Privacy policy
We process your personal data for one purpose only: to issue the policy in your name and deliver it to you. This policy explains which data we process, on what legal basis, who receives it and how to exercise your rights under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Data controller
LLC "WELCOME TO UKRAINE", Ushinsky str, bldg. 40, office 302, Kyiv, 03151, Ukraine. Contact email for privacy matters: info@insuranceforvisitukraine.com.
Which data we process
| Data | Purpose | Legal basis |
|---|---|---|
| First name, surname, date of birth, passport number, nationality | To identify you on the policy; these are the details the Border Guard checks | Performance of the insurance contract (Art. 6(1)(b) GDPR) |
| Email and telephone | To send the verification code and the policy in PDF, and to deal with any issues | Performance of the contract (Art. 6(1)(b)) |
| Travel dates and chosen plan | To define the period and scope of cover | Performance of the contract (Art. 6(1)(b)) |
| Payment data | To collect the premium. Processed by the WayForPay gateway; we do not see your card number | Performance of the contract (Art. 6(1)(b)) |
| Browsing data (analytics cookies) | To measure use of the site in aggregate form | Consent (Art. 6(1)(a)), which may be withdrawn at any time |
Who we share the data with
- PJSC "EUROINS Ukraine" (Kyiv, Ukraine): the insurer that issues the policy and is responsible for the insurance contract. It receives all the insured person's data.
- WayForPay (Ukraine): payment gateway. It receives the amount, the email and the card details you enter directly on its gateway.
- Technical providers of hosting and email delivery, under data processor agreements.
- Public authorities where required by law.
International transfers
The insurer and the payment gateway are located in Ukraine, outside the European Economic Area. The transfer is necessary for the performance of the contract you request (Art. 49(1)(b) GDPR): without it, a policy valid in Ukraine cannot be issued.
Retention
Policy data is retained for the term of the contract and for the insurer's statutory limitation periods. Browsing data is retained for a maximum of 26 months. You may request early erasure once the data is no longer needed for the contract.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to info@insuranceforvisitukraine.com with a copy of your identity document. We reply within one month. If you believe the processing is not lawful, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security
The site runs over HTTPS. Data is transmitted to the insurer in encrypted form through its API and is not stored permanently on our servers beyond the technical logs needed to deal with any issues.