Privacy Policy

1. General provisions

1.1. This Privacy Policy (hereinafter — the "Policy") sets out the procedure for the collection, processing, storage, and protection of personal data of visitors to the website of Virtual Memory Space. Museum of Crimean Resistance / www.museum-resistance.com (hereinafter — the "Site"), which preserves and memorializes the stories of Crimean political prisoners of the Kremlin, persecuted after the beginning of the Russian occupation of the Autonomous Republic of Crimea and the city of Sevastopol in 2014 (hereinafter — the "Museum").

1.2. The Site is a non-commercial educational and informational resource. Registration to view the content of the Site is not required.

1.3. The owner of the Site and the controller of personal data is sole proprietor (FOP) Tevfikova Lera Reshativna, EDRPOU (state registry code) 3176110707, contact address: [email protected] (hereinafter — the "Owner", "we").

1.4. This Policy has been developed in accordance with the Law of Ukraine "On the Protection of Personal Data" and the Law of Ukraine "On Information", and, taking into account the possible access to the Site by visitors from EU countries, taking into account the principles of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1.5. By using the Site, the visitor agrees to the terms of this Policy. If you do not agree with its terms, please stop using the Site.

2. What data we process

Since registration on the Site is not required, we do not collect account credentials (login, password, user profile). We may process only the following categories of data:

2.1. Technical data collected automatically:
- IP address;
- browser type and version, operating system, device type;
- date and time of the visit, pages viewed, time spent on the page;
- the website from which the referral was made (referrer);
- approximate geolocation based on the IP address (country/city).

2.2. Data from cookies and similar technologies — see section 6.

2.3. Data provided voluntarily — if the Site has a feedback form, a newsletter subscription, or the possibility to leave a comment/inquiry, we process only the data that you yourself have provided (e.g., name, email, text of the inquiry). Providing this data is voluntary and is carried out solely at your own initiative.

2.4. We do not collect data about health status, political or religious beliefs, biometric data, or other sensitive categories of data, except in cases where a person voluntarily provides such information in an inquiry (e.g., by telling the story of a relative), and solely for the purposes specified in section 3.

3. Purpose of data processing

We process data solely for the following purposes:
- ensuring the technical operation and security of the Site;
- analyzing traffic and improving the content and usability of the Site;
- responding to inquiries sent through the feedback form (if available);
- sending informational newsletters — only with separate voluntary consent (opt-in) to receive them;
- fulfilling the requirements of legislation, if necessary.

We do not use personal data for advertising, sale to third parties, or any commercial purposes.

4. Legal bases of processing

Data processing is carried out on the basis of:
- the legitimate interest of the Owner in ensuring the functioning and security of the Site (regarding technical data);
- the visitor's consent (regarding cookies, the feedback form, newsletters);
- the performance of legal obligations (in cases provided for by law).

5. To whom data is disclosed

5.1. We do not sell, exchange, or transfer personal data to third parties for commercial purposes.

5.2. Data may be processed by the following categories of recipients solely for the technical support of the Site's operation:
- hosting provider / company providing the Site's hosting services;
- web analytics services Google Analytics;
- mailing service for newsletters.

5.3. Data may be disclosed in cases directly provided for by law, upon a justified request from authorized state authorities.

5.4. We do not transfer data for profiling or automated decision-making that has legal consequences for a person.

6. Cookies

6.1. The Site uses cookies and similar technologies for:
- ensuring the correct operation of the Site (technical/essential cookies);
- analyzing traffic (analytics cookies) — only with your consent.

6.2. Upon your first visit to the Site, you will be offered to configure or confirm the use of cookies. You can change the settings in your browser at any time and withdraw your consent by deleting cookies or blocking their installation. This may affect certain functions of the Site.

7. Data retention period

- server technical logs are stored for no longer than 720 hours, after which they are deleted or anonymized;
- feedback form data is stored for the period necessary to process the inquiry, plus an additional 2 years for possible further communications, after which it is deleted;
- newsletter data is stored until the consent to receive it is withdrawn.

8. Visitor's rights

In accordance with personal data protection legislation, you have the right to:
- obtain information on whether your personal data is being processed and to access it;
- request the correction of inaccurate data;
- request the deletion of your data ("the right to be forgotten");
- withdraw previously given consent at any time;
- object to the processing of data based on legitimate interest;
- lodge a complaint with the Commissioner of the Verkhovna Rada of Ukraine for Human Rights or, where applicable, with the data protection supervisory authority in your country.

To exercise these rights, contact us at: [email protected].

9. Data security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, disclosure, or destruction. At the same time, no method of transmitting data over the Internet is absolutely secure, and we cannot guarantee absolute protection.

10. Children

The Site is not intended for the collection of personal data of children. If you become aware that a child has provided us with personal data without the consent of their parents or guardians, please contact us to have it deleted.

11. Links to other sites

The Site may contain links to other resources (archives, human rights organizations, social networks). We are not responsible for the privacy policies and practices of such third-party sites.

12. Changes to the Policy

We may update this Policy periodically. The current version is always published on this page with the date of the last update indicated. We recommend reviewing this page periodically.

13. Contacts

For questions regarding this Policy or the processing of your personal data, contact us:
- email: [email protected].