This Privacy Policy explains what personal data the kupolla.com website collects, why, on what legal basis, who it may be shared with and what rights you have. It is prepared in line with the Law of Ukraine “On Personal Data Protection” No. 2297-VI and, for visitors from the European Union, Regulation (EU) 2016/679 (GDPR).
1. Who processes your data
Data controller: KUPOLLA — [full legal entity name], company registration number [registration number (EDRPOU)], registered address: [registered address].
Privacy contact: office@kupolla.com, +38 067 173 75 78, +420 737 306 111.
2. What data we collect
- Data you enter in our forms (enquiry, consultation, configurator, contacts, FAQ): name, phone number, email, country, city, your message, the selected model, package and configurator options, and a record of your consent to data processing.
- Technical data: the IP address an enquiry was sent from and its date and time; standard web server logs (IP address, browser type, requested page, time).
- Cookies: strictly necessary cookies the site cannot work without (form protection against cross-site request forgery, selected language) and — only if enabled — Google Analytics 4 analytics cookies.
We do not collect special categories of personal data and do not knowingly process data of children.
3. Why we use it and on what basis
- To reply to your enquiry, prepare a price estimate and a commercial proposal, and arrange a showroom visit — your consent and steps taken at your request before entering into a contract.
- To conclude and perform a contract for the supply of a dome — performance of a contract.
- To protect the site against spam and abuse and keep a record of enquiries — legitimate interests.
- To analyse site traffic so we can improve the site (if analytics is enabled) — your consent.
- To meet legal obligations (accounting and tax records for concluded contracts) — legal obligation.
We do not sell personal data and do not use it for automated decision-making.
4. Who we may share data with
Only authorised KUPOLLA staff can access enquiries. We use service providers that process data on our behalf:
- website and database hosting — DigitalOcean, LLC (server location: [data centre region]);
- CRM / automation service that forwards enquiries to our managers — [CRM or service name, e.g. Make.com];
- email service for service notifications — [email provider name];
- Google (Google Fonts for web fonts, Google Maps for the map on our pages, Google Analytics if enabled).
Some of these providers may process data outside Ukraine and the EU/EEA. Where this happens, the transfer is made with appropriate safeguards (such as the EU Standard Contractual Clauses). We may also disclose data where required by law.
5. How long we keep data
Enquiry data is kept for [period, e.g. 3 years] after your last contact with us, or until you withdraw consent, if no contract is concluded. Data relating to concluded contracts is kept for the periods required by law for accounting and tax records. After that the data is deleted or anonymised.
6. Your rights
You have the right to: know what data we process about you and receive a copy; have inaccurate data corrected; request erasure or restriction of processing; object to processing based on legitimate interests; withdraw your consent at any time (this does not affect processing carried out before withdrawal); and receive your data in a machine-readable format (data portability).
To exercise these rights, email office@kupolla.com. We will reply within 30 days. You may also lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, with the data protection authority of your country.
7. Cookies
Strictly necessary cookies (csrftoken, django_language, session cookies) are needed for the forms and the language switcher and are always set. Google Analytics cookies are set only if analytics is enabled on the site. You can delete or block cookies in your browser settings; some features may then not work correctly.
8. Security
The site is served over HTTPS, access to the admin panel is restricted and forms are protected against automated spam. No method of transmission over the internet is completely secure, but we take reasonable organisational and technical measures to protect your data.
9. Links to other sites
The site links to third-party services (Instagram, Facebook, YouTube, LinkedIn, Google Drive, Google Maps). Their processing of your data is governed by their own policies.
10. Changes to this policy
We may update this Policy. The current version is always available on this page; the date of the latest version is shown below.
Version of [effective date].