Privacy Policy and Terms of Use for 

The website https://kyivhistorymuseum.org.ua/uk/ publishes this Privacy Policy and Terms of Use to prevent any misunderstandings or conflicts with visitors.

General Information

By using the website https://kyivhistorymuseum.org.ua/uk/ (hereinafter – the “Website”), you entrust us with your information. This Privacy Policy describes what data we get, why we gather it, and how we use it.

Personal data within the meaning of this Privacy Policy refers to any information that can identify you.
By using the Website, you give us permission to gather, record, accumulate, store, adapt, modify, update, use, distribute, anonymize, and remove personal data, including through the use of information systems, in accordance with the procedures outlined in this Privacy Policy.

We reserve the right to change this Privacy Policy at any time without personally notifying each user. Instead, we will publish the date of the latest changes made to the Privacy Policy. By continuing to use the portal after such changes, you agree to and accept them as part of the Privacy Policy.

When processing personal data, we comply with Privacy Policy. That implies:

• We clearly indicate the purposes for which we process personal data, as explained in this Privacy Statement;
  
  
• We aim to limit the amount of personal data we receive to only what is necessary for legitimate purposes;
  
  
• We first request your explicit consent to process your personal data in cases where your consent is required;
  
  
• We take appropriate security measures to protect your personal data and require the same from parties processing personal data on our behalf;
  
  

We respect your right to access your personal data or to correct or delete it upon your request.
If you have any questions or want to know exactly what data we store about you, please contact us.

Data Controller

A data controller is a legal or natural person who (alone or jointly with others) determines the purposes for which personal information is gathered or should be gathered, as well as the manner in which it is processed.

For the purposes of this Privacy Policy, we act as the Data Controller of your personal data.

Data Processors (or “Service Providers”)

A data processor (or “Service Provider”) is any natural or legal person who processes data on behalf of the Data Controller.

We may use the services of various Service Providers to increase the efficiency of processing your data.

Data Subject (or “User”)

A data subject is any living individual who uses our website and is the subject of Personal Data.

Personal Data gathering

To provide our services, we may gather the following categories of personal data:

• Information you provide to us: During registration, we may ask for personal information such as your last name, first name, patronymic, date of birth, gender, email address, and phone number. This information is stored in your account.
  
  

Automatic gathering of technical information: When you use the website, we automatically get certain information, such as your IP address, operating system type, browser type, and the date and time of your visit. This information may constitute personal data if it directly allows you to be identified.

Personal Data

During using the website, we may ask you to provide certain information that can identify an individual, which will be used to identify or contact you. Personally identifiable information includes, but is not limited to:

• Email address;
  
  
• Last name, first name, and patronymic;
  
  
• Address, including St., district, region, postal code, and city;
  
  
• Cookies and usage data.
  
  

We may use your personal data to send you newsletters, marketing or advertising materials, and other information that might interest you. You can choose not to receive any or all of these materials from us by clicking the “Unsubscribe” link or following the instructions provided in any email we send. The legal basis for this processing is Article 6(1)(b) of the GDPR.

Usage Data

We may also gather information about how the website is accessed and used (“Usage Data”). Usage Data may include information such as your computer’s Internet Protocol (IP) address, browser type and version, the pages of the website you visit, the date and time of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. We use this data to enable you to use our website and, if necessary, to review and defend our rights and the rights of third parties in the event of harm, violation of legal regulations, our Terms of Use, or the rights of third parties. The legal basis for this processing is Article 6(1)(b) of the GDPR. Log files are retained for as long as necessary for the respective purpose, generally no longer than 14 days.

The website server temporarily records the domain name or IP address of the visitor’s computer, as well as the date of access, files (file name and URL), HTTP response code, the website from which the visitor accessed our site, and the number of bytes transferred during the session.

Cookies

We may also automatically get certain information through the use of cookies. A cookie is a small file containing letters and numbers that is downloaded to your computer when you visit certain websites.

There are different ways to manage cookies. You can:

• Disable and delete them at your discretion;
  
  
• Change your browser settings to limit the use of cookies;
  
  
• Restrict your browser’s ability to track your website browsing history.
  
  

For more information about cookies, you can read our Cookie Policy.

Use of Personal Data

Visitors’ personal data is used to facilitate their use of the website, to identify their interests and preferences in implementing editorial policies, and to analyze user behavior, including in collaboration with advertising partners. Personal data is used in accordance with the Laws of Ukraine “On Personal Data Protection.”

We may receive information for a number of purposes related to our business operations, which may include the following:

Communication – via phone, mail, email, and/or web forms.
The following categories of data are gathered:

• Name;
• Email address.

This information is used to identify the user contacting us and to provide an appropriate response.

Compilation and analysis of statistics to improve website performance
The following categories of data are gathered:

Information about online activity, including, but not limited to, web browsing history, search history, and information about the consumer’s interaction with the website, application, or online advertising.

We use the this data for various purposes:

• To maintain the website works;
  
  
• To notify you about website updates;
  
  
• To enable you to use interactive features of the website when you choose to do so;
  
  
• To provide user support;
  
  
• To get analytical or valuable information to help us improve the website;
  
  
• To monitor website usage;
  
  
• To detect, prevent, and respond to technical issues;
  
  
• To provide you with news, special offers, and general information about other products, services, and events we offer that are similar to those you have already purchased or shown interest in, except when you choose not to receive such information.
  
  

Legal basis for processing personal data according to the General Data Protection Regulation (GDPR)

If you reside in the European Economic Area (EEA), the legal basis for gathering and using personal data described in this Privacy Policy depends on the personal data we get and the specific context in which we gather it. The legal basis is Article 6(1)(b) of the GDPR.

We will process your personal data to:

• Satisfy our legitimate interests, including for:
  
  
  • Conducting corporate operations (e.g., corporate restructuring, sale of assets, or transfer of rights to assets, mergers); and
    
    
  • Protecting our property rights, ensuring compliance with our Terms of Use and legal provisions, as well as asserting and defending legal claims.
    
    
• Fulfill our legal obligations, any court orders, or other mandatory requirements;
  
  

With your consent for other purposes, such as subscribing to a newsletter; in this case, you may withdraw your consent at any time.

Sharing and Disclosure of Personal Data

We do not share your personal data with third parties, except with your consent or under the conditions specified in this Privacy Policy.

We consider it our duty to comply with legal requirements, and therefore, we may disclose your personal data in certain cases. In particular, we may disclose relevant personal data if we consider it necessary and justified to comply with the law, legal proceedings, investigations, or requests from other governmental authorities, as well as in response to complaints, to protect against fraud, abuse, or improper or unlawful use of the website.

With your consent, we may transfer personal data to third parties. The terms of such transfers and the duration of data use will be defined by your consent.

Third-Party Services

From time to time, we may use third-party services to process personal data. These services may include research, analytics, cookies, email distribution, and more. When using any third-party services for data processing, we enter into data processing agreements that require each third party to implement appropriate technical and organizational measures to protect your personal data.

Information Security

We take the security of personal data seriously. We implement appropriate security measures to prevent misuse of personal data and unauthorized access. This ensures that only specifically authorized individuals have access to your data, that access is protected, and that our security measures are regularly reviewed.

Third-Party Websites

This Privacy Statement does not apply to third-party websites linked from our website. We cannot guarantee that these third parties will process your personal data in a reliable or secure manner. We recommend that you review the privacy statements of these websites before using them.

Retention Period of Personal Data

The website reserves the right to retain personal data for an unlimited period. Personal data may be deleted upon your request or in cases provided for by law.

Access and Modification of Your Data

If you have questions or wish to know what personal data we hold about you, please contact us. Always clearly identify yourself so that we can ensure we do not modify or delete data belonging to someone else. We will provide the requested information only after receiving a verifiable user request. You can contact us using the information provided below. You have the following rights:

• You may request access to the data we process about you.
  
  
• You may object to the processing of your personal data.
  
  
• You may request a review of the data we process about you in a commonly used format.
  
  
• You may request correction or deletion of data if it is inaccurate, outdated, or no longer relevant, or request the restriction of data processing.

Children

Our website is not intended to attract children, and we do not intend to gather personal data from children who have not reached the age of consent in their country of residence. Therefore, we ask children who have not reached the age of consent not to provide us with any personal data.

Contact Information

If you have any questions and/or comments regarding our Privacy Policy and this statement, please contact us using the following details:

Kyiv History Museum

Kyiv, 7 Bohdan Khmelnytsky St.

Website: https://kyivhistorymuseum.org.ua/

Email: 1000_100@ukr.net

Phone: +38 (044) 520 28 22