Last Updated: 07 October 2025
Your privacy matters to us. Ganex Group (“we,” “our,” “us”) is committed to protecting your personal information and complying with all applicable data protection laws and regulations, including the Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data (‘GDPR’) and the Law of Ukraine “On Personal Data Protection.”
This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website https://ganex-group.com/, contact us via forms or email, or use our logistics, transportation, customs brokerage, and warehousing services.
This Privacy Policy applies to all users, clients, and partners regardless of their place of residence, wherever their personal data is processed by Ganex Group.
| Personal Data: | Any information relating to an identified or identifiable individual. |
| Processing: | Any action or set of actions performed on personal data, including its collection, recording, storage, use, transmission, and other operations. |
| Data Controller: | Ganex Group, which determines the purposes and means of processing your personal data. |
| Data Processor: | Any third party that processes data on behalf of Ganex Group. |
| Sensitive Personal Data: | Data revealing racial or ethnic origin, health, biometric or genetic data, religious beliefs, criminal records, or similar categories requiring special protection. |
| Third Parties: | External service providers, contractors, or partners who may receive personal data to provide logistical or technical support. |
We may collect and process the following categories of personal data:
-
a) Contact and Identification Data
- Full name, company name
- Email address, phone number
- Job title or role
- Country and business address
-
b) Transactional and Service Data
- Shipping orders and consignment details
- Customs documentation and declarations
- Invoices, delivery confirmations, and payment records
-
c) Technical and Website Usage Data
- IP address, browser type, and device information
- Pages visited, time spent on site, and referring URLs
- Cookies and tracking technologies (see Section 10)
-
d) Communication Data
- Messages or inquiries submitted through our contact forms or email
- Feedback and correspondence with our team
- HR and Supplier Data – for recruitment, payroll, and supplier management (if applicable).
We do not collect or process sensitive personal data (e.g., health, biometric, or religious data) unless strictly required by law for customs or legal compliance purposes.
We use your information to:
- Provide, manage, and fulfill logistics, transportation, and warehousing services
- Communicate with you regarding orders, shipments, and documentation
- Issue invoices and process payments
- Maintain records for customs and legal compliance
- Improve our website, services, and customer experience
- Respond to inquiries, feedback, and support requests
- Ensure security, detect fraud, and comply with legal obligations
Data Minimization:
We collect and process only the personal data necessary to provide and improve our services, in accordance with the principles of data minimization and purpose limitation. Data will not be retained or used for unrelated purposes.
Contact Forms and Consent
By submitting any contact or inquiry form on our website, you consent to the processing of your personal data as described in this Privacy Policy. This includes using your information to respond to your inquiry, provide requested information, and maintain communication related to your request.
We process your personal data on the following legal grounds:
- Performance of a Contract: To provide logistics or transportation services you request.
- Legal Obligation: To comply with customs, tax, or regulatory requirements.
- Legitimate Interests: We process business contact data to manage ongoing partnerships, respond to inquiries, ensure service quality, and protect our legal rights and interests in the course of business operations.
- Consent: For marketing communications or optional cookies (where required).
Marketing and Communications: We will only send you promotional or informational materials if you have provided explicit consent or if you are an existing client, in accordance with applicable direct marketing laws. You may withdraw consent or unsubscribe at any time.
We share data only when necessary and in compliance with applicable laws. This may include:
- Logistics Partners and Carriers: To execute transportation, customs, and delivery operations.
- IT and Cloud Service Providers: For hosting, data storage, and security monitoring.
- Legal and Regulatory Authorities: When required for customs, taxation, or law enforcement.
- Professional Advisors: Such as auditors or consultants, under confidentiality obligations.
All third parties receiving personal data act as data processors or joint controllers and are bound by written Data Processing Agreements (DPAs) or equivalent legal instruments. These agreements ensure that such parties process personal data exclusively under our instructions, apply appropriate technical and organizational security measures, and comply with GDPR and the Law of Ukraine “On Personal Data Protection.” Within Ukraine, personal data may also be shared with local service providers, transport carriers, and financial institutions strictly for the purposes of performing contractual obligations or regulatory compliance.
Links to Third-Party Websites
Our website may contain links to third-party websites that we do not control. When users click on such links, they are directed to third-party websites where the respective privacy policies and data processing practices apply. Ganex Group does not control and is not responsible for the content, privacy policies, or practices of such third-party websites. We strongly recommend reviewing the privacy policy of each website you visit through our links.
Personal data will never be sold, leased, or disclosed for marketing purposes without your explicit consent.
In certain cases, your personal data may be transferred to and processed in other countries where our partners, service providers, or servers are located. Such transfers are conducted only when necessary for the execution of logistics, customs, contractual, or technical operations and in full compliance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Law of Ukraine “On Personal Data Protection.”
When personal data is transferred outside Ukraine or the European Economic Area (EEA), we ensure that:
- The transfer is made to a country that provides an adequate level of personal data protection, as officially recognized by the European Commission or the authorized data protection authority of Ukraine; or
- We enter into Standard Contractual Clauses (SCCs) or equivalent data transfer agreements approved by the European Commission or the Ukrainian Parliament Commissioner for Human Rights (the supervisory authority); or
- We apply other appropriate safeguards, such as explicit data subject consent or transfer necessity for contract performance (e.g., for transportation or customs operations).
All parties involved in international data processing are required to maintain the same level of confidentiality, integrity, and security of personal data as guaranteed under Ukrainian and EU law. You may contact us at any time to request more information about the legal basis, safeguards, or destinations applicable to the transfer of your personal data.
We retain personal data only for as long as necessary to:
- Fulfill the purpose for which it was collected;
- Comply with legal, tax, or regulatory obligations;
- Resolve disputes or enforce agreements.
Retention periods may vary depending on service type (e.g., logistics records are retained for 5–7 years for compliance).
All users of the Website shall have the following rights with respect to the processing of their personal data:
| Right | Description |
|---|---|
| Right to access | You have a right to request a copy of the personal data that we hold on you, along with meaningful information on how it is used and who we share it with. This right always applies, but there are some instances where We may not be able to provide you with some or all of the information We hold. Where this is the case, We will explain to you the reason and when We can respond to your request, unless the relevant laws or regulations prevent us from doing so. |
| Right to request data portability | You have the right to receive your personal data which was provided to Us for processing, in a structured and machine-readable format. You may also have the right to request transmission of such personal data to another controller, where technically feasible. |
| Right to rectification | You have a right to ask Us to correct inaccurate or incomplete personal data that We hold about you. We will either confirm to you that this has been done, or if there is a valid reason that this cannot be done, We will let you know the reason. |
| Right to erasure | You can request that We delete your personal data in certain circumstances, for example if We no longer need the personal data for the purpose(s) for which We collected it. We will either confirm to you that this has been done, or if we are unable to delete it due to a compelling overriding reasons or retention is required by any legal or regularly obligations, we will let you know the reason for continuing to hold personal data and the period We are required to hold such personal data. |
| Right to restrict processing | You can ask Us to restrict the processing of your personal data in certain circumstances. If you do so, We will either confirm to you that this has been done, or if We are unable to do so, We will inform you the reason. |
| Right to object to automated decision-making | You have the right to object to decisions made about you, using your personal data and undertaken by purely automated means, including profiling. If you do so, We will arrange for someone to assess the automated decision and confirm the outcome of this assessment to you. |
| Right to object to certain processing, including direct marketing | You can object to certain processing, including to receive direct marketing from Us. You can object to receiving direct marketing from Us by simply clicking on the unsubscribe link in any email you receive from Us or alternatively getting in touch with Us though the contact details mentioned hereunder. |
| Right to withdraw your consent | You have the right to withdraw your consent at any time to the use of your personal data for a particular purpose (where we have asked you for consent to use your information for that particular purpose). |
We will respond to rights requests within 30 days, unless extended due to complexity.
To exercise your rights or if you have any questions regarding this Privacy Policy, please contact our Privacy Contact at:
Email: info@ganex-group.com
Contact: +38 044 299-22-72
If you believe that your rights regarding personal data protection have been violated, you may also file a complaint with the Ukrainian Parliament Commissioner for Human Rights (Ombudsman).
We take the security of your personal data seriously and implement a combination of technical and organizational measures to protect it.
Our Security Measures:
- Encryption: All personal data is encrypted both in transit and at rest.
- Access Controls: Multi-factor authentication and role-based access ensure that only authorized personnel can access data.
- Data Minimization: Sensitive personal data is pseudonymized or anonymized wherever possible.
- Staff Awareness: Regular training and awareness programs are conducted to ensure employees understand data protection responsibilities.
- System Testing: We perform regular security audits, penetration tests, and maintain incident response procedures to detect and mitigate vulnerabilities.
This Cookie Policy explains what cookies are, how we use them, the types of cookies we use (i.e., the information we collect using cookies and how that information is used), and how to manage your cookie settings.
Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and analyse performance to identify what works and where improvements are needed.
Like most online services, our website uses both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function properly and do not collect any personally identifiable data.
The third-party cookies used on our website primarily help us understand how the website performs, track how you interact with it, keep our services secure, deliver relevant advertisements, and enhance your overall user experience while improving the speed of your future interactions with our website.
| Cookie | Duration | Description |
|---|---|---|
| pll_language | 1 year | The pll_language cookie is used by Polylang to remember the language selected by the user when returning to the website, and also to get the language information when not available in another way. |
| wpEmojiSettingsSupports | session | WordPress sets this cookie when a user interacts with emojis on a WordPress site. It helps determine if the user’s browser can display emojis properly. |
This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately.
Additionally, different browsers offer various methods to block and delete cookies used by websites. You can adjust your browser settings to block or delete cookies. Below are links to support documents on how to manage and delete cookies in major web browsers.
If you are using a different web browser, please refer to its official support documentation.
You can manage or disable cookies in your browser settings or via our cookie banner.
If a personal data breach occurs, we will take immediate and proportionate steps to contain, assess, and mitigate the incident. A personal data breach may include unauthorized access, disclosure, alteration, loss, or destruction of personal data, whether accidental or unlawful.
- Under GDPR: We will notify the relevant supervisory authority within 72 hours, and affected individuals if necessary.
- Under Ukrainian Law: In accordance with the Law of Ukraine “On Personal Data Protection” and the recommendations of the Ukrainian Parliament Commissioner for Human Rights (Ombudsman), we will notify the Commissioner and other relevant authorities without undue delay if a breach may lead to the violation of individuals’ rights and freedoms.
We will also inform affected data subjects as soon as reasonably possible, explaining the nature of the incident, the types of data involved, and actions they can take to protect themselves.
We are constantly reviewing our Privacy Policy to ensure compliance with data protection legislation. Our apps are also constantly evolving and new features and services may change how we process your personal data. Any substantive or material change to this Privacy Policy will be brought to your attention.
In the event of material changes relating to Personal Data, we will notify Users, Clients, and Consultants by posting a notice on the Website and/or by sending an informational email. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your Personal Data.
If you have opted out of receiving email notifications regarding changes to our legal documentation, you remain solely responsible for reviewing and familiarizing yourself with such changes.
Following amendments to this Privacy Policy, we may require Users, Clients, and Consultants to provide renewed consent to the updated version. Unless otherwise stated, all amendments shall become effective thirty (30) days after the publication of the revised version of this Privacy Policy.
Our electronic or otherwise stored copies of this Privacy Policy shall be deemed to be the authentic, complete, valid, and enforceable version of the Policy in effect at the time of your interaction with the Website. Updates will be published on this page with a new “Last Updated” date.
If you have any questions regarding this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us at:
Ganex Group
Ukraine, 03680, Kyiv, Antonovycha Street 172, Office 914
Email: info@ganex-group.com
Contact: +38 044 299-22-72