Privacy and Personal Data Processing Policy

Version of 29 August 2026.

This Policy explains which personal data is collected when you use the website idoneco.com (the “Site”), for what purposes and on what legal grounds it is processed, who it may be transferred to, how long it is kept and what rights you have. The Site is operated in Ukraine, and this Policy is governed by Ukrainian law, in particular the Law of Ukraine “On Personal Data Protection”.

1. Data controller

The data controller is LIMITED LIABILITY COMPANY “AIDANKO” (ТОВ «АЙДАНКО»), company registration number (ЄДРПОУ) 44894951, address: 5B Aviakonstruktora Antonova St., Kyiv, 02000, Ukraine (the “Company”, “we”, “us”). Below we refer to it as AIDANKO LLC — a descriptive short form, not a separately registered English name.

For any question about the processing and protection of personal data, write to info@idoneco.com.

2. What data we process

2.1. Data you provide through the form

When you submit a request through the “Call me back” form, we may receive:

the phone number you entered;
the request type: a callback or a product enquiry;
the address of the Site page the request was sent from;
the date and time of submission;
internal markers of the version of this Policy and of the consent notice in force at the moment of submission.

The form does not require your name, email address or company name. Please do not submit special categories of personal data or any other information that is not needed to handle your request.

2.2. Technical data

When you access the Site, the server and the hosting provider may automatically record your IP address, the date and time of the request, the requested page address, the browser type and version, the device type and operating system, the server response code and other information necessary for the operation and protection of the Site.

2.3. Cookies and web analytics

The Site uses strictly necessary cookies and similar technologies for the shopping cart, for remembering your language choice, for security, for correct page rendering and for remembering your cookie preferences.

With your separate consent, the Site also uses Google Analytics 4 to obtain visit statistics. Depending on the settings, the service may process a pseudonymous browser identifier, device and browser information, approximate location, referral source, pages viewed and interactions with the Site. Your IP address may be used by Google when receiving the request to determine approximate location and to operate the service but, according to Google, is not recorded or stored in Google Analytics as a separate identifier.

Google Tag Manager is used to manage tags and to connect services on the Site. It is not a separate web analytics system. Analytics data is collected by the services launched through it, in particular Google Analytics 4.

3. Purposes of processing

We process personal data in order to:

contact you in response to your request and provide a consultation;
answer a product enquiry and prepare a quotation, an invoice or other materials at your request;
operate the shopping cart, language settings and other functions of the Site;
detect technical errors, prevent abuse and keep the Site secure;
with your consent, analyse the use of the Site and improve its structure, content and usability.

We do not use the phone number given in a request for marketing mailings without separate consent, we do not sell personal data and we do not pass it to third parties for their own direct marketing.

4. Legal grounds for processing

Depending on the purpose, we process data on the following grounds provided for by Article 11 of the Law of Ukraine “On Personal Data Protection”:

taking steps prior to entering into a transaction at your request — when you ask us to contact you or to provide a consultation, product information, a quotation or an invoice;
your informed consent — for the use of optional analytics cookies, which you give in the consent banner on the Site, and for the transfer of request data through the Telegram Bot API, which you give by pressing the submit button after reading the notice placed immediately next to that button;
the necessity to protect the legitimate interests of the Company — to keep the Site operational and secure, to maintain technical logs, to prevent fraud and to protect the Company’s rights, provided your fundamental rights and freedoms do not override those interests;
the conclusion and performance of a transaction, and compliance with statutory obligations — if contractual relations arise between you and the Company after your enquiry.

Providing a phone number is voluntary; however, without it we cannot fulfil a callback request. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal and does not stop processing for which another lawful ground exists.

5. Who the data may be transferred to

Personal data is accessed only by those employees and engaged contractors of the Company who need it to handle a request, to support the Site or to provide accounting or legal services, and who are bound by confidentiality obligations.

To operate the Site and handle requests, data may be transferred to the following service providers:

Telegram Messenger Inc. — a message containing the phone number provided and technical information about the request is delivered to an internal chat through the Telegram Bot API;
the hosting provider — within the hosting of the Site, its backup and the keeping of technical logs. The Company’s business email runs on the infrastructure of the same hosting provider; no separate email service is used;
Google Ireland Limited and/or other companies of the Google group — where Google Analytics 4 and Google Tag Manager are used, subject to the terms of those services.

Service providers process data within the scope of their functions and the terms of the respective services. Up-to-date information about the specific hosting provider can be obtained by writing to info@idoneco.com.

We may disclose data to public authorities, courts or other authorised persons only where there is a lawful ground and in the manner established by Ukrainian legislation.

5.1. Transfer of data outside Ukraine

When Telegram, Google and other international services are used, data may be processed on servers outside Ukraine, including in states of the European Economic Area and other jurisdictions. Such transfer is carried out in accordance with Article 29 of the Law of Ukraine “On Personal Data Protection” — to states providing an adequate level of protection, or on another ground provided for by law, in particular the unambiguous informed consent of the user or appropriate safeguards.

Having read the notice next to the form and by pressing the request submission button, you give your unambiguous consent to the transfer of the data listed in clause 2.1 to Telegram Messenger Inc. through the Telegram Bot API for handling your enquiry. If you do not wish to transfer data through Telegram, you may avoid using the form and contact the Company by phone or email as indicated on the “Contacts” page.

More about how these services process data: Telegram Privacy Policy and Google Privacy Policy.

6. Retention periods

Request data in the business email and in the Telegram chat is kept for no longer than 12 months from the date of the enquiry, after which it is deleted or anonymised, unless another lawful ground for further storage exists. Deletion is performed under the Company’s internal procedure; no automatic deletion of messages is provided on the Telegram side.
Data related to a contract, payment or possible legal claims may be kept longer — for the periods established by law or necessary to perform the contract and to protect the Company’s legitimate rights.
Server technical logs are kept for the period determined by technical settings and the hosting provider’s terms, but no longer than necessary to ensure the stability and security of the Site.
User-level and event-level data in Google Analytics 4 is kept for no longer than 14 months, unless the user has withdrawn consent earlier. Aggregated statistical reports that do not allow a user to be identified directly may be kept longer.
The strictly necessary cookie holding your cookie choice is kept for 180 days, or until you change that choice or delete the cookie in your browser.
Other cookies are kept for the period determined by their purpose and the settings of the respective service, or until they are deleted by the user or consent is withdrawn.

Once the relevant period expires, data is deleted, anonymised, or remains in backups only until their scheduled overwrite, unless otherwise provided by law.

7. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection” you have the right, in particular, to:

know the sources of collection, the location, the purpose and the conditions of processing of your personal data;
receive information about the persons to whom your personal data is transferred;
access your personal data and learn whether it is being processed;
submit a reasoned objection to the processing of your personal data;
demand the amendment or destruction of data if it is processed unlawfully or is inaccurate;
withdraw your consent to the processing of personal data;
know the mechanism of automatic processing and be protected against an automated decision that has legal consequences for you;
lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court, and use other remedies.

The Company does not take decisions about users based solely on automated processing that produce legal consequences for them.

To exercise your rights, send a request to info@idoneco.com with the subject line “Personal data”. To protect your data, we may ask you to provide the information necessary to verify your identity and to locate the relevant request.

A request for access to personal data is examined within no more than 10 working days from the date of its receipt. Within that period we will inform you whether the request will be granted. If the request is to be granted, access is provided within 30 calendar days from the date of its receipt, unless otherwise provided by law.

8. Cookies and consent management

Strictly necessary cookies are set to provide the core functions of the Site and are not used for advertising. Optional Google Analytics 4 analytics cookies are set only after your prior consent: until it is given, Google Analytics scripts are not loaded on the Site at all.

On your first visit to the Site you can accept analytics, reject it, or open the settings and choose the categories yourself. Rejecting is as easy as accepting. Your choice is stored in a strictly necessary cookie for 180 days; you can change or withdraw it at any time through the “Cookie settings” link in the Site footer. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You can also block or delete cookies in your browser settings. If strictly necessary cookies are disabled, some functions of the Site, in particular the shopping cart and the saved language choice, may not work correctly.

9. Data security

We apply organisational and technical measures to protect personal data against accidental loss, destruction, unlawful access, alteration, disclosure or other unlawful processing. Access to data is restricted according to business need.

At the same time, no method of transmitting or storing information on the Internet can guarantee absolute security.

10. Changes to this Policy

We may update this Policy in connection with changes in legislation, in the functionality of the Site or in the list of services involved. The version published on this page is the one in force; the date of its update is shown at the beginning of the document.

If the purpose of processing is changed to a new one incompatible with the previous purpose, we will obtain new consent from the user, unless otherwise provided by law.