Last updated: April 2024
This Data Protection and Privacy Policy, as amended from time to time (the “Policy”), describes and summarises the policies and procedures of the non-governmental organisation “OPEN DATA ASSOCIATION” (“we”, “our” or “us”) regarding the processing of the User’s (“you” or “your”) personal data (“Personal Data”) provided or obtained through the use of our website located at https://www.opendataassociation.org, including any content, functionality and services offered on or through it (the “Website”).
Please read this Policy carefully before you start using the Website. By visiting the Website, you agree to comply with this Policy. If you do not agree with the above, you should not use the Website.
For the purposes of this Policy, personal data has the meaning given to it in the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”) and other applicable legislation (together, the “Applicable Data Protection Laws”). We may collect certain personal data from you solely to the extent, for the purposes and on the terms described in this Policy. If you choose not to share such information, you may be unable to access certain features of this Website.
Protecting your personal data is extremely important to us. We strive to maintain the security, confidentiality and integrity of the personal data we hold and control, and to protect such data in accordance with applicable data protection laws. We regularly review our privacy and security practices and, where necessary, adapt them to new regulatory requirements, changes in legislation, our services and/or industry standards.
The information we may collect about you, in particular when you fill in forms on this Website, includes:
When you use this Website, we may also collect the name of your internet service provider, the website from which you visited this Website, the parts of this Website you visit, the date and duration of your visit, and information about the device you used to visit this Website (device type, operating system, screen resolution, language, the country you are in, web browser type and version, connection type and settings, IP address, crash data, etc.).
In the case of emails from us, we may use certain analytics tools to collect data, for example when you open our email or click on any links or banners contained in it.
We do not knowingly collect personal data from children. By providing your personal data, you confirm that you are at least 18 years old. If we learn that we have collected personal data from anyone under the age of 18, we will take steps to delete such information immediately.
The non-governmental organisation “OPEN DATA ASSOCIATION” is based in Ukraine. If you are located outside Ukraine, your information is collected in your country and then transferred to Ukraine — or to another country in which we (or our service providers, where applicable) operate. If you are located in a country of the European Union/European Economic Area, you should be aware that the European Commission has not recognised Ukraine as a country offering an adequate level of data protection, which entails certain risks of losing the protection afforded under the GDPR when your personal data is transferred outside the European Union/European Economic Area.
Research and development: we are always looking for ways to make the Website better, more advanced, more efficient, safer and more useful for you. We use aggregated data on how users use the Website, and feedback provided directly to us, to troubleshoot and identify areas for improvement. From time to time, we may conduct research and analysis of User behaviour to improve the Website.
Communicating with you: we may use your contact details to send you newsletters from time to time, designed to encourage engagement and help you get the most out of this Website. Except where we are required to do so by law (for example, to notify you of a data breach) or to ensure the normal use of the Website, you may opt out of these communications by contacting us at the email address given in the “Contact us” section below.
Legal compliance: where required by law or necessary to protect our legal rights and interests and those of others, we may use the information collected in connection with legal claims, compliance requirements, regulatory requirements and necessary disclosures.
Sharing and transfer. In exceptional cases, we may share your information with third parties if we believe this is reasonably necessary to:
As a rule, collected information will not be retained for more than 2 years. You may ask us to delete the information collected from you by contacting us at the email address given below in this Policy. We will delete or anonymise the information collected from you (so that you can no longer be identified) promptly and without undue delay, except where:
Our legal basis for processing your personal data depends on the purposes of processing. The non-governmental organisation “OPEN DATA ASSOCIATION” will collect and process your personal data on the following legal grounds:
To protect the information we process, we apply security measures covering the prevention, detection, investigation and remediation of security threats both during the transfer of personal data and after it has been received.
We do everything possible to protect your personal data in both electronic and physical form (for example, in printed form), following relevant internal policies and applying modern technical and organisational measures that comply with the current legislation of Ukraine on the secure and lawful processing of personal data.
In addition, we restrict access to your personal data, and such access is granted only to authorised internal staff, representatives or contractors of the non-governmental organisation “OPEN DATA ASSOCIATION” who need access to your personal data to perform specific tasks. Your personal data is stored on secure networks and is accessible only to a limited number of persons who are obliged to keep the relevant information confidential.
Although we use industry-standard safeguards to protect your personal data, the transmission of data over the internet (including by email) is never completely secure. We strive to protect personal data, but 100% security does not currently exist either online or offline. You should therefore take care when deciding what information to send us, especially if you do so on your own initiative.
As a data subject, you have certain rights in relation to your personal data.
Right of access: if you ask us, we will confirm whether we process your personal data and, if necessary, provide you with a copy of that data (together with other details). There are certain limitations and exceptions to this right: for example, where the information is confidential by law or where providing it to you would reveal the personal data of another person.
Right to data portability: in certain circumstances, you have the right to receive the personal data you have provided to us and reuse it elsewhere or send it to another organisation; this applies where our legal basis for processing personal data is consent or the performance of our contract with you, and the processing is carried out by automated means.
Right to rectification: you may ask us to update or correct any inaccurate personal data, or complete any incomplete personal data, relating to you. If you do so, we will take appropriate steps to verify and correct your personal data. Please let us know of any changes to your personal data so that we can keep it accurate and up to date.
Withdrawal of consent: where we rely on your explicit consent as our legal basis for processing your personal data, you have the right to withdraw that consent at any time by contacting us at the email address given in the “Contact us” section below. Withdrawing your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
Right to object: you may ask us to stop processing your personal data, and we will do so if we are:
Right to erasure: you may ask us to delete your personal data in certain circumstances, for example if you withdraw your consent. Where we comply with your request in accordance with applicable data protection law, the non-governmental organisation “OPEN DATA ASSOCIATION” will delete your personal data without undue delay. If you are entitled to erasure and we have shared your personal data with others, we will inform them of the erasure where possible. At your request, where possible and lawful, we will also tell you who we have shared your personal data with so that you can contact them directly.
Right to restriction: you may ask us to “block” or stop processing your personal data in certain circumstances (for example, if you contest the accuracy of the data or object to our processing), so that we no longer process that personal data until the restriction is lifted. If you are entitled to restriction and we have shared your personal data with others, we will inform them of the restriction where possible. At your request, where possible and lawful, we will also tell you who we have shared your personal data with so that you can contact them directly.
Rights related to automated individual decision-making, including profiling: you have the right not to be subject to decisions based solely on automated processing of your personal data, including profiling, unless they are necessary to enter into or perform a contract between you and us, or we do so on the basis of your explicit consent (which may be withdrawn).
Right to lodge a complaint: if you have concerns about how we process your personal data, you may report this to the relevant supervisory authority.
Please note that these rights are not absolute and in some cases are subject to conditions set out in applicable data protection law. For example, this may be the case where we have an overriding interest or a legal obligation to continue processing your personal data.
You can exercise the above rights, where applicable, by contacting us directly at the email address given in the “Contact us” section below. We will respond to your request within the period required by law and usually aim to resolve the matter within one month. We will ask you to provide satisfactory proof of your identity to ensure that your personal data is disclosed only to you.
We may amend this Policy from time to time, in which case the new Policy will replace the previous version. Changes will be communicated through updates on this Website. We recommend that you visit this Website regularly to make sure you agree with any changes or additions. If you do not agree with any changes to this Policy, you should stop using this Website immediately.
If any provision of this Policy is held by a court of competent jurisdiction to be invalid, unlawful or unenforceable for any reason, that provision shall be removed or limited to the minimum extent necessary so that the remaining provisions of this Policy remain in full force and effect.
If you have any questions about this Policy or our use of your personal data, or if you wish to make a request under this Policy, please contact us:
Non-governmental organisation “OPEN DATA ASSOCIATION”
info@opendataassociation.org