Privacy policy

1. General provisions

This personal data processing policy has been prepared in accordance with Federal Law No. 152-FZ of 27 July 2006, On Personal Data. It defines the procedures for processing personal data and the measures used to protect it by Individual Entrepreneur V. V. Bondarenko (the Operator).

1. The Operator considers respect for human and civil rights and freedoms, including the right to privacy and the protection of personal and family secrets, a primary objective when processing personal data.
2. This personal data processing policy (the Policy) applies to all information that the Operator may obtain about visitors to the website.

2. Definitions used in this Policy

1. Automated personal data processing means processing personal data using computer technology.
2. Blocking personal data means temporarily suspending its processing, except when processing is required to clarify the data.
3. Website means a collection of graphic and informational materials, software, and databases available on the Internet.
4. Personal data information system means a collection of personal data stored in databases together with the information technologies and technical means used to process it.
5. Anonymization means actions after which additional information is required to identify the User to whom the personal data relates.
6. Personal data processing means any action or set of actions involving personal data, including collection, recording, organization, accumulation, storage, correction, retrieval, use, transfer, anonymization, blocking, deletion, and destruction.
7. Operator means a person that independently or jointly organizes and performs personal data processing and determines its purposes and scope.
8. Personal data means any information relating directly or indirectly to an identified or identifiable website User.
9. User means any visitor to the website.
10. Providing personal data means disclosing personal data to a specific person or group of persons.
11. Disseminating personal data means disclosing personal data to an indefinite group of persons.
12. Cross-border transfer means transferring personal data to the territory of a foreign country.
13. Destruction of personal data means actions that make personal data irretrievable.

3. Personal data that may be processed by the Operator

1. Surname, first name, and patronymic.
2. Email address.
3. Telephone numbers.
4. Year, month, date, and place of birth.
5. Photographs.
6. Anonymized visitor data, including cookies, when required for website operation or connected web analytics services.
7. The information listed above is collectively referred to as Personal Data in this Policy.

4. Purposes of personal data processing

1. Contacting the User by email, entering into and performing contracts, and providing access to website services, information, and materials.
2. Anonymized data may be used to analyze User activity and improve the quality and content of the website.

5. Legal grounds for personal data processing

1. The Operator processes personal data after the User independently completes and submits a website form. By submitting data, the User agrees to this Policy.
2. Anonymized data is processed when allowed by the User's browser settings, including cookie storage and JavaScript use.

6. Personal data processing and storage procedures

The Operator protects personal data through legal, organizational, and technical measures required to comply with applicable data protection legislation.

1. The Operator safeguards personal data and takes measures to prevent unauthorized access.
2. The User's personal data is not transferred to third parties except where required by applicable law.
3. Personal data may be processed indefinitely unless a different period is required by law or requested by the data subject.

7. Cross-border transfer of personal data

1. Before transferring personal data across borders, the Operator must ensure that the destination country provides reliable protection of personal data subjects' rights.
2. Transfers to countries that do not meet these requirements are permitted with the data subject's written consent or when required to perform a contract with that person.