1. General ProvisionsThis Personal Data Processing Policy has been prepared in accordance with Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter — the
Personal Data Law) and defines the procedure for processing personal data and the measures taken to ensure the security of personal data by
YUDASHKINEXOARIL.RU (hereinafter — the
Operator).
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of privacy and personal and family confidentiality, as its primary objective and condition for carrying out its activities.
1.2. This Personal Data Processing Policy (hereinafter — the
Policy) applies to all information that the Operator may obtain about visitors of the website:
https://yudashkinexoaril.com2. Key Terms Used in the Policy2.1.
Automated processing of personal data — processing of personal data using computer technology.
2.2.
Blocking of personal data — temporary suspension of personal data processing (except where processing is required to clarify personal data).
2.3.
Website — a set of graphic and informational materials, as well as software and databases, accessible on the Internet at
https://yudashkinexoaril.com.
2.4.
Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.5.
Depersonalization of personal data — actions that make it impossible to determine the ownership of personal data to a specific User without additional information.
2.6.
Processing of personal data — any action (operation) or set of actions performed with or without automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction.
2.7.
Operator — a state authority, municipal authority, legal entity or individual that independently or jointly organizes and/or carries out personal data processing and determines the purposes and scope of such processing.
2.8.
Personal data — any information relating directly or indirectly to an identified or identifiable User of the website.
2.9.
Personal data permitted for distribution — personal data to which the data subject has granted public access by giving consent in accordance with the Personal Data Law.
2.10.
User — any visitor of the website.
2.11.
Provision of personal data — actions aimed at disclosing personal data to a specific person or group of persons.
2.12.
Distribution of personal data — actions aimed at disclosing personal data to an indefinite number of persons, including publication in media or online networks.
2.13.
Cross-border transfer of personal data — transfer of personal data to a foreign state authority, foreign individual, or foreign legal entity.
2.14.
Destruction of personal data — actions resulting in irreversible deletion of personal data and/or destruction of physical media containing personal data.
3. Rights and Obligations of the Operator3.1. The Operator has the right to:
- obtain accurate information and/or documents containing personal data from the data subject;
- continue processing personal data without consent where permitted by the Personal Data Law;
- independently determine necessary and sufficient measures to ensure compliance with applicable legislation.
3.2. The Operator is obliged to:
- provide information regarding personal data processing upon request;
- organize personal data processing in accordance with Russian law;
- respond to requests from data subjects and their representatives;
- provide information to the authorized supervisory authority within 10 days upon request;
- publish this Policy or otherwise ensure unrestricted access to it;
- implement legal, organizational, and technical measures to protect personal data;
- cease processing and destroy personal data where required by law;
- fulfill other obligations established by applicable legislation.
4. Rights and Obligations of Data Subjects4.1. Data subjects have the right to:
- obtain information regarding the processing of their personal data;
- request correction, blocking, or deletion of inaccurate or unlawfully obtained personal data;
- require prior consent for processing for marketing purposes;
- withdraw consent at any time;
- file complaints with the supervisory authority or a court;
- exercise other rights provided by Russian law.
4.2. Data subjects are obliged to:
- provide accurate personal data;
- notify the Operator of any updates or changes.
4.3. Persons who provide inaccurate data or data of third parties without consent bear liability under Russian law.
5. Principles of Personal Data ProcessingPersonal data shall be:
- processed lawfully and fairly;
- processed only for specified and legitimate purposes;
- limited to what is necessary for such purposes;
- accurate and up-to-date;
- stored no longer than necessary;
- deleted or anonymized upon achievement of processing purposes unless otherwise required by law.
6. Purposes of Processing
Purpose: conclusion, performance, and termination of civil law contracts.
Categories of personal data:- full name
- email address
- phone number
Legal basis: contracts concluded between the Operator and the data subject.
Processing activities:- sending informational emails.
7. Conditions for ProcessingPersonal data is processed:
- with the consent of the data subject;
- where required by law;
- for contract performance;
- to protect legitimate interests of the Operator, provided that rights of the data subject are not violated;
- where data has been made publicly available by the data subject;
- where disclosure is required by law.
8. Collection, Storage, Transfer, and SecurityThe Operator implements legal, organizational, and technical measures to ensure personal data security.
8.1. The Operator takes all reasonable measures to prevent unauthorized access.
8.2. Personal data is not transferred to third parties except as required by law or with consent.
8.3. Data may be updated by sending a request to:
info@yudashkinexoaril.ru8.4. Processing continues until the purpose is achieved or consent is withdrawn.
8.5. Third-party services process data in accordance with their own policies. The Operator is not responsible for their actions.
8.6. Restrictions set by the data subject do not apply where processing is required in public interest under law.
8.7. Confidentiality is ensured.
8.8. Data is stored only as long as necessary.
8.9. Processing is terminated upon achievement of purpose, withdrawal of consent, or detection of unlawful processing.
9. Actions Performed with Personal DataThe Operator performs collection, storage, updating, use, transfer, anonymization, blocking, deletion, and destruction of personal data, including automated processing via telecommunications networks.
10. Cross-Border TransferThe Operator shall notify the supervisory authority before initiating cross-border transfers and obtain necessary information from foreign recipients.
11. ConfidentialityThe Operator and authorized persons shall not disclose or distribute personal data without consent unless required by law.
12. Final Provisions12.1. Any questions may be sent to:
info@yudashkinexoaril.ru12.2. The Policy is effective indefinitely until replaced by a new version.
12.3. The current version is available at:
https://yudashkinexoaril.com/privacy