Privacy

TEDxUzhhorod 2026 PRIVACY AND PERSONAL DATA PROCESSING POLICY

Revision date: 22 October 2026

1. General provisions

1.1. This Privacy and Personal Data Processing Policy (the “Policy”) sets out the procedures for collecting, receiving, using, storing, transferring, protecting and deleting individuals’ personal data in connection with the operation of the official TEDxUzhhorod website and the organisation and delivery of the TEDxUzhhorod 2026 conference (the “Event”).

1.2. TEDxUzhhorod is an independently organised event held under an official TED licence in accordance with the principle Ideas Worth Spreading.

1.3. The Event will take place on 27 November 2026 in Uzhhorod, Ukraine, at the Old Continent hotel, 4 Shandora Petefi Square.

1.4. The TEDxUzhhorod Organiser operates independently of TED Conferences, LLC. Holding a TEDx licence does not mean that TED is the website operator, the organiser of this particular Event or the controller of all personal data collected by the organising team.

1.5. This Policy aims to provide individuals with transparent information about:

• ● the categories of personal data that may be processed;
• ● the sources and methods of obtaining them;
• ● the purposes and legal bases of processing;
• ● the persons to whom data may be transferred;
• ● retention periods and conditions;
• ● security measures;
• ● the rights of data subjects;
• ● the ways to exercise those rights.

1.6. This Policy applies to the personal data of:

• ● website visitors;
• ● ticket purchasers and registered attendees;
• ● speakers, hosts and moderators;
• ● applicants for participation in the programme;
• ● representatives of partners and prospective partners;
• ● journalists and media representatives;
• ● volunteers, contractors and other persons involved;
• ● users who submit enquiries through the Website;
• ● other individuals whose data are lawfully processed in the course of organising the Event.

1.7. Personal data are processed in accordance with the Constitution of Ukraine, the Law of Ukraine “On Personal Data Protection”, the Civil Code of Ukraine and other applicable legislation.

1.8. Where the European Union’s General Data Protection Regulation (GDPR) applies to particular processing operations, the Organiser ensures compliance with its relevant requirements to the extent applicable.

1.9. Merely visiting the Website does not constitute blanket consent to the processing of any personal data or their use for unlimited purposes.

1.10. Personal data are processed only where there is a legal basis provided by law and only to the extent necessary for the relevant lawful purpose.

2. Personal data controller

2.1. The controller of personal data obtained directly through the Website and other channels controlled by the Organiser is:

Sole proprietor Maiia Serhiivna Sviatashova (Святашова Майя Сергіївна)

Taxpayer registration number: 3191210820

Registered location / address for enquiries: 4В Zelena Street, Onokivtsi village, Uzhhorod district, Zakarpattia region

Contact email address: tedxuzhhorod@gmail.com

Official Website address: tedxuzhhorod.com

2.2. The personal data controller determines the purpose of processing, the personal data involved, the processing procedures and other material conditions in accordance with the law.

2.3. The Organiser may engage other persons to process personal data on its behalf in order to perform specific tasks.

2.4. Where a third-party service independently determines the purposes and means of processing personal data, it may act as a separate controller of those data.

2.5. The legal status of each provider involved is determined by the actual nature of the processing, applicable law and contractual terms.

2.6. The Organiser makes information about its own role in personal data processing available and does not automatically identify itself with TED or independent payment platforms.

3. Principles of personal data processing

3.1. The Organiser processes personal data on the basis of lawfulness, fairness, transparency and respect for privacy.

3.2. The following principles apply to processing:

3.2.1. Lawfulness. Each processing operation must have an appropriate legal basis.

3.2.2. Purpose limitation. Data are collected for specific, clearly defined and lawful purposes.

3.2.3. Data minimisation. The Organiser processes only the personal data necessary to achieve the relevant purpose.

3.2.4. Accuracy. Reasonable steps are taken to keep data up to date and accurate.

3.2.5. Storage limitation. Data are not retained longer than is justified by the purpose of processing or required by law.

3.2.6. Confidentiality. Access to data is granted only to authorised persons in accordance with their responsibilities.

3.2.7. Security. Appropriate organisational and technical safeguards are applied.

3.2.8. Accountability. The Organiser maintains internal records of the principal processing activities and their legal bases.

3.3. Data are not used for new purposes incompatible with the original purpose without an appropriate legal basis.

3.4. The Organiser does not sell personal data databases to third parties.

4. Categories of personal data

4.1. Depending on the nature of the interaction with the Organiser, the following categories of personal data may be processed.

4.1.1. Identification and contact details

• ● first and last name;
• ● email address;
• ● telephone number;
• ● other contact details voluntarily provided by the individual.

4.1.2. Event participation data

• ● the category of ticket purchased;
• ● order number;
• ● payment status, where lawfully available to the Organiser;
• ● electronic ticket number;
• ● registration and admission status;
• ● data necessary to organise participation;
• ● information about requests to change or refund tickets.

4.1.3. Professional information

For speakers, partners, media representatives, volunteers and other persons involved, the following may additionally be processed:

• ● organisation name;
• ● job title or professional status;
• ● professional biography;
• ● portrait photograph;
• ● links to professional profiles;
• ● information about experience and professional achievements;
• ● information necessary to consider an application or arrange cooperation.

4.1.4. Electronic enquiry data

• ● message content;
• ● date and time of the enquiry;
• ● attachments provided;
• ● communication history;
• ● information about the outcome of the enquiry.

4.1.5. Technical data

The following may be processed in the course of operating the Website:

• ● IP address;
• ● date and time of access;
• ● browser type;
• ● device type;
• ● operating system;
• ● technical logs;
• ● error information;
• ● cookie preference selections;
• ● other technical information necessary for the proper operation and protection of the Website.

4.2. The actual technical data processed depend on the Website’s configuration, servers and third-party services used.

4.3. The Organiser does not collect personal data solely because they might be useful in the future.

4.4. Health data, disability information, accessibility needs and other sensitive information may be processed only where reasonably necessary, on an appropriate legal basis and subject to the special requirements of the law.

5. Sources of personal data

5.1. The Organiser may obtain personal data directly from individuals, including through:

• ● completion of Website forms;
• ● email correspondence;
• ● submission of applications;
• ● registration to participate;
• ● partnership enquiries;
• ● accreditation applications;
• ● accessibility requests;
• ● other voluntary communication.

5.2. Data may also be received from ticketing services, technical providers or other persons where the transfer has an appropriate legal basis.

5.3. Publicly available professional information may be used to introduce speakers and programme participants, subject to compliance with the law governing its processing.

5.4. The Organiser does not regard all publicly available information as automatically permitted for unrestricted use.

5.5. Where personal data have not been obtained directly from the data subject, the Organiser provides information as required by applicable law.

6. Purposes and legal bases of processing

6.1. The Organiser processes personal data for specific purposes relating to the operation of the Website and the preparation, delivery and documentation of TEDxUzhhorod.

6.2. Legal bases are determined in accordance with Article 11 of the Law of Ukraine “On Personal Data Protection” and other applicable provisions.

6.3. The main purposes of processing include:

6.3.1. Handling enquiries. Receiving and reviewing user requests, preparing responses and arranging further communication.

6.3.2. Organising participation. Registering attendees, preparing admission lists, checking tickets and providing access to the Event.

6.3.3. Performing contracts. Formalising relationships with ticket purchasers, speakers, partners, contractors and other persons.

6.3.4. Organisational communication. Sending confirmations and notices about the Event’s time, venue, programme, safety rules and material changes.

6.3.5. Information security. Protecting the Website against unauthorised access, technical failures, fraud and other threats.

6.3.6. Compliance with legal obligations. Maintaining necessary records and fulfilling tax, financial and other obligations imposed by law.

6.3.7. Event coverage. Preparing official photographs, video, audio and editorial materials relating to the Event.

6.3.8. TEDx surveys. Arranging the transfer of necessary email addresses for TED’s post-event survey where there is an appropriate legal basis.

6.3.9. Informational mailings. Sending optional information about TEDxUzhhorod and related initiatives on an appropriate legal basis, including separate consent where required.

6.4. Different operations may rely on different legal bases, including consent, the necessity of entering into or performing a legal transaction, compliance with a statutory obligation and legitimate interests under the conditions established by Ukrainian law.

6.5. Reliance on legitimate interests does not relieve the Organiser of the need to assess the nature and necessity of the processing and its impact on an individual’s rights and freedoms.

6.6. Where processing is based on consent, that consent must meet the requirements of applicable law and relate to a defined purpose.

6.7. The Organiser does not treat the purchase of a ticket as automatic consent to third-party marketing mailings.

7. Ticket purchasers’ personal data and WayForPay

7.1. The WayForPay payment service may be used to organise electronic ticket sales.

7.2. Depending on the actual sales model, the payment service may process information necessary to arrange payment, confirm the transaction and create and send an electronic ticket.

7.3. The Organiser may receive necessary order data from the relevant service where receipt is provided for by law, contractual terms and the relevant notices to the purchaser.

7.4. Data may be used to:

• ● confirm the right to attend;
• ● check payment status;
• ● organise registration;
• ● prevent a ticket from being reused;
• ● handle payment enquiries;
• ● arrange refunds;
• ● fulfil legal obligations.

7.5. Where payments are processed on the payment provider’s secure page, the Organiser must not receive or store full bank card details, CVV/CVC codes, banking passwords or one-time authorisation codes.

7.6. The Organiser may process the order number, payment amount, transaction status, payment date and other information necessary to fulfil its obligations to the purchaser.

7.7. Failure to receive an electronic ticket following successful payment does not justify using the purchaser’s personal data for another purpose unrelated to that order.

7.8. Personal data processing performed directly by the payment service is also governed by its own terms and policies in accordance with that service’s actual role.

7.9. The Organiser ensures that contact details received from the payment service are used only for lawful purposes and are not transferred to third-party advertisers without an appropriate legal basis.

8. Transfer of email addresses for the TEDx survey

8.1. Under the TEDx programme rules, after the Event the organising team arranges the transfer of attendees’ email addresses through the dedicated TEDx Attendee Survey Uploader tool to facilitate a post-event survey.

8.2. The survey aims to obtain attendees’ feedback on the Event and assess their experience.

8.3. For this purpose, the Organiser informs attendees in advance of the planned transfer of email addresses to TED.

8.4. Email addresses are collected and transferred where there is an appropriate legal basis under applicable law.

8.5. Where consent is necessary for the operation, it is requested separately in a clear form during registration or through another appropriate procedure.

8.6. Only the data necessary for the specified purpose are transferred to TED, including the email addresses of attendees for whom that transfer is lawful.

8.7. For this purpose, the Organiser does not transfer full payment details, bank card information, documents, medical data or other information unnecessary for the survey.

8.8. The transfer takes place through the tool provided by TED in accordance with current TEDx instructions.

8.9. TED’s subsequent processing of personal data in the course of its independent activities is governed by applicable law and TED’s Privacy Policy.

8.10. Transferring addresses for the post-event survey does not constitute automatic consent to receive all TED informational, advertising or marketing mailings.

8.11. The Organiser does not use TEDx attendee lists for third-party commercial advertising or transfer them to partners for independent marketing use.

8.12. Where an email address is received from a ticketing operator, the Organiser first checks that there is a lawful basis for receiving it and subsequently transferring it to TED.

9. Personal data of speakers, hosts and programme participants

9.1. To organise talks, the Organiser may process the personal data of speakers, hosts, moderators and other persons involved in the official programme.

9.2. These data may include:

• ● first and last name;
• ● professional biography;
• ● job title and place of professional activity;
• ● contact details;
• ● portrait photographs;
• ● talk title and description;
• ● presentation materials;
• ● information necessary for logistics;
• ● information necessary to arrange accommodation and transfers, where these services are provided;
• ● documents and permissions required under TEDx rules.

9.3. Data are used solely for lawful organisational, contractual, editorial and informational purposes.

9.4. Biographical information and portrait photographs are published where there is an appropriate legal basis.

9.5. The Organiser arranges the necessary permissions to record and distribute talks in accordance with applicable TEDx rules.

9.6. Speakers’ contact details are not transferred to attendees, partners or media representatives without an appropriate legal basis.

9.7. Materials from applicants not included in the programme are retained only for a reasonable period and in accordance with the defined purpose.

10. Personal data of partners and media representatives

10.1. The Organiser may process the personal data of representatives of prospective and current partners, sponsoring organisations, media partners, journalists and other media representatives.

10.2. These data may include:

• ● first and last name;
• ● job title;
• ● organisation name;
• ● work email address;
• ● contact telephone number;
• ● the content of proposals and enquiries;
• ● information necessary for accreditation;
• ● other information reasonably necessary for the interaction.

10.3. These data are used to establish contact, consider proposals, agree cooperation terms, arrange accreditation and fulfil the relevant agreements.

10.4. Transferring partners’ representatives’ personal contact details to other partners or third parties for their independent marketing purposes without an appropriate legal basis is not permitted.

10.5. Information about partnerships, including organisation names and the names of their representatives, is published in accordance with the law, agreements and TEDx rules.

11. Data of volunteers, contractors and the organising team

11.1. The personal data of volunteers, contractors and organising team members may be processed to support the preparation and delivery of the Event.

11.2. Processing aims to organise work, allocate responsibilities, grant necessary access, ensure communication and security, and fulfil contractual or other legal obligations.

11.3. Access to Event attendees’ personal data is granted only to persons who objectively need it to perform their responsibilities.

11.4. Persons given access to personal data must comply with the established confidentiality and information security requirements.

11.5. Once the relevant responsibilities have been completed, access rights are reviewed and, where there is no lawful need, terminated.

11.6. Volunteers’ and contractors’ personal data are retained in accordance with the purpose of processing, contractual terms and applicable statutory requirements.

12. Photography, video and audio recording

12.1. Official photography, video and audio recording may take place during TEDxUzhhorod.

12.2. The purpose of such recording is to document and cover the Event, create archival materials, prepare reports and distribute talks in accordance with TEDx rules.

12.3. Photographs and video in which an individual can be identified may constitute personal data.

12.4. The lawfulness of creating and subsequently using these materials is determined with regard to personal data legislation, Articles 307–308 of the Civil Code of Ukraine and other applicable provisions.

12.5. Purchasing a ticket does not in itself constitute unlimited permission for any subsequent use of a person’s image or voice.

12.6. For individual interviews, staged materials and other uses requiring separate permission, the Organiser ensures that the relevant legal basis is properly documented.

12.7. TEDx Talks are recorded and distributed in accordance with TED rules and the permissions obtained from speakers.

12.8. Detailed procedures for photography, video and audio recording are set out in the separate TEDxUzhhorod Photography, Video and Audio Recording Policy.

13. Special categories of personal data

13.1. The Organiser does not systematically collect special categories of personal data without a lawful and justified need.

13.2. Data requiring special protection by law may include health information, religious or political beliefs, biometric data in the cases provided by law, and other categories specified in Article 7 of the Law of Ukraine “On Personal Data Protection”.

13.3. When handling an Event accessibility enquiry, the Organiser may receive information about an individual’s needs only to the extent necessary to consider that request.

13.4. The Organiser does not require disclosure of a medical diagnosis unless objectively necessary for a defined lawful purpose.

13.5. Such information is processed only where there is an appropriate basis and in compliance with the special requirements of the law.

13.6. Access to this information is restricted to a limited group of authorised persons.

13.7. Public disclosure of this information without an appropriate legal basis is not permitted.

14. Data of minors

14.1. The Organiser pays particular attention to protecting minors’ personal data.

14.2. Minors participate in the Event in accordance with Ukrainian law and the established admission rules.

14.3. Where parental or other legal representative consent is necessary for the processing concerned, the Organiser ensures that it is properly obtained.

14.4. Website forms are not intended for young children to independently provide excessive personal information.

14.5. The Organiser does not use children’s data for behavioural profiling or other unjustified processing.

14.6. If the Organiser discovers that a minor’s data have been obtained unlawfully, it takes the measures required by law to cease that processing and remedy the violation.

15. Informational messages and mailings

15.1. The Organiser may use attendees’ contact details to send organisational messages necessary for the proper delivery of the Event.

15.2. These messages may include:

• ● registration confirmations;
• ● ticket information;
• ● organisational instructions;
• ● notices about the opening of registration;
• ● access rules;
• ● safety information;
• ● notices of material programme changes;
• ● notices of postponement or cancellation of the Event.

15.3. Sending messages objectively necessary to perform a contract or provide a service ordered is not equated with optional marketing mailings.

15.4. An appropriate legal basis is used for additional informational or marketing messages not directly related to performance of the relevant contract.

15.5. Where the law requires consent, users must be able to give it voluntarily and separately.

15.6. Consent to marketing messages must not be a mandatory condition of purchasing a ticket where that processing is not necessary for the service concerned.

15.7. Every optional electronic message sent on the basis of mailing consent provides an accessible way to unsubscribe from further mailings.

15.8. Unsubscribing from marketing mailings does not stop necessary organisational or legally significant messages where there are appropriate legal bases for sending them.

16. Cookies and automatically received information

16.1. The Website may use cookies and similar technologies to ensure proper operation, security and functionality and, where there are appropriate grounds, to analyse use of the website.

16.2. The categories and specific technologies used are determined by the Website’s actual technical configuration.

16.3. Where prior consent is necessary to use a technology, the Organiser provides a way to give it properly before that technology is activated.

16.4. Users must be able to manage optional cookie settings and withdraw consent where it was the legal basis for their use.

16.5. Details of cookie categories, lifetimes, providers and management procedures are set out in the separate Cookie Policy.

16.6. The Operator does not claim to use specific analytics or advertising technologies without confirmation that they have actually been connected.

17. Transfer of personal data to third parties

17.1. The Organiser may transfer personal data to third parties only where there is an appropriate legal basis and within a lawful purpose.

17.2. Depending on the actual processes, recipients may include:

• ● hosting providers;
• ● technical Website administrators;
• ● email services;
• ● payment and ticketing services;
• ● software providers;
• ● TED within official TEDx procedures;
• ● platforms hosting official media content;
• ● contractors involved in organising the Event;
• ● competent public authorities in the cases provided by law.

17.3. Personal data are transferred to contractors with regard to their role, the defined purposes and necessary confidentiality requirements.

17.4. Where a contractor processes personal data on the Organiser’s behalf, the relationship is formalised in accordance with applicable statutory requirements.

17.5. The Organiser does not transfer attendee lists to partners, sponsors or advertisers for independent marketing use without an appropriate legal basis.

17.6. Partner status does not automatically confer a right to access attendees’ personal data.

17.7. Data are transferred to public authorities where there are grounds provided by law and in accordance with the prescribed procedure.

18. International transfers of personal data

18.1. Due to the use of international technology services and TED’s involvement in TEDx programme procedures, certain personal data may be transferred or made accessible to recipients outside Ukraine.

18.2. These transfers may relate to:

• ● the use of international platforms;
• ● the TEDx post-event survey;
• ● hosting or technical support;
• ● electronic communications;
• ● publication of media materials;
• ● other lawful operations.

18.3. International transfers of personal data take place in accordance with Article 29 of the Law of Ukraine “On Personal Data Protection” and other applicable provisions.

18.4. Where GDPR applies to a particular transfer, the Organiser ensures compliance with the relevant provisions, including requirements for international transfers of personal data.

18.5. The Organiser checks the legal bases, the nature of the data transferred, recipient categories and available safeguards.

18.6. Excessive data unnecessary for the defined purpose are not transferred to international services.

18.7. Information about specific providers and countries of processing is clarified according to the technologies actually used and contractual terms.

19. Personal data retention periods

19.1. Personal data are retained no longer than necessary to achieve the lawful purpose of processing, fulfil contractual or statutory obligations and protect the rights of the Organiser and other persons.

19.2. Retention periods are set according to the category of data and the nature of the relevant legal relationship.

19.3. Ticket purchasers’ and attendees’ data are retained for the period necessary to organise the Event, complete settlements, handle enquiries and fulfil legal obligations.

19.4. Financial and accounting documents are retained for the mandatory periods established by Ukrainian law.

19.5. Enquiries and correspondence are retained for a period justified by the purpose of the communication, the possibility of resolving the matter subsequently and statutory requirements.

19.6. Data of applicants not engaged for cooperation or participation are deleted or archived in accordance with the lawful purpose and the approved internal procedure.

19.7. Data for optional informational mailings are processed until the relevant legal basis ends or other lawful grounds arise for ending processing.

19.8. Technical logs and information security records are retained for the period necessary to perform the relevant function and respond to incidents.

19.9. Photographic, video and audio materials are retained in accordance with the legal bases for creating them, the established purposes, copyright, contractual terms and TEDx rules.

19.10. Where a dispute arises, a lawful inspection is carried out or a legal obligation must be fulfilled, relevant data may be retained longer in the minimum amount necessary.

19.11. Specific retention periods, the criteria for determining them and deletion procedures are set out in the Organiser’s internal regulations.

19.12. Once the lawful purpose of processing has ended and no other grounds remain, data must be deleted, destroyed or properly anonymised.

20. Organisational and technical safeguards

20.1. The Organiser applies appropriate organisational and technical measures to protect personal data against accidental loss, destruction, damage, unlawful access or use.

20.2. Depending on the systems actually implemented, these measures may include:

• ● secure channels for transmitting information;
• ● differentiated access rights;
• ● account protection;
• ● multi-factor authentication;
• ● backups;
• ● regular software updates;
• ● restricted access to attendee registers;
• ● oversight of contractors’ work;
• ● logging security events;
• ● periodic access reviews;
• ● incident response procedures.

20.3. Access to personal data is granted only to persons who need it to perform defined responsibilities.

20.4. Authorised persons must comply with the established confidentiality requirements.

20.5. The Organiser does not permit uncontrolled transfer of attendee databases through personal messengers, unsecured channels or third-party accounts without an appropriate organisational need and security measures.

20.6. After the Event, the Organiser reviews existing access to registration systems, attendee lists and other information resources.

20.7. Specific security parameters are determined by internal documents and are not publicly disclosed to an extent that could create additional information security risks.

20.8. The Organiser does not guarantee the complete elimination of all cyber risks, but implements safeguards appropriate to the nature of processing and applicable law.

21. Security incidents and confidentiality breaches

21.1. If a personal data security breach is discovered, the Organiser takes necessary steps to establish the circumstances, limit the consequences and prevent further unlawful access.

21.2. Response measures may include:

• ● restricting or terminating unauthorised access;
• ● protecting affected information systems;
• ● identifying the categories of data affected by the incident;
• ● determining potential risks to individuals;
• ● restoring proper technical settings;
• ● documenting the circumstances;
• ● informing individuals or competent authorities where required by law.

21.3. The obligation, procedure and deadlines for reporting an incident are determined by the law applicable to the relevant processing.

21.4. Where GDPR requirements apply to an incident, the Organiser fulfils its obligations to assess risks and notify personal data breaches.

21.5. Anyone who discovers a potential confidentiality breach or unauthorised access to personal data may report it using the Organiser’s contact address.

22. Rights of data subjects

22.1. Every individual whose personal data are processed has the rights provided by Article 8 of the Law of Ukraine “On Personal Data Protection”.

22.2. In particular, an individual has the right to:

22.2.1. Know the sources of collection and location of their personal data, the purpose of processing and details of the controller or processor to the extent defined by law.

22.2.2. Receive information about the conditions of access to personal data, including the third parties to whom they are transferred.

22.2.3. Access their personal data.

22.2.4. Receive a response within the statutory time limits about whether their data are processed and the content of those data.

22.2.5. Submit a reasoned objection to the processing of their personal data.

22.2.6. Require personal data to be changed or destroyed where they are processed unlawfully or are inaccurate.

22.2.7. Protect their personal data against unlawful processing, loss, damage, concealment, non-provision or delayed provision.

22.2.8. Complain about personal data processing to the Ukrainian Parliament Commissioner for Human Rights or to a court.

22.2.9. Use other legal remedies provided by law.

22.2.10. Withdraw consent to personal data processing.

22.2.11. Know the mechanism of automated personal data processing, where such processing takes place.

22.2.12. Be protected against an automated decision that has legal consequences for the individual in the cases defined by law.

22.3. Where GDPR applies, data subjects are also afforded the relevant rights under that Regulation, including the right to data portability and other rights where the prescribed conditions are met.

22.4. The right to deletion or cessation of processing is exercised with regard to the existence of other lawful grounds for retaining information.

22.5. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

23. Exercising rights and handling requests

23.1. Individuals may contact the Organiser to exercise their rights at:

tedxuzhhorod@gmail.com

23.2. The request must state its substance and provide sufficient information for it to be properly handled.

23.3. To protect other individuals’ personal data, the Organiser may reasonably verify the requester’s identity and authority in accordance with the law.

23.4. The Organiser does not require excessive documents or information unnecessary to consider a particular request.

23.5. Requests for access to personal data are considered in accordance with Article 16 of the Law of Ukraine “On Personal Data Protection”.

23.6. Preliminary consideration of a data access request must not exceed ten working days from receipt. Within this period, the requester is informed whether the request can be granted or of the lawful grounds for refusal.

23.7. An access request is fulfilled within thirty calendar days from receipt, unless otherwise provided by law.

23.8. Other requests by a data subject, including objections to processing and requests to change or destroy data, are considered under the specific provisions of the law.

23.9. If a request cannot be granted, the Organiser provides a reasoned response specifying the relevant legal grounds.

23.10. Where data are processed by an independent third-party controller, the Organiser informs the requester of the appropriate contacts to the extent of the information available and its own authority.

23.11. Exercising the right to submit a request does not restrict the individual’s right to protect their personal data by other lawful means.

24. Automated decision-making and profiling

24.1. The TEDxUzhhorod Website is primarily intended to provide Event information, handle applications and organise participation.

24.2. The Organiser does not envisage making solely automated decisions that have legal consequences for individuals or otherwise significantly affect their rights without an appropriate legal basis and the safeguards required by law.

24.3. Automated verification of payment status, electronic ticket generation or technical confirmation of ticket validity must not be equated with unrestricted profiling of an individual.

24.4. If new technologies for automated assessment of individuals are introduced, the Organiser first conducts a legal assessment of the processes and ensures that users receive the necessary information.

25. External websites

25.1. The Website may contain links to third-party websites, including:

• ● the official TED website;
• ● WayForPay;
• ● video hosting platforms;
• ● social networks;
• ● email services;
• ● other resources necessary to organise the Event.

25.2. After following a link to an external resource, a user’s personal data may be processed by the relevant third-party operator under its policies.

25.3. The Organiser does not automatically determine all the purposes and means of data processing by independent third-party services.

25.4. Using a third-party service does not, however, release the Organiser from its own statutory obligations concerning personal data processing.

25.5. Users are encouraged to read the privacy policies of third-party platforms they visit.

26. Changes to the Policy

26.1. The Organiser may revise this Policy due to changes in legislation, TEDx rules, Website functionality, technical services used or the nature of personal data processing.

26.2. The current version of the Policy is published on the official Website with the date of the latest update.

26.3. Material changes affecting individuals’ rights or introducing new processing purposes are communicated to them appropriately.

26.4. Where consent is required for a new processing operation, the Organiser obtains it before that processing begins.

26.5. Changes to this Policy cannot in themselves legitimise earlier unlawful personal data processing.

26.6. The Organiser ensures that the published version of the Policy corresponds to actual processing activities.

27. Contact information and protection of rights

27.1. Users may contact the Organiser about personal data processing, confidentiality, exercising their rights or reporting possible violations.

TEDxUzhhorod 2026

Official Event page: https://www.ted.com/tedx/events/69351

Sole proprietor Maiia Serhiivna Sviatashova (Святашова Майя Сергіївна)

Taxpayer registration number: 3191210820

Registered location / address for enquiries: 4В Zelena Street, Onokivtsi village, Uzhhorod district, Zakarpattia region

Contact email address: tedxuzhhorod@gmail.com

Official Website address: tedxuzhhorod.com

27.2. Anyone who believes their personal data rights have been infringed may contact the Ukrainian Parliament Commissioner for Human Rights or a court in accordance with Ukrainian law.

27.3. Where GDPR applies, individuals may also use the remedies it provides where there are appropriate legal grounds.

28. Final provisions

28.1. This Policy applies together with:

• ● the Website Terms of Use;
• ● the Cookie Policy;
• ● the Ticket Purchase, Changes and Refund Rules;
• ● the Photography, Video and Audio Recording Policy;
• ● the Attendee Code of Conduct, Inclusion and Safety;
• ● other Organiser documents governing the relevant processes.

28.2. If provisions of this Policy conflict with mandatory legal rules, the relevant legal rules apply.

28.3. This Policy does not restrict individuals’ rights guaranteed by the Constitution and laws of Ukraine.

28.4. This Policy takes effect on the date of its official publication on the Website.

28.5. The Organiser undertakes to uphold the principles of lawfulness, transparency, confidentiality and responsible handling of personal data.

TEDxUzhhorod is an independently organised event held under licence from TED.

This independent TEDx event is operated under license from TED.