Personal data processing

Personal Data Processing

K2 GLOBAL UKRAINE processes personal data to handle enquiries, conduct business communications, and arrange cooperation.

This page describes the purposes and legal bases for processing, the types of data used, and how to contact us about data protection. Additional information is available on the “Privacy Policy” page.

1. When We Receive Personal Data

We may receive your data when you submit a message through a website form or contact us by email, telephone, or other published communication channels.

Data may also be provided when requesting a commercial proposal, discussing supplies, entering into a contract, or during further interaction with our company.

Certain technical information may be processed automatically when you visit the website to ensure its functionality and security.

2. What Data May Be Processed

  • First name and surname.
  • Telephone number and email address.
  • Company name, job title, and business contact details.
  • The content of messages, enquiries, and documents provided.
  • Information necessary to prepare and perform a contract.
  • Technical information about website visits, including IP address, browser and device type, and time of access.

The specific data collected depends on the purpose of the interaction. We do not request information that is unnecessary for that purpose. Please also avoid providing unnecessary confidential information.

3. Purposes of Processing

Personal data may be used to:

  • Review enquiries and provide responses.
  • Clarify your requirements and provide information about products and cooperation.
  • Prepare commercial proposals and conduct negotiations.
  • Enter into and perform contracts, arrange supplies, and manage related documentation.
  • Maintain business relationships with customers, suppliers, and partners.
  • Ensure website security and prevent misuse.
  • Fulfil obligations established by law.

Data is used for marketing communications only where an appropriate legal basis exists. Where consent is required, it is requested separately.

4. Legal Bases for Processing

Depending on the circumstances, processing is based on your consent, the need to take steps at your request before entering into a contract, the performance of a contract, or compliance with legal obligations.

Where permitted by law, processing may also be based on the company's legitimate interests, such as protecting information systems and conducting business interactions, provided that your rights and interests are respected.

Simply visiting the website does not constitute consent to all possible forms of personal data processing.

5. How Consent Is Given

Where consent is required for specific processing, you are informed of its purpose and given the necessary information about its terms before providing consent.

Consent may be given through a separate action, such as selecting the relevant checkbox in a form. It applies to the stated purpose and does not automatically extend to other uses of your data.

Consent to receive marketing messages, where offered, is obtained separately from an enquiry or a request for cooperation.

6. Operations Involving Personal Data

Processing may include collecting, recording, organising, storing, updating, using, disclosing data to authorised recipients, restricting processing, and deleting data.

These operations are carried out only within the scope of the relevant purpose and where an applicable legal basis exists.

7. Access and Data Sharing

Access to data is granted to employees and service providers who need it to perform their tasks. Providers of technical and other services receive only the information necessary for those tasks.

Data may be shared with other recipients where necessary to perform a contract, required by law, or permitted on another lawful basis.

Where services involve international data transfers, applicable requirements for such transfers and data protection must be observed.

8. Retention and Security

Retention periods are determined by the purpose of processing, the nature of the interaction, contractual obligations, and legal requirements.

Once the purpose has been fulfilled, data is deleted or anonymised unless another lawful basis for retaining it exists. Documents subject to mandatory retention periods are kept for the relevant period.

We apply organisational and technical measures to protect data against unauthorised access, alteration, loss, and disclosure.

9. Your Rights

To the extent provided by applicable law, you may:

  • Obtain information about processing and access your personal data.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of data or restriction of its processing.
  • Object to processing in circumstances provided for by law.
  • Request data portability where this right applies.
  • Withdraw consent to processing.
  • Lodge a complaint with a competent data protection authority.

10. Withdrawal of Consent

Where processing is based on your consent, you may withdraw it by contacting us using the contact details published on the website.

Withdrawal does not affect the lawfulness of processing carried out before it was received. Following withdrawal, we stop the relevant processing unless another lawful basis allows it to continue.

If certain data is necessary to handle an enquiry or provide a requested service, choosing not to provide it may make it impossible to fulfil that request. We will inform you if this is the case.

11. Personal Data Enquiries

For questions about the processing and protection of personal data, contact K2 GLOBAL UKRAINE using the details provided in the website's “Contacts” section.

Include “Personal Data” in the subject line. Describe your request and provide a way for us to reply. Please do not attach identity documents unless we have specifically requested them.

Where necessary, we will request the minimum information needed to verify your identity and review your enquiry within the time limits established by applicable law.