Privacy Policy of the insurance service

Version of 18 October 2026

1. General provisions

1.1. This Privacy Policy (hereinafter: "Policy") defines which personal data is processed when the insurance service at https://yrin.com/insurance/ (hereinafter: "Service") is used, for what purpose, on what grounds, to whom it is transferred and for how long it is stored, as well as the rights of the persons whose data is processed.

1.2. The Policy applies to the Service only. Data processing on other pages of the website https://yrin.com is not covered by this Policy.

1.3. Personal data controller: individual entrepreneur Ihor Andriiovych Balaban, Ukraine, Kyiv, 38B Shota Rustaveli St., office 12; e-mail igor@yrin.com; telephone +38 (044) 232-50-60 (hereinafter: "Operator"). The Operator is an insurance intermediary (sub-agent), entry No. 00027719 in the Register of Insurance Intermediaries of the National Bank of Ukraine.

1.4. The Policy is an integral part of the Public Offer of the Service. Information on the insurance intermediary, the insurance agents and the Insurers is set out in the Insurance Intermediary Information.

1.5. The Operator processes personal data in accordance with the Law of Ukraine "On Protection of Personal Data".

2. Which data is processed

2.1. When submitting an application in the Service, the User enters the following data:

• interface language, type and term of the policy, its start date, the price displayed to the User;
• surname and first name (in Latin letters), sex, date of birth, citizenship;
• passport number (for a foreigner: foreign passport number);
• address: for a D/C visa policy, an address abroad (country, city, street and building), for a temporary residence permit (TRP) policy, an address in Ukraine (locality, street, building, apartment);
• telephone number, e-mail address, the chosen messenger (Telegram, Viber or WhatsApp) and the telephone number for the messenger;
• for a TRP policy, if delivery by Nova Poshta is chosen: locality and branch or parcel locker, and the recipient's surname, first name and telephone number;
• consents and confirmations given by the User in the form, with a record of the date and time the application was submitted and of the version of the text of the consents.

2.2. The Service does not collect the taxpayer identification number (RNOKPP), files or photographs, free text, or data on vehicles. The insured person under one Order is one person: the applicant.

2.3. Technical data. When an application is submitted, the server receives the User's IP address and browser data. The IP address is used to limit the frequency of requests (protection against abuse) in the form of a hash and is not included in the application data sent to the Operator. The hosting provider may keep its own access logs for the website.

2.4. The Operator does not receive bank card data: the Service does not accept payments.

3. Purpose and grounds of processing

3.1. Data is processed for the following purposes:

• calculation of the cost and preparation of a draft insurance contract in the Insurer's information system;
• sending the User the draft policy and the payment link to the e-mail address indicated by the User;
• communication with the User about the Order using the contact details indicated by the User;
• delivery of the policy by Nova Poshta, if the User has chosen it;
• compliance with the requirements of the legislation on insurance activity;
• protection of the Service against abuse and fraud.

3.2. Grounds for processing: the User's consent, given by ticking the relevant boxes in the form before the application is submitted; the necessity of concluding and performing an insurance contract to which the User is a party; compliance with obligations established by law.

3.3. The User separately consents to the processing of their personal data, including passport data, and to the receipt of the draft contract and the invoice for payment at the contact details indicated. Without these consents the application cannot be submitted.

4. To whom data is transferred

4.1. The Operator receives the application data at its e-mail address and in the Telegram messenger (the Operator's service chat). The message contains the application data, in particular the passport number.

4.2. Insurer. The data necessary to issue the policy is entered by the Operator into the Insurer's information system (the portal of JSC "Insurance Company "BBS INSURANCE", EDRPOU code 20344871): surname and first name, date of birth, passport number, sex, citizenship, telephone, e-mail, address, policy parameters. The Insurer then processes this data as an independent controller under its own policy and the insurance contract.

4.3. Insurance agent. Contracts with JSC "Insurance Company "BBS INSURANCE" ordered through the Service are concluded through the insurance agent, individual entrepreneur Kostiantyn Serhiiovych Sabodazh (registration number in the Register of Insurance Intermediaries 00000574). The User consents to the transfer of data to this agent and to the Insurer in the text of the consent in the form. Information on other insurance agents is set out in the Insurance Intermediary Information.

4.4. Nova Poshta. When the address is filled in and a branch is chosen, only search strings (the name of the locality or street) and technical identifiers are sent to the Nova Poshta service. The User's personal data (surname, telephone, passport, date of birth) is not transferred by this request. The recipient's data (surname, first name, telephone, branch) is used by the Operator to arrange dispatch of the policy, if the User has chosen delivery.

4.5. Service providers. For the operation of the Service, the Operator uses hosting, e-mail and Telegram messenger services, through which the application data passes or in which it is stored.

4.6. Other persons. Personal data may be transferred to state authorities in the cases and in the manner provided for by the legislation of Ukraine.

4.7. The Operator does not sell personal data, does not use it for advertising and does not transfer it to third parties for marketing purposes.

5. Automated decision-making and artificial intelligence

5.1. The Service does not use artificial intelligence technologies to process application data. The cost of the policy is calculated by software according to tariffs, without profiling of the User.

6. Transfer of data outside Ukraine

6.1. The server on which the Service runs is located in the territory of Ukraine.

6.2. The Service's traffic passes through the Cloudflare network, whose servers may be located outside Ukraine.

6.3. To send application data to the Operator and letters to the User, Gmail e-mail (Google) and the Telegram messenger are used, the infrastructure of which is located outside Ukraine. The User agrees to this by submitting the application.

6.4. The Service carries out no other transfers of data outside Ukraine.

7. Retention periods

7.1. Application data is stored for as long as is necessary to achieve the purpose of processing specified in clause 3.1 and to comply with the requirements of the legislation, after which it is deleted or anonymised.

7.2. The application queues on the Service's server are cleared automatically: application files older than 30 days are deleted, and the check is performed once every 10 days.

7.2.1. Copies of the application data in the Operator's e-mail and Telegram, and in its working archives, are deleted by the Operator monthly: data of applications placed more than 30 days ago is deleted.

7.3. Data transferred to the Insurer and to the insurance agent is stored by them independently in accordance with their policies, the insurance contract and the legislation.

8. Cookies

8.1. The Service uses one technically necessary session cookie (YRIN_INSURANCE). It stores only the session identifier needed for the operation of the form and protection against forged requests, is not used for analytics or advertising and is deleted when the browser is closed.

8.2. The Service does not use analytics or marketing cookies, tracking tools, or scripts, fonts, maps or other resources of third parties. While the form is being filled in, the application data is kept only in the memory of the page and is not written to the browser's local storage.

9. Rights of the personal data subject

9.1. In accordance with Article 8 of the Law of Ukraine "On Protection of Personal Data", a person whose data is processed has the right to:

• know about the sources of collection and the location of their personal data, the purpose of its processing and the persons to whom it is transferred;
• receive information on the conditions of granting access to their data and on the third parties to whom it is transferred;
• access their personal data;
• demand that their personal data be changed or destroyed if it is processed unlawfully or is inaccurate;
• make a reasoned demand objecting to the processing of their data;
• use legal remedies in the event of a breach of the legislation on the protection of personal data, including filing a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court;
• withdraw consent to the processing of personal data.

9.2. To exercise your rights, send a request to igor@yrin.com stating your surname, first name, the Order number (if known) and the substance of the demand. The request is considered within 30 calendar days.

9.3. Withdrawal of consent. The User may withdraw consent to the processing of their data by a letter to igor@yrin.com. Withdrawal of consent does not affect the lawfulness of processing before the moment of withdrawal and does not extend to data that the Insurer and the insurance agent process on their own grounds (in particular under a concluded insurance contract). After consent is withdrawn, placing new Orders through the Service is not possible.

10. Data protection

10.1. The Operator takes organisational and technical measures to protect personal data against loss, unlawful access and disclosure. Access to application data is available only to the Operator and persons engaged by it to service the Service.

10.2. The Service page is displayed with browser security restrictions: loading of third-party scripts and resources is prohibited.

11. Changes to the Policy and contacts

11.1. The Operator has the right to amend this Policy. The new version takes effect from the moment it is published at https://yrin.com/en/immigration-prawo/temporary-residence-permit-in-ukraine/insurance-privacy.

11.2. This document is drawn up in Ukrainian. If versions in other languages are published, the Ukrainian version prevails.