Evergreen IT Development Ltd and its affiliates, including Evergreen Development LLC and Evergreen Enterprise LLC, hereinafter collectively referred to as the "Company", "we" or "our" in the respective cases, is committed to ensuring the privacy, security, and protection of personal data in compliance with the
General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). We take data privacy seriously and strive to provide our users with transparency, control, and security over their personal information.
This document outlines our GDPR compliance approach, the rights of data subjects, and the measures we implement to safeguard personal data.
What is GDPR?The
General Data Protection Regulation is a regulation enacted by the European Union to standardize and enhance data protection for all individuals within the
European Economic Area (EEA). It governs how organizations collect, process, store, and transfer personal data, ensuring that individuals have greater control over their information.
To Whom Does GDPR Apply?GDPR applies to any entity that collects or processes personal data of individuals located within the
EEA, regardless of whether the entity itself is based in the EU.
We processes personal data of both EU and non-EU users, ensuring compliance with GDPR wherever applicable.
Are the GDPR requirements being met?Yes, we fully complies with GDPR regulations by implementing strict data protection measures, transparency, and user control over their personal data.
Categories of Personal Data We CollectWe collect and process the following personal data:
• Identification and contact information, such as name, email address, phone number, and physical address.
• Payment information, such as credit or debit card details, billing address, and payment history.
• Usage data, such as information about how you use our services, including browsing history, search queries, and interactions with our website or applications.
• Technical data, such as IP address, device information, and browser type.
• Marketing and communications data, such as your preferences for receiving marketing communications from us and our third parties.
Special Categories of Data
We do not collect sensitive personal data (such as health data, religious beliefs, or biometric information) unless explicitly required and with the user’s consent.
Lawful Basis for Processing Personal Data
Under GDPR, we process personal data based on the following lawful bases:
• Consent: When a user explicitly agrees to the processing of their data.
• Contractual Obligation: To fulfill contractual agreements related to our services.
• Legal Obligation: When processing is required to comply with legal or regulatory requirements.
• Legitimate Interest: For security, fraud prevention, and service improvement.
Data Retention PolicyWe retain personal data only as long as necessary to fulfill the intended purposes or to comply with legal obligations. Once data is no longer needed, it is securely deleted or anonymized.
Data Subject Rights Under GDPRAs per GDPR, data subjects have the following rights:
• Right to Access - Users have the right to request a copy of the personal data we hold about them.
• Right to Rectification – Users can request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten") – Users can request the deletion of their personal data when it is no longer necessary for the purposes it was collected.
• Right to Restriction of Processing – Users can request limited processing of their data under specific conditions.
• Right to Data Portability – Users can request their data in a structured, commonly used, and machine-readable format.
• Right to Object – Users can object to data processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent – Users who have provided consent can withdraw it at any time.
• Right to Lodge a Complaint – Users can file complaints with the relevant
Data Protection Authority (DPA) if they believe their data rights have been violated.
To exercise any of these rights, users can contact us at email:
mgerman@evergreens.in.ua.
How We Protect Data?Our employs industry-standard security practices, including:
• Encryption: Data is encrypted both in transit and at rest.
• Access Controls: Restricted access to personal data for authorized personnel only.
• Regular Audits: Ongoing assessments to ensure compliance and security.
Handling of Data Breaches.In the event of a data breach, we will:
• Immediately assess the scope and impact of the breach.
• Notify affected users and relevant authorities within
72 hours.
• Implement corrective measures to prevent future breaches.
Sub-ProcessorsWe engage trusted third-party service providers to process personal data on our behalf. Each sub-processor is bound by
Data Processing Agreements (DPAs) ensuring GDPR compliance.
GDPR Compliance Features for UsersConsent Management – Users can manage their consent preferences via account settings and contact forms.
Data Deletion Requests – Users can request account deletion, and all associated personal data will be permanently removed.
Automated Processing and Profiling – We do not engage in automated decision-making that significantly affects users without human intervention.
Data Protection Officer (DPO)We have appointed a
Data Protection Officer (DPO) responsible for ensuring GDPR compliance. For inquiries regarding data privacy, please contact our DPO at email:
mgerman@evergreens.in.ua.
Contact UsIf you have any questions about our GDPR compliance, you can reach us at:
Evergreen IT Development Ltd.7 Bell Yard, London, United Kingdom, WC2A 2JR
Evergreen Development LLCCreative State of Senator, BC Senator
32/2, Kniaziv Ostrozkykh St., Kyiv, 01010, Ukraine
Evergreen Enterprise LLCCreative State of Senator, BC Senator
32/2, Kniaziv Ostrozkykh St., Kyiv, 01010, Ukraine
Authorized person for reviewing complaints on violations of confidentiality – Maria Kravtsova, phone + 38 (096) 292-58-88, email:
mgerman@evergreens.in.uaUpdates to This GDPR Compliance StatementWe may update this document periodically to reflect changes in legal requirements or our data processing practices. Users will be notified of significant updates via email or website announcements.
Last Updated: January 31, 2025