Privacy policy
This Policy explains what personal data Sole proprietor [Full Name] (the “Organiser”, “we”) processes when operating flowerforum.com.ua, selling tickets and holding “Flower Forum 2027”, and what rights you have. It is based on the Law of Ukraine “On Personal Data Protection” and takes into account the EU General Data Protection Regulation (GDPR) for visitors from the EU. This is a translation; in case of discrepancies the Ukrainian version prevails.
1. Data controller
The controller is Sole proprietor [Full Name], tax ID [0000000000], address: [postal code, city, street, building]. For any data protection questions write to flowerforum.ua@outlook.com.
2. Data we process
- Ticket purchase: first and last name of the buyer and each attendee, phone, email, business name or Instagram (optional), promo code, chosen ticket, order number and payment status.
- Requests (group tickets, partnership): name, phone, number of tickets or partnership type, comment.
- Payment data: card details are entered only on the WayForPay payment page. We neither receive nor store them — we only receive the payment status and amount.
- Correspondence: data you send us by email, Telegram or social media.
- Technical data: IP address, browser and device type, request time — in the hosting provider’s logs, for security and abuse prevention.
- Photo and video at the event: images of attendees in general shots of the event.
We do not collect special categories of data (health, religious or political beliefs, etc.). If you provide another attendee’s data (e.g. for a pair ticket), you confirm you have their consent.
3. Purposes and legal bases
- Concluding and performing the contract (ticket sale, sending tickets and recording access, entry control, notices of changes) — Article 11(3) of the Law “On Personal Data Protection”; Art. 6(1)(b) GDPR.
- Legal obligations (accounting and tax, fiscal receipts, requests from authorities) — Article 11(5); Art. 6(1)(c) GDPR.
- Handling requests and enquiries — your consent given by submitting the form; Art. 6(1)(a) GDPR.
- Website and event security, event coverage — the Organiser’s legitimate interest; Art. 6(1)(f) GDPR.
- Marketing emails — only with separate consent, which you can withdraw at any time.
4. Who receives the data
We do not sell personal data. Data may be received only by processors without whom the service cannot be provided:
- WayForPay (WAY FOR PAY LLC) — payment processing;
- Cloudflare, Inc. (USA) — website hosting and form handling;
- Telegram — internal notifications to the Organiser’s team about new requests and orders;
- [email service provider] — sending tickets and service emails;
- Google (YouTube) — only if you press play on a video on the website;
- an accountant and public authorities — where required by law.
Some processors are located outside Ukraine. Transfers are made under Article 29 of the Law “On Personal Data Protection” — to countries ensuring adequate protection, or with your consent and contractual safeguards.
5. Retention
- orders and primary documents — 1095 days after the end of the reporting period (Article 44 of the Tax Code of Ukraine);
- requests and correspondence without a purchase — up to 12 months;
- technical logs — up to 30 days;
- event photos and videos — for the period of event coverage and archiving.
After these periods, data is deleted or anonymised.
6. Your rights
Under Article 8 of the Law “On Personal Data Protection” you have the right to:
- know what data we process, why and to whom we transfer it;
- access your data;
- request correction of inaccurate data or deletion of unlawfully processed data;
- object to processing and withdraw consent (without affecting the lawfulness of prior processing);
- protect your rights, including by complaining to the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or to a court.
EU visitors also have the right to restriction of processing, data portability and to lodge a complaint with their national supervisory authority.
To exercise your rights, write to flowerforum.ua@outlook.com. We will reply within 30 calendar days.
7. Cookies and similar technologies
The website does not use advertising or analytics cookies and does not track you across sites. Only strictly necessary mechanisms of the hosting provider (bot and attack protection) are used. YouTube video loads from youtube-nocookie.com only after you press play — from then on Google’s rules apply.
If we add analytics or advertising pixels, we will update this Policy and ask for your consent before enabling them.
8. Photo and video shooting
The Forum is a public event with open filming (Article 307 of the Civil Code of Ukraine). If you do not want your image to be used, tell us at registration or write to flowerforum.ua@outlook.com — we will not use footage in which you are recognisable in new publications.
9. Security
We use encrypted connections (HTTPS), limited staff access, two-factor authentication for our services and process only the data needed for each purpose.
10. Children
The website and ticket sales are not intended for persons under 16. We do not knowingly collect their data; tickets for minors are ordered by parents or other legal guardians.
11. Changes
The current version is always published on this page with its date. We will notify ticket buyers of material changes by email.
Home