Privacy Policy in relation to the personal data processing
This Personal Data Privacy Policy (hereinafter referred to as the "Policy") applies to all information on the following website:
http://artyourinterior.ru (hereinafter referred to as the "Website").
Any use of the Website constitutes the user's unconditional agreement to this Policy and the terms and conditions of their personal data processing set out therein. If the User does not agree to these terms and conditions, they must refrain from using the Website.
1. General Provisions
1.1. This Policy determines the procedure for collecting, storing, transferring, and otherwise processing personal data by Individual Entrepreneur Anastasia Borisovna Tovstonogova (hereinafter referred to as the "Operator") and details of the requirements for the protection of personal data.
1.2. This Policy is developed in compliance with the applicable laws of the Russian Federation on personal data.
1.3. Terms and Definitions used in this Policy:
"Operator" refers to Individual Entrepreneur Anastasia Borisovna Tovstonogova, who owns and operates the Website, as well as employees authorized to manage the Website, acting on its behalf, which collect and process personal data through the Website, as well as determine the purpose of personal data processing, the content of personal data to be processed, and actions (operations) performed with personal data.
"Personal data" refers to any information relating to a natural person (the subject of personal data) and provided by them in the process of using the Website or by filling in the request forms on the Website.
"Personal Data Processing" refers to any actions (operations) or a combination of actions (operations) performed on personal data, whether those operations are automated or not, including collecting, recording, organizing, structuring, storing, modifying (updating, amending), extracting, using, transferring, sharing, publishing, depersonalizing, erasing, and destroying personal data.
"Confidentiality of personal data" refers to the requirement for the Operator or other person accessing personal data to prevent its dissemination without the consent of the personal data subject or any other legal ground.
"Website User" (hereinafter referred as the "User") refers to a person accessing and using the Website.
"Terms and Conditions" refer to the terms and conditions a user must agree to and abide by in order to use the following website:
http://artyourinterior.ru
1.4. This Policy only applies to the Website. The Website does not control and is not responsible for the websites of third parties that the User can access through the links available on the Website.
1.5. Acceptance of the Policy without exceptions and exclusions means that the User provides their personal data through the request forms on the Website. The moment of acceptance of the Policy shall be putting "∨" in the checkbox opposite the relevant field in the request form and clicking on the request form submission button on any page of the Website.
2. The purpose of collecting and processing personal data of Users
2.1. Processing of personal data shall be limited to achieving specific, predetermined, and legitimate purposes. Processing of personal data incompatible with the purposes of personal data collection shall not be permitted.
2.2. Processing of personal data of a User shall be carried out for the purpose of exercising the rights and obligations undertaken by the Operator under this Policy and relevant Terms and Conditions, including the following:
2.2.1. To identify the User utilizing the services provided on the website;
2.2.2. To establish communication with the User, including if necessary, sending notifications, requests, information, and documents, related to the Website services, as well as processing of requests and applications from the User;
2.2.3. To improve the quality and usability of the services provided on the website and to develop new services;
2.2.4. To carry out statistical and other researches, based on anonymized data;
2.2.5.To inform the User about the news, announcements on the Website, new products and services, special offers, and promotions, as well as other advertising information, by sending messages to the User's e-mail address and sending text messages to the User's mobile phone number;
2.2.6. To target advertising materials;
2.2.7. To ensure security of the Website;
2.2.8. For other purposes, not contrary to the applicable laws of the Russian Federation.
3. Legal grounds for processing personal data
3.1. The Operator shall process personal data on lawful and fair grounds.
3.2. The legal grounds for processing personal data by the Operator are based on the following documents:
- Convention for the Protection of Individuals regarding Automatic Processing of Personal Data
(Concluded in Strasbourg on 28 January 1981);
- The Constitution of the Russian Federation dated 12 December 1993 (including amendments by the Russian Federation Laws on Amendments to the Constitution of the Russian Federation No.6-FKZ dated 30 December 2008, No.7-FKZ dated 30 December 2008, No.2-FKZ dated 5 February 2104, and No.11-FKZ dated 27 July 2014);
- Civil Code of the Russian Federation;
- Federal Law No. 149-FZ "On Information, Information Technologies, and Information Protection" dated 27 July 2006;
- Decree of the Government No. 1119 "On the Approval of Requirements for the Protection of Personal Data in the Case of Processing in Personal Data Information Systems" dated 1 January 2012;
- Decree of the Government No. 687 "On Approving the Provision Regarding Properties of Personal Data Processing without Software" dated 15 December 2008;
- User consent to the processing of personal data;
- The Charter of the Operator.
4. Content and scope of processed personal data, categories of personal data subjects, and methods of personal data collection
4.1 The content and scope of processed personal data shall be determined on the basis of the processing purposes and shall comply with such purposes. Processed personal data shall not be excessive in relation to the stated purposes of its processing.
4.2 The following category of personal data subjects shall be processed in the personal data information systems of the Operator:
4.2.1. Personal data of Users who have left their personal data on the Website, by filling in the data fields in the request forms and by visiting the Website.
4.3. The Operator collects the User's personal data through the Website in the following ways:
4.3.1 Personal data provided by Users or others on their behalf by entering personal data in the data fields in the request forms on the Website.
4.3.2. By means of collecting IP addresses of Users, as well as using cookies.
4.3.3. Collection of statistical information about User's connection: information about User's browser and operating system, date and time of visiting the Website, duration of the visit, number of visited pages, and transfers between the pages of the Website.
5. Procedures and provisions of personal data processing
5.1. Processing of personal data of the User shall be carried out without limitation of time, in any lawful manner, including in information systems of personal data with or without the use of automation aids. Processing of personal data starts at the moment of filling in any request form on the Website and stops the moment one of the conditions listed in paragraph 5.2 of this Policy occurs.
5.2. Processing and storage of personal data shall not exceed the period necessary to fulfill the purpose of personal data processing, unless there is a legitimate reason for further processing. Processed personal data shall be destroyed or depersonalized under the following conditions:
5.2.1. The purpose of personal data processing is achieved.
5.2.2. The personal data subject withdraws their consent to processing personal data, and preservation of personal data is no longer required for the purposes of personal data processing.
5.2.3. In case of unlawful processing of personal data.
5.2.4. If personal data is confirmed to be inaccurate based on information provided by the personal data subject.
5.3. Personal data shall be stored in a form, allowing identification of personal data subject no longer than required by the purposes of personal data processing, except for cases, when the terms and conditions of personal data storage are not stipulated by the federal law.
5.4. With respect to the User's personal information, the confidentiality requirements set forth in Article 7 of the Federal Law "On Personal Data" shall be observed.
5.5. When processing the User's personal data, the Operator shall take necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, dissemination, and distribution of personal data, as well as from other unlawful actions in relation to personal data.
5.6. The measures referred to in paragraph 5.5. of this Policy include:
- Appointment of a person, responsible for the organization of personal data processing.
- Application of legal, organizational, and technical measures to ensure security of personal data.
- Exercising internal control (audit) over the compliance of personal data processing with personal data legislation, as well as the Operator's internal local acts.
- Assessment of damage which may be caused to the user in case of violation of personal data legislation, correlation of damage, and security measures taken by the Operator.
- Familiarization of the Operator's employees, directly engaged in processing of personal data, with the provisions of personal data legislation.
5.7. The Operator is entitled to transfer personal data to bodies of enquiry and investigation and other authorized bodies on the grounds stipulated by the applicable laws of the Russian Federation.
5.8. When storing personal data, the Operator shall use databases located in the territory of the Russian Federation, in accordance with Part 5 of Article 18 of the Federal Law "On Personal Data".
5.9. In order to ensure the security of personal data during its processing, the Operator shall take the necessary legal, organizational, and technical measures to protect Personal Data from unauthorized or accidental access, destruction, modification, blocking, copying, dissemination, and distribution of Personal Data, as well as from other unlawful actions in relation to Personal Data.
6. Updating, revision, deleting, and destruction of personal data, responses to subjects' requests for access to personal data
6.1. If the fact of inaccuracy of personal data or unlawfulness of personal data processing is confirmed, the Operator shall update personal data, and the processing shall be terminated in accordance with Article 21 of the Federal Law "On Personal Data".
6.2. When the purposes of personal data processing are achieved, and in case the subject of personal data withdraws their consent to their processing, personal data shall be destroyed within 30 (thirty) calendar days, except in cases where further processing and storage of personal data is necessary due to the requirements of the legislation of the Russian Federation.
6.3. The Operator shall inform the User or their representative about the processing of the User's personal data on the request of the latter.
6.4. The User can receive necessary explanations concerning the processing of their personal data upon request, deny processing of personal data in order to promote goods, works, and services via texts and e-mails, and withdraw consent to processing of personal data by contacting the Operator with a corresponding request via the following e-mail address:
info@artyourinterior.ru
6.5. The Operator has the right to change this Policy without the User's consent.
6.6 The new Policy shall take effect as soon as it is posted on the Website, unless otherwise stipulated by the new version of the Policy;
6.7. The Policy in force is posted on the Website:
http://artyourinterior.ru/confidentiality
