Privacy and Personal Data Processing Policy
Last updated: 21 July 2026
1. General Provisions
This Policy explains what personal data the CHARITABLE ORGANIZATION “INTERNATIONAL CHARITY FOUNDATION “SUPPORT SERVICE”” collects and processes when you use the website, submit a request for assistance, or otherwise contact the Foundation.
The controller of personal data is the CHARITABLE ORGANIZATION “INTERNATIONAL CHARITY FOUNDATION “SUPPORT SERVICE””, Unified State Register code 45245580, hereinafter referred to as the Foundation.
The Foundation processes personal data in accordance with the laws of Ukraine and, where applicable, the General Data Protection Regulation of the European Union — the GDPR.
Merely using the website does not constitute consent to analytics cookies or to any other processing that requires separate consent.
2. Personal Data We Process
2.1. Data You Provide
When you submit a request for assistance, the Foundation may collect:
- your surname, first name and patronymic;
- your telephone number and email address;
- passport or ID card details;
- your taxpayer registration number, known in Ukraine as the RNOKPP;
- your registered place of residence;
- information about your military unit or subdivision;
- a description of the need and other information included in your request;
- copies of documents required to verify and review your request;
- information provided during further communication with the Foundation.
Please do not provide data or documents that are unrelated to your request.
2.2. Technical Data
When you use the website, the following technical data may be processed automatically:
- IP address;
- browser, device and operating system type;
- date and time of the visit;
- pages visited;
- technical information about requests and errors;
- your cookie consent settings.
2.3. Analytics Data
Subject to your consent, Google Analytics 4 may record page views, navigation between pages, interactions with website elements and progress through individual steps of a form.
The Foundation does not transmit to Google Analytics the contents of forms, uploaded documents, contact details, passport information or any other data that directly identifies an applicant.
3. Purposes and Legal Bases of Processing
The Foundation processes personal data for the following purposes:
- receiving, verifying and reviewing requests for assistance;
- verifying the applicant’s identity and affiliation with the relevant unit;
- communicating with the applicant;
- arranging, delivering and documenting assistance;
- maintaining records and preparing reports;
- complying with legal requirements;
- protecting the website and information systems;
- analysing and improving the website.
Depending on the purpose, the legal basis for processing may be:
- your consent;
- the need to review and fulfil your request;
- compliance with legal obligations;
- the legitimate interests of the Foundation, provided that such interests are not overridden by your rights and freedoms.
6. Data Retention
The Foundation retains personal data for as long as necessary to:
- review and fulfil a request;
- document and verify the assistance provided;
- maintain records and prepare reports;
- comply with legal requirements;
- protect the rights and legitimate interests of the Foundation.
After the relevant purposes have been fulfilled, the data is deleted, destroyed or anonymised, unless further retention is required by law.
Analytics data is retained for the periods configured in the relevant analytics services.
7. Personal Data Security
The Foundation applies organisational and technical measures to protect personal data against loss, unlawful use, alteration, disclosure, destruction and unauthorised access.
Access to personal data is restricted according to the duties of authorised team members.
However, no method of transmitting or storing information can guarantee absolute security.
8. Your Rights
You have the right to:
- know what personal data the Foundation processes about you, for what purposes and to whom it may be disclosed;
- obtain access to your personal data;
- request the correction of inaccurate or incomplete data;
- object to processing where permitted by law;
- request the deletion of your data where there is no lawful basis for its continued processing;
- withdraw previously given consent;
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or bring a claim before a court.
Where the GDPR applies, you may also have the right to restriction of processing, data portability and the right to lodge a complaint with the relevant supervisory authority.
Before responding to a request concerning personal data, the Foundation may ask you to verify your identity.
9. Requirement to Provide Data
Providing personal data is voluntary. However, data and documents marked as mandatory in the form are required to verify and review the request.
If such information is not provided or is incomplete, the Foundation may be unable to review the request or provide assistance.
The Foundation does not make decisions concerning applicants solely by automated means.
Passport details, the RNOKPP, residential address, contact information and copies of documents are not made publicly available.
A person’s name, photographs or other identifying information may be published only where there is a lawful basis or the person has given separate consent.
10. Changes to This Policy
The Foundation may update this Policy to reflect changes in legislation, the operation of the website or its personal data processing practices.
The current version is published on the website together with the date of the latest update and takes effect upon publication unless otherwise stated.
11. Contact Information
For questions about personal data processing, withdrawal of consent or the exercise of your rights, please contact the Foundation:
Email: [email protected]
Telephone: +38 (093) 236-64-77