Privacy Policy

2. General Provisions.

2.1. The Policy on the Procedure for the Storage and Protection of Personal Data of Website Users (hereinafter referred to as the "Privacy Policy") has been developed to comply with the requirements of the current Russian Federation legislation in the field of personal data protection.

2.2. The Privacy Policy has been developed in accordance with the Constitution of the Russian Federation, the Civil Code of the Russian Federation, and the Federal Law "On Personal Data".

2.3. The Privacy Policy sets forth the procedures for processing the personal data of Website Users: actions related to the collection, systematization, accumulation, storage, and destruction of personal data.

2.4. The Privacy Policy sets forth general requirements and rules for working with all types of storage media containing the personal data of Website Users, which are mandatory for the Operator's employees involved in servicing the Website.

2.5. The objectives of the Privacy Policy are:

• to ensure the protection of human and civil rights and freedoms when processing personal data, including the protection of the right to privacy, personal and family secrets;
• to exclude unauthorized actions by the Operator's employees and any third parties to collect, systematize, accumulate, store, clarify (update, modify) personal data, or other forms of illegal interference with the Operator's information resources and local area network, and to ensure the legal and regulatory confidentiality of undocumented information of Website Users; Protection of citizens' constitutional rights to privacy, confidentiality of personal data, and the prevention of potential threats to the security of Website Users.

2.6. Principles of Personal Data Processing:

• Personal data must be processed lawfully and fairly;
• Personal data must be limited to achieving specific, predetermined, and legitimate purposes. Processing of personal data that is incompatible with the purposes for which it was collected is prohibited;
• Only personal data that is relevant to the purposes for which it was processed may be processed;
• Personal data must be stored for no longer than required for the purposes for which it was processed;
• Processed personal data must be destroyed or anonymized upon the achievement of the processing purposes or when these purposes are no longer necessary, unless otherwise provided by Federal Law.

2.7. Purposes of personal data processing.

• User identification;
• implementation of loyalty programs for Users;
• establishing feedback with Users.

2.8. Sources of Users' personal data.

2.8.1. The source of information about all User's personal data is the User themselves.

2.8.2. Users' personal data is classified as confidential information with limited access.

2.9. Rights of subjects (Users) of personal data.

2.9.1. The User has the right to:

• receive information about the Operator, its location, and whether the Operator holds personal data related to a specific personal data subject (the User), as well as to review such personal data;
• receive from the Operator, upon personal contact or upon receipt by the Operator of a written request from the User, the following information regarding the processing of their personal data, including: confirmation of the fact that the Operator is processing personal data, as well as the purpose of such processing; the legal basis and purposes for processing personal data, and the purposes and methods used by the Operator to process personal data;
• request the amendment, clarification, or destruction of information about themselves.

2.10. Operator's Responsibilities.

2.10.1. Upon personal request or upon receipt of a written request from a personal data subject or their representative, the Operator, if warranted, is obligated to provide information to the extent established by Federal Law within 30 days of the request or receipt of the personal data subject's or their representative's request. Such information must be provided to the personal data subject in an accessible form and must not contain personal data related to other personal data subjects, unless there are legal grounds for disclosure of such personal data.

2.11. Personal Data Confidentiality.

2.11.1. The Operator ensures the confidentiality and security of personal data during its processing in accordance with the requirements of Russian Federation law.

2.11.2. The Operator does not disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by Federal Law.

2.11.3. In accordance with the list of personal data processed on the website, the personal data of Website Users is confidential.

2.11.4. Persons processing personal data are obliged to comply with the requirements of the Operator's regulatory documents regarding ensuring the confidentiality and security of personal data.

3. Processing of personal data.

3.1. List of Users' personal data processed:

• last name;
• first name;
• patronymic;
• date of birth;
• mobile phone number;
• email.

3.2. Persons authorized to access personal data.

3.2.1. Only persons with the appropriate authority, in accordance with their official duties, have the right to access personal data of subjects.

3.2.2. The list of persons with access to personal data is approved by the Operator's CEO.

3.3. Personal Data Storage Procedure on the Website.

3.3.1. The Operator only stores Users' personal data on the Website.

3.3.2. The Operator does not process Users' personal data on paper media.

4. Measures to ensure the security of personal data during its processing.

4.1. When processing personal data, the operator is obligated to take or ensure the adoption of necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, or distribution, as well as from other illegal actions in relation to personal data.

5. Final Provisions.

5.1. In the event of changes to current Russian Federation legislation or amendments to regulatory documents on the protection of personal data, this Privacy Policy shall apply to the extent that it does not contradict current legislation until it is brought into conformity with such.

5.2. This Policy may be amended at the discretion of the operator. It shall come into effect on the date of its posting.