Pursuant to paragraphs 1 and 2 of part two of Article 8, and part two of Article 12 of the Law of Ukraine “On Personal Data Protection”, the Ministry of Digital Transformation of Ukraine shall inform about the controller, processor, location, composition and collection purposes of personal data to be processed by the United24 mobile application, as a part of the Issues of the Unified State Web Portal for Collecting Donations in Support of Ukraine “United24,” the third parties whom personal data is transferred to and about the rights of the data subject – the user of the United24 mobile application (hereinafter – the User).

The creation and launching of the United24 mobile application (hereinafter – the United24 app) was provided by the Ministry of Digital Transformation of Ukraine following the Decree of the Cabinet of Ministers of Ukraine No.516 dated May 3, 2022, “Issues of the Unified State Web Portal for Collecting Donations in Support of Ukraine ‘United24’ (as amended)”.
This Notice on the Processing of Personal Data in the United24 Mobile Application (hereinafter – the Notice) is intended to help the User understand how their personal data is processed when using the United24 App.

1. Controller and Processor of Personal Data
The controller of the personal data processed through the software tools of the United24 mobile application is the controller (owner) of the Unified State Web Portal for Collecting Donations in Support of Ukraine “United24” (hereinafter – the United24 Portal) – the Ministry of Digital Transformation of Ukraine (legal entity identification code in the Unified State Register of Enterprises and Organizations of Ukraine – 43220851) (hereinafter – the Personal Data Controller), with its registered office at: 24 Dilova Street, Kyiv, 03150, Ukraine.

The processor of the personal data processed through the software tools of the United24 mobile application is the technical administrator of the United24 Portal – the state-owned company “DIIA” (identification code of the legal entity in the Unified State Register of Enterprises and Organizations of Ukraine – 43395033) (hereinafter – the Personal Data Processor), with its registered office at: 24 Dilova Street, Kyiv, 03150, Ukraine.

2. Processing of Personal Data
To use the United24 App, the User must undergo electronic identification and authentication within the United24 App, including through the use of electronic identification means and/or the means of the Unified State Web Portal of Electronic Services (hereinafter – the Diia Portal), including the mobile application of the Diia Portal.
Authentication in the United24 App may also be carried out using an email address.

The User's personal data processed via the United24 App includes:

1. Personal data required for electronic identification and authentication in the United24 App, namely:
   • email address;
   • first name;
   • last name.
2. Personal data that may be voluntarily provided by the User when editing their account, namely:
   • country.
3. Technical information transmitted automatically to ensure the interface of the United24 App is displayed in the appropriate language version (Ukrainian or English), namely:
   • device language settings.
4. Information about the use of the mobile application, including the payment page, collected and processed through analytical tools to improve the service.

The United24 App also includes functionality for making charitable donations to accounts of military units via payment service providers – state-owned banks and banks in which at least 75 percent of the authorized capital (shares) are state-owned.
When making such a charitable donation, the Personal Data Controller processes only the User's personal data necessary to generate the User's personal statistics and the overall user ranking in the United24 App, namely:

• User identifier;
• payment amount;
• payment currency.

Any other personal data provided by the User when making charitable donations to military unit accounts is processed by the respective bank in accordance with the terms of the public offer agreement concluded between the User and the bank and in line with the bank's personal data processing policy.

3. The location of personal data is within the cloud infrastructure of Google Cloud Platform

4. General Purpose of Personal Data Processing
The purpose of personal data processing is defined in the Regulation on the Unified State Web Portal for Collecting Donations in Support of Ukraine “United24,” approved by the Decree No. 516 of the Cabinet of Ministers of Ukraine dated May 3, 2022, “Issues of the Unified State Web Portal for Collecting Donations in Support of Ukraine ‘United24’” (as amended), and in other regulatory legal acts.
The purposes of personal data processing are as follows:
4.1. To enable the User to use the United24 App.
The processing of the User’s personal data is carried out in particular to allow them to use the United24 App, view its pages and content, and utilize its functionalities. If the User submits a request within the United24 App, this data will be used to provide feedback to the User.
4.2. To create the User’s account (profile).
4.3. To generate the User’s personal statistics and the overall user ranking.
4.4. To ensure that the interface of the United24 App is displayed in the language version corresponding to the User’s device settings (if the Ukrainian language is set – the interface is displayed in Ukrainian; in all other cases – in English).
4.5. To implement the functionalities of the United24 App necessary for fulfilling its designated tasks.

5. Compliance with Legal Requirements
The processing of personal data may be carried out in order to comply with legal requirements, for example, to enable the Personal Data Controller and the Personal Data Processor to exercise their powers in accordance with applicable legislation.

6. Third parties to whom personal data may be transferred
Third parties to whom the processed personal data may be transferred include other entities that contact the Personal Data Controller and have the legal right to receive personal data solely on the grounds established by law.
Access to personal data generated through the United24 App is granted only to the User who has completed electronic identification and authentication within the United24 App.

7. Security Measures
7.1. The Personal Data Controller and the Personal Data Processor ensure the implementation of appropriate technical and organizational measures to protect personal data processed within the United24 App.
7.2. Personal data processed in the United24 App is stored for the period necessary to achieve the purpose of processing in accordance with this Notice on Processing. As a general rule, personal data is stored for 24 months from the date of receipt. If the data subject does not use the United24 App within this 24-month period, the personal data is deleted from the systems of the Personal Data Controller and the Personal Data Processor. However, certain personal data may be retained for backup purposes and for compliance with the legal obligations of the Personal Data Controller.
7.3. The United24 App may contain links to third-party web services. The Personal Data Controller and the Personal Data Processor are not responsible for the content of such services or the processing of personal data on them. The data subject should review the privacy notice of each web service they use.

8. User Rights
The User has the right to:

1. know the sources of the collection, the location of their personal data, the purpose of its processing, and the location or place of residence (stay) of the Personal Data Controller or the Personal Data Processor, or to instruct an authorized person to obtain this information, except in cases provided by law;
2. receive information on the conditions for granting access to personal data, including information about third parties to whom their personal data is transferred;
3. access their personal data;
4. receive, no later than thirty calendar days from the date of request (except as otherwise provided by law), a response as to whether their personal data is being processed, and, if so, to obtain the content of such personal data;
5. submit a reasoned request to the Personal Data Controller objecting to the processing of their personal data;
6. submit a reasoned request for the modification or deletion of their personal data to the Personal Data Controller and the Personal Data Processor if such data is being processed unlawfully or is inaccurate;
7. protect their personal data from unlawful processing and from accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision, and from dissemination of information that is inaccurate or that undermines the honor, dignity, and business reputation of an individual;
8. file complaints regarding the processing of their personal data with the Ukrainian Parliament Commissioner for Human Rights or with a court;
9. apply legal remedies in case of a violation of data protection legislation;
10. make reservations concerning the restriction of the right to process their personal data at the time of giving consent;
11. withdraw consent to the processing of personal data;
12. be informed about the mechanism of automatic processing of personal data;
13. be protected against an automated decision that has legal consequences for them.

If the User wishes to exercise any of their data protection rights, they may send an email to [email protected] describing their request.
The User also has the ability to delete personal data provided during electronic identification and authentication in the United24 App directly within the App by clicking the “Delete Account” button in the “Account” subsection of the “My Profile” section.
Please note that certain technical data may be retained due to the necessity of complying with applicable legal requirements.

9. Cross-Border Transfer of Personal Data
The transfer of personal data to foreign entities (cross-border transfer of personal data) is not carried out.

10. Age Restrictions
The United24 App is not intended for use by minors under the age of 14.
In the event that the United24 App is used by a person under the specified age, responsibility for the actions of such person shall rest with their parents, adoptive parents, guardians, or other individuals who legally exercise custody of the minor.

11. Validity of This Notice
This version of the Notice on the Processing of Personal Data in the United24 Mobile Application is current and effective as of May 23, 2025.
In the event of any changes to the Notice on the Processing of Personal Data in the United24 Mobile Application, the updated version shall be published in the United24 App.
If the defined purpose of personal data processing is changed to a new purpose that is incompatible with the previous one, the Personal Data Controller must obtain the User’s consent for the processing of their data in accordance with the new purpose, unless otherwise provided by law.

12. Legal Basis for Personal Data Processing
The legal basis for the processing of personal data is the User’s consent to the processing of their personal data.
Before undergoing electronic identification and authentication in the United24 App, the User provides consent to the processing of personal data and confirms that they have read this Notice on the Processing of Personal Data by checking the appropriate box.

If the User has any questions regarding the processing of their personal data in the United24 App, they may contact the Personal Data Controller by email at: [email protected].