Privacy and Cookie Contact Information

National Qualifications Agency (NQA)
EDRPOU 43344220 Tel.: +380 68 046 70 86 E-mail: nqa@nqa.gov.ua
Addresses: 03150, Kyiv, Antonovycha St., 180; 03035, Kyiv, Solomianska St., 1.

1) What data we process?

• Technical (necessary) website data: IP address, user agent, URL, system cookies, and server/firewall logs. Every website uses these.
• Contact form (with consent): name (if provided), e-mail, message text, date/time, technical metadata.
• Analytics (with consent): page view events, traffic sources, conversions via Google Analytics 4 / Google Tag Manager.

2) Purposes and legal basis

• Responding to enquiries submitted via the contact form and official correspondence — performance of a task carried out in the public interest or in the exercise of official authority vested in the National Qualifications Agency (NQA) (Article 6(1)(e) GDPR).
• Site operation and security (system cookies, logs, WAF) — Article 6(1)(e) GDPR (the same task/authority, as this is necessary to provide the service and protect the IT infrastructure).
• Analytics / marketing (Google Analytics 4 / Google Tag Manager) — only with your consent (Article 6(1)(a) GDPR). These tags are not activated before consent is given.

We are guided by the legislation of Ukraine (Law No. 2297-VI) and, where applicable, by the requirements of the GDPR and the ePrivacy Directive.

3) Who has access to the data

We cooperate only with service providers who process data on our behalf under contractual data processing terms (Data Processing Agreement/DPA) and implement appropriate security measures.

4) International data transfers

If a service provider is located outside Ukraine or the EEA, we apply appropriate safeguards (including the European Commission’s Standard Contractual Clauses) and minimise the amount of data transferred. Details are available upon request.

5) Retention periods

• Messages from the contact form: until the end of communication + 12 months; afterwards — deletion or archiving in accordance with internal policy.
• Logs: 30–180 days (for diagnostics/security).
• Analytics (with consent): up to 12 months or until consent is withdrawn.
  If a dispute or inspection is ongoing, data is retained longer until the matter is resolved.

6) Your rights

Access, rectification, erasure, restriction, portability, objection, as well as withdrawal of consent at any time (without affecting processing already carried out). Contact us at: nqa@nqa.gov.ua. You may also complain to a competent supervisory authority, including the Ukrainian Parliament Commissioner for Human Rights.

7) How we protect data

HTTPS, encryption, access control, data minimisation, contractual obligations with processors, staff training, and regular policy reviews.

Cookie Policy

1) Purpose of cookies

Cookies are small files stored in your browser. We use:

• Necessary (first-party): for website operation, security, and to remember your cookie preferences.
• Analytical/marketing (via GA4/GTM): only after your consent.

2) Your choice

When you first visit, a banner appears with two options: “Accept all”, “Essential only” (equivalent to “Reject all”). Your choice is stored in a functional necessary cookie (to prevent the banner from reappearing). You can change your choice at any time via the link in the footer.

Before consent is given, Google Analytics 4 and Google Tag Manager are not activated; once consent is granted, they operate within the scope of your choice.

3) Essential cookie