Personal Data Processing Policy

Notice. This is an informational English translation of the Personal Data Processing Policy of the online store brushespaints.ru. The original document in Russian has the sole legal force. In case of any discrepancies, the Russian version shall prevail.

  1. General provisions
This Personal Data Processing Policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ "On Personal Data" of 27.07.2006 (hereinafter — the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data taken by IE Shishkov I.V. (hereinafter — the Operator).

1.1. The Operator's primary goal and condition for carrying out its activities is to respect human and civil rights and freedoms when processing personal data, including protection of the right to privacy, personal and family secrets.

1.2. This Operator's policy on personal data processing (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors of the website https://brushespaints.ru.

2. Key terms used in the Policy
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary cessation of personal data processing (except where processing is necessary to clarify personal data).
2.3. Website — a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the address https://brushespaints.ru.

3. Key rights and obligations of the Operator
3.1. The Operator has the right to:
— obtain from the personal data subject reliable information and/or documents containing personal data;
— in case of withdrawal by the personal data subject of consent to processing of personal data, or upon a request to cease processing of personal data, the Operator may continue processing without the consent of the personal data subject if grounds set out in the Personal Data Law exist.

4. Key rights and obligations of personal data subjects
4.1. Personal data subjects have the right to:
— obtain information regarding processing of their personal data, except in cases provided by federal laws;
— request the operator to clarify their personal data, block or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained, or is not necessary for the stated purpose of processing.

5. Principles of personal data processing
5.1. Processing of personal data is carried out on a lawful and fair basis.
5.2. Processing of personal data is limited to achieving specific, predefined and lawful purposes.
5.3. It is not allowed to combine databases containing personal data processed for purposes incompatible with each other.

6. Purposes of personal data processing
Purpose of processing: Providing the User with access to services, information and/or materials contained on the Website.
Personal data: surname, first name, patronymic; email address; phone numbers; photographs.
Legal grounds: Federal Law "On Information, Information Technologies and Information Protection" No. 149-FZ of 27.07.2006.
Types of personal data processing: Collection, recording, systematization, accumulation, storage, destruction and depersonalization of personal data. Sending newsletters to email addresses.

7. Conditions of personal data processing
7.1. Personal data is processed with the consent of the personal data subject to processing of their personal data.
7.2. Personal data processing is necessary to achieve the purposes stipulated by an international treaty of the Russian Federation or by law.

8. Procedure for collection, storage, transfer and other types of personal data processing
Security of personal data processed by the Operator is ensured through implementation of legal, organizational and technical measures necessary to comply fully with the requirements of the current legislation in the field of personal data protection.

9. List of actions performed by the Operator with the personal data obtained
9.1. The Operator carries out collection, recording, systematization, accumulation, storage, clarification (update, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion and destruction of personal data.
9.2. The Operator performs automated processing of personal data with or without receipt and/or transmission of the information obtained through information and telecommunications networks.

10. Cross-border transfer of personal data
10.1. Before commencing cross-border transfer of personal data, the Operator is obliged to notify the authorized body for the protection of the rights of personal data subjects.

11. Confidentiality of personal data
The Operator and other persons who have gained access to personal data are obliged not to disclose to third parties and not to distribute personal data without the consent of the personal data subject.

12. Final provisions
12.1. The User may obtain any clarifications on questions of interest concerning the processing of their personal data by contacting the Operator by email at brushes-paints@yandex.ru.
12.2. This document will reflect any changes to the Operator's personal data processing policy.
12.3. The current version of the Policy is available on the Internet at https://brushespaints.ru/privacy-policy.