Terms and conditions of use of the site

Content

 

1. General Provisions and Scope of Application.

2. Composition and Content of Personal Data.

3. Purpose, Limits, and Deadlines for Processing Personal Data.

4. Location of Personal Data.

5. Conditions for Disclosing Information about Personal Data to Third Parties.

6. Protection of Personal Data.

7. User's (Personal Data Subject's) Rights.

8. Procedure for Handling Requests from Personal Data Subjects (Users).

9. Deletion of User's Personal Data.

10. Amendments to the Regulation (Policy).

 

1. General Provisions and Scope of Application.

1.1. This Policy on the Processing and Protection of Personal Data (hereinafter referred to as the "Policy") is developed by LLC "BERUF COMPANY" (EDRPOU code: 40548969, address: Kyiv-Svyatoshynsky district, village Mila, str. Komarova, 23B, Kyiv, Ukraine, hereinafter referred to as the "Company" and/or "Data Controller") in accordance with the current legislation of Ukraine, including but not limited to the Law of Ukraine "On Personal Data Protection" of June 1, 2010, No. 2297-VI, and establishes the procedure for obtaining, collecting, accumulating, storing, processing, using, ensuring protection, and disclosing personal data (hereinafter referred to as "Data" and/or "Personal Data") through the website: beryf.com.ua (hereinafter referred to as the "Website") and/or related services and tools.

 

1.2. By registering on the Website beryf.com.ua and starting to use the online store or attempting to place an order without prior registration, the User (Buyer) grants permission and provides explicit consent for the processing of their personal data under the terms and conditions set out below, as well as confirms their familiarity with this Policy, its acceptance, and agreement with its content.

Under the online platform "Beryf" in this Policy, the Website is meant and used as an "Online Store."

 

1.3. The term "User" (Buyer, consumer) in this Policy refers to any natural or legal person who has access to the online store and uses its functionality and services.

 

1.4. The Data Controller of the personal data of Users is LLC "BERUF COMPANY" (EDRPOU code: 40548969, address: Kyiv-Svyatoshynsky district, village Mila, str. Komarova, 23B, Kyiv, Ukraine).

 

1.5. In this Policy, all terms are used in the meaning defined in the Law of Ukraine "On Personal Data Protection" of June 1, 2010, No. 2297-VI.

 

1.6. The Website may contain links to other websites (solely for informational purposes). When following links to other websites, the provisions of this Policy will not apply to those websites. Therefore, the Company recommends reviewing the privacy and personal data policies of each website before providing personal data by which you can be identified.

 

1.7. This Policy is mandatory for implementation by the responsible person and employees of the online store who directly process or have access to personal data in connection with the performance of their official duties.

 

2. Composition and Content of Personal Data.

 

2.1. The term "Data" refers to any information directly or indirectly related to a specific User. This may include:

Name, surname, patronymic name (if available), phone number, email address, date of birth, the presence of children, gender, the presence of a car and its VIN number, language of communication, address of residence/location/delivery, information about the User's actions when using the online store, IP address, data about the devices used by the User (device type, browser type, device operating system), message history (information contained in correspondence between the User and the administration of the online store), history of reviews or comments, other information used for communication and provided by the User in the registration form and/or when filling out their profile on the online store, during surveys (by filling out a questionnaire or by other means), or information obtained during verbal communication between the User and the Site administration, information provided during payment processing in the online store. This list of personal data is not constant and obligatory for all Users; it depends on the needs and preferences of the User and the operations they perform on the online store.

2.2. Users are responsible for all information posted by them in public accounts. Users must be aware of all risks associated with disclosing their address or information about their exact location.

 

3. Purpose, Scope, Legal Basis, and Processing Period of Personal Data.

 

3.1. The purpose of processing personal data is:

 

- Ensuring the implementation of civil, economic, and tax relations, performing functions, powers, and obligations assigned to the Company in accordance with the current legislation of Ukraine.

- Identifying the client as a User of the online store, contacting the User, including for the provision of services, payment processing, delivery, conducting settlement operations, providing reports, maintaining accounting and managerial records, creating and implementing bonus programs, loyalty programs, sending mailings by mail, email, or phone number, including sending commercial offers, information about promotions and news of the online store, and/or providing financial services to Users of the online store (provided by third parties and/or partners of the Company), improving the quality of goods/services, forming product ratings and offers of the online store, analyzing User activity, keyword searching, traffic management on the online store, analyzing and forecasting User preferences and interests to provide the most relevant and advantageous personal offers or promotional offers, conducting scientific research and analytical activities, sending informational and marketing newsletters (company news, promotions, information about promotions, promo codes and discounts, personal recommendations, personal discounts, and offers) containing information about products and/or services, advertising and commercial offers regarding such products and/or services, and other purposes.

- For sending newsletters, commercial offers, messages about promotions, loyalty programs, bonus programs, and/or for sending messages about the functioning of the online store by mail, email, or phone number, by sending informational messages. The User can unsubscribe from receiving informational and marketing newsletters at any time through the appropriate settings on the Site.

- To fulfill other obligations imposed by law on the Data Controller, to protect the legitimate interests of the data controller or a third party to whom the personal data is transferred.

3.2. The legal basis for processing the personal data of Users of the online platform is the consent of the User to the processing of their personal data expressed through the use of the online platform.

 

3.3. The Company does not process data related to race, nationality, political views, religious and other beliefs, membership in public associations. Information that characterizes the physiological characteristics of Users, based on which their identity can be determined, is also not processed.

 

3.4. Processing of the User's personal data is carried out without any time limitations, in any lawful manner, including in information systems of personal data using automation tools or without using such tools. The terms of processing and storage of Data are determined based on the purposes of Data processing, as well as the conditions specified in agreements concluded with Users in accordance with the requirements of the current legislation of Ukraine. Personal data is processed and stored for as long as necessary to achieve the purpose of processing specified in clause 3.1 of this Policy.

 

At the same time, the User has the right to request the termination of the processing and storage of their personal data or to delete their data from their personal account. The deletion of the User's account or the receipt of a corresponding request to terminate the processing and storage of the User's personal data is the basis for the immediate termination of the processing and storage of such Data by the Data Controller, followed by their deletion.

 

3.5. Users can change/delete personal information or opt-out of receiving messages at any time by using their Personal Account or by sending a message to the email address: info@beruf.com.ua with the subject line "Personal Data." Deleting a User's account at the User's initiative is carried out in accordance with the terms specified in the User Agreement and the Website's Terms of Use.

 

3.6. In the event of the absence of activity in a User's account for a period exceeding 3 (three) years, the Company reserves the right to delete the User's account, including all personal data stored in the account, which means that the User will no longer be able to access and use it.

 

4. Location of Personal Data.

4.1. The personal data of Internet Shop Users are processed and protected on secure servers of the Company.

 

5. Conditions for Disclosing Information about Personal Data to Third Parties.

 

5.1. The Company may exchange Data with affiliated entities of the Company (companies acting on the basis of joint ownership) that may process and use Data for the purposes specified in this Regulation.

 

5.2. Disclosure of Data occurs when the User orders goods/services in the Internet Shop, in the volume necessary for the identification of the User, execution, and processing of the User's order (including for the purpose of proper payment for goods/services, ensuring the receipt of financial services by the User, etc.).

 

5.3. The Company may provide certain de-identified information and grant permission to collect such de-personalized information directly on the website using appropriate technologies (data that does not allow the identification of Users individually) to third-party service providers, trusted partners, or authorized researchers for the purpose of conducting marketing research, improving the effectiveness of advertising offers and campaigns (by offering more relevant offers from the Internet Shop), analytical activities, better understanding which advertisements, products, and/or services may interest Users, improving the overall quality and efficiency of goods/services on the Online platform, and so on.

 

5.4. The Company processes Data on a lawful and fair basis: Data is not disclosed to third parties and is not disseminated without the consent of the User, except as provided by the current legislation of Ukraine and only in the interests of national security, economic prosperity, and human rights, including but not limited to:

 

- At the justified requests of state authorities that have the right to request and receive such Data;

- For the purposes of combating fraud and abuses on the Online platform.

 

5.5. In cases of transferring personal data provided for in Section 5 of this Regulation, informing the User about the transfer of their personal data is at the discretion of the Company.

 

6. Protection of Personal Data.

 

6.1. The owner of personal data is equipped with systemic and software and technical means and communication tools that prevent loss, theft, unauthorized destruction, distortion, forgery, copying of information and comply with the requirements of international and national standards.

Employees/authorized persons who directly process and/or have access to personal data in connection with the performance of their official (employment) duties are obliged to comply with the requirements of Ukrainian legislation in the field of personal data protection and internal documents regarding the processing and protection of personal data.

 

6.2. Employees/authorized persons who have access to personal data, including processing them, are obliged not to disclose personal data in any way that was entrusted to them or became known to them in connection with the performance of professional or official or employment duties. This obligation applies after they have ceased activities related to personal data, except as provided by law.

 

6.3. Personal data should not be stored longer than necessary for the purpose for which such data is stored but in any case not longer than the data retention period determined by this Regulation with the consent of the User.

 

6.4. For the purpose of protecting User accounts and their personal data from unauthorized access, two-factor authentication is additionally used, which is an additional level of protection for the user's account.

 

6.5. This Regulation establishes internal policies and procedures for the collection, processing, use, disclosure of personal information or personal data when using the website https://beruf.com.ua/. The data owner has developed and implemented internal rules regarding work with personal data, including the procedure for deleting certain data after deleting the User's personal account, the levels of access by internal Company employees to User data, and a secure procedure for exchanging such data within the Company. The Company regularly audits its security systems to identify opportunities to improve the secure storage and use of User data. Additionally, the Company complies with the requirements of the Standard Procedure for Processing Personal Data, approved by the Order of the Verkhovna Rada of Ukraine dated January 8, 2014, No. 1/02-14 (link), to the extent that it relates specifically to personal data.

 

7. User's Rights (Personal Data Subject).

 

7.1. The personal data subject (User) has the right:

 

- to know the location of personal data containing their personal information, its purpose and name, the location and/or residence (stay) of the data controller or processor, or to authorize authorized persons to obtain this information, except as provided by law;

- to receive information about the terms of access to personal data, including information about third parties to whom their personal data are transferred;

- to access their personal data;

- to manage the procedure for sending messages through the appropriate settings on the Online platform.

- to receive, no later than thirty calendar days from the date of receipt of the request, except as provided by law, a response regarding whether their personal data is stored and to receive the content of their personal data that is stored;

- to make a motivated request with objections to the processing of their personal data by state authorities, local self-government bodies in the exercise of their powers provided by law;

- to make a motivated request to change or destroy their personal data by any data controller and processor if this data is processed illegally or is inaccurate;

- to protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, non-provision, or untimely provision, as well as protection against the provision of information that is inaccurate or discredits the honor, dignity, and business reputation of an individual;

- to apply for the protection of their rights regarding personal data to state authorities, local self-government bodies whose authority includes the protection of personal data;

- to apply legal remedies in case of violation of personal data protection laws.

 

8. Procedure for Handling Requests from the Personal Data Subject (User).

 

8.1. The personal data subject (User) has the right to receive any information about themselves from any subject of relations related to personal data without specifying the purpose of the request, except as provided by law.

 

8.2. Access by the personal data subject (User) to data about themselves is free.

 

8.3. The personal data subject (User) submits a request for access (hereinafter - the request) to personal data to the data controller.

 

The request should include:

 

- last name, first name, patronymic, place of residence (place of stay), and details of the document that identifies the personal data subject (User);

other information that allows identifying the personal data subject (User);

- information about personal data with respect to which the request is made or information about the controller or processor;

- a list of personal data being requested.

 

8.4. The term for considering the request for its satisfaction cannot exceed ten working days from the date of its receipt.

 

8.5. Within this period, the Data Controller informs the personal data subject (User) that the request will be satisfied or that the relevant personal data is not subject to disclosure, specifying the grounds determined by the relevant legal act.

 

8.6. The request is satisfied within thirty calendar days from the date of its receipt unless otherwise provided by law.

 

9. Deletion of User's Personal Data.

 

9.1. Deletion of the User's personal data can be carried out at the User's request by performing the following actions:

 

submitting a written request to cease processing personal data to the email address info@beruf.com.ua with the subject "Personal Data";

taking actions to delete the User's data from the User's Personal Cabinet, which is located on the Online platform.

9.2. Personal data of Users are deleted or destroyed in the manner established in accordance with the requirements of the Law.

 

In addition to the cases provided in clause 9.1., the User's personal data is also subject to deletion in case of:

 

- issuing a relevant prescription of the Authorized Person of the Verkhovna Rada of Ukraine on Human Rights (hereinafter - the Authorized Person) or certain persons of the Secretariat of the Authorized Person of the Verkhovna Rada of Ukraine on Human Rights;

- the legal force of a court decision on the deletion or destruction of personal data.

 

9.3. Users may at any time revoke their consent to the processing of Personal Data. This can be done by sending a request to the email address: info@beruf.com.ua with the subject "Personal Data." In this case, the Company's employees review such a request for the deletion of personal data and delete the User's personal data from the Company's information systems.

 

9.4. In the event that the User independently takes actions to delete Personal Data from the Personal Cabinet, the destruction of the User's personal data from the Company's information systems is carried out automatically.

 

9.5. The destruction of Users' personal data is carried out in a way that excludes the possibility of further recovery of such personal data, as well as the identification of the User.

 

10. Amendments to the Regulation.

 

10.1. The Company may update this Regulation from time to time unilaterally without notifying the User of such changes. The new version of the Regulation comes into force from the moment of its publication on the Online platform unless otherwise provided by the new version of the Regulation. The current version of the Regulation is always available at the address: https://beruf.com.ua/links/terms_of_use.

 

10.2. If any changes have been made to the Regulation with which the User disagrees, the User is obliged to stop using the Internet Shop. The fact of continuing to use the Internet Shop confirms the User's consent and acceptance of the relevant version of the Regulation.

 

Last updated: August 29, 2023.