Privacy Notice

Last updated: 8 October 2026

Who is responsible

The Center for Defense Reforms (Ukraine) is responsible for the personal data collected through this website. Contact for all data protection matters: info@cdr.org.ua.

What data we collect and why

Report and access requests. The form asks for your name and surname, organisation, website and email address, and records the report and report language you request (or that it is a general access request), your optional comment and the request number. We use these data only to review your request, to decide whether access can be provided and to reply to you. Each request is reviewed by a person; no automated decisions are made.

Legal basis: your consent, given in the form, and the steps you ask us to take before materials are provided (Article 6(1)(a) and (b) of the EU General Data Protection Regulation, GDPR; Article 11 of the Law of Ukraine “On Personal Data Protection”).

Email. If you write to info@cdr.org.ua, we use your address and message only to reply to you.

Technical data. The hosting server records technical data (IP address, date and time, requested page, browser type) in its logs to keep the website secure and working. To prevent abuse of the request form, a one-way hashed form of your IP address is kept for no longer than 24 hours. Legal basis: our legitimate interest in the security of the website (Article 6(1)(f) GDPR).

Cookies and tracking

This website does not use cookies, analytics, advertising or other tracking technologies, and it does not load fonts, scripts or other content from third-party servers. Links to media publications open the publishers’ websites, which have their own privacy policies.

When you choose “Accept” or “Decline” in the cookie notice, the website keeps that choice in your browser’s local storage so the notice is not shown again. It is not sent to us or to anyone else; you can remove it by clearing this website’s data in your browser.

Who receives the data

Requests are stored on the website’s server and sent by email to the Center’s mailbox. They are available only to the Center’s staff who handle them and to our hosting and email providers, which process the data on our behalf. We do not sell personal data and do not use it for newsletters or advertising.

How long we keep the data

We keep request data only as long as needed to review the request and to record the decision.

Your rights

You have the right to access your data, to have them corrected or deleted, to restrict or object to their processing, to withdraw your consent at any time (this does not affect processing carried out before the withdrawal) and to receive your data in a portable format. To exercise these rights, write to info@cdr.org.ua.

You may also lodge a complaint with a data protection authority: in the European Union, with the supervisory authority of the country where you live or work; in Ukraine, with the Ukrainian Parliament Commissioner for Human Rights.

Changes to this notice

We may update this notice. The date at the top shows the current version.