PRIVACY POLICY ON PERSONAL DATA PROCESSING
1. General Provisions
This personal data processing policy is drafted in accordance with the requirements of the Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" (hereinafter — the Personal Data Law) and defines the procedure for processing personal data and the measures to ensure the security of personal data taken by INDIVIDUAL ENTREPRENEUR TATIANA ALEKSANDROVNA ANCHUTKINA (hereinafter — the Operator).
1.1. The Operator considers compliance with the rights and freedoms of individuals during the processing of their personal data, including the protection of privacy rights, personal and family secrets, as the most important goal and condition for its activities.
1.2. This Operator’s personal data processing policy (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors to the website https://inter-pigments.com/.
2. Basic Terms Used in the Policy
2.1. Automated processing of personal data — processing personal data using computing equipment.
2.2. Blocking of personal data — temporary suspension of personal data processing (except in cases where processing is necessary to clarify personal data).
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://inter-pigments.com/.
2.4. Personal data information system — a set of personal data contained in databases and information technologies and technical means that ensure their processing.
2.5. Anonymization of personal data — actions as a result of which it is impossible to determine the affiliation of personal data to a specific user or other personal data subject without using additional information.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation means with personal data, including collection, recording, systematization, accumulation, storage, updating (modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
2.7. Operator — a state body, municipal body, legal entity, or individual who independently or jointly with others organizes and/or performs personal data processing and determines the purposes of personal data processing, the composition of personal data to be processed, and the actions performed with personal data.
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable user of the website https://inter-pigments.com/.
2.9. Personal data permitted for dissemination — personal data access to which is provided by the personal data subject to an unlimited number of persons by giving consent to the processing of such personal data permitted for dissemination under the Personal Data Law.
2.10. User — any visitor of the website https://inter-pigments.com/.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or specific group of persons.
2.12. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or providing access to personal data to an unlimited number of persons, including publishing personal data in mass media, placing it in information and telecommunication networks, or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign state authority, foreign individual, or foreign legal entity.
2.14. Destruction of personal data — any actions as a result of which personal data is irreversibly destroyed with the impossibility of further recovery of the content of personal data in the personal data information system and/or the physical destruction of the personal data carriers.
3. Main Rights and Obligations of the Operator
3.1. The Operator has the right to:
— obtain from the personal data subject reliable information and/or documents containing personal data;
— in case of withdrawal of consent by the personal data subject or receipt of a request to stop processing, continue processing personal data without consent if there are legal grounds provided by the Personal Data Law;
— independently determine the list of necessary and sufficient measures to ensure the fulfillment of obligations under the Personal Data Law and related regulations, unless otherwise provided by law.
3.2. The Operator is obliged to:
— provide the personal data subject, upon request, with information regarding the processing of their personal data;
— organize personal data processing in accordance with the current legislation of the Russian Federation;
— respond to inquiries and requests from personal data subjects and their lawful representatives as required by the Personal Data Law;
— provide the authorized body for the protection of personal data subjects’ rights with necessary information upon request within 10 days from the date of such request;
— publish or otherwise provide unrestricted access to this Policy on personal data processing;
— take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions;
— stop the transfer (distribution, provision, access), stop processing, and destroy personal data as required by law;
— perform other duties stipulated by the Personal Data Law.
4. Main Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
— receive information about the processing of their personal data, except in cases provided by federal laws; information is provided in an accessible form without disclosing data related to other subjects unless there are legal grounds;
— require clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the declared processing purpose, and take legal measures to protect their rights;
— set the condition of prior consent for processing personal data for marketing purposes;
— withdraw consent for processing and request cessation of processing;
— appeal to the authorized body or court against unlawful actions or inaction of the Operator;
— exercise other rights under Russian law.
4.2. Personal data subjects must:
— provide the Operator with accurate personal data;
— notify the Operator about any changes or updates to their personal data.
4.3. Persons who provide false information or third-party data without consent bear responsibility under Russian law.
5. Principles of Personal Data Processing
5.1. Processing shall be lawful and fair.
5.2. Processing is limited to specific, pre-defined, and lawful purposes.
5.3. Databases with incompatible processing purposes shall not be combined.
5.4. Only personal data relevant to processing purposes shall be processed.
5.5. The volume and content of processed data shall correspond to declared purposes, avoiding redundancy.
5.6. Data shall be accurate, sufficient, and, when necessary, up to date; measures shall be taken to remove or correct inaccurate data.
5.7. Personal data shall be stored in a form allowing identification no longer than required; data shall be destroyed or anonymized upon achieving processing goals or loss of necessity.
6. Purpose of Personal Data Processing
The purpose is to provide Users access to services, information, and/or materials on the website.
Personal data: full name, email address, phone numbers.
Legal grounds: contracts between the Operator and personal data subjects.
Types of processing: collection, recording, systematization, accumulation, storage, destruction, anonymization.
7. Conditions for Personal Data Processing
7.1. Processing is performed with the subject’s consent.
7.2. Processing is necessary to fulfill functions under international treaties or Russian law.
7.3. Processing is necessary for justice enforcement.
7.4. Processing is necessary to perform or conclude contracts involving the personal data subject.
7.5. Processing is necessary for lawful interests of the Operator or third parties without violating subjects’ rights.
7.6. Processing publicly accessible personal data or upon subject’s request.
7.7. Processing required by law for publication or disclosure.
8. Procedure for Collection, Storage, Transfer, and Other Processing of Personal Data
The security of personal data is ensured by legal, organizational, and technical measures in compliance with applicable laws.
8.1. The Operator ensures personal data confidentiality and prevents unauthorized access.
8.2. Personal data is never disclosed to third parties unless required by law or with consent for contractual obligations.
8.3. Users may update inaccurate personal data by notifying the Operator at profi-up@mail.ru with the subject "Personal Data Update."
8.4. Data retention period corresponds to processing purposes unless otherwise provided. Users may withdraw consent anytime by sending notification to profi-up@mail.ru with the subject "Consent Withdrawal."
8.5. Information collected by third-party services is processed and stored by those services under their policies; the Operator is not responsible for third-party actions.
8.6. Restrictions set by the personal data subject on transfer or processing do not apply when processing is necessary in public or governmental interests under Russian law.
8.7. The Operator ensures confidentiality of personal data during processing.
8.8. Storage of data is limited to the necessary period.
8.9. Processing stops upon achievement of goals, expiration or withdrawal of consent, or unlawful processing detection.
9. List of Actions Performed by the Operator with Personal Data
9.1. The Operator performs collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
9.2. Automated processing may involve transmission over information and telecommunication networks.
10. Cross-Border Transfer of Personal Data
10.1. Before transferring data abroad, the Operator must notify the authorized body for personal data protection separately.
10.2. The Operator must obtain relevant information from foreign recipients before transferring data.
11. Confidentiality of Personal Data
The Operator and other persons with access must not disclose or distribute personal data without the subject’s consent, except as provided by law.
12. Final Provisions
12.1. Users may request clarifications regarding personal data processing by contacting profi-up@mail.ru.
12.2. This Policy will reflect any changes and remains in effect until replaced by a new version.
12.3. The current Policy version is freely accessible at https://inter-pigments.com/policy_en.
This personal data processing policy is drafted in accordance with the requirements of the Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" (hereinafter — the Personal Data Law) and defines the procedure for processing personal data and the measures to ensure the security of personal data taken by INDIVIDUAL ENTREPRENEUR TATIANA ALEKSANDROVNA ANCHUTKINA (hereinafter — the Operator).
1.1. The Operator considers compliance with the rights and freedoms of individuals during the processing of their personal data, including the protection of privacy rights, personal and family secrets, as the most important goal and condition for its activities.
1.2. This Operator’s personal data processing policy (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors to the website https://inter-pigments.com/.
2. Basic Terms Used in the Policy
2.1. Automated processing of personal data — processing personal data using computing equipment.
2.2. Blocking of personal data — temporary suspension of personal data processing (except in cases where processing is necessary to clarify personal data).
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://inter-pigments.com/.
2.4. Personal data information system — a set of personal data contained in databases and information technologies and technical means that ensure their processing.
2.5. Anonymization of personal data — actions as a result of which it is impossible to determine the affiliation of personal data to a specific user or other personal data subject without using additional information.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation means with personal data, including collection, recording, systematization, accumulation, storage, updating (modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
2.7. Operator — a state body, municipal body, legal entity, or individual who independently or jointly with others organizes and/or performs personal data processing and determines the purposes of personal data processing, the composition of personal data to be processed, and the actions performed with personal data.
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable user of the website https://inter-pigments.com/.
2.9. Personal data permitted for dissemination — personal data access to which is provided by the personal data subject to an unlimited number of persons by giving consent to the processing of such personal data permitted for dissemination under the Personal Data Law.
2.10. User — any visitor of the website https://inter-pigments.com/.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or specific group of persons.
2.12. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or providing access to personal data to an unlimited number of persons, including publishing personal data in mass media, placing it in information and telecommunication networks, or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign state authority, foreign individual, or foreign legal entity.
2.14. Destruction of personal data — any actions as a result of which personal data is irreversibly destroyed with the impossibility of further recovery of the content of personal data in the personal data information system and/or the physical destruction of the personal data carriers.
3. Main Rights and Obligations of the Operator
3.1. The Operator has the right to:
— obtain from the personal data subject reliable information and/or documents containing personal data;
— in case of withdrawal of consent by the personal data subject or receipt of a request to stop processing, continue processing personal data without consent if there are legal grounds provided by the Personal Data Law;
— independently determine the list of necessary and sufficient measures to ensure the fulfillment of obligations under the Personal Data Law and related regulations, unless otherwise provided by law.
3.2. The Operator is obliged to:
— provide the personal data subject, upon request, with information regarding the processing of their personal data;
— organize personal data processing in accordance with the current legislation of the Russian Federation;
— respond to inquiries and requests from personal data subjects and their lawful representatives as required by the Personal Data Law;
— provide the authorized body for the protection of personal data subjects’ rights with necessary information upon request within 10 days from the date of such request;
— publish or otherwise provide unrestricted access to this Policy on personal data processing;
— take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions;
— stop the transfer (distribution, provision, access), stop processing, and destroy personal data as required by law;
— perform other duties stipulated by the Personal Data Law.
4. Main Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
— receive information about the processing of their personal data, except in cases provided by federal laws; information is provided in an accessible form without disclosing data related to other subjects unless there are legal grounds;
— require clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the declared processing purpose, and take legal measures to protect their rights;
— set the condition of prior consent for processing personal data for marketing purposes;
— withdraw consent for processing and request cessation of processing;
— appeal to the authorized body or court against unlawful actions or inaction of the Operator;
— exercise other rights under Russian law.
4.2. Personal data subjects must:
— provide the Operator with accurate personal data;
— notify the Operator about any changes or updates to their personal data.
4.3. Persons who provide false information or third-party data without consent bear responsibility under Russian law.
5. Principles of Personal Data Processing
5.1. Processing shall be lawful and fair.
5.2. Processing is limited to specific, pre-defined, and lawful purposes.
5.3. Databases with incompatible processing purposes shall not be combined.
5.4. Only personal data relevant to processing purposes shall be processed.
5.5. The volume and content of processed data shall correspond to declared purposes, avoiding redundancy.
5.6. Data shall be accurate, sufficient, and, when necessary, up to date; measures shall be taken to remove or correct inaccurate data.
5.7. Personal data shall be stored in a form allowing identification no longer than required; data shall be destroyed or anonymized upon achieving processing goals or loss of necessity.
6. Purpose of Personal Data Processing
The purpose is to provide Users access to services, information, and/or materials on the website.
Personal data: full name, email address, phone numbers.
Legal grounds: contracts between the Operator and personal data subjects.
Types of processing: collection, recording, systematization, accumulation, storage, destruction, anonymization.
7. Conditions for Personal Data Processing
7.1. Processing is performed with the subject’s consent.
7.2. Processing is necessary to fulfill functions under international treaties or Russian law.
7.3. Processing is necessary for justice enforcement.
7.4. Processing is necessary to perform or conclude contracts involving the personal data subject.
7.5. Processing is necessary for lawful interests of the Operator or third parties without violating subjects’ rights.
7.6. Processing publicly accessible personal data or upon subject’s request.
7.7. Processing required by law for publication or disclosure.
8. Procedure for Collection, Storage, Transfer, and Other Processing of Personal Data
The security of personal data is ensured by legal, organizational, and technical measures in compliance with applicable laws.
8.1. The Operator ensures personal data confidentiality and prevents unauthorized access.
8.2. Personal data is never disclosed to third parties unless required by law or with consent for contractual obligations.
8.3. Users may update inaccurate personal data by notifying the Operator at profi-up@mail.ru with the subject "Personal Data Update."
8.4. Data retention period corresponds to processing purposes unless otherwise provided. Users may withdraw consent anytime by sending notification to profi-up@mail.ru with the subject "Consent Withdrawal."
8.5. Information collected by third-party services is processed and stored by those services under their policies; the Operator is not responsible for third-party actions.
8.6. Restrictions set by the personal data subject on transfer or processing do not apply when processing is necessary in public or governmental interests under Russian law.
8.7. The Operator ensures confidentiality of personal data during processing.
8.8. Storage of data is limited to the necessary period.
8.9. Processing stops upon achievement of goals, expiration or withdrawal of consent, or unlawful processing detection.
9. List of Actions Performed by the Operator with Personal Data
9.1. The Operator performs collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
9.2. Automated processing may involve transmission over information and telecommunication networks.
10. Cross-Border Transfer of Personal Data
10.1. Before transferring data abroad, the Operator must notify the authorized body for personal data protection separately.
10.2. The Operator must obtain relevant information from foreign recipients before transferring data.
11. Confidentiality of Personal Data
The Operator and other persons with access must not disclose or distribute personal data without the subject’s consent, except as provided by law.
12. Final Provisions
12.1. Users may request clarifications regarding personal data processing by contacting profi-up@mail.ru.
12.2. This Policy will reflect any changes and remains in effect until replaced by a new version.
12.3. The current Policy version is freely accessible at https://inter-pigments.com/policy_en.
*Meta Platforms Inc., the company that owns the social networks Facebook and Instagram, was declared an extremist organization by a court ruling on March 21, 2022, and its activities are prohibited on the territory of Russia.