Privacy Policy
Effective Date: November 16, 2025
1. Introduction
This Privacy Policy explains how team of uzhhorod.org  ("we," "us," or "our") processes information collected from users of the website uzhhorod.org (the "Service"). We are committed to protecting your privacy and handling your personal information in a safe and transparent manner, in compliance with the General Data Protection Regulation (GDPR).
Data Controller Contact Information:
Name/Entity: Uzhhorod.org 
Email: gdpr@uzhhorod.org
Address : Ukraine, Uzhhorod, 88000
2. Data We Collect
We collect personal data based on your use of the Service:
A. Server Log Data (Automatically Collected):
When you access our website, our server (Nginx) automatically records standard information that your browser sends.
Data Collected: Your IP address, browser type, operating system, the time and date of your visit, and the pages you accessed.
Purpose & Legal Basis: We process this data for the purpose of maintaining the security and functionality of the website, detecting technical errors, and preventing fraud. The legal basis for this processing is our Legitimate Interest (Article 6(1)(f) of the GDPR).
B. Contact/Form Data (If Applicable):
If the Service includes any forms (e.g., a contact form or newsletter signup).
Data Collected: [Name, Email Address, Phone Number].
Purpose & Legal Basis: To respond to your inquiries or fulfill the service requested (e.g., sending a newsletter). The legal basis is Consent (if you voluntarily submit the form) or Contractual Necessity (if you sign up for a paid service).
3. Data Recipients and Sharing
We do not sell your personal data. Your data may be shared with the following categories of recipients:
Service Providers: Third parties who perform essential services on our behalf, such as web hosting (your VPS provider) and infrastructure maintenance. These parties are contractually bound to process your data only as instructed by us and to maintain confidentiality.
Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
4. International Data Transfers
The data we collect is stored on a server located in the USA. If we use third-party services that transfer data outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as standard contractual clauses or similar legal mechanisms).
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
Server Log Data: Typically retained for a short period, such as 30 days, for security analysis, and then automatically purged.
Contact Data: Retained until you request its deletion or for as long as necessary to maintain communication related to your inquiry.
6. Your Data Protection Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
Right of Access (Article 15): The right to request copies of your personal data.
Right to Rectification (Article 16): The right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure (Article 17): The right to request that we erase your personal data ("Right to be forgotten").
Right to Restriction of Processing (Article 18): The right to request that we restrict the processing of your personal data.
Right to Data Portability (Article 20): The right to transfer data that we have collected to another organization or directly to you.
Right to Object (Article 21): The right to object to our processing of your personal data, particularly where the basis is Legitimate Interest.
To exercise any of these rights, please contact us using the information provided in Section 1.
7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top.