Ukraine
a natural person (subject to his/her awareness) to grant permission to process his/her personal data in accordance with the stated purpose of its processing, expressed in written form or in a form that makes it possible to conclude that consent has been granted. The consent may be prepared as a separate document to be signed by the data subject, or a corresponding indication in electronic form, a term and condition of the agreement, or it may be prepared in any other form that allows the conclusion that consent has been provided (writing an application, filling in a questionnaire, etc.). In the field of electronic commerce, the data subject's consent may be provided when registering in the information and communication system of the electronic commerce subject by ticking the granting of permission to process his/her personal data in accordance with the stated purpose of its processing, provided that such a system does not create opportunities for personal data processing until the tick is made. As a general rule, at the time of collection of personal data, the data subject shall be informed about the data controller, composition and content of collected personal data, the data subject’s rights defined by the PDP Law, the purpose of collecting personal data, and the persons to whom the relevant personal data may be transferred. -Consent Notice The consent notice should be in a simple and understandable form
and contain the full scope of information that must be provided by the data controller to the data subject before receipt of the consent -Withdrawal of Consent The data subject has the right to withdraw consent to processing personal data without specifying motives if the only basis for processing is his/her consent. From the moment of withdrawal of consent, the data controller is obliged to stop personal data processing. -Other grounds prescribed by law Apart from the consent, the PDP Law establishes a list of other grounds allowing the processing of personal data without the consent of the data subject (such as the conclusion and performance of a transaction to which the data subject is a party or which is concluded in favour of the data subject or for the implementation of measures preceding the conclusion of the transaction at the request of the data subject, etc.). 5.2. Data storage and retention timelines The personal data is processed no longer than necessary for the legitimate purposes for which it was collected or further processed; in any case, no longer than provided for by the legislation in the field of archival affairs and record keeping. Further processing of personal data for
https://www.peterkapartner s.com/en/local/kyiv/
Made with FlippingBook - PDF hosting