Privacy Policy
Last updated: 2 September 2026
UCS processes personal data to operate its website and professional services in accordance with Ukrainian data-protection law.
Data categories
Depending on the feature, UCS may process name, surname, email, phone, language, timezone, profile and professional data; membership status; OAuth/provider identifiers; petition fields; webinar applications; certificate recipient and verification data; contact-form and mail correspondence; comments, reactions, reports, collections, search activity and video progress; consent records; IP address, forwarded-for, browser, OS, device, user agent, referrer, route/path, request identifiers and timestamps; security signals; and consented analytics. Admin systems can record actor identity, page visits, AJAX/API actions and before/after values for audit.
Purposes
Purposes include requested services, account security, membership, petition signature collection and integrity, petition data sharing with disclosed organizers, webinar/event registration, certificate issuance and verification, BPR evidence where applicable, education progress, moderation, communications, support, security, audit, analytics where consent is required, legal compliance and legal claims.
Legal bases
Depending on context UCS may rely on consent, actions requested by the user or performance of an agreement, legal obligations, lawful protection of UCS or third-party rights, and other bases permitted by Ukrainian law. Sensitive and health-related data require heightened protection.
Recipients
Authorized UCS personnel, specifically disclosed petition organizers, necessary event/education partners, hosting/CDN/storage, email, authentication, Google, analytics, video, security and backup providers, professional advisers and competent authorities may receive data where necessary and lawful. International providers may process data outside Ukraine. UCS does not sell personal data.
Public versus private
Published speaker/author names, public comments and certificate verification fields may be public by design. Petition email, phone, IP, authentication payload and security metadata are not made public merely because a person signed.
Rights
Subject to law, a person may request information, access, correction, objection/restriction where applicable, withdrawal of consent and deletion where no overriding lawful basis requires retention. Complaints may be made to the Ukrainian Parliament Commissioner for Human Rights or another competent authority.
Contact
Questions, privacy requests, complaints and security reports: info@uasurgeons.org. UCS may reasonably verify identity and authority before acting on a request.
Membership verification documents
When a person applies for UCS membership, UCS may request documents reasonably necessary to verify identity, education, professional qualification, specialty, training, professional standing or eligibility for a membership category. These may include diplomas and diploma supplements, certificates, professional licenses or registrations where applicable, employment or institutional confirmations, training records, BPR/CPD evidence where relevant, translations or recognition documents for foreign qualifications, and other supporting documents specifically requested in the application.
These files may contain personal data visible on the document, including full name, date of birth, photograph, signature, document number or series, issuing institution, qualification, specialty, dates, QR code, barcode, verification identifier and other document metadata. Applicants should not upload passport copies, taxpayer numbers, banking information, medical records, information about relatives or other unrelated sensitive data unless UCS expressly requests it for a specific lawful reason. Where practical, unnecessary information should be redacted before upload if the redaction does not prevent verification.
UCS may create verification metadata such as document type, issuer, issue date, partially masked number, verification method, verification result, reviewer, review notes, status and timestamps. UCS may compare the submitted information with account/profile data, request a clearer copy or additional evidence and, where available and lawful, verify information through the issuing institution, an official or public register, or another authoritative source. For Ukrainian education documents this may include publicly available verification mechanisms of EDEBO where applicable. Absence of a record in a registry does not automatically mean that a document is invalid.
Membership verification files are private by default. They are not collected for publication, advertising or public profiling and are not automatically shared with petition organizers, ordinary members, event participants, employers or unrelated partners. Access is limited to authorized UCS personnel or necessary technical processors on a need-to-know basis. Necessary hosting, storage, backup and security providers may technically process files under applicable safeguards.
Depending on context, processing may rely on consent, steps requested by the applicant before entering into a membership relationship, performance of the membership relationship, legal obligations, protection of lawful interests of UCS or third parties where those interests do not override the rights and freedoms of the person, or another basis permitted by Ukrainian law.