This Privacy Policy (hereinafter referred to as the "Policy") applies to all information, regardless of the method of its use or access, including access via mobile devices, published on the website https://course.taromahar.com/ , including all its subdomains (hereinafter referred to as the "Website").
The use of the Website's services signifies the User’s unconditional consent to this Policy and the terms for processing their personal information specified herein. If you do not agree, either wholly or partially, with the terms of this Policy, you must immediately cease using the Website and its services.
The purpose of this Policy is to define the procedure for collecting, processing, storing, updating (modifying, changing), using, transferring (providing, granting access), anonymizing, blocking, deleting, and destroying personal data processed by the Website while providing paid services for the project https://course.taromahar.com/ in Ukraine, via the course platform and in accordance with the rules of said platform.
This Policy applies exclusively to the Website. The Website does not control and is not responsible for third-party websites that the User may access through links available on the Website.
Composition of Personal Data
The Website processes personal data of individuals who purchase a training course (or another paid service) and those who subscribe to promotional newsletters.
The list of personal data covered by this Policy includes:
Personal information that you provide about yourself voluntarily when registering (creating an account) on the Website or when purchasing/subscribing to products and services at: https://course.taromahar.com/ - First name, last name, patronymic (middle name); - Email address; - Mobile phone number; - Information about your credit or debit card, bank account number and sort code, or other banking information related to the payment for products and/or services of https://course.taromahar.com/.
Data that is automatically generated during the use of the Website: - Device information; - IP address; - Cookie files information.
This data is collected to analyze user activities on the Website in order to improve its content, enhance its functionality, and, consequently, create better content and services for you. As a data subject, you may at any time change your browser settings to block all cookies or to notify you when cookies are being sent. However, you should understand that some functions and services of the Website may not operate properly without cookies.
The Website does not intentionally process the personal data of minors. It is recommended that only individuals aged 18 and over use the Website and purchase products and services from https://course.taromahar.com/ . Responsibility for the actions of minors, including the purchase of products and services by them, lies with their legal representatives. All visitors under the age of 18 must obtain permission from their legal representatives before providing any personal information.
Use of Personal Data and General Requirements for Personal Data Processing
All personal data will be used in accordance with the applicable personal data protection legislation (clause 3.3 of this Policy) and this Policy. Your personal data will be processed for the following purposes: - To properly fulfill the service agreement upon acceptance of the Offer for the training program or other paid services provided to the User; - To provide access to the use of the Website and to authenticate Users; - To provide free information via email; - To establish feedback with the User, including sending notifications, inquiries, processing your requests, applications, complaints, etc., received during the provision of services and use of the Website; - To provide the User with effective customer and technical support in case of issues related to the use of the Website; - To notify Users of changes in terms and conditions, the provision of services, and the use of information on the Website; - For marketing analytics; - To carry out advertising activities with the User's consent.
Only personal data that corresponds to the purposes of their processing (clause 3.1) will be subject to processing. Personal data may not be used to cause property or moral harm to personal data subjects.
The legal bases for the processing, collection, storage, and transfer of your personal data are: – Agreements concluded with you (the User) when you register on the Website and/or purchase/subscribe to products and services at https://course.taromahar.com/ ; – Current privacy laws, including the regulatory legal acts on personal data protection in Ukraine; GDPR and related internal laws and regulations for Users residing in EU countries; the Children's Online Privacy Protection Act (COPPA) for Users residing in the USA; the APEC Cross-Border Privacy Rules (CBPR) system and the Privacy Recognition for Processors (PRP) system for Users residing in APEC countries; and other laws of the countries where Users reside; – Users' consent to the processing of their personal data, consent to the processing of their children's personal data, and consent to the processing of personal data authorized for distribution.
Personal data is processed only if it is obtained in accordance with Chapter 4.
Anonymized data is processed if permitted by the User's browser settings (cookies enabled and JavaScript technology use permitted).
The processing of User personal data is carried out indefinitely by any lawful means, including in personal data information systems using automation tools or without using such tools. Personal data processing is carried out in accordance with the laws specified in clause 3.3 of this Policy.
You may request the correction, addition, or deletion of your personal information based on the Personal Data Protection Law by writing to: myulia159 [at] gmail.com.
Obtaining Personal Data
All personal data is provided (collected) directly from the personal data subject. The subject independently decides to provide their personal data and gives consent for its processing freely, of their own will, and in their own interest.
Consent to the processing of personal data is provided by filling out special registration forms on the Website, by submitting an application to conclude the relevant service agreement (accepting the public offer), or directly when paying for services under the said agreement (accepting the public offer) by ticking the "Consent to the processing of personal data" checkbox. A separate written consent is not required in this case.
Personal data subjects are obliged to provide only accurate personal data and to promptly inform about any changes to their personal data. At the same time, the Website Administration does not verify the accuracy of the personal data provided and does not monitor the legal capacity of the personal data subjects, assuming that the subject provides accurate and sufficient personal information regarding the issues specified in the registration (subscription, payment) form and maintains this information up to date. The risk of providing inaccurate personal data lies solely with the personal data subject.
Transfer of Personal Data to Third Parties
The Website is entitled to delegate the processing of personal data to other legal or natural persons operating in Ukraine under a contractual agreement. Any person engaged in the processing of personal data must adhere to the principles and rules of personal data processing as established by Ukrainian personal data protection legislation.
The transfer of personal data subjects’ information is carried out solely for the proper fulfillment of obligations under service agreements concluded with Users and only with their consent.
When transferring the subject’s personal data, such data may only be used for the purposes specified in clause 5.2 of this Policy while ensuring the confidentiality of the transferred personal data.
All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by those parties (Operators) in accordance with their User Agreement/Privacy Policy. It is the responsibility of the personal data subject and/or User to independently and timely review the aforementioned documents.
Storage of Personal Data
Personal data is stored electronically in appropriate personal data information systems, which are located in databases within the territory of Ukraine.
Personal data is stored in a form that allows the identification of the personal data subject and only for as long as necessary to fulfill the purposes for which it was collected, including compliance with any legal, accounting, tax, or other reporting requirements.
To determine the appropriate storage period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and the applicable legal requirements.
Personal data is stored with restricted access, including through the establishment of appropriate access levels.
Termination of Processing and Destruction of Personal Data
The Website must cease the processing of personal data in the following cases: - If unlawful processing of personal data is detected; - If the personal data subject withdraws their consent to data processing; - If the retention of personal data is no longer required for the purposes of processing.
Personal data will be blocked and destroyed within no more than thirty (30) business days from the date of receipt of the withdrawal or the completion of the processing purposes, and within three (3) business days from the date of detection of unlawful processing of the personal data subject.
Protection of Personal Data
When processing personal data, the necessary measures are taken to prevent unauthorized or accidental access, destruction, alteration, blocking, copying, provision, or distribution of personal data, as well as any other unlawful actions in relation to personal data.
The security of personal data is ensured through the following means, among others: - Implementation of organizational and technical measures to ensure the security of personal data during processing in personal data information systems, necessary for meeting personal data protection requirements; - Assessment of the effectiveness of security measures prior to the launch of a personal data information system; - Detection of unauthorized access to personal data and implementation of measures to eliminate and prevent recurrence; - Restoration of personal data that was modified or destroyed due to unauthorized access; - Establishment of access rules for personal data processed in the personal data information system, and ensuring the logging and tracking of all actions performed with personal data in the system; - Inclusion (where necessary) of confidentiality clauses in contracts concluded by the Website Administration; - Ongoing monitoring of the effectiveness of the measures taken to ensure the security of personal data and the security level of information systems processing personal data.
Third parties granted access to personal data are obligated to take the necessary organizational and technical measures to maintain the confidentiality of such information on their personal devices used for processing the data.
Liability for Disclosure of Confidential Information Containing Personal Data
Third parties who have obtained access to the personal data of data subjects from the Website Administration and are found responsible for breaching confidentiality are held liable according to the legislation of Ukraine, including under the contracts concluded with the Website Administration that granted such access.
The Website is not responsible for any potential misuse of personal data or any damage caused to the personal data subject as a result of: - Technical malfunctions in software, technical equipment, and networks outside the control of the Website Administration; - Failure to maintain the confidentiality of access passwords or intentional disclosure of access passwords to the Website by the personal data subject to other individuals not authorized to access such information; - Unauthorized actions by third parties to access the Website's data, including personal data.
The Website is not responsible for the processing of third parties' personal data obtained during the provision of services if such data was presented as the User’s own. In such cases, the risk of liability rests with the service recipient who provided inaccurate data.
The Website does not control and is not responsible for the processing of information by third-party websites that the personal data subject may access via links available on the Website.
Dispute Resolution
Before filing a lawsuit regarding disputes arising from the relationship between the personal data subject and the Website, it is mandatory to submit a claim (a written proposal for voluntary dispute resolution).
The recipient of the claim must, within thirty (30) calendar days from the date of receipt, provide the claimant with a written response regarding the results of the claim review.
If the parties fail to reach an agreement, the dispute shall be submitted to a court for resolution in accordance with the current legislation of Ukraine.
This Policy and the relationship between the personal data subject and the Website Administration are governed by the applicable laws of Ukraine.
Additional Terms
The Website reserves the right to make changes to this Privacy Policy without the consent of the personal data subjects.
The new version of the Privacy Policy comes into force upon its publication on the Website, unless otherwise provided by the new version of the Privacy Policy.
The invalidity of specific provisions of this Policy, if recognized by a court or other authorized state body, does not affect the validity of the Policy as a whole.