Privacy Policy

This Privacy Policy (the “Policy”) sets out how the personal data of users of the Mistoo mobile app and website (mistoo.com.ua) (the “App”) is collected, processed, stored, used and protected.

The controller of the personal data, who determines the purposes and means of its processing, is the individual entrepreneur Vadym Dmytrovych Rudenko (taxpayer registration number (RNOKPP): 3038520732), registered in the Unified State Register of Legal Entities, Individual Entrepreneurs and Public Organizations on July 04, 2026 (record number 2011600000000066663), the owner and administrator of the App (“Mistoo” or “we”).

Personal data is processed in accordance with the Constitution of Ukraine, the Law of Ukraine “On Personal Data Protection”, the Law of Ukraine “On Electronic Commerce”, other applicable laws of Ukraine and this Policy.

1. General provisions

1.1. This Policy applies to all users of the App – individuals who register, place orders, make payments and receive electronic tickets through the App (the “User” or “you”).

1.2. By using the App and ticking the relevant consent checkbox, you confirm that you have read this Policy, understand its terms and consent to the processing of your personal data in the manner and to the extent set out in this Policy.

1.3. If you do not agree with any term of this Policy, please do not use the App or provide your personal data.

2. What data we collect

2.1. In the course of providing our services to you, we collect the following categories of personal data:

2.2. We do not collect or store the full details of your payment card (card number, CVV code, expiry date, etc.). You enter these details directly on the page of the Payment Operator (EasyPay – LLC “FC “Kontraktovyi Dim”), which processes them in accordance with PCI DSS standards.

3. Purposes of processing personal data

3.1. We process your personal data for the following purposes:

a) registering and maintaining your account in the App;

b) processing and fulfilling your orders – accepting payment, generating and delivering the electronic ticket (QR code);

c) technical maintenance of the App and ensuring its security and stable operation;

d) providing support and answering your questions and complaints;

e) informing you about the status of your order and changes to the Event (cancellation, rescheduling, etc.);

f) detecting and preventing fraud and abuse;

g) complying with the requirements of Ukrainian law (tax law, consumer protection law, etc.);

h) sending you advertising and informational messages about new Events and promotions – only with your separate consent, which you may withdraw at any time.

4. Legal grounds for processing

4.1. We process your personal data on the following legal grounds provided for in Article 11 of the Law of Ukraine “On Personal Data Protection”:

a) your consent to the processing of personal data, given by ticking the consent checkbox at registration or when placing an order;

b) the need to perform a contract to which you are a party (the Mistoo Public Offer);

c) the need to fulfill an obligation of the personal data controller provided for by law (tax law, consumer protection law);

d) the need to protect the legitimate interests of the personal data controller (for example, preventing fraud).

5. Disclosure of data to third parties

5.1. We share the minimum necessary amount of your personal data with the following categories of third parties solely for the purposes set out in Section 3 of this Policy:

5.2. We do not sell, rent out or transfer your personal data to third parties for commercial purposes unrelated to providing the App’s services.

5.3. The IT infrastructure providers we use may be located outside Ukraine (in particular, in European Union countries and the USA). We have chosen such providers taking into account that they ensure an adequate level of personal data protection in accordance with legal requirements.

6. Data retention period

6.1. We store your personal data for as long as necessary to achieve the purposes of processing set out in Section 3 of this Policy, subject to the following minimum periods:

a) account data – for as long as your account is active and for 12 (twelve) months after its deletion;

b) order data, payment transaction data and primary records – for at least 3 (three) years from the end of the relevant calendar year, as required by Ukrainian tax law;

c) support data – for at least 12 (twelve) months from the closing of the relevant request.

6.2. After the relevant periods expire, personal data is anonymized or deleted, unless its further storage is required by law.

7. Your rights

7.1. Under Article 8 of the Law of Ukraine “On Personal Data Protection”, you have the right:

a) to know the sources from which your personal data is collected, its location, the purpose of its processing, and the location or place of residence (stay) of the controller or processor of the personal data;

b) to receive information about the conditions for granting access to your personal data, in particular information about the third parties to whom your personal data is transferred;

c) to access your personal data;

d) to require us to correct (update) inaccurate or incomplete data, and to require the deletion of data processed in breach of the law;

e) to object to the processing of your personal data, including to object to automated decision-making;

f) to withdraw your consent to the processing of personal data at any time (except where processing is carried out on other legal grounds, in particular to perform a contract or comply with legal requirements);

g) to file complaints about the processing of your personal data with the Ukrainian Parliament Commissioner for Human Rights or with a court.

7.2. To exercise your rights, you can contact us using the contact details given in Section 12 of this Policy. We will consider your request within 30 (thirty) calendar days of receiving it.

8. Cookies and similar technologies

8.1. The web version of the App uses cookies and similar technologies to ensure it works, analyze usage and improve the service. Cookies are small files stored in your browser when you visit a website.

8.2. We use the following types of cookies:

a) necessary (technical) – ensure the basic operation of the App (authorization, saving the state of the cart); cannot be disabled;

b) analytical – help us understand how Users interact with the App so we can improve it;

c) functional – remember your settings (language, region).

8.3. You can manage cookie settings through your browser settings. Disabling necessary cookies may prevent the App from working correctly.

9. Data protection

9.1. We apply technical and organizational measures to protect your personal data against unauthorized access, destruction, alteration, disclosure or loss, in particular:

a) encryption of data in transit (SSL/TLS);

b) restricting access to personal data to authorized persons only;

c) regular data backups;

d) monitoring of unauthorized access attempts.

9.2. At the same time, no method of transmitting data over the Internet or of electronic storage is completely secure. We cannot guarantee the absolute security of personal data, but we make every reasonable effort to protect it.

10. Personal data of minors

10.1. The App is intended for use by persons aged 18 (eighteen) or over. We do not knowingly collect personal data of minors without the consent of their parents or other legal representatives.

10.2. If you are a parent or legal representative of a minor and you become aware that the child has provided us with their personal data without your consent, please contact us using the contact details given in Section 12, and we will delete the relevant data.

11. Changes to the Policy

11.1. We reserve the right to amend this Policy. The current version is always available in the App and at mistoo.com.ua/privacy.

11.2. If we make material changes, we will notify you through the App and/or by email to the address in your account at least 10 (ten) calendar days before they take effect.

11.3. By continuing to use the App after the changes take effect, you confirm your agreement with the new version of the Policy.

12. Contact information

If you have any questions, comments or complaints about the processing of your personal data, we will be happy to help:

You also have the right to file a complaint with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua), who oversees compliance with legislation on personal data protection.