Privacy Policy

Date of last update: 31 March 2026

1. General Provisions

This Privacy Policy (hereinafter — the “Policy”) defines the procedure for the collection, storage, use, transfer, and protection of personal data of users of the Kandia company website (hereinafter — the “Website”, “we”, “our company”).
By using the Website, you confirm that you have read this Policy and consent to the processing of your personal data under the conditions specified herein.

2. Definitions

  • Personal data — information or a set of information about an individual who is identified or can be specifically identified.
  • Processing of personal data — any action or set of actions performed with personal data, including collection, registration, accumulation, storage, adaptation, modification, renewal, use, dissemination, anonymization, or destruction.
  • Data subject — an individual whose personal data is being processed.
  • Data controller — a natural or legal person who independently or jointly determines the purposes and means of processing personal data. In the context of this Policy, the Controller is Kandia company, whose contact details are specified in section 14.
  • User — any individual who visits the Website and/or uses its functionality.
  • Cookies — small text files stored on the User’s device while visiting the Website.

3. What personal data we collect

3.1. Data you provide voluntarily

Through the feedback form on the Website or when contacting us via other communication channels, we may collect:

  • last name, first name, patronymic;
  • contact phone number;
  • email address;
  • content of your request or message;
  • files you attach to your request;
  • other information you voluntarily provide.

3.2. Data collected automatically

When visiting the Website, the following may be automatically collected:

  • IP address;
  • browser type and version;
  • operating system type;
  • cookie data;
  • date, time, and duration of the visit;
  • pages viewed;
  • referral source;
  • device data (screen resolution, device type).

3.3. Data we do not collect

We do not collect or process data belonging to special categories, including information about health status, racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic or biometric data.

4. Purpose of personal data processing

We process your personal data exclusively for the following purposes:

  • responding to your inquiries and requests;
  • ensuring communication regarding company products and services;
  • processing consultation requests, product selection, and order support;
  • sending informational and marketing materials (with your separate consent);
  • improving Website performance, analyzing traffic and user behavior;
  • providing technical support and Website security;
  • compliance with applicable laws;
  • implementation of contractual relationships with partners and clients.

5. Legal grounds for processing

Processing of personal data is carried out in accordance with the Law of Ukraine “On Personal Data Protection” dated 01.06.2010 No. 2297-VI, as well as Article 6 of the General Data Protection Regulation (GDPR).

Legal grounds include:

  • Consent of the data subject — you voluntarily provide your data and may withdraw consent at any time.
  • Performance of a contract — necessary for providing services and fulfilling obligations.
  • Legitimate interest — improving service quality, analytics, and security.
  • Legal obligation — compliance with applicable law.

6. Data retention periods

Personal data is stored only as long as necessary:

  • feedback form data — up to 3 years after last communication;
  • marketing data — until consent is withdrawn;
  • analytics/cookies — according to section 10;
  • legal obligations — as required by law.

After expiration, data is deleted or anonymized.

7. Transfer of personal data to third parties

We do not sell or transfer your data for marketing without consent.

Data may be shared:

  • with service providers (hosting, analytics, CRM, email services);
  • with government authorities upon legal request;
  • to protect rights, safety, and property.

8. International data transfer

If data is transferred outside Ukraine or the EEA, we ensure protection through:

  • Standard Contractual Clauses;
  • adequacy decisions;
  • other GDPR-compliant safeguards.

9. Use of cookies

9.1. Types of cookies

  • Necessary cookies — ensure Website functionality;
  • Analytics cookies — collect anonymized usage data;
  • Marketing cookies — used for advertising.

9.2. Cookie management

You can accept or reject cookies and change preferences anytime. Disabling cookies may affect functionality.

10. Data subject rights

You have the right to:

  • access your data;
  • correct inaccurate data;
  • request deletion;
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw consent;
  • file complaints with authorities.

11. Security measures

We implement:

  • SSL/TLS encryption;
  • access control;
  • regular updates;
  • staff training;
  • confidentiality agreements.

12. Third-party links

We are not responsible for external websites. Review their policies before sharing data.

13. Changes to the Policy

We may update this Policy at any time. Continued use of the Website means acceptance of changes.

14. Contact information