Privacy Policy for Personal Data Processing
- General Provisions
- This personal data processing policy is drafted in accordance with the requirements of the Federal Law dated 27.07.2006 No. 152-FZ "On Personal Data" (hereinafter the Personal Data Law) and defines the procedure for processing personal data and the security measures undertaken by Evsin Anton Valeryevich (hereinafter the Operator).
1.1. The Operator considers compliance with the rights and freedoms of the individual and citizen, including protection of privacy, personal and family secrets, as a critical goal and condition of its activity in processing personal data.
1.2. This Operator's policy on personal data processing (hereinafter the Policy) applies to all information that the Operator may receive about visitors to the website
https://ledsmoker.ru/.
- Key Terms Used in the Policy
- 2.1. Automated processing of personal data – processing personal data using computing technology.
- 2.2. Blocking personal data – temporary suspension of personal data processing (except when processing is necessary for adjustment).
- 2.3. Website – a collection of graphic and informational materials, as well as software and databases, providing access via https://ledsmoker.ru/.
- 2.4. Personal data information system – a set of databases containing personal data and the technologies and tools for their processing.
- 2.5. Personal data anonymization – actions that make it impossible to identify the personal data subject without additional information.
- 2.6. Processing of personal data – any action or a set of actions performed with or without automation on personal data, including collection, recording, systematization, accumulation, storage, updating, extraction, usage, transfer, anonymization, blocking, deletion, and destruction.
- 2.7. Operator – a state body, municipality, legal or natural person independently or jointly organizing and/or processing personal data, defining purposes, types, and actions with personal data.
- 2.8. Personal data – any information directly or indirectly related to an identified or identifiable user of the https://ledsmoker.ru/ website.
- 2.9. Personal data permitted by the data subject for dissemination – personal data accessible to an unlimited circle of persons as consented by the data subject according to the Personal Data Law (hereinafter allowed for dissemination).
- 2.10. User – any visitor of the https://ledsmoker.ru/ website.
- 2.11. Providing personal data – actions aimed at disclosing personal data to a particular person or group.
- 2.12. Dissemination of personal data – any actions disclosing data to an indefinite circle of persons, including publication in media or networks.
- 2.13. Cross-border transfer of personal data – transfer to foreign government bodies or entities.
- 2.14. Destruction of personal data – irreversible elimination of personal data making recovery impossible.
- Main Rights and Duties of the Operator
- 3.1. The Operator has the right to:
- — receive truthful information or documents from the data subject;
- — continue processing without consent if grounds exist in law;
- — independently determine necessary security measures unless otherwise regulated.
- 3.2. The Operator must:
- — provide information upon request about data processing;
- — organize data processing in compliance with Russian law;
- — respond to requests from data subjects and their representatives;
- — notify authorized personal data protection bodies when requested;
- — publish or ensure access to this Policy;
- — implement legal, organizational, and technical measures for data protection;
- — cease data transfer/processing and destroy data as per law;
- — fulfill other legal obligations.
- Main Rights and Duties of Data Subjects
- 4.1. Data subjects have the right to:
- — receive information about personal data processing, except as limited by law;
- — demand correction, blocking, or destruction of inaccurate or illegal data;
- — set conditions for consent in marketing data processing;
- — withdraw consent and demand processing cessation;
- — appeal violations to authorized bodies or courts;
- — exercise other rights under Russian law.
- 4.2. Data subjects must:
- — provide truthful personal data;
- — inform the Operator of data updates.
- 4.3. Persons providing false data or data about others without consent bear legal liability.
- Principles of Personal Data Processing
- 5.1. Processing occurs on a lawful and fair basis.
- 5.2. Processing is limited to specific, lawful purposes.
- 5.3. Databases processed for incompatible purposes must not be merged.
- 5.4. Only relevant personal data to processing purposes are processed.
- 5.5. Data processed must correspond to stated purposes without excess.
- 5.6. Data accuracy and relevancy must be ensured, with measures to correct incomplete or inaccurate data.
- 5.7. Data storage shall not exceed necessary duration; data must be destroyed or anonymized afterward unless otherwise required.
- Purpose of Personal Data Processing
- Purpose: Providing User access to services, information, and materials on the website.
- Personal data: surname, first name, patronymic; email; phone numbers.
- Legal grounds: contracts between the Operator and the data subject.
- Processing types: collection, recording, systematization, accumulation, storage, destruction, anonymization.
- Conditions for Processing Personal Data
- 7.1. Processing occurs with data subject consent.
- 7.2. Processing may be needed to fulfill Russian Federation's international treaties or laws.
- 7.3. Processing may be needed for justice enforcement.
- 7.4. Processing may be necessary for contract performance involving the data subject.
- 7.5. Processing protects Operator's or third parties’ rights or socially significant goals without violating data subject rights.
- 7.6. Processing of publicly available data occurs with data subject consent or request.
- 7.7. Processing mandated for publication or legal disclosure.
- Procedure for Collection, Storage, Transfer, and Other Processing
- The Operator protects data security by applying legal, organizational, and technical measures in line with applicable legislation.
- 8.1. The Operator ensures data safety and blocks unauthorized access.
- 8.2. User data will not be transferred to third parties except by law or user consent.
- 8.3. Users may update their data by emailing the Operator at evsinanton@gmail.com with the note "Personal Data Update."
- 8.4. Processing duration depends on the purpose; the User may revoke consent by email to evsinanton@gmail.com marked "Consent Withdrawal".
- 8.5. Data collected by third-party services is maintained according to their privacy policies; the Operator is not responsible for third-party actions.
- 8.6. Restrictions imposed by the data subject on dissemination or processing do not apply when processing serves public or legal interests as defined by law.
- 8.7. The Operator guarantees confidentiality of personal data.
- 8.8. Data is stored only as long as needed according to the purpose, unless established otherwise by law or agreement.
- 8.9. Processing ends upon purpose achievement, consent withdrawal, or detection of unauthorized processing.
- List of Actions Performed by the Operator with Personal Data
- 9.1. The Operator collects, records, systematizes, accumulates, stores, updates, extracts, uses, transfers, anonymizes, blocks, deletes, and destroys personal data.
- 9.2. Automated processing may involve transmission over communication networks or not.
- Cross-border Transfer of Personal Data
- 10.1. The Operator must notify the authorized personal data protection body before any cross-border transfer.
- 10.2. The Operator must obtain relevant information from foreign authorities or persons receiving the data before transfer.
- Confidentiality of Personal Data
- The Operator and those with access must not disclose or disseminate personal data without consent unless legally required.
- Final Provisions
- 12.1. Users may request clarifications on data processing by emailing evsinanton@gmail.com.
- 12.2. Changes to this Policy will be reflected in updated documents; the Policy is effective indefinitely until replaced.
- 12.3. The current Policy version is publicly available at https://ledsmoker.ru/policy-en