Privacy Policy

Website: lnz.com.ua · Effective date: May 5, 2026 · Last revision: May 5, 2026 · Version 2.0

1. General Provisions

This Privacy Policy (the "Policy") governs the collection, processing, storage, and protection of personal data of users of lnz.com.ua (the "Website").

The Policy is developed in accordance with:

• the Law of Ukraine "On Personal Data Protection" of 01.06.2010 No. 2297-VI;
• the EU General Data Protection Regulation (Regulation (EU) 2016/679, GDPR);
• the California Consumer Privacy Act (CCPA) as amended by CPRA;
• the Law of Ukraine "On Electronic Communications" of 16.12.2020 No. 1089-IX;
• the Law of Ukraine "On Information" of 02.10.1992 No. 2657-XII.

By using the Website, you confirm that you have read and agreed to this Policy. If you disagree — discontinue use of the Website.

2. Controller and Responsible Person

2.1. Personal Data Controller

2.2. Responsible Person for Data Protection

For technical questions regarding data processing on the Website, cookie configuration, exercising user rights via the web interface — contact:

3. What Data We Collect

3.1. Data You Provide Voluntarily

• full name;
• phone number;
• email address;
• company name and position (for B2B communication);
• region/oblast of Ukraine;
• crops, treatment area (for inquiries about seeds, crop protection, or agro services);
• content of your message.

3.2. Data Collected Automatically

• IP address (anonymized where possible);
• browser type and version, OS, device type;
• referrer URL;
• visited pages and time spent;
• actions on site (clicks, scrolls, form fills) for analytics;
• session recordings and heatmaps (via Microsoft Clarity);
• cookies (detailed in Cookie Policy);
• geolocation (country/city level via IP).

3.3. Data We Do NOT Collect

• payment card data (no online payments on the Website; purchases — at lnzweb.com);
• passport data, tax ID, identity documents;
• special categories (race, political views, religious beliefs, health, biometric data).

4. Purposes and Legal Basis

5. Cookies and Tracking Technologies

The Website uses cookies and similar technologies. Detailed information — in the separate Cookie Policy.

The Website uses Google Consent Mode v2. Until consent is granted, analytics and marketing scripts are NOT executed; we collect only aggregated anonymized statistics.

6. Disclosure to Third Parties

6.1. Analytics and Advertising Services (with your consent)

All listed services are activated only after your consent via the cookie banner.

6.2. Partners and Subcontractors

• LNZ Group regional managers and dealers — to handle product inquiry in your region;
• Hosting provider — technical data storage in Ukraine;
• Email service — for newsletters (separate consent);
• Legal and audit consultants — under NDAs.

6.3. Government Authorities

We disclose data to authorities only as required by Ukrainian law, upon official request.

6.4. No Sale of Data

We never sell your personal data to third parties for commercial purposes.

7. Third-Party Services

8. International Data Transfers

Our service providers (Google, Microsoft, Meta) are based in the USA. Your data may be transferred and processed in the USA and other countries outside the EEA and Ukraine.

For transfers from the EU/EEA we ensure appropriate safeguards:

• Standard Contractual Clauses (SCC), approved by the European Commission (Decision 2021/914);
• EU-US Data Privacy Framework (where applicable);
• European Commission Adequacy Decisions.

9. Retention Periods

10. Your Rights — EU/EEA Users (GDPR)

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure / "right to be forgotten" (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7(3))
• Right not to be subject to automated decision-making (Art. 22)
• Right to lodge a complaint — to an EU supervisory authority. List: edpb.europa.eu.

To exercise rights, contact DPO Maltsev: k.maltsev@lnz.com.ua. Response within 30 days (extendable to 60 for complex requests) per Art. 12 GDPR.

11. Your Rights — California Residents (CCPA/CPRA)

• Right to know
• Right to deletion
• Right to correction
• Right to opt-out of sale or sharing — we do not sell data; sharing with ad partners (Google, Meta) may be considered "sharing" under CCPA
• Right to limit sensitive information use — we do not collect sensitive information per CPRA definition
• Right to non-discrimination

CCPA request: k.maltsev@lnz.com.ua. Response within 45 days.

12. Your Rights — Users from Ukraine

For Ukrainian users, processing is governed by the Law "On Personal Data Protection" No. 2297-VI. You have the right to:

• know the source, location, purpose of processing and the controller;
• access your data;
• get information on third-party access;
• object to processing;
• demand correction, destruction, or blocking of inaccurate/outdated data;
• demand deletion if processing is unlawful;
• withdraw consent at any time;
• file a complaint with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua).

13. Children's Privacy

The Website is not intended for persons under 16 years (EU, Art. 8 GDPR) or 13 years (USA, COPPA). We do not knowingly collect children's data. Parents/guardians: contact k.maltsev@lnz.com.ua for immediate deletion.

14. Data Security

• SSL/TLS encryption (HTTPS);
• role-based access control;
• regular backups;
• security monitoring;
• employee training on data protection;
• vendor security compliance audits.

Breach notification — within 72 hours to the supervisory authority (Art. 33 GDPR) and to affected persons without undue delay (Art. 34).

15. Changes to the Policy

We may update this Policy. The last revision date is shown at the top. Material changes — banner notification or email at least 30 days before effect.

16. Contacts

Disclaimer: This Policy is provided for informational purposes. LNZ Group recommends consulting a qualified lawyer to ensure full compliance with all applicable regulations in your specific situation.