2. Definition of terms.

2.1. Personal data - information or a set of information about a natural person who is identified or can be specifically identified.

2.2. Processing of personal data - any action or set of actions, such as collection, registration, accumulation, storage, adaptation, change, renewal, use and distribution (distribution, implementation, transfer), depersonalization, destruction of personal data, including using information (automated) systems.

2.3. The website is a collection of graphic and informational materials, as well as computer programs and databases, which ensure their availability on the Internet at the network address https://recovery.city.kharkiv.ua/

2.4. Automated processing of personal data – processing of personal data using computer equipment.

2.5. User is a visitor to the website who is a natural person.

2.6. The operator is a natural or legal person who independently or jointly with other authorized persons organizes and (or) processes personal data, and also determines the purpose of processing personal data, the composition of this data and the procedures for their processing.

2.7. Anonymization of personal data is the removal of information that allows direct or indirect identification of a person.

2.8. Destruction of personal data – actions as a result of which personal data are destroyed (deleted) irrevocably with the impossibility of further renewal of personal data in the information system and (or) destruction of all physical media on which specific personal data are recorded.

3. Composition of personal data

3.1. The composition of personal data collected by the Operator includes:

- surname, name (hereinafter - full name);

- e-mail address;

3.2. Also, cookies are collected on the website only with the consent of the User in order to ensure the effective operation of the website for authorized Users.

3.3. Further interpretation of the above is covered by the general term Personal data.

4. Purpose and procedure of personal data processing.

4.1. The purpose of personal data processing is to extract analytical information regarding website visit statistics, interaction with the User;

4.2. The Operator is empowered to send messages to the User regarding receiving feedback on Pilot Projects.

4.3. The procedure for processing personal data includes their security, which is ensured through the implementation of legal, organizational and technical measures necessary to fulfill the requirements of current legislation in the field of personal data protection.

4.4. The operator undertakes to ensure the non-disclosure of personal data, as well as technical possibilities for access to them by unauthorized persons.

4.5. With the consent of the User or directly provided by the current legislation, personal data may be transferred to third parties to ensure the purpose of their processing. In other cases, transfer of personal data to third parties is prohibited.

4.6. Relevant conditions for the termination of personal data processing are, in particular, but not exclusively, the achievement of the purpose of their processing, the expiration of the storage period, the withdrawal of the User's consent by sending a corresponding e-mail to the Operator's address, which is provided for in this Policy, detection of the illegality of personal data processing.

5. Legal grounds for personal data processing.

5.1. The direct processing of the personal data of the user is carried out only with his consent, who voluntarily and for his own benefit decides to grant permission for the processing of his personal data to the Operator and persons authorized by him without restrictions to achieve the purpose of their processing.

5.2. The User's voluntary consent is given for the emergence and proper fulfillment of obligations that correspond to the purpose of processing personal data, regulated by the civil and economic legislation of Ukraine, as well as international treaties of Ukraine.

5.3. The Operator processes the User's depersonalized data in cases where this is allowed by the User's browser settings.

5.4. The operator has the right to process personal data only if the user is authorized on the website.

6. User rights

6.1. Receive information and have access to data concerning him/her (data subject's right of access according to Art. 15 GDPR). The subject has the right to request confirmation as to whether his personal data is being processed and, in such cases, to request access to them or information about the personal data if direct access is not available.

6.2. Correct your personal data that is incorrect and update your data (right to data rectification, Art. 16 GDPR). In case of doubt about the validity and/or completeness of personal data, the subject has the right to request its correction.

6.3. Request deletion of your personal data (right to data deletion according to Art. 17 GDPR).Processing of personal data is carried out exclusively in accordance with the consent of the subject, therefore, he has the right to withdraw his consent to the processing of personal data at any time.

6.4. Send requests for termination of processing (right to limit processing according to Article 18 GDPR). The subject has the right to object to the processing of personal data at any time.

6.5. Object to the processing of his/her personal data (right to object according to Art. 21 GDPR). The subject has the right to limit the processing of personal data.

6.6. To exercise the above rights, please send a written request to the contact details provided in this Policy or those posted on the website (they are identical).

7. Protection of personal data

7.1. The operator uses all technical, physical and organizational capabilities to protect information, namely personal data, from disclosure, loss, damage, alteration or improper use.

7.2. In the case of receiving a notification regarding the protection of personal data of the relevant persons, they are taken into account and explained in detail in accordance with the current legislation.

8. Term of storage of personal data

8.1. Personal data are processed only for the time necessary to achieve the purpose for which they were collected.

8.2. In particular, the fulfillment of the legal obligation to keep proper accounting in accordance with Art. 6(1)(c) GDPR, requires storage for 5 (five) years, except when there is a need to store data for a longer period.

8.3. Processing of complaints, requests, appeals requires data storage for 1 (one) year after solving the problem. Personal data may be stored for a longer period of time if necessary to protect, in particular, but not exclusively, against claims, demands, etc. The enshrined right regarding the legitimate interest in the proper and prompt consideration of complaints, requests and appeals is contained in Art. 6(1)(f) GDPR.

8.4. The recording of audiovisual files, including but not limited to telephone conversations, is stored for 3 (three) months, except when there is a need to store data for a longer period. The user gives actual consent when he gives his consent to continue the conversation in accordance with Art. 6(1)(a) GDPR.