Privacy Policy

Procedure for personal data protection

We are pleased to welcome you to our website https://sensepaintings.com/eng or mobile app (hereinafter - the site), where you can touch high art and become the owner of exclusive works by famous artists.

The owner of this site is the Joint-Stock Company "Sense Bank", location: 03150, Kyiv, st. Velyka Vasylkivska, 100, USREOU code: 23494714, website: https://sensebank.com.ua/ (hereinafter - the Bank).

Carefully treating the personal data of visitors to our site, guided by the provisions of the Law of Ukraine "On Personal Data Protection" JSC "Sense Bank" informs you about the processing and protection of personal data and the rights of personal data subjects.

The Bank carries out banking activities, including in the field of personal data, exclusively in accordance with the requirements of current legislation of Ukraine and takes all necessary measures to comply with the Law of Ukraine "On Personal Data Protection", "Standard Procedure for Personal Data Processing" and The Verkhovna Rada of Ukraine on Human Rights on the processing of personal data, which poses a special risk to the rights and freedoms of personal data subjects, on the structural unit or responsible person that organizes work related to the protection of personal data during their processing, as well as disclosure specified information, approved by the order of the Commissioner of the Verkhovna Rada of Ukraine for Human Rights, other laws and regulations of Ukraine.

Terms and definitions:

personal data base (BPD) - a named set of organized personal data in electronic form and / or in the form of personal data files;

site visitor - a person who came to the site via the Internet and has access to the information posted on it;

personal data owner - a natural or legal person who determines the purpose of personal data processing, establishes the composition of these data and the procedures for their processing, unless otherwise provided by law;

consent of the personal data subject - voluntary expression of the will of an individual (provided he is informed) to allow the processing of his personal data in accordance with the stated purpose of their processing, expressed in writing or in a form that allows to conclude the consent. In the field of e-commerce, the consent of the personal data subject may be given during registration in the information and telecommunication system of the e-commerce subject by marking the permission to process their personal data in accordance with the stated purpose of their processing, provided that such system does not create opportunities for personal data processing until the moment of marking.

depersonalization of personal data - the removal of information that allows you to directly or indirectly identify a person;

file - any structured personal data available according to certain criteria, regardless of whether such data is centralized, decentralized or divided by functional or geographical principles.

processing of personal data - any action or set of actions, such as collection, registration, accumulation, storage, adaptation, modification, renewal, use and distribution (distribution, sale, transfer), depersonalization, destruction of personal data, including the use of information (automated) systems;

personal data - information or a set of information about an individual who is identified or can be specifically identified;

personal data controller - a natural or legal person to whom the Bank, as the owner of personal data or by law, has the right to process this data on behalf of the Bank;

personal data subject - a natural person whose personal data are processed; third party - any person, except for the personal data subject, owner or controller of personal data and the Commissioner of the Verkhovna Rada of Ukraine for Human Rights, to whom the owner or controller of personal data transfers personal data. automated system - organizational and technical system, which implements the technology of information processing using hardware and software.

Composition and content of personal data

During the implementation of banking activities and in compliance with the requirements of current legislation of Ukraine, the Bank processes personal data of individuals, site visitors.

The purpose of personal data processing is the fulfillment by the Bank of its obligations to the Visitor to establish business relations for the purpose of selling the Bank's products posted on the site. Personal data can be used to:

- identification of the Visitor who left the application on the site;
- communication with the Visitor by sending messages, letters, phone calls, in order to fulfill the requests of Visitors left on the site;
- organization of inspection of paintings in the place of their storage;
- concluding a contract of sale of a painting;
- conducting statistical and similar studies based on impersonal data.

The bank in accordance with applicable law of Ukraine, when establishing civil - legal relations with the Site Visitor, has the right to demand from the Client other documents and information containing personal data, exclusively for the purpose of fulfillment by the Bank of requirements of the current legislation of Ukraine regulating relations in the field of prevention and counteraction to legalization (laundering). proceeds of crime or terrorist financing and the proliferation of weapons of mass destruction.

The Bank processes personal data received from third parties if provided by the legislation of Ukraine or provided that they provide a guarantee that such transfer is made by a third party in compliance with the legislation of Ukraine and does not violate the rights of persons whose personal data are transferred to the Bank.

The Bank does not process the Client's personal data on racial or ethnic origin, political, religious or ideological beliefs, membership in political parties and trade unions, or data related to health, sexual life, biometric or genetic data.

Grounds for personal data processing

The processing of personal data is carried out by the Bank with the consent of the personal data subject, as well as in other cases provided for in Article 11 of the Law of Ukraine "On Personal Data Protection". The grounds for the processing of personal data are:

1) the consent of the personal data subject to the processing of his personal data;
2) a permit for the processing of personal data granted to the Bank in accordance with the law exclusively for the exercise of its powers;
3) concluding and executing a transaction to which the personal data subject is a party or which is concluded for the benefit of the personal data subject or for the implementation of measures preceding the conclusion of the transaction at the request of the personal data subject;
4) protection of vital interests of the subject of personal data;
5) the need to fulfill the obligation of the Bank, which is provided by law;
6) the need to protect the legitimate interests of the Bank or a third party to whom personal data is transferred, except when the need to protect the fundamental rights and freedoms of the personal data subject in connection with the processing of his data outweighs such interest.

The Bank may entrust the processing of personal data to the controller of personal data in accordance with the agreement in writing.
The personal data controller must first take measures to protect personal data and comply with the requirements of the Law.
The personal data controller may process personal data only for the purpose and to the extent specified in the agreement with the Bank.
Please note that the Bank processes personal data obtained from publicly available sources without the consent of the personal data subject.
Using this site, the Visitor agrees that he is familiar with this procedure for personal data protection, recognizes it and gives consent to the Bank and its authorized persons to collect and process personal data in accordance with this Procedure and current legislation of Ukraine.
In case of disagreement with the conditions specified in this Procedure, the Visitor is not entitled to use this site.
If an individual withdraws consent to the processing of personal data without following the procedures necessary to terminate contractual or other relations with the Bank (if established), the Bank will continue to process personal data within the limits and to the extent specified by existing legal relations and legislation of Ukraine, in particular to protect the Bank's rights and legitimate interests under the agreements.
The Bank processes personal data before the expiration of the information retention period specified by the legislation of Ukraine or the Bank's internal documents.
The procedure for access to personal data is determined by the Bank independently in accordance with the requirements of the Law of Ukraine "On Personal Data Protection".
To gain access to personal data, as well as other issues related to the processing of personal data in the Bank, it is necessary to apply in writing to the address: Ukraine, 03150, Kyiv, st. Velyka Vasylkivska, 100.

Rights of personal data subjects.

According to Article 8 of the Law of Ukraine "On Personal Data Protection", the subject of personal data has the right to:

1. Know about the sources of collection, location of personal data, the purpose of their processing, location or residence (stay) of the owner or controller of personal data or give a relevant order to obtain this information to authorized persons, except as provided by law;
2. Receive information on the conditions for granting access to personal data, in particular information on third parties to whom his personal data is transferred;
3. Access to your personal data;
4. Receive no later than thirty calendar days from the date of receipt of the request, except as provided by law, an answer as to whether his personal data are processed, as well as receive the content of such personal data;
5. Make a reasoned request to the owner of personal data with an objection to the processing of their personal data;
6. Make a reasoned request to change or destroy their lanes personal data by any owner and controller of personal data, if such data are processed illegally or are inaccurate;
7. To protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, non-provision or late provision, as well as to protect against the provision of information that is inaccurate or discredits the honor, dignity and business reputation an individual;
8. Complain about the processing of their personal data to the Commissioner or to the court;
9. Apply legal remedies in case of violation of the legislation on personal data protection;
10. Make reservations regarding the restriction of the right to process their personal data during the consent;
11. Withdraw consent to the processing of personal data;
12. Know the mechanism of automatic processing of personal data;
13. To protect against an automated decision that has legal consequences for him.

Terms of transfer of personal data to third parties

The procedure for access to personal data of third parties is determined by the terms of the personal data subject's agreement (terms of the client's agreement with the Bank; terms of consent expressed in another way and form) provided to the Bank as the owner of personal data for processing such data. The party to whom personal data is transferred must first take measures to ensure the requirements of the Law of Ukraine "On Personal Data Protection".

The Bank shall notify the personal data subject of the transfer of personal data to a third party within ten working days, if the conditions of his consent require it.

The Bank transfers personal data without notifying the subjects of personal data:

1) by decision (resolution) of the court;
2) bodies of the Prosecutor's Office of Ukraine, the Security Service of Ukraine, the Ministry of Internal Affairs of Ukraine, the Antimonopoly Committee of Ukraine - at their written request regarding transactions on the accounts of a specific legal entity or individual - business entity for a specific period;
3) bodies of the State Tax Service of Ukraine upon their written request regarding the availability of bank accounts of the Bank's clients;
4) a central executive body with a special status for financial monitoring at its request regarding financial transactions of the Bank's clients;
5) bodies of the state executive service at their written request on the issues of execution of court decisions and decisions subject to enforcement in accordance with the Law of Ukraine "On Enforcement Proceedings", regarding the state of accounts of the Bank's clients;
6) the National Bank of Ukraine in performing the functions of banking supervision or currency control;
7) the Deposit Guarantee Fund of individuals for compliance with the legislation on the deposit guarantee system of individuals.

Regulations in the field of personal data protection:

- Constitution of Ukraine
- Law of Ukraine "On Banks and Banking";
- Law of Ukraine "On Personal Data Protection";
- Standard procedure for personal data processing, approved by the order of the Verkhovna Rada of Ukraine Commissioner for Human Rights dated 08.01.2014 №1 / 02-14;
- Procedure for notifying the Commissioner of the Verkhovna Rada of Ukraine for Human Rights about the processing of personal data, which poses a special risk to the rights and freedoms of personal data subjects, about the structural unit or responsible person organizing work related to personal data protection during their processing , as well as the publication of this information, approved by the order of the Commissioner of the Verkhovna Rada of Ukraine for Human Rights dated 08.01.2014 №1 / 02-14;
- The procedure for processing personal data in the field of ensuring the functioning of the deposit guarantee system for individuals, approved by the decision of the Executive Board of the Deposit Guarantee Fund of individuals from 12.07.2012 №9;
- Rules for storage, protection, use and disclosure of banking secrecy, approved by the resolution of the Board of the National Bank of Ukraine dated 14.07.2006 № 267

Control over compliance with the legislation on personal data protection within the powers provided by the legislation of Ukraine is exercised by: the Verkhovna Rada Commissioner for Human Rights. Address: Ukraine, 01008, Kyiv, street Institutskaya, 2/8, tel .: 0 800-50-17-20 For additional information on the application of special legislation in the field of personal data protection, please visit the official website of the Verkhovna Rada Commissioner for Human Rights at: www.ombudsman.gov.ua