Privacy Policy

1. General provisions and scope

1.1. This Personal Data Processing and Protection Policy (the “Policy”) has been adopted by Individual Entrepreneur Viacheslav V. Fokin, operating at 40 Olesya Honchara St., Kyiv (“Eye Sea Store” or the “Data Controller”), in accordance with the applicable laws of Ukraine, including but not limited to the Law of Ukraine “On Personal Data Protection” No. 2297-VI of 1 June 2010. It sets out how personal data (the “Data” or “Personal Data”) is received, collected, accumulated, stored, processed, used, protected, and disclosed through the website eyesea.art (the “Site”).

1.2. By registering on eyesea.art and using the online store, or by attempting to place an order without prior registration, the User (Customer) grants permission and unambiguous consent to the processing of their personal data on the terms set out below, and confirms that they have read, accepted, and agreed to this Policy.

1.3. All terms used in this Policy have the meaning given to them in the Law of Ukraine “On Personal Data Protection” No. 2297-VI of 1 June 2010.

1.4. The Site may contain links to other websites (for informational purposes only). This Policy does not apply to any third-party websites you reach through such links.

2. Categories and content of personal data

2.1. “Data” means any information that relates, directly or indirectly, to a specific User. This may include: first name, last name, patronymic (if any), phone number, email address, date of birth, whether you have children, gender, interests, preferred language, residential / location / delivery address, information about your activity while using the online store, message history (the contents of correspondence between you and the store’s administration), the history of your reviews or comments, and any other information used for communication that you choose to provide in the registration form and/or when completing your profile, taking part in a survey (by filling out a questionnaire or otherwise), or through verbal communication with the Site administration. It also includes information provided when making a payment in the online store (including when purchasing goods and/or services offered on credit or in instalments — for example, passport details, tax identification number, and similar information).

This list of personal data is neither fixed nor mandatory for every User; it depends on each User’s needs and choices and on the operations they perform in the online store.

“Data” also includes other information lawfully obtained by the online store from third parties and/or available from your social-media profiles where you register using social-media authentication services. In that case, you consent to the processing of the information available from the relevant social-media accounts (profiles).

2.2. Users are responsible for all information they post in publicly accessible accounts. You should be aware of all risks associated with making your address or precise location publicly available.

3. Purposes, scope, legal basis, and retention periods

3.1. Personal data is processed for the following purposes:

to give effect to civil-law, commercial, and tax relationships, and to carry out the functions, powers, and obligations of Eye Sea Store under the applicable laws of Ukraine;
to identify you as a User of the online store and to contact you — including to provide services, process payments, arrange delivery, carry out settlement operations, maintain accounting and management records, create and run bonus and loyalty programmes, and send communications by post, email, or phone (including commercial offers and notices about promotions and news); to provide financial services to Users (offered by third parties and/or partners of Eye Sea Store); to improve the quality of goods and services; to compile product ratings and offers; to analyse User activity; to enable keyword search; to manage Site traffic; and to analyse and predict User preferences and interests in order to present the most relevant and beneficial personalised or promotional offers; and to carry out research and analytics and send informational and marketing communications (news, company promotions, promo codes and discounts, personalised recommendations, and personal offers) relating to goods and/or services, including advertising and commercial offers;
to send communications, commercial offers, and notices about promotions, loyalty programmes, and bonus programmes, and/or notices about the operation of the online store, by post, email, or phone. You may opt out of informational and marketing communications at any time through the relevant settings on the Site.

3.2. The legal basis for processing the personal data of Users of the online platform is your consent to the processing of your personal data, which is expressed through your use of the online platform.

3.3. Personal data is processed for no fixed term, by any lawful means, including within personal-data information systems with or without the use of automation. Processing and storage periods are determined by the purposes of processing and by the terms of the agreements concluded with Users in accordance with the applicable laws of Ukraine. Personal data is processed and stored for as long as necessary to achieve the purposes set out in clause 3.1 of this Policy. You have the right to request that the processing and storage of your personal data cease, or to delete your data from your User account. Deleting your User account, or submitting a request to stop the processing and storage of your personal data, is grounds for the immediate cessation of such processing and storage by the Data Controller, followed by deletion of the Data.

3.4. Users may change or delete their personal information, opt out of communications, or withdraw their consent to processing at any time.

3.5. If a User account remains inactive for more than five (5) years, Eye Sea Store reserves the right to delete the account, including all personal data stored in it, after which the User will no longer be able to access or use it.

4. Protection of personal data

4.1. Employees and authorised persons who directly process or have access to personal data in the course of their duties are required to comply with the personal-data protection laws of Ukraine and with internal documents governing the processing and protection of personal data.

4.2. Employees and authorised persons who have access to or process personal data must not disclose, in any way, personal data entrusted to them or made known to them in connection with their professional or employment duties. This obligation remains in force after they cease activities involving personal data, except as provided by law.

4.3. Personal data must not be stored longer than necessary for the purpose for which it is stored, and in any event no longer than the retention period set out in this Policy with the User’s consent.

5. Your rights as a data subject

5.1. As a data subject (User), you have the right to:

know the location of the personal data that contains your Data, its purpose and name, and the location and/or place of residence of the data holder or processor, or to instruct authorised persons to obtain this information, except as provided by law;
receive information about the conditions for granting access to your personal data, including information about third parties to whom your personal data is transferred;
access your personal data;
receive, no later than thirty calendar days from the date of your request (except as provided by law), a response as to whether your personal data is stored, and to receive the content of the personal data being stored;
raise a reasoned objection to the processing of your personal data by public authorities and local self-government bodies in the exercise of their statutory powers;
protection of your personal data against unlawful processing and accidental loss, destruction, or damage resulting from intentional concealment, failure to provide, or untimely provision of data, and against the provision of information that is inaccurate or that discredits your honour, dignity, or business reputation;
apply, regarding the protection of your rights, to the public authorities and local self-government bodies responsible for personal-data protection;
use legal remedies in the event of a breach of personal-data protection legislation;
submit a request to stop the processing of your personal data by Eye Sea Store and to have that data destroyed.

6. Handling data-subject requests

6.1. As a data subject (User), you have the right to obtain any information about yourself from any party involved in relations concerning personal data, without stating the purpose of the request, except as provided by law.

6.2. Access to your own data is provided free of charge.

6.3. To request access (a “request”) to personal data, the data subject (User) submits the request to the data holder. A request must state:

your first name, last name, and patronymic, your place of residence, and the details of your identity document;
any other information that makes it possible to identify you as the data subject;
details of the personal data to which the request relates, or information about the data owner or processor;
the list of personal data being requested.

6.4. The period for reviewing a request does not exceed ten working days from the date it is received.

6.5. Within this period, the data holder informs the data subject (User) that the request will be granted or that the relevant personal data cannot be provided, stating the grounds set out in the applicable legislation.

6.6. A request is granted within thirty calendar days of its receipt, unless otherwise provided by law.

7. Deletion of personal data

7.1. Personal data may be deleted at your request by submitting a written request to stop processing your personal data to [email protected] with “Personal Data” in the subject line.

7.2. Users’ personal data is deleted or destroyed in the manner established by the applicable Law. In addition to the cases set out in clause 7.1, a User’s personal data is also subject to deletion in the event of:

a corresponding order issued by the Ukrainian Parliament Commissioner for Human Rights (the “Commissioner”) or by officials of the Commissioner’s secretariat designated by them;
a court decision on the deletion or destruction of personal data taking legal effect.

7.3. Users may withdraw their consent to the processing of personal data at any time by sending a request to [email protected] with “Personal Data” in the subject line.

7.4. Users’ personal data is destroyed in a manner that precludes any further recovery of that data or identification of the User.

8. Changes to this Policy

8.1. Eye Sea Store may update this Policy from time to time, unilaterally and without notifying Users of such changes. A new version of the Policy takes effect once it is published on the online platform, unless the new version provides otherwise.

8.2. If any changes are made to the Policy that a User does not agree with, the User must stop using the online store. Continued use of the online store confirms the User’s agreement to and acceptance of the relevant version of the Policy.

Last updated: 1 January 2024.