Privacy Policy

1. Who is responsible for the data

Association of Local Authorities “Euroregion Carpathians Ukraine – Carpathian Agency for Regional Development” is the controller of personal data submitted by users through the platform.

Postal address: 14 Vynnychenka Street, Lviv, 79008. Email: ekarpaty.ua@gmail.com. Telephone: +380 67 220 34 84.

2. Data we collect

Registration and account use may involve the representative’s name, position, work email address, telephone number, organisation name and type, region, area of responsibility and organisation registration code.

The account may store needs, project ideas, training applications, enquiries, links to official materials and the history of record review submitted by the organisation.

For security, we may process technical logs, login time, IP address, device type and session identifiers. Passwords are not stored in plain text.

3. Why we use the data

The data is needed to create and protect accounts, verify representatives, communicate with organisations, review needs and projects, match grant opportunities, organise training and produce aggregated statistics.

Grant matching is informational guidance. The platform does not make automated decisions that produce legal effects for users.

4. Legal basis

We process data with the user’s consent, to provide a platform function requested by the user and for the Association’s legitimate work with communities and institutions.

The consent record, its date and this Policy version are stored with the application. Consent may be withdrawn by contacting the Association.

5. What may be published

Representative contact details, passwords and technical login data are not made public.

The Association verifies the participant account and the representative's authority. Once access is approved, the organisation decides which profile details, needs, projects, partnerships and documents to publish. Internal staff contacts remain in the private cabinet.

6. Who may access the data

Only authorised Association staff and administrators may access data according to their assigned roles.

Hosting, data storage, security or service-notification providers may process the minimum data necessary to operate the platform. Embedded maps and external links may send technical data to the relevant external service when opened.

We do not sell personal data or share it for third-party advertising.

7. Processing outside Ukraine

Some technical providers may process or store data on servers outside Ukraine. In such cases, contractual and technical safeguards available for the relevant service are applied.

8. Retention periods

Data is kept no longer than necessary for the stated purposes: unconfirmed applications generally for up to 90 days; an active profile while the platform is used; after account closure generally for up to 12 months; security logs and anonymous visit statistics for up to 12 months; and backups for up to 90 days.

Some records may be retained longer where required by law, contractual obligations or the protection of the legitimate interests of the Association or user.

9. User rights

Users may request confirmation of processing, access to their data, correction, restriction, deletion or withdrawal of consent unless the law requires continued retention.

To exercise these rights, contact the Association through its official details. We may verify the identity and authority of the requester before completing a request.

10. Security

The platform uses role-based access, protected sessions, login rate limits, administrative action logs and other organisational and technical measures.

Users are responsible for keeping their password confidential and should notify the Association if they suspect unauthorised access.

11. Cookies and statistics

Necessary cookies are used for language selection, login and session security. For aggregate statistics, the platform also counts unique visitors, return visits and views of public pages, language, device category, referral source and approximate country or region when supplied by the hosting provider.

To avoid counting one browser as several visitors, a random anonymous identifier is stored on the device. It contains no name, email address or other contact details and is used only for aggregate platform statistics.

Visitor analytics do not store the IP address, name or email address of ordinary visitors; known bots, technical checks, administrator views, the ChatGPT service address, administrator and private account areas are not tracked. The browser’s Do Not Track signal is respected. Geography is approximate.

12. Requests and Policy updates

Questions about personal data may be sent to ekarpaty.ua@gmail.com or to the Association’s postal address.

This Policy may be updated as the platform develops or legislation changes. The current version is always shown on this page; renewed consent may be requested for material changes.