Privacy Policy

Last updated: 23/09/25

1. Introduction

1.1. This Privacy Policy (“Policy”) explains how Monalab (“we,” “our,” or “us”) collects, uses, stores, protects, and discloses personal data of users of the website monalab.com.ua (the “Website”).
1.2. By using the Website, you agree to the provisions of this Policy and the methods of processing your personal data described below.
1.3. We comply with applicable Ukrainian legislation, including the Law of Ukraine “On Personal Data Protection.”
We also take into account the requirements of the EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679.

2. Definitions

• Personal Data — any information relating to an identified or identifiable natural person.
• Data Processing — any operation or set of operations performed on personal data, including collection, storage, use, disclosure, and deletion.
• Data Subject — the individual whose personal data is being processed.
• Data Controller — the person or organization that determines the purposes and means of processing personal data.
• Data Processor — the person or organization that processes personal data on behalf of the controller.
• Consent — a freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they agree to the processing of their personal data.

3. What Data We Collect

We may collect the following personal data:

• First and last name
• Email address
• Phone number
• Address, where necessary
• IP address
• Browser and device information, including browser type, operating system, screen resolution, and language
• Other information voluntarily provided by users, for example, through contact forms, subscriptions, or comments

4. Purposes and Legal Bases for Processing

4.1. We process personal data for the following purposes:

• Providing the services you request, including contact, subscriptions, and orders
• Improving Website performance, conducting analytics, and optimizing user experience
• Communicating with clients and responding to inquiries
• Marketing activities, where consent is required by law
• Complying with legal obligations

4.2. The legal bases for processing include:

• Your consent, where required
• Performance of a contract or taking steps at your request before entering into a contract
• Compliance with our legal obligations
• Protection of your vital interests, in exceptional circumstances
• Our legitimate interests, provided they do not override your rights and freedoms

5. Data Storage and Retention Periods

5.1. We retain personal data for no longer than necessary to fulfill the purposes for which it was collected, or until you withdraw your consent, where processing is based on consent.
5.2. Where data retention is required by law, including for tax, financial, or legal purposes, we retain the data for the period required by the applicable regulations.

6. Rights of Data Subjects

Under the Law of Ukraine “On Personal Data Protection” and the GDPR, where applicable, you have the right to:

• Know whether your personal data is being processed and access that data
• Request the correction of inaccurate data
• Request the deletion of your data (“the right to be forgotten”), where permitted by law
• Restrict processing in certain circumstances
• Object to processing, particularly for marketing purposes
• Request data portability where provided for under the GDPR
• Withdraw your consent at any time where processing is based on consent

7. Disclosure of Data to Third Parties

7.1. We may share your personal data with third parties in the following circumstances:

• Service providers that support the operation of our Website, including hosting, technical support, marketing tools, and analytics
• Legal authorities or government agencies where disclosure is required by law
• Other third parties with your consent

7.2. We ensure that appropriate agreements are in place with such third parties to protect personal data and maintain its confidentiality and security.

8. International Data Transfers

If we transfer personal data outside Ukraine or the European Union, we ensure that such transfers comply with applicable legal requirements. This may include:

• The use of Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms
• Transfers to countries that provide an adequate or equivalent level of data protection, as required by applicable law

9. Security

9.1. We implement technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, or destruction.
9.2. Access to personal data is limited to employees, contractors, and other authorized individuals who require such access to perform their duties.

10. Use of Cookies and Similar Technologies

10.1. The Website may use cookies and similar technologies, including web beacons and local storage, for the following purposes:

• Ensuring Website functionality and performance
• Analytics
• Marketing and content personalization

10.2. You may refuse non-essential cookies or restrict their use through your browser settings or the Website’s cookie management interface, if available.

11. Changes to This Policy

11.1. We may update this Policy from time to time. The revised version will be published on this page with an updated revision date.
11.2. If significant changes are made, we will notify you through the Website, by email, or by other appropriate means.