1. General provisions
1.1. The conduct of business activities by "LA GELATERIA" LIMITED LIABILITY COMPANY, 03035, Ukraine, city of Kyiv, 39, Sim'i Idzikovskykh Street, EDRPOU code 33776619 (hereinafter referred to as "LA GELATERIA" LLC) involves the processing of personal data of counterparties and employees. "LA GELATERIA" LLC defines as a priority obligation to process personal data exclusively on the grounds and in the manner determined by the legislation of Ukraine.
1.2. The purpose of the Personal Data Processing Policy of La Gelateria LLC (hereinafter referred to as the Policy) is to ensure the appropriate level of accessibility, transparency and process of personal data processing in the course of conducting business activities.
1.3. The policy was developed in accordance with the Constitution of Ukraine, the laws of Ukraine "On the protection of personal data", "On information", the Privacy Policy of "LA GELATERIA" LLC and other internal regulatory documents of the company.
1.4. In this Policy, the terms are used in the meanings set forth in the laws of Ukraine "On the protection of personal data", "On information".
2. Scope and validity period of the Policy
2.1. The policy is mandatory for Website at La Gelateria LLC as part of the personal data processing process and applies to all structural divisions of La Gelateria LLC.
2.2. The term of validity of the Policy is not limited. "LA GELATERIA" LLC has the right to make changes to the Policy, which it informs about by posting the updated version on the official website of "LA GELATERIA" LLC https://lagelateriaitaliana.ua (hereinafter - the website).
3. Purpose of personal data processing
The purpose of processing personal data of "LA GELATERIA" LLC is the proper handling of information that constitutes the consumption profile, the settlement of issues in the field of labor relations and in the conduct of business activities in the manner determined by legislation.
The terms of processing and storage of personal data are determined taking into account the peculiarities of the business processes of La Gelateria LLC.
4. Principles of personal data processing
4.1. Transparency of the organization of the personal data processing process
The policy is published on the official website of La Gelateria LLC.
The grounds for processing personal data by "LA GELATERIA" LLC are:
The terms of processing and storage of personal data are determined taking into account the peculiarities of the business processes of La Gelateria LLC.
4.2. Availability of personal data
Personal data are available to the data subject and access to them is provided in accordance with the law on personal data protection.
4.3. Consent of the subject of personal data
"LA GELATERIA" LLC processes personal data of personal data subjects for the purpose of concluding transactions in their favor on the basis of the permission to process personal data, for the exercise of its powers and for the execution of a transaction to which the subject of personal data is a party (public offers, etc.).
The subject can voluntarily give "LA GELATERIA" LLC consent to the processing of his personal data for the purpose of receiving advertising and informational materials or for another purpose determined by "LA GELATERIA" LLC. The subject's consent to the processing of his personal data must be voluntary and informed. Consent can be given by the subject in written or electronic form, which makes it possible to conclude that it has been given. Documents (information) confirming the subject's consent to the processing of his personal data are stored by La Gelateria LLC for the duration of the processing of such data.
The procedure for access to personal data of third parties is determined by the terms of the consent of the subject of personal data provided by La Gelateria LLC to the processing of this data, or in accordance with the requirements of the law.
5. Peculiarities of processing and definition of personal data
5.1. Types of personal data processing
Personal data at "LA GELATERIA" LLC is processed with the use of automation tools, or without the use of such tools, taking into account the peculiarities of the business processes of "LA GELATERIA" LLC and the level of automation of such processes.
The procedure for processing, protection and access to personal data for different types of processing is determined by separate internal regulatory documents of the company.
5.2. Definition of subjects of personal data in case of use of web resources of La Gelateria LLC
Users using the web resources of La Gelateria LLC are subjects of personal data only from the date of their registration on the web resource and consent to the processing of their personal data.
5.3. Processing of personal data of subjects who enter into transactions with "LA GELATERIA" LLC
Legal entities are not subjects of personal data.
Processing of personal data of counterparties of La Gelateria LLC (individuals) is carried out in accordance with this Policy and legislation.
5.4. Use of personal data subject information
Information received from counterparties of La Gelateria LLC (the subject of personal data) is used for:
- other purposes in the amount sufficient for quality implementation of the economic activity of La Gelateria LLC.
5.5. Restrictions on further transfer (distribution) of personal data
"LA GELATERIA" LLC transfers the information received from the subjects of personal data in the framework of the performance of its duties to the subjects of personal data, in order to properly perform its duties, in accordance with the requirements of the law.
Dissemination of personal data involves the transfer of information about a natural person with the consent of the subject of personal data.
Distribution of personal data by LLC "LA GELATERIA" without the consent of the subject or a person authorized by him is allowed in cases defined by law, and only (if necessary) in the interests of national security, economic well-being and human rights.
6. Rights and obligations of the subject of personal data
6.1. Rights and obligations of the subject of personal data
The subject of personal data has the right to receive information about the procedure for processing his personal data, as well as other rights defined in Article 8 of the Law on the Protection of Personal Data.
The subject of personal data is obliged to act in accordance with the requirements of the law.
"LA GELATERIA" LLC is not responsible for the violation by the subject of personal data of "LA GELATERIA" LLC of the legislation on personal data protection.
6.2. The right to correct, destroy or block access to personal data
The subject of personal data has the right to free correction or removal (in whole or in part) of information about him in the information systems of La Gelateria LLC, in the electronic versions of the databases of the information and reference services of La Gelateria LLC, in accordance with the procedure determined by La Gelateria LLC, in the event that they are incorrect, inappropriate or excessive, or they are stored beyond the time required to provide relevant services. If the extraction of such data is technically impossible or not provided for by law, then such data are protected from their processing by blocking access to them or by other technically possible means.
6.3. The right of access to personal data
The subject of personal data has the right to free access to personal data in accordance with the procedure determined by La Gelateria LLC.
The subject of personal data has the right to request access to his personal data.
The request is made in accordance with Article 16 of the Law on the Protection of Personal Data.
"LA GELATERIA" LLC takes the necessary measures to clarify all the circumstances stated in the request.
6.4. Appealing the decision to delay or deny access to personal data
The appeal of the decision to delay or deny access to personal data is carried out in accordance with Article 18 of the Law on the Protection of Personal Data.
6.5. Withdrawal of consent to the processing of personal data
The subject of personal data has the right to withdraw consent to the processing of personal data by submitting a written request.
In case of withdrawal of consent to the processing of personal data, which was given when registering in the personal account of the web resource of La Gelateria LLC, such personal account is subject to deletion.
7. Processing and protection of personal data
7.1. Processing and protection of personal data of "LA GELATERIA" LLC is based on a risk-oriented approach to prevention, detection and elimination of threats of unauthorized access to personal data and/or illegal processing.
7.2. "LA GELATERIA" LLC undertakes to ensure the protection of personal data, which are processed in accordance with the requirements of the law, as well as the provisions of this Policy.
7.3. The directors of La Gelateria LLC are the persons and/or structural units responsible for the protection of personal data, in accordance with the legislation and this Policy.
7.4. The duties of the structural unit/person responsible for the organization of work related to the protection of personal data during their processing are defined in job instructions and regulations, other regulatory documents.
7.5. "LA GELATERIA" LLC cooperates with state authorities, officials responsible for the protection of personal data in Ukraine, in accordance with the requirements of the law.
This Policy is available for review subjects personal data and is posted on the official website LLC "LA GELATERIA".