ILN Data Privacy Paper

Ukraine

notification of the data subject on such transfer while collecting personal data in accordance with the PDP Law. 5.6. Cross-border transfer of data The transfer of personal data to foreign subjects is carried out only if the relevant state ensures adequate personal data protection. The following states are recognised as doing so: (i) European Economic Area (EEA) member states; (ii) states-signatories to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data of 28.01.1981; and (iii) other states defined as such by the Cabinet of the Ministers of Ukraine. Additionally, cross-border transfer of personal data is allowed if the: data subject grants unambiguous consent to the transfer; need exists to conclude or perform an agreement between the data controller and the data subject for the benefit of the data subject; need exists to protect the vital interests of the data subject; need exists to protect public interest, establish, implement and ensure the legal claim; data controller has provided relevant guarantees of non- interference in the personal and family life of the data subject. Personal data may not be shared with a purpose other than the one for which it was collected. https://www.peterkapartner s.com/en/local/kyiv/

5.7. Grievance redressal Data subjects can submit complaints regarding their personal data processing to the Commissioner or a court. Rights and Duties of Data Providers/Principals 6.1. Rights and remedies -Right to withdraw consent Please see the related information in para 5.1. above. -Right to grievance redressal and appeal Please see the related information in para 5.7. above. -Right to access information In particular, the data subject has the right to (i) access to his/her personal data; (ii) no later than 30 calendar days from the date of receipt of the request, except in cases provided for by law, and receive a response on whether his/her personal data is being processed, as well as receive the content of such personal data; (iii) know about the sources of collection, location of his/her personal data, the purpose of their processing, location or place of residence of the data controller and processor, or authorise persons to receive such information, except in cases established by law; (iv) receive information on the conditions for

Made with FlippingBook - PDF hosting