Privacy Policy

---

 Last updated: January 25, 2026

1. Introduction

Welcome to UA Merge AB ("we"). We are a Swedish-Ukrainian partnership organization providing legal, financial, and strategic services, as well as initiatives in the fields of economics, social diplomacy, and defense sector cooperation.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to your personal data.

This policy applies to all visitors and users of our website and anyone who contacts us or engages with our services.

2. Who We Are (Data Controller)

UA Merge AB Swedish-Ukrainian consulting Team.

Contact email: ua.merge.se@gmail.com

Website: uamerge.com

If you have any questions about this Privacy Policy or how we handle your data, please contact us at the email address above.

3. Information We Collect & Confidentiality Obligations

a) Data you provide directly:

• Full name
• Email address
• Phone number
• Organization / company name
• Country of residence or business registration
• The content of messages or inquiries you send us (via contact forms, email, or collaboration requests)

b) Data collected automatically:

• IP address
• Browser type and version
• Pages visited and time spent on the site
• Referring URLs
• Device type and operating system
• Cookies and similar tracking technologies (see Section 8)

c) Data and communications collected during events or meetings:

Registration details for online or offline events (name, email, professional role).

Communications related to participation in economics discussions, social diplomacy meetings, or collaboration initiatives.

All communications - whether written or verbal - that take place during our events, meetings, consultations, or any form of collaboration are considered confidential and are subject to the following legal framework:

EU Directive 2016/943 on the protection of undisclosed know-how and business information (trade secrets) - verbal agreements and oral communications are recognized as protected if the confidential nature of the exchange was mutually understood by the parties involved.

GDPR - Regulation (EU) 2016/679 - all personal data shared during meetings or events is processed in accordance with the General Data Protection Regulation, ensuring lawful, transparent, and secure handling.

Principle of Good Faith (bona fides) - under EU contract law, an oral agreement regarding confidentiality carries legal weight when both parties demonstrably understood and accepted its binding nature.

By participating in any meeting, event, or consultation organized by UA Merge AB, all parties acknowledge and accept these confidentiality obligations, regardless of whether a separate non-disclosure agreement (NDA) has been signed.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a)) - when you voluntarily submit a contact form, subscribe to updates, or register for an event.
• Legitimate interests (Art. 6(1)(f)) - for analytics, improving our website, and communicating with potential partners.
• Performance of a contract (Art. 6(1)(b)) - when you engage us for consulting or collaboration services.
• Legal obligation (Art. 6(1)(c)) - where we are required to retain data under applicable law.

5. How We Use Your Personal Data

We use the collected data for the following purposes:

• Responding to your inquiries and collaboration requests
• Providing consulting, legal, financial, and strategic services
• Organizing and managing online and offline events (economics discussions, social diplomacy meetings, expert panels)
• Communicating updates about our initiatives and activities
• Improving the functionality and user experience of our website
• Ensuring transparency and compliance in defense sector cooperation projects
• Fulfilling legal and contractual obligations

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

6. How We Share Your Personal Data

We do not sell, rent, or trade your personal data. We may share it only in the following circumstances:

• Service providers: Third-party vendors who assist us with website hosting, email delivery, event management, or analytics - bound by data processing agreements
• Partners and stakeholders: Only with your explicit consent, in the context of specific collaboration projects
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In the event of a merger, acquisition, or restructuring, subject to equivalent privacy protections

When data is transferred between Sweden and Ukraine, or to any third country, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Inquiry and contact data: Up to 2 years from last contact, unless an ongoing service relationship exists
• Event registration data: Up to 1 year after the event
• Service/contract-related data: For the duration of the contract plus up to 5 years, in accordance with applicable legal requirements
• Website analytics data: Up to 13 months (anonymized thereafter)

8. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience and analyze site traffic.

Types of cookies we may use:

Type                                Purpose

Essential                        Required for the website to function

Analytics                        Understanding how visitors use the site

Functional                     Remembering your preferences

Marketing                       Only if applicable - with your consent

You can manage or withdraw your consent to cookies at any time through your browser settings or our cookie consent tool (if implemented on the site).

9. Your Rights Under GDPR

If you are located in the EU/EEA or the United Kingdom, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion of your data, subject to legal retention obligations
• Right to restriction of processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: ua.merge.se@gmail.com

You also have the right to lodge a complaint with the relevant supervisory authority:

• Sweden: Integritetsskyddsmyndigheten (IMY) 
• Ukraine: Ukrainian Parliament Commissioner for Human Rights

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encrypted communications (SSL/TLS)
• Access controls and authentication protocols
• Regular security reviews
• Staff awareness and data handling practices

However, no method of transmission over the internet is 100% secure. We encourage you to contact us immediately if you suspect any unauthorized use of your data.

11. Third-Party Links

Our website contains links to external websites, partner organizations, and media resources. We are not responsible for the privacy practices of those third-party sites and encourage you to review their respective privacy policies.

12. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or organizational structure. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

For significant changes, we will notify you via email or a prominent notice on our website.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: ua.merge.se@gmail.com

This Privacy Policy is grounded in the principles of transparency, accountability, and respect for human dignity - values that are central to our mission and the Copenhagen Criteria of the European Union.