Privacy policy

1. Introduction

This Policy explains what personal data we receive through takeit.com.ua (the “Website”), why, where and how long we keep it, who we may share it with and what rights you have. It takes into account the Law of Ukraine “On Personal Data Protection” No. 2297-VI and, for visitors from the European Union, the General Data Protection Regulation (EU) 2016/679 (GDPR) to the extent it applies to us.

TakeIT is the trading name under which services are provided by Sole proprietor (FOP) Raisa Babak. In case of any discrepancy, the Ukrainian version of this Policy prevails.

2. Who is responsible for your data

• Data controller: Sole proprietor (FOP) Raisa Babak.
• Address: 39 Petra Hryhorenka Ave., apt. 10, Kyiv 02140, Ukraine.
• Contact for data protection matters: hello@takeit.com.ua, +38 (091) 481-11-25.

3. What data we receive through the form

The “Let’s start with a conversation” form asks for a single contact. Together with the request we receive:

• the contact method you chose (phone or email) and the contact itself — a phone number or an email address;
• a comment about your task — only if you added one;
• a service or plan — only if you came to the form from a service page or a plan button;
• the address of the page the request was sent from, the website language, and the date and time. If you came to the Website from an ad, the address may contain ad parameters (for example, gclid, utm_source, utm_campaign) that show us which campaign the request came from. We do not store other address parameters.

This data is stored in our request database, which only authorised TakeIT staff can access. Please do not send passwords, access keys or confidential documents through the form — if we need them for the work, we will agree a secure way to exchange them.

Correspondence. If you email us or we reply to your request, we process the content of the emails and the contact details in them.

Technical data. To protect the form from spam, your device’s IP address is held temporarily (no longer than 1 hour) in server memory only and is not written to the request database. The Website does not keep an access log with visitors’ IP addresses. The server only keeps service logs of its software (start-up, errors), which are limited in size and overwritten automatically.

4. Why we process data and on what legal basis

• To contact you, respond to your request and prepare a proposal. Legal basis: your consent given by submitting the form and steps taken at your request prior to entering into a contract (Art. 11 of Law No. 2297-VI; Art. 6(1)(a), (b) GDPR).
• To provide services under a contract, if we sign one, and handle related correspondence — performance of the contract.
• To protect the Website and the form from spam and abuse — our legitimate interest (Art. 6(1)(f) GDPR).
• To understand which ads bring requests, using the ad parameters in the page address (section 3) — our legitimate interest in assessing the effectiveness of our advertising (Art. 6(1)(f) GDPR).
• To measure the effectiveness of our ads in Google Ads (Google Ads cookies and notifying Google that a request was sent) — only with your consent in the cookie banner (Art. 11 of Law No. 2297-VI; Art. 6(1)(a) GDPR). You can withdraw consent at any time via “Cookie settings” at the bottom of the page.
• To comply with legal obligations (accounting, tax, requests from authorised bodies).

5. Mailings

The Website does not offer a newsletter subscription, and we do not send marketing emails to contacts from the form. If you previously agreed separately to receive our materials, you can withdraw that consent at any time by writing to hello@takeit.com.ua.

6. Cookies

Without your consent, the Website sets no cookies for visitors and loads no third-party scripts. If you agree to ad measurement, Google will set Google Ads cookies. We do not use analytics, remarketing or personalised advertising. See the Cookie Policy for details.

7. Who we may share data with

We do not sell your data or share contacts from the form with third parties for advertising. Access to data may be given to:

• TakeIT staff and contractors who need it to handle your request and who are bound by confidentiality;
• Google (Google Workspace) — used to deliver new-request notifications to our team, send a confirmation to your email (if you chose email) and correspond with you;
• Hetzner Online GmbH (Germany), our hosting provider. The Website and the request database run on our virtual server deployed on a physical server we rent from Hetzner in a data centre in Finland. The server may be moved to a Hetzner data centre in Germany — either way, the data stays in the EU. Hetzner provides the hardware and does not work with the contents of the request database.
• Google (Google Ads) — only if you agreed to ad measurement: Google receives the addresses and titles of Website pages you view after consenting, advertising identifiers (including the click identifier and identifiers from Google Ads cookies), technical information about your browser and device (for example, browser type, language, screen size) and the IP address the request comes from, as well as a notification that a request was sent, with its internal number. Your phone, email and comment from the form are not sent to Google. Google processes this data under its own privacy policy (policies.google.com/privacy);
• public authorities — only where and as required by law.

8. International transfers

Google services may process data outside Ukraine, including in the EU and the US. Transfers are made in line with Article 29 of Law No. 2297-VI and, for individuals in the EU, on the basis of the GDPR mechanisms used by Google (including standard contractual clauses). The Website’s server is located in the EU (Finland or Germany, see section 7).

9. How long we keep data

• Requests and correspondence — as long as needed to respond and, if we agree, to work together, or less if you ask us to delete them. Requests that did not lead to working together are deleted no later than 12 months after the last contact.
• Where a contract is signed — for the term of the contract and the document retention periods required by law.
• IP address for form protection — no longer than 1 hour, in memory only.
• Your cookie choice — in your browser until you change it or clear your browser data. The lifetime of Google Ads cookies is set by Google (see the Cookie Policy).
• Server service logs — limited in size and automatically overwritten by new entries.
• Virtual machine backups (including the request database) are kept for 14 days: the latest 14 copies are retained and older ones are overwritten automatically. In addition, before each Website update we make a copy of the request database; the latest five such copies are kept and older ones are deleted automatically. A deleted request may therefore remain in backups for some time until they are overwritten or deleted under this rotation schedule. Data in backups is used only to restore operation after a failure.

10. How we protect data

The Website uses a secure connection (HTTPS). Only TakeIT staff with personal accounts in the admin panel can view requests. We limit the number of requests from one device to prevent abuse of the form.

11. Your rights

Under Article 8 of Law No. 2297-VI you have the right, in particular:

• to know what data we process about you, why, where it is stored and who it is shared with;
• to access your data;
• to ask us to correct or delete data that is inaccurate or processed unlawfully;
• to object to processing and to withdraw your consent at any time;
• to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or a court.

If you are in the EU, you also have the rights under the GDPR: access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with the data protection authority in your country.

12. How to ask us to delete data or exercise other rights

Email hello@takeit.com.ua with the contact you left in the form and what you would like us to do (for example, delete your request). We will reply within 30 calendar days. To protect your data, we may ask you to confirm that the request comes from you.

13. Changes to this Policy

We may update this Policy, for example if new features or services appear on the Website. The current version is always published on this page with its date.