My sad experience is connected with the Ukrainian company-registrar LLC NIK.Yuy.
I do not know how long ago, but they have a paragraph in the contract on the site nic.ua/ru/documents in paragraph 5.3.9
The Customer also agrees that the Contractor has the right to provide access and transfer his personal data to third parties without any further notification of the Customer, without changing the purpose of processing personal data (for example, when registering a domain name). The scope of the rights of the Customer, as a subject of personal data in accordance with the Law of Ukraine “On the protection of personal data”, is known and understandable to him.
It is this point that the company's support refers to, and all my questions about on what basis all my personal data (including billing information) were transferred to third parties are answered - see this item, they say, we have the right. In my case, without any decision of the court, the data were transferred to the investigator + 3 persons unrelated to law enforcement.
It was very unexpected for me, due to the situation in which there was a nickname yuey a couple of years ago, I mean the situation when the SBU clearly under the made-up pretext confiscated the company's server, after which all the equipment moved outside the country, and the remaining offices in Ukraine became more like bunkers .
How do you deal with the protection of personal data when registering hosting / domains?