PRIVACY POLICY

General Provisions

The management of the information-analytical service for text uniqueness check and anti-plagiarism control "CANDY CONTENT" (https://candy-content.com/) (hereinafter referred to as "Service" or "CANDY CONTENT") is carried out by the individual entrepreneur Serhiy Yuriyovych Chernienko, acting based on the extract from the Unified State Register of Legal Entities, Individual Entrepreneurs and Public Associations (entry number 2 447 000 0000 004763 dated 15.08.2013), who is the administrator (hereinafter referred to as "Administrator").

The Administrator respects the confidentiality (personal) information of all individuals who visit the Service or use its services, and commits to ensuring reliable protection of personal data. We strive to guarantee the confidentiality of any information that may help identify an individual, and create comfortable conditions for the secure use of the Service by each user.

This Privacy Policy (hereinafter – "Policy") establishes the procedure for processing personal data by the Administrator, what types of information are collected, the purposes of their use, principles of interaction with third parties, security measures for data protection, and the conditions for access to personal data. In addition, the Policy contains contact information for users, allowing them to access their data, change, block, or delete it, as well as contact us with any questions regarding personal data processing.

Purpose and Goals of Personal Data Processing

The purpose of processing personal data is to provide the Services provided by the Service.

Your personal data is used to ensure the proper functioning of the Service, exchange of information and news, as well as to develop relationships in the field of advertising and communications. All these actions are carried out in accordance with the requirements of Ukrainian legislation, in particular, but not limited to: the Law of Ukraine "On Protection of Personal Data", "On Ratification of the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data and the Additional Protocol to the Convention on the Protection of Individuals with Regard to the Automatic Processing of Personal Data regarding Supervisory Authorities and Transborder Data Flows", "On Information", "On Advertising", "On Telecommunications", "On Protection of Information in Information and Telecommunication Systems", "On State Support for Mass Media and Social Protection of Journalists", as well as in accordance with the Service’s Terms of Use and other regulations governing the Administrator’s activities.

Collection and Use of Personal Data

The owner and manager of the personal data of the Service users is the Administrator - Individual Entrepreneur Serhiy Yuriyovych Chernienko.

When using the Service, the Administrator processes user data, namely:

• data provided by the user both when filling out registration forms and during use of the services;

• cookie files;

• IP addresses;

• parameters and settings of internet browsers (User-agent).

The Administrator collects only those personal data (for example, your first name and last name, login and access password, email address, contact phone number, date of birth, gender, etc.) that you consciously and voluntarily provide as the subject of personal data for the purposes of using the Service, which in accordance with the requirements of the legislation constitutes the consent of the subject of personal data for the processing of their personal data in accordance with the purpose of processing stated in this Policy.

Please note: The Administrator limits the collection to the minimum amount of information necessary solely for fulfilling the request of the subject of personal data.

The Administrator does not collect information subject to specific legislative requirements, such as information about racial or ethnic origin, political, religious, or philosophical beliefs, membership in political parties and trade unions, criminal convictions or sentences, as well as data related to health, sexual life, biometric or genetic data (in accordance with Article 7 of the Law of Ukraine "On Protection of Personal Data").

The Administrator collects data on the usage statistics of the Service. The information may include data about connections, traffic, the user’s browser, as well as the date, time, duration of internet usage and specifically with the Service.

Processing and Storage of Personal Data

The processing and storage of provided personal data is carried out using specialized equipment of the Administrator, ensuring the operation of the Service. The provided personal data is processed and may be stored in the Personal Data Base or a separate table in the Service’s Database.

The Administrator collects and processes personal data of users solely to ensure the functioning of the Service, maintain communication with users, provide informational materials, and also to fulfill obligations in accordance with the terms of use of the Service. Data processing is carried out on a legal basis, in compliance with the requirements of the current legislation of Ukraine regarding the protection of personal data.

Retention of Personal Data

User personal data is retained for the time necessary to fulfill the purposes specified in this Policy, or for the period defined by the current legislation of Ukraine. After the specified period, the data will be irrevocably deleted or anonymized in such a way that the person can no longer be identified.

In case of deleting the user’s account on the Service, their personal data will also be automatically deleted.

Cookie Files

Cookies are small text files that are stored on the user's devices during the visit to the Service. The Service may use cookies to understand what interests you and to remember you if you use the Service again. The Administrator stores cookies to ensure the technically flawless and optimized provision of Services.

The cookies that may be used by the Administrator cannot harm the user’s devices. Most of the cookies that may be used by the Administrator are called session cookies, which are automatically deleted after using the Service. Other cookies remain on the user's devices until they are deleted by the user. These cookies allow recognizing the user’s browser on the next visit.

Interaction of the Service with Other Resources

When using the Service, there may be codes from other internet resources and third parties, which may result in these internet resources and third parties receiving your data. Therefore, these internet resources may receive and process information about your visit to these pages, as well as other information that is transmitted by the user’s browser. Such internet resources may include:

- analytics systems (for example, Google Tag Manager, Google Analytics, Meta Pixel, etc.);

- social network plugins (for example, Facebook, X, and others).

The use of these services by the Administrator is necessary for the operational analysis of Service usage statistics, internal and external evaluation of the Service’s performance, and user activity. The data received from these services is not stored or processed by the Administrator.

Therefore, if for any reason the user does not want these services to have access to their personal data, the user can voluntarily log out of their account or profile, or clear the cookies (through their browser).

Transfer of Information to Third Parties

The Administrator may transfer information obtained from users during the use of the Service to third parties for the proper fulfillment of its duties and to provide Services to users.

The distribution of personal data by the Administrator without the user’s consent or that of their authorized representative is permitted only in cases defined by law, and only (if necessary) in the interests of national security, economic welfare, and human rights.

Protection of Personal Data

The Administrator uses generally accepted standards of technological and operational protection of information and personal data against loss, misuse, alteration, or destruction. However, despite all efforts, the Administrator cannot guarantee absolute protection against any threats arising outside the Administrator’s control.

The Administrator ensures compliance with all relevant obligations regarding confidentiality, as well as technical and organizational security measures to prevent unauthorized or illegal disclosure or processing of such information and data, accidental loss, destruction, or damage.

Safety of Minors

The Service is not intended for minors. The Administrator takes the issue of security very seriously, especially regarding individuals who have not reached adulthood, and therefore, the Administrator encourages parents to explain to their children the issues of internet security, their specific goals, and the need to use certain features of the Service.

Rights and Obligations of the User

The user has the right to receive information about the procedure for processing their personal data, as well as other rights defined by Part 2 of Article 8 of the Law of Ukraine "On Personal Data Protection" dated 01.06.2010 No. 2297-VI (as amended) (hereinafter – the Law).

The user is obliged, in particular, but not limited to:

• not to engage in actions aimed at deceiving other users;

• not to provide their personal data to third parties;

• not to collect, systematize, store, process, or distribute personal information of other users;

• not to attempt to gain access to the personal data of other users by any means, including, but not limited to, deception, abuse of trust, or guessing authentication and identification data.

If the user registers on the Service on behalf of and in the interest of third parties, by providing this consent, the user confirms that they have sufficient authority to perform such actions, including giving consent on their behalf for the processing of personal data under the conditions outlined above, as their representative (parent, guardian, and others as provided by applicable law).

User Consent

In accordance with the Law, the Administrator processes users' personal data for the purpose of providing Services based on the consent for the processing of personal data, granted in accordance with the Law for exercising powers and for the execution of the contract to which the user is a party.

The user may voluntarily provide the Administrator with consent to process their personal data for the purpose of receiving promotional and informational materials or for another specified purpose.

By registering on the Service, the user confirms that they have read the terms of this Privacy Policy, including the purpose of processing the personal data specified in this Policy, and the rights granted to data subjects under Article 8 of the Law, as well as the use of personal data by the Administrator, by checking the box "I confirm I have read and agree with the User Agreement and Privacy Policy".

Conditions for Access to Personal Data

The procedure for accessing personal data of third parties is defined by the conditions of the user’s consent, granted to the personal data holder for the processing of such data, or in accordance with legal requirements.

The user has the right to receive any information about themselves from any subject of relations related to personal data, provided they specify their last name, first name, and patronymic, place of residence (place of stay), and details of the document confirming the identity of the person making the request, except in cases specified by law.

The user has free access to data about themselves.

Delaying the user's access to their personal data is not allowed.

Delaying access to personal data of third parties is allowed if the required data cannot be provided within thirty calendar days from the date the request is received. In this case, the total time for resolving the issues raised in the request may not exceed forty five calendar days.

A notification about the delay will be provided to the third party who submitted the request in writing, explaining the procedure for appealing such a decision.

A decision on delaying or refusing access to personal data can be appealed to the Ombudsman of the Verkhovna Rada of Ukraine or to the court.

To update, gain access, make changes, block or delete your personal data, withdraw your consent for processing personal data provided by you to the Administrator according to this Policy, or if you have any comments, suggestions, or complaints regarding your personal data processed by the Administrator, please contact the Administrator via the special form at the link https://candy-content.com/support/ or by email at: [email protected].

Changes to the Policy

This Policy may be periodically updated and supplemented without prior notification to the user, including changes to legislative requirements.

In case of substantial changes to this Policy, the Administrator will post a notice on the Website and specify the date when these changes will take effect. If, within the specified period, you do not refuse to accept the changes in writing, it will mean that you agree to the corresponding changes to the Policy.

We ask you to periodically review the Policy to stay informed about any changes or additions.