30 calendar days, unless otherwise provided by law.

10. State Registration of the Personal Data Database

State registration of personal data databases is carried out in accordance with Article 9 of the Law of Ukraine “On Personal Data Protection” .

© White Flowers, Poltava — All rights reserved.
This policy is published in accordance with Ukrainian law.