1. Data Controller
The controller of personal data is PE «SRF SVK», registered at 54 Slavy Blvd, Dnipro, 49126, Ukraine.
Contact for data protection matters: postmaster@svk.com.ua · +380 67 566 13 85.
2. Data We Collect
• Data you provide via contact forms: name, company name, email, phone number, message text, interest type (product segment).
• Technical data transmitted by your browser: IP address, user-agent, referrer, language, time zone, device type.
• Site usage statistics via Google Analytics 4 in anonymized form (anonymized IP, pages viewed, traffic sources).
• Technical cookies required for the site to function, and analytics cookies (the latter — only with your explicit consent).
3. Legal Basis for Processing
• Your consent — for analytics cookies and notification subscriptions.
• Performance of actions at your request — for processing inquiries submitted via contact forms (contract conclusion or pre-contractual steps).
• Legitimate interest — for ensuring security and stable site operation, fraud prevention, statistical analysis in anonymized form.
• Compliance with a legal obligation — where required by Ukrainian law.
4. Purposes of Processing
• Responding to your inquiries and preparing commercial offers.
• Drafting and concluding supply contracts, contract manufacturing (Private Label) agreements.
• Sending technical documentation (TDS, SDS, specifications) on request.
• Improving site quality and user experience.
• Protection against fraud, spam and unauthorized access.
5. Third-Party Data Sharing
We do not sell or share personal data with third parties for marketing purposes. To operate the site, we engage the following processors:
• Vercel Inc. (USA) — site hosting. Data processed under EU Standard Contractual Clauses.
• Supabase Inc. (USA/EU) — catalog database. Server located in EU region (Frankfurt).
• Resend Inc. (USA) — contact form email delivery.
• Cloudflare Inc. (USA) — CDN and DDoS protection.
• Google LLC (Ireland) — Google Analytics 4 with anonymized IP.
All services listed above comply with GDPR and hold relevant security certifications (SOC 2, ISO 27001).
6. Retention Period
• Contact form data — up to 3 years from the last contact, if no active contractual relationship exists.
• Contract data — for the duration of the contract and 3 years after its termination (for tax and accounting obligations).
• Google Analytics data — 14 months (minimum GA4 retention).
• Technical logs — 30 days.
7. Your Rights
Under the Law of Ukraine «On Personal Data Protection» and GDPR (for EU residents) you have the right to:
• access your personal data and obtain a copy;
• rectify inaccurate or incomplete data;
• erase data («right to be forgotten»);
• restrict processing;
• data portability (in a machine-readable format);
• object to processing;
• withdraw previously given consent;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a competent EU authority.
To exercise any of these rights, email us at postmaster@svk.com.ua. We will respond within 30 days.
8. Data Security
We apply technical and organizational measures to protect personal data: traffic encryption (HTTPS/TLS), role-based access for staff following the principle of least privilege, regular database backups, and monitoring of suspicious activity.
9. Children
The svk.ua website is intended for B2B clients (company representatives). We do not knowingly collect personal data of individuals under 16.
10. Changes to this Policy
We reserve the right to amend this Policy. The current version is always available on this page. The last-updated date is shown at the top of the document. For material changes, we will additionally notify you on the site or by email.
11. Contact
For any questions about personal data processing, contact us:
• Email: postmaster@svk.com.ua
• Phone: +380 67 566 13 85
• Postal address: 54 Slavy Blvd, Dnipro, 49126, Ukraine