Personal Data Processing Policy

1. General Provisions This Personal Data Processing Policy has been drawn up in accordance with the requirements of the Federal Law of July 27, 2006 No. 152-ФЗ “On Personal Data” (hereinafter – the Personal Data Law) and defines the procedure for processing personal data and the measures to ensure the security of personal data implemented by Individual Entrepreneur Shishkov I.V. (hereinafter – the Operator). 1.1. The Operator considers compliance with human rights and freedoms in the processing of personal data— including the right to privacy and protection of personal and family secrets—its highest priority and essential condition for carrying out its activities. 1.2. This Policy applies to all information that the Operator may obtain about visitors to the website https://brushespaints.com. 2. Key Terms Used in the Policy 2.1. Automated processing of personal data means processing personal data by means of computer technology. 2.2. Blocking of personal data means temporary suspension of processing of personal data (except where processing is necessary to clarify such data). 2.3. Website means the collection of graphical and informational materials, as well as computer programs and databases ensuring their availability on the Internet at https://brushespaints.com. 3. Rights and Obligations of the Operator 3.1. The Operator has the right to: receive from the personal data subject truthful information and/or documents containing their personal data; in the event of withdrawal by the data subject of consent to the processing of personal data, or upon receipt of a request to cease processing, continue processing personal data without the subject’s consent if there are grounds specified in the Personal Data Law. 4. Main Rights and Obligations of Data Subjects 4.1. Data subjects have the right to: receive information regarding the processing of their personal data, except in cases provided for by federal laws; require the Operator to clarify their personal data, block or destroy it if the data are incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated processing purpose. 5. Principles of Personal Data Processing 5.1. Processing of personal data is carried out on a lawful and fair basis. 5.2. Processing of personal data is limited to achieving specific, predetermined and lawful purposes. 5.3. Combining databases containing personal data processed for incompatible purposes is not permitted. 6. Purposes of Personal Data Processing Purpose: To provide the User with access to the services, information and/or materials contained on the website. Personal data: Surname, first name, patronymic; e-mail address; phone numbers; photographs. Legal basis: Federal Law “On Information, Information Technologies and Information Protection” of July 27, 2006 No. 149-ФЗ. Types of processing: Collection, recording, systematization, accumulation, storage, destruction and anonymization of personal data; sending informational e-mails to the e-mail address. 7. Conditions for Personal Data Processing 7.1. Processing of personal data is carried out with the consent of the data subject to the processing of their personal data. 7.2. Processing of personal data is necessary to achieve purposes provided for by an international treaty of the Russian Federation or by law. 8. Procedure for Collection, Storage, Transfer and Other Processing of Personal Data The security of personal data processed by the Operator is ensured through implementation of legal, organizational and technical measures necessary to fully comply with the current legislation on personal data protection. 9. Actions Performed by the Operator with Personal Data 9.1. The Operator performs collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion and destruction of personal data. 9.2. The Operator carries out automated processing of personal data, with receipt and/or transmission of information via information and telecommunication networks or without them. 10. Cross-Border Transfer of Personal Data 10.1. Prior to commencing any cross-border transfer of personal data, the Operator shall notify the authorized body for the protection of personal data subjects’ rights. 11. Confidentiality of Personal Data The Operator and any other persons granted access to personal data are obliged not to disclose or distribute personal data to third parties without the data subject’s consent. 12. Final Provisions 12.1. The User may obtain any clarifications on matters concerning the processing of their personal data by contacting the Operator via e-mail at brushes-paints@yandex.ru. 12.2. Any changes to the Operator’s personal data processing policy will be reflected in this document. 12.3. The current version of this Policy is available online at https://brushespaints.com/documents/personal-data-processing-policy.