info@linguacarpathia.com +380 32 249 08 17 Mon–Fri 09:00–18:00 EET
Lviv, Ukraine — EN
Legal

GDPR & Data Protection

Last updated: 1 January 2026

Lingua Carpathia LLC serves clients in Ukraine and across the European Union and European Economic Area. We are committed to responsible data handling in accordance with both Ukrainian data protection law and the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This page explains the lawful bases on which we process personal data and the rights available to individuals whose data we hold.

1. Data controller

The data controller responsible for your personal data is:

  • Company name: Lingua Carpathia LLC
  • Registered address: 14 Prospekt Svobody, Lviv 79008, Ukraine
  • Data protection contact: privacy@linguacarpathia.com

For any question about how we handle your personal data, or to exercise any of the rights listed below, please contact us at the above email address.

2. Scope of application

This page applies to all natural persons whose personal data we process, including:

  • Individuals who contact us via the website enquiry form.
  • Clients who engage our translation or interpreting services.
  • Individuals whose personal data appears in documents submitted to us for translation.
  • Any visitor to our website about whom we collect technical or analytics data.

Where we process personal data appearing in client-supplied documents (e.g. personal data in a contract submitted for translation), we do so as a data processor on behalf of the client, who is the controller of that data. Our obligations in that capacity are set out in the relevant service agreement.

3. Lawful bases for processing

Under Article 6 of the GDPR, we rely on the following lawful bases when processing personal data:

  • Consent (Art. 6(1)(a)): where you have given clear, freely-given consent — for example, by submitting our contact form with the consent checkbox ticked, or by accepting analytics cookies. Consent can be withdrawn at any time; withdrawal does not affect the lawfulness of processing before withdrawal.
  • Performance of a contract (Art. 6(1)(b)): to fulfil an order for translation or interpreting services you have placed with us, or to take steps at your request prior to entering into a contract.
  • Legitimate interests (Art. 6(1)(f)): to operate, secure and improve our website and services, to manage our business operations, and to prevent fraud or misuse. We have balanced these interests against your rights and conclude they are not overridden where processing is limited to what is necessary.
  • Legal obligation (Art. 6(1)(c)): where processing is necessary to comply with a legal obligation under Ukrainian or EU law, for example retaining financial records for the period required by law.

Where we process special categories of data (Art. 9 GDPR) — for example, health-related information that may appear in documents submitted for medical translation — we rely on your explicit consent and process such data solely to deliver the requested service.

4. Your rights under the GDPR

If you are located in the EU or your data is processed under the GDPR, you have the following rights:

4.1 Right of access (Art. 15)

You have the right to request confirmation of whether we process your personal data and, if so, to obtain a copy of that data together with information about: the purposes of processing, the categories of data, recipients, retention periods, your rights and whether automated decision-making is involved.

4.2 Right to rectification (Art. 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed. If you believe we hold incorrect information about you, please let us know and we will correct it promptly.

4.3 Right to erasure — "right to be forgotten" (Art. 17)

You have the right to request deletion of your personal data when: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; (d) the data has been unlawfully processed. This right is subject to exceptions, including legal retention obligations.

4.4 Right to restriction of processing (Art. 18)

You have the right to request that we restrict (pause) our processing of your data in certain circumstances — for example, while the accuracy of data is being verified, or where processing is unlawful but you prefer restriction to erasure.

4.5 Right to data portability (Art. 20)

Where processing is based on your consent or performance of a contract, and carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format (e.g. CSV or JSON), and to request that we transmit it directly to another controller where technically feasible.

4.6 Right to object (Art. 21)

You have the right to object at any time to the processing of your personal data where that processing is based on our legitimate interests. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. You may also object at any time to processing for direct marketing purposes.

4.7 Right to withdraw consent (Art. 7(3))

Where processing is based on your consent, you have the right to withdraw consent at any time without detriment. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact us at privacy@linguacarpathia.com.

4.8 Rights related to automated decision-making (Art. 22)

Lingua Carpathia does not make decisions about individuals solely by automated processing that produce legal or similarly significant effects. If this changes, we will update this page and ensure appropriate safeguards are in place.

5. How to exercise your rights

To exercise any of the rights above, please send a written request to privacy@linguacarpathia.com. Include your full name and contact details and describe your request as clearly as possible. We may need to verify your identity before acting on a request — we will ask for the minimum information necessary to do so.

We will respond to your request within one calendar month of receipt, as required by Article 12(3) of the GDPR. If a request is complex or numerous, we may extend this period by a further two months with notice.

We do not charge a fee for reasonable requests. If requests are manifestly unfounded or excessive, we may charge a reasonable administrative fee or decline to act, with written justification.

6. International transfers of personal data

Lingua Carpathia is based in Ukraine, which the European Commission has assessed as providing an adequate level of protection for personal data under the GDPR. Where we use service providers located outside Ukraine or the EEA (for example, cloud hosting or analytics providers), we rely on appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or an adequacy decision to ensure your data remains protected to the GDPR standard.

7. Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected and as required by applicable law. Detailed retention periods are set out in our Privacy Policy. After the retention period expires, data is securely deleted or irreversibly anonymised.

8. Supervisory authority

If you are located in the European Union and believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in your EU member state. Details of national supervisory authorities can be found on the European Data Protection Board website.

In Ukraine, data protection oversight is provided by the Ukrainian Parliament Commissioner for Human Rights (Ombudsperson). If you have concerns about our data practices, you are also welcome to contact us directly first and we will do our best to address them promptly.

9. Changes to this page

We may update this GDPR & Data Protection page periodically. The latest version will always be posted here with the effective date shown above. Material changes will be communicated on our website.

10. Contact

For all data protection enquiries, contact privacy@linguacarpathia.com or write to us at 14 Prospekt Svobody, Lviv 79008, Ukraine.