Privacy Policy

Website: racio.ua Version dated: 10.08.2026

This Policy describes how the administration of the racio.ua website (hereinafter — the "Website") collects, uses and protects the personal data of visitors and clients. The document is prepared in accordance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI dated 01.06.2010 and the general principles of the GDPR (Regulation 2016/679).

By using the Website or submitting a request, you agree to the terms of this Policy. If you do not agree — please do not use the Website and do not submit personal data.

1. Controller and Processor of Personal Data

The controller and processor of personal data collected through racio.ua is Limited Liability Company "Racio" (hereinafter — "we", "racio").

Company details:

• Legal name: LLC "Racio"
• Registered address: 08205, Kyiv Region, Irpin, 2D Oleny Telihy Street, Ukraine

Contact details for personal data enquiries:

• Email: info@racio.ua
• Phone: +38 (093) 169-39-05

2. Categories of Personal Data We Process

2.1. Data from the contact form on the Website:

• Name (or company name)
• Phone number
• Email address (if you provide it)
• Company name, position (if you provide them)
• Content of the enquiry / comment

2.2. Data from correspondence and phone calls:

• If you write to our email, message us in a messenger (Viber, Telegram) or call — your name, contact identifiers (number, username), and the content of the communication.

2.3. Technical data (collected automatically):

• IP address, device and browser type, browser language, referrer (where you came from), viewed pages, session duration, approximate geolocation (by IP).
• This data is collected via cookies, browser local storage, and analytics scripts (Google Analytics 4 / Google Tag Manager).

2.4. Contract performance data (for clients):

• Legal entity or sole proprietor details, tax identification numbers, banking details, legal address.
• Full names of managers, signatories, occupational safety engineers.
• Staff schedule or list of positions for document development.
• Information about production processes, equipment, activity specifics — in the minimum volume necessary to provide the service.
• You provide this data voluntarily, in the format and volume necessary to fulfil the specific order.

3. Purposes and Legal Grounds for Processing

4. Cookies and Third-Party Services

The Website uses first-party and third-party cookies (small files stored locally by the browser). For the operation of the Website and provision of services we engage a number of third-party providers in the following categories:

4.1. Web analytics. We use web analytics services from international providers to evaluate traffic, user behaviour, and content effectiveness. Such services may set cookies and collect technical data (anonymised IP address, device type, referrer, viewed pages, session duration). One of such providers is Google Ireland Limited (Google Analytics / Google Tag Manager). Policy: policies.google.com/privacy.

4.2. Content protection and delivery (CDN, DNS, WAF). For fast and secure Website operation we use services for DDoS attack protection, traffic distribution and DNS hosting. Such services process minimal technical logs (IP address, User-Agent) for the purpose of detecting malicious traffic. One of such providers is Cloudflare, Inc. Policy: cloudflare.com/privacypolicy.

4.3. Hosting. The Website is hosted with a hosting service provider with data centres located in the EU. The provider processes technical logs necessary for infrastructure operation.

4.4. Transactional email delivery. For sending transactional emails (order confirmations, commercial proposals, manager replies) we use an email delivery service from an international provider. Only the recipient's email address and the content of the message are transmitted to them.

You may reject cookies in your browser settings, block analytics scripts via corresponding browser extensions, or clear local storage. This may limit part of the Website's functionality.

*An up-to-date list of specific providers with their privacy policies will be provided upon written request to info@racio.ua.*

5. Data Transfer to Third Parties

We do not sell your personal data. We do not transfer it to third parties for marketing purposes. Transfer is only possible in the following cases:

5.1. Infrastructure and service providers — in the minimum volume necessary for service operation:

• Web analytics providers
• CDN, DNS, and attack protection providers
• Hosting providers
• Transactional email delivery providers

5.2. Partners for contract performance (as necessary and with your consent):

• Accredited training centres for occupational safety training and certification
• Laboratories for equipment certification (if provided in the contract)
• Medical institutions for arranging medical examinations (if provided in the contract)

5.3. State authorities — solely upon written request and in cases stipulated by law (State Labour Service, State Emergency Service, tax authorities, courts, etc.).

5.4. Cross-border transfer: some of our providers have data centres in the EU and USA. Data transfer to these providers is carried out on the basis of Standard Contractual Clauses in accordance with GDPR requirements and current data protection certifications.

6. Personal Data Retention Periods

After the retention period expires, data is deleted or anonymised.

7. Your Rights

In accordance with the Law of Ukraine "On Personal Data Protection" (Art. 8) and the GDPR, you have the right to:

1. Know what personal data of yours we process, for what purpose and on what legal grounds.
2. Obtain a copy of your data in a structured, machine-readable format.
3. Request correction of inaccurate or incomplete data.
4. Request deletion of your data ("right to be forgotten") — except in cases where retention is required by law.
5. Withdraw consent to processing at any time (if processing is based on consent).
6. Restrict processing or object to it.
7. Object to automated decision-making concerning you.
8. File a complaint with the Ukrainian Parliament Commissioner for Human Rights, who oversees compliance with personal data protection legislation.

To exercise any right, write to info@racio.ua. We are obliged to respond within 30 calendar days from receipt of the request (per Art. 16 Part 2 of the Law).

8. Personal Data Protection

We implement organisational and technical measures to protect personal data:

• The Website operates exclusively over HTTPS with a valid TLS certificate
• Form submission occurs over an encrypted connection
• Access to the client database and correspondence is limited to authorised employees who have signed non-disclosure obligations
• Passwords and API keys are stored in encrypted form within Cloudflare / hosting infrastructure
• Regular backups are performed
• Access to personal data is limited on a "minimum necessary" principle

At the same time, no system is absolutely secure. In case of an incident that may threaten the rights of data subjects, we will notify within 72 hours in accordance with legal requirements.

9. Processing Data of Minors

The Website is intended for a B2B audience (legal entities, sole proprietors, company executives). We do not knowingly collect data from persons under 18 years of age. If you discover that your underage child has provided us with data — write to info@racio.ua, and we will delete this data immediately.

10. Changes to the Policy

We may update this Policy in connection with changes in legislation, service expansion, or the introduction of new tools. The current version is always available at racio.ua/privacy. The date of the latest revision is indicated at the beginning of the document.

We will notify active clients of significant changes (e.g., expanding the list of third-party providers or new processing purposes) by separate email.

11. Contacts for Enquiries

For questions on personal data processing, exercising your rights or complaints:

LLC "Racio" Email: info@racio.ua Phone: +38 (093) 169-39-05 Address: 08205, Kyiv Region, Irpin, 2D Oleny Telihy Street, Ukraine

Supervisory authority (in case of a complaint): Ukrainian Parliament Commissioner for Human Rights Website: ombudsman.gov.ua

*This Policy takes effect from the date indicated at the beginning of the document and applies to all persons who visit racio.ua or interact with our services online.*