Skip to main content

Privacy Policy

Effective date: May 2026 Last updated: May 2026

This Privacy Policy (hereinafter — "Policy") explains how PROFIT MEDIA SOLUTIONS GROUP LLC (identification code 46015458), the founder of the online media Gosta Media (hereinafter — "we", "Portal"), collects, uses, stores, and protects the personal data of users of the website gosta.ua.

We respect your privacy and are committed to protecting your personal data in accordance with the Law of Ukraine "On Protection of Personal Data", Regulation (EU) 2016/679 (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller

PROFIT MEDIA SOLUTIONS GROUP LLC Identification code: 46015458 Address: 8-D Puhachova Vadyma St., office 8, Kremenchuk, Poltava region, 39623, Ukraine Privacy inquiries: legal@gosta.ua

2. What Data We Collect

2.1. Data You Provide Directly

  • Email address — when subscribing to our newsletter or filling out a contact form.
  • Contact form data — name, email address, message text.
  • Comments — comment text, automatically assigned nickname.

2.2. Data Collected Automatically

  • IP address — to support comment functionality (nickname association) and Portal security.
  • Cookie data — functional, analytical, and marketing cookies (see our Cookie Policy for details).
  • Device and browser data — device type, operating system, browser type, screen resolution.
  • Portal interaction data — pages viewed, time spent, referral source.

2.3. Data We Do NOT Collect

We do not collect passport data, financial information, health data, or other sensitive categories of personal data. The Portal does not offer user account registration.

3. Purpose and Legal Basis for Processing

  • Purpose: Responding to contact form inquiries; Data: Name, email, message text; Legal Basis: Consent (Art. 6(1)(a) GDPR)
  • Purpose: Newsletter and updates; Data: Email; Legal Basis: Consent (Art. 6(1)(a) GDPR)
  • Purpose: Comment functionality; Data: IP address, nickname, text; Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
  • Purpose: Automated comment moderation; Data: Comment text; Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
  • Purpose: Analytics and Portal improvement; Data: Cookies, device data, behavior; Legal Basis: Consent (Art. 6(1)(a) GDPR)
  • Purpose: Marketing analytics; Data: Cookies (Facebook Pixel); Legal Basis: Consent (Art. 6(1)(a) GDPR)
  • Purpose: Portal security, abuse prevention; Data: IP address, device data; Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)

4. Automated Processing

The Portal uses automated tools to moderate comments. These tools check comment text for spam, profanity, and other prohibited content in accordance with our Community Guidelines.

Automated moderation does not make decisions with legal consequences for users. You have the right to contest the results of automated processing by contacting contact@gosta.ua.

5. Third Parties and International Data Transfers

We share personal data with third parties solely for the purposes described in this Policy. Below is a list of third parties that receive access to data:

  • Service: Google Analytics 4; Purpose: Visit analytics; Data Type: Cookies, device data, behavior; Processing Country: USA; Safeguard: Standard Contractual Clauses (SCC)
  • Service: Google Signals; Purpose: Cross-device analytics; Data Type: Cookies, identifiers; Processing Country: USA; Safeguard: SCC
  • Service: Facebook Pixel; Purpose: Marketing analytics; Data Type: Cookies, device data; Processing Country: USA; Safeguard: SCC
  • Service: Ahrefs; Purpose: SEO analytics; Data Type: Cookies, visit data; Processing Country: Singapore; Safeguard: SCC
  • Service: Hotjar; Purpose: Behavior analysis; Data Type: Cookies, mouse movement, clicks; Processing Country: Ireland (EU); Safeguard: Within EEA

Data transfers outside the EU/EEA are carried out using Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of personal data protection.

6. Data Retention Periods

  • Data Type: Email (subscription); Retention Period: Until unsubscription
  • Data Type: Contact form data; Retention Period: 12 months from receipt
  • Data Type: Comments and associated IP addresses; Retention Period: For the lifetime of the material
  • Data Type: Analytical cookies (GA4); Retention Period: 14 months
  • Data Type: Marketing cookies (Facebook Pixel); Retention Period: 90 days

After the retention period expires, data is deleted or anonymized.

7. Data Security

We implement organizational and technical measures to protect personal data from unauthorized access, loss, destruction, or alteration, including:

  • SSL/TLS encryption for data transmission.
  • Restricted access to personal data on a need-to-know basis.
  • Regular review and updating of security measures.

8. Children

The Portal is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected a child's data, please contact legal@gosta.ua and we will promptly delete such data.

9. Your Rights (Law of Ukraine "On Protection of Personal Data")

Under Ukrainian law, you have the right to:

  • know about the sources, location of your personal data, and the purpose of their processing;
  • receive information about the conditions of access to personal data;
  • access your personal data;
  • request modification or deletion of your personal data;
  • make reservations regarding the restriction of your personal data processing rights;
  • contest personal data processing;
  • take legal action in case of violation of personal data protection legislation.

10. Additional Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights:

  • Right of access (Art. 15) — obtain confirmation of processing and a copy of your data.
  • Right to rectification (Art. 16) — request correction of inaccurate data.
  • Right to erasure (Art. 17) — request deletion of data ("right to be forgotten").
  • Right to restriction of processing (Art. 18) — request restriction of processing under certain circumstances.
  • Right to data portability (Art. 20) — receive your data in a structured format.
  • Right to object (Art. 21) — object to processing based on legitimate interest.
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing prior to withdrawal.
  • Right to lodge a complaint — with a data protection supervisory authority in your country.

To exercise these rights, contact legal@gosta.ua. We will respond to your request within 30 days.

11. Additional Rights for UK Residents (UK GDPR)

If you are located in the United Kingdom, you have the same rights as outlined in Section 10, under the UK GDPR and the Data Protection Act 2018. The supervisory authority is the Information Commissioner's Office (ICO): ico.org.uk.

12. Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of the State of California (USA), you have rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to know — what categories of personal data we collect, for what purposes, and to which third parties we disclose them.
  • Right to delete — request deletion of your personal data.
  • Right to opt out of "sale" or "sharing" of data — certain analytics and marketing technologies (including Facebook Pixel) may qualify as "sharing" of data under CCPA. You may opt out by managing cookie settings on the Portal or by contacting legal@gosta.ua.
  • Right to non-discrimination — we do not limit the quality of services in response to the exercise of your rights.

Categories of data we collect: identifiers (email, IP address), internet activity data (pages viewed, cookies).

We do not sell personal data in the traditional sense. However, the use of analytical and marketing cookies may qualify as "sharing" under CCPA.

13. Data Breach Notification

In the event of a personal data breach that may result in a risk to your rights and freedoms, we will:

  • notify the relevant supervisory authority within 72 hours of becoming aware of the breach (in accordance with Art. 33 GDPR);
  • notify affected individuals without undue delay if the breach poses a high risk (Art. 34 GDPR);
  • document the breach and the measures taken.

14. Cookies

The Portal uses cookies. For detailed information about cookie types, their purposes, retention periods, and instructions for managing cookies, see our Cookie Policy.

15. Changes to This Policy

We may update this Policy to reflect changes in our data processing practices or legal requirements. The updated version will be published on this page with the date of the last revision indicated.

16. Contact

For questions regarding this Policy, exercising your rights, or any other matters related to personal data protection, please contact:

Email: legal@gosta.ua

Mailing address: PROFIT MEDIA SOLUTIONS GROUP LLC, 8-D Puhachova Vadyma St., office 8, Kremenchuk, Poltava region, 39623, Ukraine

Privacy Policy | Gosta