LEVEL-EST Website Privacy Policy

1.1. This LEVEL-EST Website Privacy Policy (the 'Policy') sets out the procedure for collecting, using, processing, storing, transferring and protecting personal data and technical information when using level-est.com.

1.2. The level-est.com website is informational, presentational and marketing in nature. It is used to provide information about LEVEL-EST products, solutions, modules, materials and contact details, and to submit enquiries, applications or requests concerning LEVEL-EST products and services.

1.3. This Policy applies to website visitors and to persons who submit feedback forms, demo requests, enquiries about LEVEL-EST products or other messages through the website.

1.4. This Policy applies only to level-est.com. Data processing within the LEVEL-EST SaaS platform, the level-est.app web application, the user account and during service onboarding is governed by separate documents and terms.

2.1. This Policy applies to level-est.com, its public pages, feedback forms, applications, requests and other communications made through the website.

2.2. This Policy does not govern data processing within the level-est.app web application, the user account, during onboarding, acceptance of contractual documents, use of SaaS platform modules or processing of the Client's operational data.

2.3. This Policy does not govern data processing by third parties acting independently of the website operator, including banks, communications providers, public authorities, social networks, external websites or other services linked from the website.

3.1. The level-est.com website is administered by LEVEL-EST, whose operator is Sole Proprietor Maryna Volodymyrivna Vasiliva.

3.2. For the purposes of this Policy, 'LEVEL-EST', 'we', 'us' and 'our' mean the operator of level-est.com, which organizes the processing of personal data received through the website.

3.3. For questions related to this Policy or the processing of personal data through the website, please contact us by email: privacy@level-est.com.

3.4. Legal information about the LEVEL-EST operator may be provided to the user upon request or as part of the contractual service-onboarding process.

4.1. The following categories of data may be processed when using the LEVEL-EST website:

4.2. LEVEL-EST does not ask visitors to level-est.com to provide special categories of personal data, including information about health, political opinions, religious beliefs, biometric data or other sensitive data.

4.3. The user should not provide, in website forms or messages, data that is not necessary for considering the enquiry, application or request.

5.1. If the user completes a form on level-est.com, LEVEL-EST may process the following data:

• first and last name or contact name;
• work email;
• telephone number, if the form includes such a field;
• company name or sole proprietor name;
• company website, if provided by the user;
• country or region;
• selected or requested product, service or area of cooperation;
• text of the message, enquiry or request;
• information about consent to personal data processing;
• date, time, IP address, user agent and other technical data associated with submitting the form.

5.2. Submitting a form on level-est.com does not automatically enter into an agreement, approve onboarding, grant access to the LEVEL-EST SaaS platform or constitute acceptance of the request by LEVEL-EST.

5.3. LEVEL-EST may use form data to consider the enquiry, communicate with the user, clarify needs, arrange a demonstration, prepare a preliminary response or refer the request to the responsible LEVEL-EST representative.

5.4. The user should not include information in website forms that is unnecessary for considering the enquiry, including special categories of personal data or confidential information about third parties.

6.1. When visiting level-est.com, technical data necessary to ensure the operation, security, stability, analytics and improvement of the website may be processed automatically, including:

• IP address or its truncated/masked version;
• browser type and version;
• device type;
• operating system;
• browser language;
• date and time of visit;
• pages viewed by the user;
• referral source;
• approximate location at country or regional level, determined from technical data;
• data about website errors, performance, availability and security.

6.2. Such data may be processed in server logs, analytics systems, monitoring systems, security systems or other technical environments necessary for the operation, protection and improvement of the website.

6.3. If cookies or similar technologies are used for website analytics, they are used in accordance with the LEVEL-EST Cookie Policy and the user's consent settings.

6.4. LEVEL-EST may use statistical, aggregated or anonymized website-visit data to analyze website operation and improve its structure, content, performance and user experience.

7.1. Level-est.com may use cookies and similar technologies to operate the website, remember settings, provide analytics and security, improve the user experience and, where separate consent has been given, for marketing purposes.

7.2. Certain cookies may be necessary for the website to operate correctly. Other cookies, including analytics or marketing cookies, are used in accordance with the user's settings and legal requirements.

7.3. Detailed information about cookies, their categories, retention periods and ways to manage them is provided in a separate document: the LEVEL-EST Cookie Policy.

8.1. LEVEL-EST may process website users' data for the following purposes:

• ensuring the operation, availability, security and stability of level-est.com;
• responding to enquiries, requests, messages or forms submitted by users through the website;
• arranging a product demonstration, preliminary consultation or other communication concerning LEVEL-EST solutions;
• communicating about LEVEL-EST products, services, solutions and capabilities in response to a user's enquiry;
• preliminarily assessing a prospective client's request and identifying the responsible LEVEL-EST representative for further communication;
• improving the structure, content, speed, accessibility and usability of the website;
• analyzing website traffic and interactions;
• remembering user settings and managing cookies in accordance with the LEVEL-EST Cookie Policy;
• preventing misuse, spam, technical attacks or unauthorized actions;
• protecting the rights, legitimate interests, security and property of LEVEL-EST;
• complying with the requirements of Ukrainian law, where applicable.

8.2. If LEVEL-EST uses a user's data to send informational or marketing communications that are not a response to the user's enquiry, such communications are sent with the user's separate consent or on another appropriate legal basis.

9.1. Personal data on level-est.com may be processed on the following grounds:

• the user's consent, including when the user submits a form, selects the relevant checkbox or otherwise voluntarily provides data for a specified processing purpose;
• the need to consider the user's enquiry, request or message and prepare a response;
• preparation for a possible contractual or business relationship when the user enquires about LEVEL-EST products, services, a demonstration or cooperation;
• the need to ensure the operation, security, stability, protection and technical administration of the website;
• protection of the rights, legitimate interests, security and property of LEVEL-EST, website users or third parties;
• compliance with the requirements of Ukrainian law, where applicable.

9.2. If the user does not provide data necessary to process the request, LEVEL-EST may be unable to respond to the enquiry, arrange communication, provide the requested information or consider the relevant request.

9.3. Where data processing is based on the user's consent, the user has the right to withdraw that consent by contacting LEVEL-EST using the details provided in this Policy. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

10.1. LEVEL-EST may send informational or marketing communications only where there is an appropriate legal basis, including the user's separate consent where such consent is required.

10.2. The user may unsubscribe from marketing communications at any time using the method specified in the relevant communication or by contacting LEVEL-EST at its contact email address.

10.3. Service communications relating to a response to a specific user enquiry are not considered marketing communications.

10.4. Unsubscribing from marketing communications does not affect LEVEL-EST's ability to send the user service or individual communications necessary to respond to an enquiry or fulfil a request.

11.1. LEVEL-EST may transfer data or provide third parties with access to it only to the extent necessary for website operation, communications, security, analytics, compliance with legal requirements or protection of LEVEL-EST's rights.

11.2. Such third parties may include:

• cloud providers, hosting providers and infrastructure suppliers;
• providers of email, communications or service tools;
• web analytics services, if connected;
• monitoring, security and abuse-prevention services;
• contractors, consultants, auditors or legal advisers where necessary;
• public authorities, courts or other authorized persons in cases provided for by Ukrainian law.

11.3. Third parties engaged for website operation, communications, analytics, security or technical support may process data only within the relevant functions and purposes for which they are engaged.

11.4. If the user follows a link from level-est.com to third-party websites or services, data processing on those resources is governed by the privacy policies of the relevant third parties. LEVEL-EST does not control those third-party resources and is not responsible for their policies, content or data-processing methods.

11.5. LEVEL-EST does not sell website users' personal data.

12.1. Data is retained no longer than necessary for the purposes for which it was collected, unless a longer retention period is required to comply with Ukrainian law, protect LEVEL-EST's rights and legitimate interests, resolve disputes, ensure security or technically administer the website.

12.2. Indicative data retention periods may be as follows:

12.3. Once the processing purpose has been achieved or the retention period has ended, data may be deleted, anonymized or archived if further retention is necessary or permitted under law, technical procedures, security requirements or the protection of LEVEL-EST's rights.

12.4. Data that is no longer needed to identify the user may be used in anonymized, aggregated or statistical form to analyze website operation and improve its structure, content and user experience.

13.1. LEVEL-EST takes reasonable organizational and technical measures to protect data against unauthorized access, loss, alteration, destruction, unlawful disclosure or other misuse.

13.2. Such measures may include:

• use of a secure HTTPS/TLS connection;
• restricted access to administrative panels, technical environments and website management tools;
• access control for infrastructure and services used to operate the website;
• protection of technical configurations, account credentials and other sensitive technical parameters;
• monitoring of technical errors, suspicious events and security events;
• backups or other continuity measures, where applicable;
• access restrictions based on need-to-know and least-privilege principles.

13.3. Despite the measures taken, no data transmission or storage system can guarantee absolute protection. The user should also follow basic security practices when using the internet, email and other communication channels.

14.1. The user may contact LEVEL-EST regarding matters related to the processing of their personal data, including to:

• obtain information about the processing of their personal data;
• obtain information about the purpose of processing, data categories, sources from which the data was obtained and persons to whom the data may be disclosed;
• clarify, correct or update personal data;
• withdraw consent where processing is based on consent;
• object to certain processing where provided by law;
• restrict processing or have data deleted in cases provided by law;
• receive a response to a personal data request.

14.2. LEVEL-EST may request additional information to identify the person submitting the request or confirm their authority.

14.3. Certain data may not be subject to immediate deletion or may be retained for longer where necessary for legal compliance, security, evidence, or protection of LEVEL-EST's rights or legitimate interests.

14.4. If the user believes their personal data rights have been violated, they may contact LEVEL-EST using the details provided in this Policy or use other remedies provided by Ukrainian law.

15.1. Level-est.com may contain links to third-party websites, services, platforms, social networks or third-party materials.

15.2. LEVEL-EST does not control such third-party resources and is not responsible for their content, availability, security, privacy policies, cookies or personal-data processing methods.

15.3. Before using third-party resources, users are advised to review their privacy policies, cookie policies and terms of use.

16.1. LEVEL-EST may update this Policy from time to time, including when legislation, website functionality, feedback forms, technical services, analytics, cookies or approaches to data processing change.

16.2. The current version of the Policy is published on level-est.com. A new version takes effect when it is published, unless the updated version expressly states otherwise.

16.3. Users are advised to review this Policy periodically to remain informed about the current terms for processing personal data on level-est.com.

17.1. For questions related to this Policy or the processing of personal data on level-est.com, the user may contact LEVEL-EST: privacy@level-est.com