Privacy Policy

The controller of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:

Bazhannya (bazhannya.com)
Ukraine
Email: [email protected]

The controller determines the purposes and means of processing personal data and is responsible for its protection in accordance with applicable law.

We may collect the following types of information:

• personal data (name, username, email address);
• profile data (avatar, bio, settings);
• content you create or upload (wishlists, gift descriptions, images, links);
• technical data (IP address, browser type, device, country);
• data about how you use the Service and interact with it.

We use the collected data to:

• provide and maintain the Service;
• manage user accounts;
• improve functionality and user experience;
• ensure security and prevent abuse;
• send service-related notifications and updates;
• analyze usage and develop the product.

We do not sell your personal data to third parties.

Bazhannya uses first-party and third-party cookies to ensure the site works, save preferences, and run analytics. Full information about all cookies, their types, storage durations, and your rights can be found in our Cookie Policy.

We may share your data only with trusted data processors who act solely on our instructions and have signed a Data Processing Agreement (DPA) with us. In particular, we use:

• Google LLC (Google Analytics 4, Google Ads) — traffic analysis and ad performance. Data may be transferred to and stored on servers in the USA. Google operates under EU Standard Contractual Clauses (SCCs). Learn more: policies.google.com/privacy.
• Hosting provider — provision of server infrastructure.
• Government authorities — only when explicitly required by applicable Ukrainian or EU law.

We do not sell or share your personal data with third parties for their own marketing or commercial purposes.

We apply reasonable technical and organizational measures to protect personal data from unauthorized access, loss, or misuse.

However, no method of data transmission over the Internet can guarantee absolute security.

If you are a resident of the EU or United Kingdom, you have the following rights under GDPR and UK GDPR:

• Right of access (Art. 15) — obtain confirmation of whether we process your data and receive a copy of it.
• Right to rectification (Art. 16) — request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17) — request deletion of your data ('right to be forgotten').
• Right to restriction of processing (Art. 18) — request suspension of processing your data in certain circumstances.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent — withdraw previously given consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint (Art. 77) — lodge a complaint with the relevant data protection supervisory authority in your country.

To exercise any of these rights, send a request to [email protected]. We will respond within 30 calendar days.

You may delete your account at any time through your profile settings.

After account deletion, your personal data will be deleted or anonymized, except where retention is required by law or necessary to protect the legitimate interests and security of the Service.

The Bazhannya service is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13.

If you become aware that a child has provided us with personal data, please contact us and we will promptly address the situation.

We may periodically update this Privacy Policy. The current version is always available on the Bazhannya website.

Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

In accordance with Article 6 of the GDPR, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — processing necessary to provide our services: account registration, profile management, wishlist and booking features.
• Legitimate interests (Art. 6(1)(f)) — analysing service usage to improve it, ensuring security, and preventing fraud. We carry out a balancing test to ensure our interests do not override your rights.
• Consent (Art. 6(1)(a)) — analytics and advertising cookies (Google Analytics, Google Ads). You provide consent via the cookie consent banner and may withdraw it at any time.
• Legal obligation (Art. 6(1)(c)) — processing required by applicable Ukrainian or EU law.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy:

• Account data (name, email, profile) — for the duration the account is active. After deletion — up to 30 days for possible recovery, after which data is deleted or anonymised.
• Wishlist and gift content — for the duration the account is active. Deleted together with the account.
• Booking data — 3 years after the booking is completed, for service support and dispute resolution.
• Internal analytics data — 26 months in anonymised form.
• Google Analytics data — up to 14 months per GA4 settings.
• Session data (session_token) — 30 days or until logout.
• Security logs — 12 months for incident detection and investigation.

Your personal data may be transferred to and stored outside the European Economic Area (EEA), including in the USA, in connection with our use of Google LLC services (Google Analytics, Google Ads).

These transfers are carried out on the basis of EU Standard Contractual Clauses (SCCs) approved by the European Commission, which ensures an adequate level of protection for your data in accordance with GDPR requirements.

Learn more about Google's data protection mechanisms: Google Data Processing Terms.