Updated: 18/11/2025
What is GDPR and why do we comply with it?

GDPR (General Data Protection Regulation) is the European Union’s General Data Protection Regulation that sets rules for the collection, processing, storage, and transfer of personal data of individuals within the EU.

Although SalesBook is based in Ukraine, we aim to ensure a high level of data protection and compliance with European standards. The SalesBook platform (salesbook.com.ua) adheres to the principles of GDPR to guarantee transparency, security, and the lawful processing of personal data for all users, including EU residents.


Who is the data controller?

The data controller is: APS Solutions Service LLC, Kyiv, Ukraine Contact person for data protection inquiries: support@salesbook.com.ua.


What personal data do we collect?

SalesBook may collect and process the following categories of personal data (depending on your interaction with the website):

  • First name, last name;
  • Email address, phone number;
  • Company name and details (EDRPOU code, address, registration information, bank details, representative’s position, and personal data of company officials);
  • Authorization data (login, password);
  • IP address, browser and device information;
  • Information about actions on the website (logs, analytics, activity history);
  • Cookie data;
  • Payment details or transaction history (in case of paid services).

What is the purpose of processing personal data?

Your data is processed for the following purposes:

  • Registration, authorization, and maintenance of the user account;
  • Enabling the use of platform features (creating tenders, bidding, adverts, and company profiles, participating in tenders and commercial offers, etc.);
  • Fulfilling contractual obligations between the user and the platform;
  • Processing inquiries and providing support or consultations;
  • Sending subscription notifications, technical updates, or marketing emails (with consent);
  • Conducting analytics and improving system performance;
  • Preventing fraud and ensuring security;
  • Complying with applicable legal requirements.

What is the legal basis for processing personal data?

The processing of personal data is carried out on the following legal grounds:

  • Performance of a contract between the user and SalesBook;
  • User consent (for example, for marketing communications);
  • Compliance with legal obligations (accounting, tax requirements);
  • Legitimate interests (security, fraud prevention, statistics).

Who can we share personal data with?

Data may be shared only when necessary, including with:

  • Service providers (e.g., hosting, email delivery, analytics);
  • Banks and payment institutions (for payment processing);
  • Government authorities or other legal entities upon lawful request;
  • All third-party recipients are required to maintain confidentiality and ensure an appropriate level of data protection.

Publicly available user data

Some information may be made public by users themselves while using the SalesBook platform.

This occurs, in particular, when creating and publishing tenders, announcements, company profiles, as well as when submitting offers or bids within procedures. Such data are displayed to other users of the system to enable communication, fulfill contractual obligations, participate in procedures, and ensure transparent interaction within the platform.

The scope and content of the published data are determined by the user within the available system features.


Can data be transferred outside Ukraine?

Yes, in cases where foreign cloud services or analytics tools are used, data may be transferred to other countries. In such cases, SalesBook ensures compliance with GDPR requirements, including through:

  • Signing EU Standard Contractual Clauses (SCCs);
  • Assessing the level of data protection in the respective jurisdiction;
  • Implementing technical security measures (encryption, access control, etc.).

How long do we retain personal data?

Data are stored only for as long as necessary to achieve the purposes of processing:

  • Active users — for the entire duration of using the platform;
  • After account deletion — up to 3 years (for dispute resolution or legal obligations);
  • Cookie data — according to browser settings or the cookie policy.

What rights do users have?

Under the GDPR and (where applicable) Ukrainian law, you have the right to:

  • Access your personal data;
  • Correct or update your data;
  • Request deletion (“right to be forgotten”) — provided there are no legal grounds for retention;
  • Restrict or object to processing;
  • Obtain confirmation that your data are being processed;
  • Receive a copy of your personal data;
  • Limit or object to data processing;
  • Withdraw previously given consent.

How to exercise your rights?

You can submit a written request to the address provided in the “Contacts” section or by email at support@salesbook.com.ua. Please include in your request:

  • Which data your inquiry concerns;
  • Which specific right you wish to exercise (deletion, restriction, access, etc.);
  • A copy of an identity document (if required).

A response will be provided within 30 calendar days.


How is personal data security ensured?

SalesBook applies technical and organizational security measures, including:

  • Data encryption (HTTPS/TLS);
  • Employee access control;
  • Security audits and data backups;
  • Regular system updates;
  • Continuous security monitoring.

Are cookies and similar technologies used, and how can you manage them?

The website uses cookies to ensure proper functionality, collect statistics, and provide personalization.

You can modify or reject cookies in your browser settings.

For more details, please refer to the Cookie Policy.


What happens in the event of a data breach or security incident?

In the event of unauthorized access, data leakage, or any other security breach, we will:

  • Immediately record the incident and assess its scope;
  • Take corrective actions to eliminate the consequences;
  • Notify the relevant regulatory authorities (if required by law);
  • Inform affected data subjects if the incident poses a risk to their rights or freedoms;
  • Implement additional measures to prevent similar incidents in the future.

How can you learn about changes to this policy?

We may periodically update this FAQ. Users will be informed of any changes by the publication of an updated version on the website. The date of the latest update is indicated at the top of the page.


Contacts

"APS SOLUTIONS SERVICE" LLC
str. Mykola Shepeleva, 6, Kyiv, Ukraine, 03061
EDRPOU code 40813114
+38 044 333 80 79
support@salesbook.com.ua