Privacy Policy

Last updated: 9 September 2025

This Policy explains how our site collects, uses, and protects visitors’ personal data. We respect your privacy, process the minimum data necessary, and do not use hidden tracking mechanisms.

Important: This website was developed with the financial support of the Ukrainian Cultural Foundation under the “Cultural Heritage” grant programme.

1) Who we are & how to contact us

Data Controller: Administration of the museum (hereinafter — the “Museum”).

• Legal entity name: Центр спадщини Вигодської вузькоколійки
• Postal address: Центр спадщини Вигодської вузькоколійки, вул. Д. Галицького 66, смт. Вигода, Калуський р-н, Івано-Франківська обл.
• General e‑mail: vyhodaheritage@gmail.com
• Privacy contact e‑mail: vyhodaheritage@gmail.com
• Or use the contact form on the website.

2) What data we process

We deliberately do not collect data in the background and we do not use analytics or advertising trackers. The only place you provide personal data to us is the contact form.

2.1 Contact form

When you contact us through the form, we process:

• Name (to address you);
• E‑mail (to reply);
• Comment/Message (the content of your inquiry).

2.2 Technical data & server logs

To keep the website stable, our hosting provider may automatically create minimal technical logs (e.g., IP address, date/time, requested URL, response status). We do not use this data for profiling and we do not combine it with other sources.

2.3 Cookies

We currently do not use cookies for analytics or advertising. Only strictly necessary cookies may be used (if required for certain features to work). If this changes, we will update this Policy.

3) Purposes & legal bases

• Responding to your inquiry via the contact form and follow‑up correspondence — performance of your request/contract or our legitimate interest in efficiently handling inquiries.
• Ensuring security and operability of the site (technical logs) — our legitimate interest in maintaining security and preventing abuse.
• Where required — compliance with legal obligations (e.g., retention of specific records).

We follow the laws of Ukraine (including the Law of Ukraine “On Personal Data Protection”) and core GDPR principles for visitors from the EU/EEA.

4) Sharing of data

• Infrastructure providers: hosting/e‑mail/backup services that help us operate the website and handle your inquiries.
• We do not sell personal data and do not disclose it to third parties for their own marketing purposes.

All providers are required to ensure appropriate protection and use data only under our instructions.

5) Data retention

• Contact form data is kept no longer than necessary to respond and for routine record‑keeping — typically up to 12 months, or until the correspondence is closed, unless a longer period is required by law.
• Server logs are retained according to the hosting provider’s policy (generally short‑term).

6) Security

We apply organisational and technical safeguards, including need‑to‑know access, encrypted connections (HTTPS), and regular updates. However, no Internet transmission can be guaranteed 100% secure.

7) Your rights

Subject to applicable law, you have the right to:

• Access your data;
• Rectify inaccurate data;
• Erase data (“right to be forgotten”);
• Restrict processing;
• Object to processing based on legitimate interests;
• Data portability (where applicable);
• Withdraw consent where processing is based on consent.

To exercise your rights, contact us via the form or the e‑mail above. You may also lodge a complaint with your national data protection authority.

8) International transfers

If processing requires transfers outside Ukraine/the EEA, we will ensure appropriate safeguards (e.g., standard contractual clauses) or another lawful mechanism.

9) Children

Our website and contact form are intended for a general audience, including museum visitors. We do not knowingly collect children’s data without parental/guardian consent. If you are under 16, please ask a parent/guardian to contact us on your behalf.

10) Automated decision‑making

We do not engage in profiling and do not make automated decisions that produce legal or similarly significant effects concerning users.

11) Changes to this Policy

We may update this Policy from time to time. The current version will always be available on this page with the date of the latest update.

12) Funding acknowledgement

The project was implemented with the support of the Ukrainian Cultural Foundation under the “Cultural Heritage” grant programme.