Minimisation
Request and retain only information genuinely needed for website operation or a specific enquiry.
PRIVACY CLEAR RULES
CLEAR RULES
FOR PERSONAL DATA.
We explain in plain language what personal and technical information may be processed when you use this website, why it may be needed, how it is protected and which controls are available to visitors. The policy follows principles of lawfulness, transparency, data minimisation and safe communication.
PRIVACY IS PART OF SAFE COMMUNICATION
How we handle personal data
1. Scope and status of this policy
Last updated: 31.08.2026. This policy applies to the public website of the 2nd Airmobile Battalion, its public pages, contact forms and technical website functions. It explains general rules for handling visitor data and does not automatically govern third-party websites, platforms or applications reached through external links. If website functionality, integrations or actual data-processing practices change, the policy should be updated so that the published explanation remains consistent with the real operation of the site.
2. Who manages the website
The website administrator organises technical operation, defines the information requested by forms, enables or disables external services and sets access rules for submitted enquiries. The privacy contact is: contact email will be added by the site administrator. If no address is configured yet, it can be added under AEMB Studio → Privacy / cookies without editing this page. Until a real contact has been configured, the website should not invent or publish an address that is not monitored.
3. Information processed automatically
When a page is requested, the web server and security tools may technically receive an IP address, request date and time, requested URL, referrer, browser type, operating system, approximate device characteristics and service logs relating to errors or protective events. This information is used primarily to deliver pages, maintain stability, diagnose faults, prevent abuse and protect the website infrastructure. The amount retained should be limited to what is genuinely useful for those purposes.
4. Information you choose to submit
If you send a message through a form, the website may process the name or form of address you provide, your chosen contact method, selected subject or field, and the text of your message. Submit only what is necessary for the initial contact. Do not send passwords, bank details, photographs of identity documents, precise location data, restricted operational information, details of current movements or other sensitive information that is not necessary for the purpose of the enquiry.
5. Purposes of processing
The main purposes are to operate and secure the website, respond to a visitor’s request, continue communication initiated by that visitor, fix technical issues, reduce spam and abuse, and display content correctly. Optional analytics, functional or marketing technologies may be used only in accordance with the consent settings. Information should not be repurposed for a use that is incompatible with the original purpose unless there is an appropriate legal basis for doing so.
6. Legal principles and consent
The processing arrangements are intended to follow applicable data-protection law, including the Ukrainian Law on Personal Data Protection, and, where other rules apply to a visitor or a specific processing operation, the relevant requirements of those rules. Where consent is required for an optional technology, that technology should remain blocked until consent has been given. Refusing optional categories should not prevent ordinary access to the public informational content of the website.
7. Cookies and visitor controls
Essential technologies are used for core operation, security and remembering the privacy choice itself. Functional, analytics and marketing categories are controlled separately. You may accept all optional categories, reject them, select only the categories you want, and later change your decision through the cookie settings control. A separate Cookie Policy explains categories, browser storage, consent duration and the behaviour of embedded third-party content in more detail.
8. Third-party services and embedded content
The website may use hosting, abuse protection, email delivery, video platforms, social networks, analytics or other external services. The actual list depends on what the administrator has really enabled. Google Analytics, Meta Pixel and similar optional services should not be treated as active merely because they are mentioned as examples. When a new service is enabled, its consent category should be set and this policy should be reviewed if the real data flow changes.
9. Providers in other countries
Some technical providers may process data on infrastructure located outside Ukraine. Whether that happens depends on the specific service, contract, hosting model and configuration. Before enabling a third-party service, the administrator should review its terms, available safeguards, processing location and any need for additional notice or consent. This policy does not claim that an international transfer occurs when no relevant service is actually in use.
10. Retention periods
Information should not be kept longer than is reasonably justified by its purpose, security needs or applicable obligations. Technical logs may be retained for a period needed to investigate errors and protect the resource. Enquiry data should be deleted, anonymised or archived when it is no longer needed for communication or another legitimate organisational purpose. The browser remembers the cookie-consent decision for the retention window selected in the privacy module.
11. Security measures
Protection is based on least-necessary access: information should be available only to people or technical systems that need it for a defined task. Practical safeguards may include current software, HTTPS, controlled administrator access, backups, anti-spam protection, security logging and limits on third-party integrations. No internet service can guarantee the absence of every risk, so reducing the amount of collected information is itself an important protection measure.
12. Your rights and requests
To the extent provided by applicable law, you may ask for information about data you have provided, request correction, deletion or restriction of certain processing, or withdraw consent previously given. A reasonable verification step may be required to prevent someone from making an unauthorised request about another person’s information. Withdrawal of consent operates for the future and does not make processing unlawful if it was lawful before the withdrawal.
13. Children and sensitive information
The public website is not designed for intentional collection of children’s personal data. If a future form requires a specific age-related process or legal basis, that requirement should be explained directly beside the form. Do not submit medical, financial, biometric, restricted service information or other sensitive data through general communication channels unless it has been specifically requested through a lawful and appropriately protected process.
14. External links and policy updates
Links to YouTube, Facebook, Instagram, X or other platforms lead to separate services with their own privacy rules. Once you follow an external link, the provider of that service controls its own data processing rather than this page. Check the policy’s update date periodically. If forms, cookie categories, integrations or providers change, the new arrangement should be reflected in an updated version of the policy.
15. Change your privacy settings
You can reopen the consent panel at any time and change the optional categories. For a more detailed explanation of cookie types, consent duration and embedded third-party services, read the separate Cookie Policy.
16. How to use this policy in practice
If you want a quick understanding of what happens to your information, start with the sections on automatically processed data, information submitted through forms, cookies and third-party services. Then review your choices in the cookie settings. For a specific request, it is helpful to identify the page or form you used, the approximate date and the nature of the question, without sending unnecessary identity documents unless they are actually required to verify the request.
17. What happens when new services are connected
If the website later adds Google Analytics, Meta Pixel, new video platforms, social embeds or other optional tools, they should be assigned to the appropriate consent category and described in the settings. Optional tools should not start before the visitor gives the required permission unless another proper basis applies. This policy may be updated to reflect the services that are actually in use rather than listing technologies that have not yet been connected.
KEY AREAS
CORE DATA-PROTECTION PRINCIPLES
Transparency
Explain purposes, cookie categories, third-party services and the controls available to the visitor.
Visitor control
Keep optional technologies blocked until the relevant choice and allow that choice to be changed later.
Security
Restrict access, maintain current software and reduce unnecessary technical exposure.
Retention limits
Do not keep information longer than its purpose, security needs or applicable obligations require.
Accuracy
Update the policy when forms, integrations, providers or real data flows change.
IN PRACTICE
WHAT YOU CAN DO
01Review the form
Provide only the information required for your specific enquiry.
02Manage consent
Accept, reject or change optional cookie categories at any time.
03Ask a question
Use the privacy contact if you need clarification about information you have provided.
04Check updates
Review the policy date after significant changes to website functionality.
QUESTIONS
COMMON PRIVACY QUESTIONS
Does the website sell personal data?+
No. The policy states that personal data is not sold. Access should be limited to website operation, security and handling legitimate enquiries.
Must I accept analytics or marketing cookies to read the website?+
No. Core public information should remain available without consent to optional categories. Essential technologies are handled separately for operation and security.
What should I avoid sending through an open form?+
Do not send passwords, bank details, document scans, precise location data, restricted service information or other sensitive material that is not necessary for the initial contact.
How can I withdraw cookie consent?+
Open Cookie settings, disable optional categories and save the new choice. Managed integrations should not run in future without the relevant consent.
What happens when a new third-party service is enabled?+
The administrator should assign its consent category, review the provider’s terms and update the policies where necessary. Mentioning a service as an example does not mean it is already active.
Where can I ask a privacy question?+
Use the email configured under AEMB Studio → Privacy / cookies. Until a real address is entered, the page displays a neutral placeholder rather than an invented contact.
NEXT STEP
NEED TO CHANGE YOUR CHOICE?
Open cookie settings or read the dedicated Cookie Policy.