How SMG handles personal data.

1. Website operator and controller contact

For public website intake and platform administration, the controller is identified as SHEVCHENKO MOBILITY GROUP (SMG), the operator of shevchenko-group.com, represented for platform administration by Roman Shevchenko, Founder & CEO.

Email: roman@shevchenko-group.com
WhatsApp: +36 70 598 3047

2. Data we may collect

• contact and identity data supplied in an intake request, such as name, phone, email, nationality and destination;
• case information, service requirements, deadlines, budgets and communication history;
• identity-document information and document files only when needed for an active case and uploaded through an authorized protected workflow;
• employment, relocation, accommodation, company or property information relevant to the requested service;
• for Football Agency enquiries: player or club contact data, date of birth where supplied, nationality, playing position, current club, contract-expiry information, public profile/video links, recruitment criteria and information about the authority of the person making the enquiry;
• technical and security data such as IP address, timestamps, authentication events and audit records.

Public website forms are intended for qualification and contact. Do not place passport scans, medical information, criminal-record material or other highly sensitive documents in free-text public forms unless SMG expressly provides an authorized secure upload route for that purpose.

3. Purposes and lawful bases

• Responding to requests and preparing a service: steps requested before entering into a contract and, where applicable, performance of a contract.
• Case administration and client support: contract performance and legitimate interests in operating a secure, auditable service.
• Compliance, accounting and legal claims: compliance with legal obligations and legitimate interests in establishing, exercising or defending legal claims.
• Security and abuse prevention: legitimate interests in protecting users, systems, records and access credentials.
• Optional communications or processing requiring consent: consent, which may be withdrawn for future processing where consent is the applicable basis.

Where special-category data are genuinely required, SMG will identify an additional legal condition before processing and will seek to minimize such data.

4. Football Agency data

Football enquiries are first recorded as protected SMG cases. Player and club information is not automatically published as a public roster and is not automatically converted into a representation relationship.

• Public football forms should contain only the information requested for initial sporting and commercial qualification. Passport copies, medical records, bank details, detailed disciplinary records and confidential contracts should not be placed in public free-text fields.
• After staff review, an authorised football case may be promoted into the private Football Desk. The private record can include scouting/profile data, club requirements, representation-agreement references, transaction stages and compliance notes.
• If regulated Football Agent Services are contemplated, data may be shared as necessary with the relevant verified FIFA-licensed natural person and, where required for a lawful transaction, the relevant club, league, member association, federation, professional adviser or competent authority.
• For a minor, SMG requires an appropriate parent/legal-guardian route before progressing the case and applies additional access and compliance review. Public submission alone does not authorise representation of a minor.

Public market-profile or video links are treated as references supplied for review; SMG does not assume that third-party public data are accurate, current or lawfully reusable beyond the applicable purpose.

5. Recipients and service providers

Data may be shared only as necessary with authorized SMG staff; hosting, email, communications, payment or document-processing providers; professional advisers; the relevant employer, property provider, relocation/immigration professional or business partner for the case; and competent public authorities where disclosure is required or legally justified.

Access should follow role and need-to-know controls. A recipient acting as an independent controller is responsible for its own legal duties and should be identified when relevant.

6. International transfers

Some cases are international by nature. If personal data are transferred outside the EEA, the transfer must rely on an applicable legal mechanism, such as an adequacy decision, appropriate contractual safeguards or another lawful derogation available for the specific transfer. SMG will provide further information where required for the case.

7. Retention

SMG does not intend to keep personal data indefinitely. Retention is determined by the purpose of the case, contractual and accounting requirements, applicable limitation periods, regulatory obligations, security/audit needs and any ongoing dispute. Unnecessary duplicates and abandoned intake records should be deleted or anonymized when there is no continuing lawful reason to retain them.

8. Security

The platform uses access controls, password hashing, authenticated private routes, restricted document storage, audit logging and encrypted HTTPS transport. No internet service can guarantee absolute security. Users should protect credentials and notify SMG promptly if they suspect unauthorized access.

9. Your rights

Subject to applicable law and any statutory exceptions, you may request access, correction, deletion, restriction, portability, or object to certain processing. Where processing is based on consent, you may withdraw consent for future processing. You may also lodge a complaint with the competent supervisory authority.

To exercise a right, email roman@shevchenko-group.com. SMG may request proportionate information to verify identity before disclosing or changing personal data.

10. Automated decision-making and AI

AI or automation may assist with intake routing, document organization, OCR or workflow support. SMG does not intend the public platform to make solely automated decisions that produce legal or similarly significant effects for a person. Material case decisions require authorized human review.

11. Changes and contact

This notice may be updated when services, providers, legal requirements or platform architecture change. Material changes should be reflected by a new effective date. Privacy questions can be sent to the contact details above.