Effective date: 13 May 2026

Last revised: 13 May 2026

1. Introduction

This Privacy Policy (the “Policy”) explains how personal data of visitors to ilysa.org (the “Website”) is collected, used, stored, and protected.

Data Controller:

International Youth Public Organization “ILYSA” (“ILYSA”, “we”, “us”, “our”)

Registered address: 21 Liuteranska Street, Kyiv, 01024, Ukraine

Mailing address: Apt. 13, 86/2 Prospekt Nauky, Kyiv, 03083, Ukraine

Privacy contact: info@ilysa.org

By using the Website or submitting information through our forms, you confirm that you have read this Policy and agree to its terms.

2. Legal bases for processing

We process your personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR; Art. 11 of the Ukrainian Law “On Personal Data Protection”) — when you voluntarily submit data through contact or subscription forms.
• Legitimate interest (Art. 6(1)(f) GDPR) — to maintain the basic functionality and security of the Website.
• Legal obligation — where required by applicable law.

3. What data we collect

3.1. Data you provide voluntarily through forms:

• Name
• Email address
• Phone number
• Content of your message

3.2. Data collected automatically:

• IP address
• Browser type and operating system
• Pages visited and time spent on them
• Referrer URL

Automatic collection is performed via cookies and Google Analytics 4. See the Cookie Policy for details.

4. Purposes of processing

Your data is used solely to:

• Respond to your inquiries and communicate with you
• Send you information about ILYSA activities (if you have subscribed)
• Analyze Website traffic and improve performance
• Maintain the security of the Website
• Comply with legal obligations

We do not use your data for automated decision-making or profiling.

5. Sharing with third parties

We do not sell your personal data. Sharing is limited to:

Recipient	Purpose	Jurisdiction
Google LLC (Google Analytics 4)	Website analytics	USA, EU (Standard Contractual Clauses)
Hosting provider	Technical storage	Ukraine / EU

We may also disclose data when required by law (court order, law enforcement request).

6. International data transfers

Google Analytics may transfer your data to the United States. Such transfers rely on Standard Contractual Clauses approved by the European Commission and Google’s certification under the EU-US Data Privacy Framework.

7. Data retention

• Contact form data — 1 year from your last interaction with us.
• Google Analytics data — 14 months (default retention).
• Server logs — up to 6 months.

After these periods, data is deleted or anonymized.

8. Your rights

Under the GDPR and the Ukrainian Law “On Personal Data Protection”, you have the right to:

• Access — obtain a copy of your data we hold.
• Rectification — request correction of inaccurate data.
• Erasure (“right to be forgotten”) — request deletion of your data.
• Restriction of processing — pause processing in certain cases.
• Data portability — receive your data in a structured format.
• Object — to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with a supervisory authority — the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or your local EU data protection authority.

To exercise your rights, email info@ilysa.org. We will respond within 30 days.

9. Security

We apply technical and organizational safeguards: SSL encryption, restricted data access, regular software updates. However, no online transmission is 100% secure — you submit data at your own risk.

10. Cookies

For details on cookie usage, see our separate Cookie Policy.

11. Children

The Website is not directed at individuals under 16 years of age. We do not knowingly collect data from children. If you are a parent or guardian and discover that your child submitted data to us, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy. The last-revision date appears at the top. We will notify you of material changes via a banner on the Website.

13. Contact

For privacy inquiries:

Email: info@ilysa.org

Address: 21 Liuteranska Street, Kyiv, 01024, Ukraine