Consent to the processing of personal data

Scope of application

This General Privacy Statement (“General Privacy Statement”, “General Statement” or “Statement”) is issued on behalf of Fin Bureau outsourcing companies, which consist of different legal entities operating in several countries. The organization that will control your data depends on where your personal data is processed.

The Fin Bureau outsourcing company with which you interact in a specific situation - for example, an outsourcing company that has a contractual relationship with you or with the company you represent, or an outsourcing company that you visit, makes decisions regarding your personal data (acts as data controllers in relation to you). You can find the contact details of the data controller in your specific situation, as well as the data protection contact details at the end of this Statement.

When the Statement refers to "Fin Bureau", "we", "us", "our" or "our", it refers to the relevant Fin Bureau outsourcing company that is responsible for the processing of your personal data. This General Statement should provide you with information about how we collect and process your personal data, to whom the data is provided, how long it is stored and what your rights are in relation to your personal data. This Statement applies to the processing of personal data. Personal data is information that can be linked to you, either directly or indirectly. Data relating to a natural person who represents a company or acts on behalf of a company - for example, a managing director - is also personal data. Information about a company that does not relate to any natural person is not personal data.

As FinBureau processes personal data in various situations involving several stakeholders, we have prepared some additional statements that complement this General Statement and provide more detailed information on a specific situation. These specific statements can be found by clicking on the relevant headings here. However, if there is any discrepancy between the General Statement and the additional statement, the latter will prevail.

Collection of personal data We may collect your personal data in various ways. You may provide information yourself through direct interaction with us, or the data may be generated when you use our services. We may also create data based on the information we have about you. Your personal data may also be obtained from other outsourcing companies or external third parties, including publicly available sources.

We may combine data collected about you from publicly available sources, as well as data collected as a result of our interactions with you - for example, in the case of providing services or marketing communications. You are not obliged to provide us with any personal data, but such a refusal may have different consequences depending on the circumstances. For example, we may not be able to provide you with the services or fulfill your request. Categories of personal data


We may process different types of your personal data depending on the situation.

The categories and scope of the data are always limited to what is necessary for the purposes for which the data are processed. The categories of personal data in a specific case of processing are described in detail in the relevant supplementary statement.

We may also process personal data for statistical purposes - that is, the information is aggregated in such a way that no individual can be identified. Such data is not considered personal data, as this data cannot be linked to you. As a rule, we do not process special categories of personal data, such as information about your health. However, in limited cases, such data may be processed provided that the processing is carried out in accordance with applicable law and that you have been informed about this.

Purpose and legal basis for processing personal data We collect, process and use only those personal data that are necessary for operational purposes, effective customer service and relevant commercial activities, including processing personal data to anonymize them. We use your personal data only for legitimate and clearly defined purposes and will not process the data in a way that is incompatible with those purposes.

The purposes of processing for a specific case are described in detail in the relevant supplementary statement. We always have a legal basis for processing your personal data, which we inform you about. Typically, we process your personal data for the performance of a contract or contractual relationship that we have with you or the company you represent, or in order to enter into such a relationship.

We may process personal data to fulfill our obligations under the law - for example, for accounting purposes, to carry out a sanction check, or to comply with requests from public authorities (e.g. tax authorities). In addition, you may have given your consent to the processing of your personal data for one or more specific purposes. This is typical for activities carried out to promote our business or services, for example in marketing campaigns or social media campaigns. You will always be informed of the purposes of the processing with all necessary details before we ask for consent. Personal data may also be processed on the basis of our legitimate interests (or the interests of a third party) provided that such interests are not overridden by

Your basic rights.
For example, we combine data collected about you from different sources, or we process personal data to provide services, to develop our business or for internal reporting. In these cases, the processing of personal data is based on our legitimate interest in being efficient and competitive and having relevant information to better understand our customers and better manage our business.
Data sharing and disclosure of personal data

We may share your personal data with other outsourcing companies within the limits set by applicable law and for the purposes specified in this statement, including the development of services and the marketing of our products and services. Fin Bureau outsourcing companies may share personal data for internal administrative purposes - in particular, as part of our reporting on the company's performance and for the implementation of centralized solutions - for example, for use in the maintenance of information and communication systems and data hosting. The exchange of personal data is carried out on the basis of our legitimate interests in ensuring and developing efficient business processes and for managing customer relationships, as well as informing our customers about the relevant services of other outsourcing companies. We may also disclose

Your personal data to third parties when:
●     this is permitted or required by law, e.g. to comply with requests from competent authorities or in connection with legal proceedings;
●     our trusted service providers process personal data on our behalf and in accordance with our instructions or when we process personal data together with a partner for jointly defined purposes in accordance with this Statement. We control and are responsible for such processing of your personal data;
●     when we obtain services from our providers as part of internal processes (e.g. during recruitment), to run or support our business (e.g. social media campaigns) or to provide you with relevant services. In these cases, our service provider is responsible for the lawfulness of the processing of personal data;
●     we are involved in a merger, acquisition or sale of all or part of our assets;
●     we assess that disclosure is necessary to enforce or protect our rights, such as responding to legal requirements, ensuring your safety or the safety of others, investigating fraud or responding to a request from a government;
●     there is a legitimate interest in disclosing the information - for example, if we are organizing a joint conference or event with a third party, provided that we have notified you of such a data exchange; and●    You have consented to the disclosure of the data, but only to the parties to whom you have agreed to provide this data. Please note that from time to time our service providers may use personal data processed on our behalf and in connection with the provision of the services for their own independent purposes - for example, for service development, training artificial intelligence, for statistics or to comply with their legal obligations.

Fin Bureau makes every effort to ensure that this further processing is not incompatible with the initial purposes of processing personal data. In such a case, the relevant service provider is responsible for the lawfulness of the data processing. Transfer of personal data outside the EU or EEA The personal data we process are mainly located in the EU or the European Economic Area. However, we may transfer your personal data outside these areas if our partner or service provider who processes the personal data is located in whole or in part (for example, in terms of technical administration) in a third country. Personal data may also be transferred to third countries in situations where the service provider is required to do so by mandatory legislation of non-EU countries. In these cases, we will take the necessary measures to ensure appropriate safeguards for international data transfers and, if necessary, implement additional measures to protect personal data as required by applicable law.

This means that
●     personal data are only transferred to countries which, in the opinion of the European Commission, ensure an adequate level of protection of personal data (“adequate protection countries”). For more information, see Adequacy decisions | European Commission (europa.eu)
●    with service providers located outside countries with an adequate level of protection, or who otherwise do not meet the requirements of an Adequacy Decision, we will use specific contractual clauses approved by the European Commission and implement the necessary technical, organizational or contractual additional measures to ensure the protection of personal data as in the EEA. For more information, see Standard Contractual Clauses (SCC) | European Commission (europa.eu) In limited cases - for example, when you participate in FinBureau marketing campaigns or social media campaigns, the transfer of personal data to a third country may be based on your explicit consent. In such cases, you will be provided with detailed information about the transfer and the risks involved in it in advance.

Please contact us at office@FinBureau.com if you require further information about the specific mechanisms we use to transfer your personal data outside the EEA. Retention of personal data Your personal data will be retained for as long as is necessary to achieve the purposes for which it is processed, including to meet any legal, accounting or reporting requirements, and for the purposes set out in this Statement.

We have set retention periods for all personal data we hold about you. When determining such periods, we have taken into account various factors, such as the nature and sensitivity of the personal data and the purposes for which they are processed. Your personal data processed on the basis of a contractual relationship with you or with the company you represent is generally stored for the duration of the contractual relationship or for as long as necessary to provide the services.

After the end of our relationship or the provision of the services, we generally retain the personal data necessary to protect our legitimate interests, which allow us to respond to inquiries or claims in accordance with applicable statutes of limitations.

We may also retain your personal data to the extent necessary to comply with your request to opt out of receiving direct marketing from us. Personal data processed on the basis of legitimate interests is processed for as long as there are grounds for processing it.

If you object to such processing, the data will be erased after your request has been confirmed. An example of such processing falling under legitimate interests is direct marketing. If personal data is processed on the basis of a legal obligation, it is retained for as long as required by law. Obligations to store personal data are established, in particular, by accounting and anti-money laundering laws. The retention period for personal data processed with your consent is determined in accordance with the purposes of the processing. Your rights Your rights and options regarding personal data depend on the purposes of the processing and your specific situation. Right of access - You have the right to obtain confirmation as to whether your personal data are being processed and, if so, to access the data.

This allows you to obtain information on how we process your data and to obtain a copy of the personal data we hold about you in our registers. Right to rectification - You have the right to have your personal data rectified or, in certain cases, to have defective personal data completed. Right to object to processing - You have the right to object to the processing of your personal data which is based on the legitimate interests of Fin Bureau or a third party, where your particular situation overrides such interests. We may refuse your request if the processing is necessary for the performance of obligations and legitimate interests.

You always have the right to object to the processing of your personal data for direct marketing purposes and for profiling. Right to data portability - You have the right to receive your personal data that you have provided to us for processing based on your consent or for the performance of a contract. In such cases, we will provide you or a third party you have chosen with your personal data in a structured, commonly used and machine-readable format.

Right to be forgotten - You can ask us to erase your personal data in cases where there are no compelling reasons for continuing the processing - for example, if you consider the personal data unnecessary for the purposes described above, or you withdraw the consent you have given.

Right to restriction of processing - You have the right, under certain circumstances, to require Fin Bureau to restrict the processing of your personal data - for example, for a period necessary to verify the accuracy of your personal data. Right to provide and withdraw your consent - If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

We may need certain specific information from you in order to confirm your identity and ensure that you are entitled to exercise your rights. You can exercise your rights by sending us the above requests to office@FinBureau.com. If you believe that the processing of your personal data is not appropriate, you have the right to contact the supervisory authority that oversees data protection in your country. Information security

We take appropriate security measures (including physical, technical, electronic and administrative) to protect personal data against loss, destruction, misuse and unauthorized access or disclosure. In particular, we limit access to personal data and provide it only to those authorized employees and service providers who need to know the information in the performance of their jobs.

They will only process your personal data in accordance with our instructions and they are required to maintain confidentiality. Please note that while we try to take appropriate security measures to protect personal data, no security system can prevent all potential security breaches.

If a security breach occurs, we will notify you in accordance with applicable law. Changes to this Statement We may update this Statement at any time as necessary to reflect changes in our data processing practices. You can find the latest version on our website.

This Statement was last updated on October 23, 2025.

This Privacy and Cookie Statement for Site Visitors (“Cookie Statement for Site Visitors”)
describes how Fin Bureau collects and processes your personal data and uses cookies in connection with your use of any of Fin Bureau’s outsourcing company websites – in particular, FinBureau.com.ua or certain product or service-specific websites (“Site”).

That is, when you
●     visit the Site, or
●     communicate or interact with us through the Site – for example, upload materials, subscribe to our newsletter, participate in an advertising campaign or send feedback. Please read this Cookie Statement for Site Visitors – if applicable, together with Fin Bureau’s General Privacy Statement – ​​before visiting our website. To learn more about cookies, see See the section "Use of cookies during data processing" in this Statement. Collection of personal data We collect your personal data in various ways. First of all, we collect and process data that:
●     is provided by you when you communicate with us, for example, via chat, or when you interact with us by subscribing to our newsletter, sending us a request for a commercial offer or providing us with information through feedback forms on the site;
●     is generated when you visit our site or use services available on the site - for example, viewing or downloading information or using the search function on the site;
●     is obtained from publicly available sources or from third parties, if permitted by applicable law - for example, the Trade Register or technical data from analytics service providers, advertising networks and search engines. We may combine data collected about you from publicly available sources, as well as through various ways of interacting with you - for example, via e-mail or actions on the site. You can refuse to provide any personal data, but this may affect the functionality of our site, or we will not be able to take certain actions to fulfill your request. Categories of personal data The personal data that we collect and process on our site include the following categories of data:
●     basic data - such as name, position, relationship to the company you represent, contact details (e-mail, address and telephone) or other identifiers;
●     data related to marketing and communication - for example, your interests, preferences, choices, permissions and prohibitions to receive marketing materials; ●     Your actions and records - correspondence, your comments or responses to our surveys;
●     personal data generated in connection with the use of our services or collected when visiting our site using cookies or otherwise - for example, user IDs, passwords, authentication data and how you use our site or our services;
●     technical data about your browsing - in particular, login, language, ID and type of your device, operating system, application settings, and other data collected using cookies and similar technologies, as well as
●    other data collected with your consent, which is discussed in detail for each specific case. We may collect and use aggregated data for any purpose, through which no natural persons can be identified. Examples of such data may be statistics or website traffic data. Purpose and legal basis for processing personal data We collect and process only those personal data that are necessary to interact with you and for other relevant operational or commercial purposes, including processing personal data for the purpose of anonymizing them. Your personal data may be processed for the purpose of:

1. RELATIONSHIP WITH YOU
The main purpose of processing personal data is to maintain the relationship between us and you or the company you represent, which includes responding to your actions, requests to leave feedback or provide a response. In these cases, the basis for processing data is a contract between you or the company you represent and us, or our legitimate interests to serve you based on your preferences and to provide you with the best possible service.

2. MARKETING AND ANALYTICS

We may process data for marketing purposes and to inform you about Fin Bureau services. We may combine data collected about you from publicly available sources, as well as as a result of interaction with you. In addition, your personal data may also be used for market research and customer surveys. The basis for processing personal data is our legitimate interests in collecting and analyzing relevant information to better understand our customers and develop relevant services. Based on your consent, we may store information and access information, including personal data, on your device to create a personalized advertising profile and display relevant content on the site (for example, information and advertising about Accountant services), as well as to evaluate the effectiveness of advertising. Accordingly, your personal data may also be processed for the development and improvement of the site or for the improvement of our services or the services of our partners.

3. SITE ADMINISTRATION, INFORMATION SECURITY AND INTERNAL REPORTING
We process personal data for the administration of the site, including for the posting of content, as well as for the purpose of preventing and eliminating failures. Your personal data may be used to ensure the information security of the site and any services provided, including to prevent possible fraud and conduct relevant investigations. We may also generate internal reports for management purposes based on personal data. In these cases, the processing is justified by our legitimate interests in conducting business effectively and ensuring adequate protection of the site and the services we provide. Our legitimate interests also extend to collecting and analyzing information necessary for the development of our activities - for example, to improve the functionality of the site. Based on your consent, we may process personal data for relevant calculations and for reporting - for example, for statistical reporting on the use of our site.

4. COMPLIANCE WITH LAW
We process your personal data in order to fulfill our legal obligations - for example, to comply with requests from public authorities.

5. COLLECTION OF DATA FOR ANOTHER PURPOSE WITH YOUR CONSENT
We may also process your personal data for any other specific purpose or for several purposes if you have consented to such processing. The processing of data about your browsing of the website and the corresponding preferences, as well as the transfer of such data to designated third parties, is primarily based on your consent. Use of cookies during data processing We use cookies and other similar technologies (“cookies”) on the website.

Cookies are small text files that are placed on your device to collect and store useful information, display relevant content, ensure the functionality of our website and provide us with information about your use of the website. Cookies may be placed by the website itself, specified in the domain address, or by third parties with your consent for the purposes of which you have been informed. Such third parties may be, for example, marketing networks, analytics providers or social networks. Third parties may transfer data collected through cookies outside the EU or EEA. Information about the cookies used on a specific website is available through the cookie management platform on each website, if available. Click on the cookie settings icon on the website you are visiting. We use the following categories of cookies on our website, which are broadly described below:

STRICTLY NECESSARY COOKIES
These cookies are essential for the operation of the website and cannot be switched off. They are usually only used when you access the site or use features that generate service requests, such as setting data protection settings, logging in or using feedback forms. You can set your browser to block or warn you about such cookies. However, if you do this, some parts of the site may not function. The processing of personal data is based on our interest in ensuring the proper functioning of the site with all necessary functions.

STATISTICAL COOKIES
The use of statistical cookies allows us to track the number of users and traffic sources in order to measure the effectiveness of advertising and content provided on the site. They help us determine which pages are more and less popular, as well as how users navigate the site or interact with advertising and content. If you do not agree to the placement of these cookies, we will not learn, in particular, when you entered our site or which page you visited.

MARKETING COOKIES Functional cookies allow us to provide better and more personalized services, such as video, real-time chat or targeted advertising. Data collected using functional cookies may also be used to improve the functionality of the site or to improve and develop the services provided. Such cookies may be set by us or by third parties whose services are presented on our site. If you do not accept such cookies, some or all features of the site may not work properly.

COOKIES RELATED TO ADVERTISING AND SOCIAL MEDIA
These cookies are placed on our website or in our services by our advertising partner or social media service provider. They allow these companies to create a personalized advertising profile for your interests and show you advertising or content on social media accordingly. Sometimes the information collected can also determine the content of the sites and the content of the messages you send on other sites. If you do not accept cookies, you will not see advertising on various websites, or you may not be able to share information on social media. In most cases, detailed information about specific cookies, clearly defined processing purposes and third-party cookies is available on the Cookie Management Platform, where your consent to the placement of cookies is required.

STORAGE OF COOKIES
Cookies remain on your device until their storage period expires or until you delete them. Cookies on your device are divided into two categories according to their storage period: Session cookies Session cookies are used to remember your browsing preferences. They are set for each session, i.e. they are valid until you close the browser. Such cookies are not stored on your device's hard drive.

Persistent cookies Persistent cookies are usually used for targeted advertising or to obtain information about how you use our site. Persistent cookies are stored on your hard drive between browser sessions until you delete them or until their storage period expires. Information about the cookies used on a specific website is available through the cookie management platform on each website, if available. Click on the cookie settings icon on the website you are visiting.

COOKIE MANAGEMENT
You can accept or decline cookies and change your preferences using the Cookie Management Platform on our website where available. To view or change your cookie consent, click the privacy settings icon on the website you are visiting.

You can always disable cookies or clear your cookie history for all websites you visit in your browser settings. Typically, the navigation settings related to cookies are located in the menu of the browser you use to access our website: in the "Options", "Tools", "Settings" or "Preferences" sections.

Accepting cookies will allow you to use our website to the fullest. If you refuse cookies, some aspects of the website may not work on your device and you may not be able to access all of its sections. We regularly ask you for your consent to the placement of cookies wherever possible, and whenever changes have been made to them. Links to third-party resources

Our site may contain links to third-party websites, plug-ins and applications. You can manage third-party cookies through your browser settings or, where available, through the Cookie Management Platform on our site.

Clicking on any third-party links or allowing such connections may allow third parties to collect or transfer data about you. These third parties usually base their processing of your personal data on their legitimate interests. We do not control third-party websites and are not responsible for their data processing methods. Third parties may transfer data collected through cookies outside the EU or EEA.

Please check the relevant information about data processing by third parties on their websites. Marketing communication

We send commercial emails that may contain certain technologies (web beacons, cookies, etc.) that allow us to know what you do with the message (whether you open it, read it, etc.), as well as links that you may click on. When you click on a link in our email, we will also use a cookie to record which pages you view and which content you download from our site.

You can control the use of your personal data for direct marketing purposes. You can ask the Accountant to stop sending you marketing messages by clicking on the unsubscribe links in any marketing message sent to you or by contacting us at office@FinBureau.com at any time.

We respect your choice, and in such a case we will keep your personal data to a minimum so as not to disturb you any further. Please note that even if you opt out of direct marketing, we may need to contact you again for some other purpose related to the processing of your personal data.

Changes to the Privacy and Cookie Statement We may update this Privacy and Cookie Statement at any time if necessary to reflect changes in our data processing practices. The last such update was on October 23, 2024.