Privacy and personal data protection policy
Online store Santehpoliv
This Privacy Policy is official document of santehpoliv.com site Administration and defines procedure for processing and protecting information about individuals using this online store services.
1. General provisions and terms
This Policy developed according to current Ukrainian legislation, particularly Law of Ukraine "On Personal Data Protection" № 2297-VI, Law of Ukraine "On E-commerce", and considering European data protection standards (GDPR).
User's use of Online store site means agreement with this Privacy Policy and User personal data processing conditions. In case of disagreement with Policy terms User must stop using site.
Basic terms
- "Site Administration"
- Authorized persons managing santehpoliv.com site, acting on behalf of owner and organizing personal data processing.
- "Personal data"
- Information or set of information about individual who is identified or can be specifically identified.
- "Personal data processing"
- Any action or set of actions such as collection, registration, accumulation, storage, adaptation, change, renewal, use and distribution (dissemination, sale, transfer), anonymization, destruction of personal data.
- "Cookies"
- Small text files stored on User device for tracking session settings and collecting statistical data.
2. Composition and categories of collected data
Online store collects two types of User information: personal information User provides voluntarily, and technical information collected automatically.
User-provided information
When placing order, registering in personal account, subscribing to newsletter or filling feedback form, User provides:
- Surname, name, patronymic (necessary for recipient identification and warranty document preparation).
- Contact phone number (for order confirmation and courier communication).
- Email address (for sending fiscal receipts, order statuses and information messages).
- Delivery address (city, street, house number or delivery service branch number).
Technical information (automatic collection)
When visiting site our servers and analytics systems (e.g., Google Analytics) automatically record:
- User device IP address (used for geolocation and security, blocking fraudulent actions).
- Browser and operating system type.
- Viewed pages data, site dwell time and referral source.
- Cookies files (details in Section 6).
3. Data processing purpose and legal bases
Site Administration uses User personal data for following purposes:
- Purchase-sale contract performance: Order processing, logistics, warranty service provision. Legal basis: clause 3 part 1 art. 11 of Law (concluding and performing transaction).
- Customer support: Providing consultations on equipment selection, irrigation system calculation.
- Marketing and analytics: Informing about promotions, new items, special offers (only with User's separate consent).
- Accounting and tax reporting: Preparing primary documentation according to Ukrainian Tax Code requirements.
We store User order history to simplify future purchases and resolve warranty disputes.
4. Data transfer to third parties
Administration undertakes not to transfer personal data to third parties, except cases necessary for order fulfillment or provided by legislation.
Service provision partners
User agrees their data may be transferred to:
- Delivery services (Nova Poshta, Ukrposhta, courier services) for physical product delivery.
- Banks and financial institutions for cashless payment processing (if online payment selected).
- SMS/Email mailing services for order status notification.
5. Personal data subject rights
User as personal data subject has inalienable rights guaranteed by state according to art. 8 of Law of Ukraine "On Personal Data Protection". Understanding these rights is guarantee of transparent cooperation.
You have right to:
- Know about collection sources and location of your personal data, their processing purpose, location or residence (stay) of personal data owner or processor.
- Receive information about access conditions to personal data, particularly information about third parties to whom your personal data transferred.
- Access to your personal data.
- Receive response about whether your personal data processed, and receive content of such data no later than thirty calendar days from receipt of request.
- Present motivated demand to personal data owner with objection to processing your personal data.
- Demand change or destruction of your personal data by any owner and processor of personal data if this data processed unlawfully or inaccurate.
- Protection of your personal data from unlawful processing and accidental loss, destruction, damage.
- File complaints about your personal data processing to Ukrainian Parliament Commissioner for Human Rights or court.
- Apply legal remedies in case of violation of personal data protection legislation.
- Make reservations regarding limitation of right to process your personal data when giving consent.
- Withdraw consent to personal data processing.
- Know automatic processing mechanism of personal data.
- Protection from automated decision that has legal consequences for you.
6. Cookies and analytics use
Santehpoliv.com site uses cookies technology to improve User interaction.
Cookie types used
| Type | Purpose | Mandatory |
|---|---|---|
| Technical | Necessary for correct cart operation, authorization and language/currency settings storage. | Mandatory |
| Analytical | Allow analyzing attendance (through Google Analytics) in anonymized form to improve catalog structure. | Optional |
| Marketing | Used to show relevant advertising on third-party resources (remarketing). | Optional |
7. Data retention periods
Personal data stored for period necessary to achieve their processing purposes, but no longer than determined by legislation.
- For warranty obligations and tax reporting purposes, order data may be stored for 3 (three) years from last transaction (general statute of limitations period).
- Marketing database data (mailing) stored until User unsubscribes.
8. Information protection
Administration takes comprehensive organizational and technical measures to protect data:
- Using HTTPS secure data transmission protocol (SSL certificate).
- Limiting employee access to databases (only managers directly processing orders have access).
- Regular Site software updates to protect from vulnerabilities.
9. Policy changes and feedback
Administration reserves right to make changes to this Policy. New edition takes effect from moment of posting on Site. Continued use of Site after publication of changes means their acceptance.
In case of questions about this Policy, desire to update data or delete them, User can contact us: