Privacy Policy

Version of 18 October 2026.

1. Who we are

The controller of your personal data is the Civic Union “National Ukrainian Water Academy” (NUWA), EDRPOU code 46369870, 33 Beskydska St., Lviv 79067, Ukraine. For any question about personal data, write to info@nuwacademy.org.

2. What data we receive

• Registration and enquiry form: full name; organisation and position; e-mail; phone (optional); type of request, training level, comment.

• Correspondence: your address and the content of messages you send to info@nuwacademy.org.

• Technical data: the site runs on Google Sites. Google may process your IP address, browser data and strictly necessary cookies to operate and secure the site. NUWA uses no advertising cookies and does not track visitors.

We do not collect sensitive data (health, religious or political beliefs, etc.). Please do not include it in comments.

3. Why we process it and on what basis

• Pre-registration for training, forming groups, notices on dates and terms — your consent (Art. 11 of the Law of Ukraine “On Personal Data Protection”; Art. 6(1)(a) GDPR).

• Replying to partnership enquiries or requests to join the Training Map — your consent; steps prior to entering into a contract.

• Issuing certificates and anonymised reporting to partners — performance of a contract; legitimate interest.

• Protecting the site against abuse — legitimate interest.

You give consent by ticking the box in the form. You may withdraw it at any time by writing to info@nuwacademy.org; this does not affect the lawfulness of processing before withdrawal.

4. Who has access

• Authorised NUWA staff who organise training.

• Google Ireland Ltd / Google LLC, provider of Google Workspace (Sites, Forms, Sheets, Gmail), as processor. Data may be stored on servers outside Ukraine under the EU Standard Contractual Clauses.

• Partners delivering a specific programme — only to the extent needed for the training you chose, and we inform you in advance.

• Public authorities — only where required by law.

We never sell your data or share it for advertising.

5. How long we keep it

Form and correspondence data are kept for up to 3 years after your last contact or completion of training; if you withdraw consent, we delete them within 30 days. Records of issued certificates may be kept longer where required by law or donor reporting terms.

6. Your rights

Under Art. 8 of the Law and the GDPR you have the right to:

• know what data we process and receive a copy;

• request correction or erasure;

• restrict or object to processing;

• withdraw consent;

• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court (in the EU, also with your data protection authority).

We reply to requests sent to info@nuwacademy.org within 30 calendar days. The person responsible for personal data processing is the Director of NUWA.

7. Security

Only designated NUWA staff with two-factor authentication can access the registration sheet. Access is logged by Google Workspace.

8. Photos and publications

Training photos in which participants can be identified, as well as participant lists, are published only with the participants’ separate consent.

9. Children

The site and training programmes are intended for professionals. We do not knowingly collect data from anyone under 18.

10. Changes

We announce material changes to this Policy on this page, stating the date of the new version.