COOKIE POLICY

1. General Provisions

1.1. This Cookie Policy (the “Policy”) explains the use of cookies and similar technologies in connection with https://vpk-mac.com, including its Ukrainian- and English-language pages, contact forms and investment enquiry pages (the “Website”). It should be read together with the Website Privacy Policy.

1.2. The operator of the Website (the “Company”, “we”, “us” or “our”) is the legal entity identified as the Website’s data controller in Section 2 of the Privacy Policy and in the Legal Notice / Company Information. MAC HUB is a commercial designation under which information about different companies, products and business directions may be presented; this does not make those companies a single legal entity.

1.3. We apply the Ukrainian Law “On Personal Data Protection” No. 2297-VI to the processing of personal data. Where relevant to a particular activity, we also observe the rules of Directive 2002/58/EC (the “ePrivacy Directive”), as implemented under applicable national law, and Regulation (EU) 2016/679 (the “GDPR”). These legal instruments have distinct territorial and material scopes. The Website’s mere accessibility in the EU does not, by itself, make every EU privacy rule applicable to every processing operation.

1.4. This Policy addresses technologies used on visitors’ devices. Details of the purposes and legal bases of personal-data processing, recipients, international transfers, retention and individuals’ rights are set out in the Privacy Policy. Nothing in this Policy limits statutory rights or permits processing prohibited by applicable law.

2. Cookies and Similar Technologies

2.1. Cookies are small text files or identifiers stored by a browser or device and subsequently read when the Website is visited. Some are deleted when the browser session ends; others remain for a defined period unless deleted earlier.

2.2. Comparable technologies may include local or session storage, software development kits, scripts, pixels, device identifiers and certain forms of device recognition. Where they involve storing information on, or gaining access to information from, a visitor’s device, they may be subject to the same consent requirements as cookies under applicable electronic-privacy law.

2.3. First-party cookies are set in connection with the Website’s own domain. Third-party technologies may be operated by external service providers or embedded content providers. The legal consequences depend on the actual technology, purpose and processing arrangement, not merely on its name or whether it is first-party.

2.4. Ordinary server-side technical logs and the processing of IP addresses do not automatically constitute the placement of cookies, although they may involve personal data and are therefore addressed in the Privacy Policy where relevant.

3. Categories of Cookies

3.1. Strictly necessary technologies. These support functions genuinely required to transmit communications or provide a feature expressly requested by the visitor. Depending on the actual configuration, they may be used for security, load distribution, protection against misuse, completion of a requested form, or remembering a visitor’s cookie choice. Consent is not required only where the relevant legal exemption is satisfied; describing a technology as “functional” does not by itself make it exempt.

3.2. Preference or functional technologies. These may remember optional settings or enhance convenience. Where they are not strictly necessary for a requested service, their use is subject to prior consent if required by applicable law.

3.3. Analytics technologies. These may measure visits and use of Website pages to understand performance. They are not presumed necessary merely because they serve internal statistics. They will be enabled only where the applicable consent requirements are met, unless a specific, properly verified exemption applies under the relevant national rules.

3.4. Marketing and cross-site tracking technologies. Such technologies may be used to build profiles, attribute advertising or track activities across different services. Their presence is not presumed by this Policy. If introduced, they will be disclosed and made subject to the applicable prior-consent and data-protection requirements.

3.5. The categories above explain potential purposes; they do not assert that the Website currently deploys a particular analytics, marketing or third-party tracking product. Only technologies actually implemented may be described as in use.

4. Cookie Inventory

4.1. The Website’s cookie inventory reflects the technologies actually in use and contains up-to-date information about their names or other meaningful identifiers, providers, purposes, whether they are first-party or third-party technologies, and their operating or storage periods. Where necessary, information about third-party access to the relevant data is also provided.

4.2. Information about technologies actually in use is provided directly in this Policy or in the relevant section of the Website - “Cookie Details” or “Cookie Settings”. Visitors are given access to this information before consenting to the use of technologies for which consent is required.

4.3. We disclose information only about technologies and third-party services actually used on the Website. When new technologies are introduced, or the purposes or duration of use of existing technologies change, we update the relevant information and, where necessary, the consent settings before those changes take effect.

4.4. The Website’s actual configuration and its consent-management mechanism are consistent with the published cookie inventory. Cookie lifetimes and the retention periods for personal data obtained through the relevant technologies are treated as separate matters. The retention of personal data is governed by the Privacy Policy.

5. Third-Party Services

5.1. External services may be used to provide or maintain Website features, such as hosting, cybersecurity, anti-abuse protection, embedded videos or other external content. Merely referring to these types of services does not mean that any particular provider is active on the Website.

5.2. Where an external feature stores or accesses information on a visitor’s device and does not qualify for a legal exemption, it must be blocked until the required consent has been obtained. An embedded service should not be treated as exempt merely because its content is displayed within a MAC HUB page.

5.3. If a third-party service receives personal data, its role as processor, independent controller or joint controller must be determined from the actual arrangement. Applicable disclosures, safeguards and international-transfer information are provided through this Policy, the Privacy Policy and any supplementary notice required by law.

5.4. No term in this Policy authorises the disclosure of restricted defence information, production-site locations, protected technical material or other sensitive information to an external service. Such matters are handled under applicable law and separate authorised procedures.

6. Consent and Cookie Settings

6.1. Where prior consent is required, the relevant non-essential technologies will remain disabled until the visitor makes a valid, informed and affirmative choice. Silence, inactivity, continuing to browse or pre-selected options do not constitute valid consent. Consent to cookies is distinct from the legal basis for subsequent processing of personal data where GDPR applies.

6.2. Where a consent interface is necessary, it must provide clear information about purposes and meaningful choices to accept, reject or configure non-essential categories without misleading design or unnecessary obstacles. Choices must be recorded only to the extent necessary to demonstrate and respect the visitor’s preference.

6.3. Where consent-based technologies are used, visitors must be able to change their settings or withdraw consent through a readily accessible “Cookie Settings” mechanism. Withdrawal applies to future access to or storage of information and does not render processing previously carried out on a lawful basis unlawful. After consent is withdrawn, use of the relevant non-essential technologies and any further processing based on that consent cease. Deleting third-party cookies already stored may additionally require the use of browser settings.

6.4. Visitors may also manage or delete cookies using browser settings. Blocking certain strictly necessary technologies may affect the operation of requested Website functions. Browser controls do not replace the Website’s own duty to obtain prior consent when that duty applies.

6.5. If the Website uses only technologies that qualify for an exemption from the consent requirement, a consent banner is not required solely for those technologies. The absence of a banner, however, must be supported by the verified technical configuration and applicable law.

7. Changes to this Policy and Contact Details

7.1. We may revise this Policy to reflect changes in law, the Website, technologies actually used, service providers or consent arrangements. The published version will identify its effective date or last update. Where a change requires new or renewed consent, we will obtain it before activating the relevant non-essential technology.

7.2. For questions about this Policy or personal-data processing in connection with the Website, contact info@mac-hub.com or the Website operator using the details provided in the Legal Notice / Company Information and Section 2 of the Privacy Policy.

7.3. This Policy forms part of the Website’s legal information alongside the Privacy Policy, Legal Notice / Company Information, Terms of Use and Website Disclaimer. In the event of overlapping subjects, each document should be read according to its specific purpose and without diminishing rights granted by law.