This privacy policy explains how DEVOSO LLC (“DEVOSO”, “we”) collects, uses and protects the personal data of website visitors and clients. It has been prepared in line with the Law of Ukraine On Personal Data Protection. We also follow the principles of the EU General Data Protection Regulation (GDPR) where it applies to our processing.
1. Data controller
The controller of your personal data is DEVOSO LLC (TOV «DEVOSO»), EDRPOU code: [to be added]. For any questions about data processing, please email office@devoso.info.
2. What data we collect
- Information you give us: your name, job title, company, phone number, email address, the content of your request and any files you send through the website forms.
- Client data: information needed to provide legal services and perform our engagement.
- Technical data: IP address, browser type, pages viewed, date and time of visit, and cookie data.
- Candidate data: CVs and other information you send when applying for a job.
We do not ask you to send special categories of data, such as health information, through the website. If such data is needed for a matter, we will agree a secure way to transfer it.
Processing principles
We follow the principles of lawfulness, transparency and data minimisation. In other words, we collect only the data we genuinely need for a defined purpose and do not use it for incompatible purposes. We also keep data accurate and update it when you tell us about changes.
3. Why we process data
- to respond to your request and arrange a consultation;
- to provide legal services and perform our contracts;
- to comply with our legal obligations;
- to send news and event invitations — only with your consent;
- to analyse and improve the website;
- to consider job applications.
4. Legal grounds
We process personal data on the grounds set out in law. These include your consent, entering into and performing a contract, compliance with a legal obligation, and our legitimate interests. For example, protecting the website against abuse is a legitimate interest.
You can withdraw your consent at any time by emailing office@devoso.info. Withdrawal does not affect the lawfulness of processing carried out before it.
5. Attorney-client privilege
Information you share with us in connection with legal services may be protected by attorney-client privilege. We therefore apply stricter confidentiality rules to it and disclose it only where the law expressly requires.
6. Who we share data with
We never sell personal data. However, the following processors that help us run our business may have access to it:
- our hosting provider and IT service providers;
- email and messaging services;
- web analytics services.
These processors act only on our instructions and under a contract with us. We may also disclose data to public authorities where the law requires it.
7. International transfers
Some of our providers may host servers outside Ukraine. In that case, we transfer data only where an adequate level of protection is ensured, as the law requires, or on another lawful basis.
8. How long we keep data
We keep data only for as long as the purpose requires. Enquiries that do not lead to an engagement are deleted once communication ends and a reasonable period for follow-up questions has passed. Client files are kept for as long as needed to protect the parties’ rights and to meet legal requirements.
9. Cookies
The website uses essential cookies to function properly and, with your consent, analytics cookies. You can change your preferences in the cookie banner or in your browser. Note, however, that disabling essential cookies may affect some features.
10. Your rights
As a data subject, you have the rights set out in the Law of Ukraine On Personal Data Protection. In particular, you can:
- find out what data about you is processed, for what purpose and who has access to it;
- access your data;
- ask us to correct inaccurate data or delete it;
- object to processing and withdraw your consent;
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court.
Where the GDPR applies, you also have the right to restrict processing and to data portability. To exercise your rights, email office@devoso.info. To protect your data, we may ask you to confirm your identity.
11. How we protect data
We use organisational and technical security measures. These include role-based access, encrypted connections, backups and staff training. As a result, only those who need data for their work can access it.
12. Changes to this policy
We may update this privacy policy, for example when the law or our website services change. The current version is always available on this page. We will also flag any material changes on the website. Last updated: [to be added].
13. Contact
DEVOSO LLC. Email, including for personal data matters: office@devoso.info. Phone: +380 77 172 27 45.