01 Personal data controller
The controller of personal data is LLC PE «Akvaton»:
- Address: Rivne, Ukraine;
- Email: info@akvaton.com;
- Phone: +38 050 055 25 88.
For data protection enquiries, contact the email above with «Privacy / GDPR» in the subject line.
02 What data we collect
We collect only the data you knowingly provide through site forms, plus the minimum technical information needed for the site to work:
Data you provide:
- first and last name;
- company name;
- contact email;
- contact phone number;
- country / region of delivery;
- technical parameters of the requested product (grade, diameter, volume);
- message text or attached files you include in the request.
Data collected automatically:
- IP address (anonymised in GA4);
- device type, operating system, browser;
- pages viewed, time spent;
- traffic source (UTM tags, referrer);
- cookies and similar technologies (details — in our Cookie Policy).
03 Purposes of data processing
We process your data for the following purposes:
- Processing requests — contacting you regarding consultation, quotation, product supply;
- Contract performance — order processing, invoicing, logistics;
- Marketing communication — sending commercial offers, product updates (only with your consent; you may unsubscribe at any time);
- Analytics and site improvement — anonymised visit statistics via GA4 / Microsoft Clarity;
- Site security — protection against spam, phishing and cyberattacks (Wordfence, reCAPTCHA, log analysis);
- Legal compliance — retention of primary documents, responses to regulatory enquiries.
04 Legal grounds for processing
We process your data on the following legal grounds:
- Consent — you give it by submitting a request through any site form or subscribing to email updates (Art. 6(1)(a) GDPR; Art. 11 of the Ukrainian Personal Data Protection Act);
- Contract performance — processing necessary for concluding or performing a contract with you (Art. 6(1)(b) GDPR);
- Legitimate interests — site analytics, security, fraud prevention (Art. 6(1)(f) GDPR);
- Legal obligation — tax and accounting laws (Art. 6(1)(c) GDPR).
05 Sharing data with third parties
We do not sell, rent or share your personal data with third parties for commercial purposes. Limited data sharing is permitted only in the following cases:
Supply representatives:
- Elktrim Sp. z o.o. (Poland) — exclusive representative for EU supply. We transfer only contact details and request parameters needed to conclude the contract.
Technical processors:
- Brevo (Sendinblue) — transactional emails and email newsletters;
- Google Analytics 4 — anonymised behaviour analytics;
- Microsoft Clarity — heatmaps and session recordings (anonymised);
- Google reCAPTCHA — form protection from bots;
- Cloudflare — CDN and DDoS protection;
- Hosting provider — physical data storage.
All processors operate under GDPR-compliant DPAs (data processing agreements). Data is not transferred to countries without adequate protection.
Government authorities:
Data may only be transferred on the basis of an official request in accordance with applicable Ukrainian law.
06 Cookies and analytics
The site uses cookies for proper operation and analytics. On your first visit you see a cookie banner with the option to accept or reject non-essential cookies (analytics, marketing).
Cookie categories:
- Essential — for site functionality (session, language). Cannot be disabled.
- Analytics — GA4, Microsoft Clarity. Help us improve the site.
- Marketing — Facebook Pixel, Google Ads. For remarketing.
Details — in our Cookie Policy. Cookie settings can be changed at any time via the corresponding banner in the footer.
07 Retention period
We keep your data only as long as necessary for processing purposes:
- Form requests — up to 3 years from the last contact (for repeat enquiries and archive of commercial negotiations);
- Email newsletter — until you unsubscribe;
- Primary accounting documents — according to the periods established by tax law (usually 3+ years);
- Web server log files — up to 90 days;
- GA4 analytics — according to Google settings (14 months by default).
After these periods, data is deleted or anonymised.
08 Your rights
Under GDPR and the Ukrainian Personal Data Protection Act, you have the following rights:
- Right of access — receive a copy of your data we process;
- Right to rectification — correct inaccurate or outdated data;
- Right to erasure («right to be forgotten») — ask us to delete your data when no legal basis for retention exists;
- Right to restrict processing — temporarily suspend processing for verification;
- Right to data portability — receive your data in a structured format and transfer it to another controller;
- Right to object — for marketing communications;
- Right to withdraw consent — at any time without explanation;
- Right to lodge a complaint — to the Ukrainian Parliament Commissioner for Human Rights (Ukraine) or your national DPA (for EU citizens).
To exercise any right, send a request to info@akvaton.com with «Privacy / GDPR» in the subject. We reply within 30 days.
09 Data security
We apply technical and organisational measures to protect your data:
- full channel encryption (HTTPS / TLS 1.3);
- site protection via Wordfence (firewall, malware scan, 2FA for admin);
- restricted data access — only authorised personnel;
- regular backups via UpdraftPlus with encryption;
- spam protection via Google reCAPTCHA and honeypot fields;
- DDoS protection via Cloudflare.
In case of a personal data incident, we will notify you and the relevant supervisory authorities within 72 hours as required by GDPR.
10 Children
Our site is aimed at a B2B audience (legal entities, private entrepreneurs) and is not intended for children under 16. We do not knowingly collect personal data of children. If you discover that a child has provided us with their data without parental consent, please notify info@akvaton.com, and we will delete such data immediately.
11 Changes to this Policy
We may update this Policy due to changes in law, technology or our processes. The current version is always available at this address. The last update date is shown at the top of the page.
We will notify you of material changes via email (if you are subscribed) or via a banner on the site.
12 Contact details
For questions about personal data processing:
LLC PE «Akvaton»
Address: Rivne, Ukraine
Email: info@akvaton.com (with «Privacy / GDPR» in the subject)
Phone: +38 050 055 25 88