General Provisions
Sole trader Serhii Lymar (Tax ID 2849405513) (hereinafter – the Owner) offers any person (hereinafter – the User) to enter into an agreement on the processing of personal data under the terms set out below.
General Provisions
- This Public Offer (hereinafter – the Offer) is an official proposal of the Owner to enter into an agreement on the processing of personal data in accordance with Article 641 of the Civil Code of Ukraine and the Law of Ukraine “On Personal Data Protection” No. 2297-VI dated June 1, 2010.
- Acceptance of the Offer occurs when the User:
- places an order on the Website
- checks the box “I agree to the processing of personal data”
- continues using the Website after seeing a cookie pop-up notice
- This Offer is published at: https://alternativa.ua/privacy-notice.
Key Terms
- Personal Data (PD) – any information or set of information about an individual who is identified or can be identified.
- Processing of PD – any action or set of actions performed with Personal Data (collection, storage, use, transfer, deletion, etc.).
- Website – the web resource at https://alternativa.ua/, including all subdomains.
Information Collected
- When placing an order, the Owner collects the following data:
- Identification data: first name, last name, phone number, email
- Delivery data: town, Nova Poshta branch number
- Payment data: payment system tokens (WayForPay)
- Technical data: IP address, User-Agent, cookies, MS Clarity identifiers
- The Owner does not collect special categories of Personal Data (such as biometric, medical, or political data).
Purpose of Personal Data Processing
- Fulfillment of the purchase agreement (order processing, delivery, communication with the customer) – Article 6 of the Law of Ukraine No. 2297 “On Personal Data Protection” (performance of the contract).
- Sending transactional SMS messages (order confirmation, delivery status) – Article 6 (performance of the contract).
- Accounting and tax reporting – Article 6 (legal obligation).
- Website traffic and behavior analytics (MS Clarity, Cloudflare) – based on the User’s consent (Article 11).
- Fraud and abuse prevention – the Owner’s legitimate interest.
Personal Data Retention Period
- Personal Data is stored no longer than necessary for the purposes of processing:
- Order data – up to 3 years from the date of last interaction (for dispute protection)
- Accounting documentation (invoices, acts) – 7 years (according to tax regulations)
- Analytics data (Clarity) – up to 26 months or until cookies are deleted
- After these periods expire, Personal Data is anonymised or deleted.
Transfer of Personal Data to Third Parties
Personal Data may be transferred to the following third parties:
- Nova Poshta Ltd – for the purpose of delivering goods
- WayForPay (Ltd “Financial Company Contract House”) – for the purpose of processing online payments
- Cloudflare Inc. – for CDN services, DDoS protection and caching
No other transfers are made beyond those listed. Transfers to the United States are for technical purposes (analytics, security) and are protected by Standard Contractual Clauses (SCC).
User Rights
According to Article 8 of Law of Ukraine No. 2297 “On Personal Data Protection”, the User has the right to:
- know the sources of collection, the location of their Personal Data and the purpose of its processing;
- receive information about the conditions for accessing their Personal Data;
- access their Personal Data;
- request correction or deletion of Personal Data;
- withdraw consent to processing at any time;
- to protect their rights before the Ukrainian Parliament Commissioner for Human Rights (Ombudsman) or in court.
Cookies and Similar Technologies
- The Website uses:
- Necessary cookies – for cart operation and order placement (do not require consent);
- Analytical cookies (MS Clarity).
- The User may disable analytical cookies in their browser settings or via the cookies banner.
- Disabling analytics cookies does not affect the ability to place an order.
Personal Data Protection
- The Owner applies:
- TLS encryption (HTTPS);
- restricted access to Personal Data;
- regular software updates;
- system activity logs.
- In case of a Personal Data breach, the Owner notifies the Ukrainian Parliament Commissioner for Human Rights (Ombudsman) and affected subjects within 72 hours.
Withdrawal of Consent and Contact Information
- To withdraw consent, send a request to:
- After withdrawal, the Owner ceases processing Personal Data, except for data retained under legal requirements (accounting).
Final Provisions
- This Offer becomes effective upon publication and remains valid indefinitely.
- The Owner may amend the Offer. The updated version is published at https://alternativa.ua/privacy-notice.
- Continued use of the Website after changes constitutes acceptance of the updated Offer.
- All disputes shall be resolved through negotiations, and if an agreement cannot be reached, they shall be settled in court at the Owner’s place of registration.