Personal Data Processing Policy

Version 1.0

1. General Provisions

This Personal Data Processing Policy has been developed in accordance with the requirements of Federal Law No. 152‑FZ dated 27.07.2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and establishes the procedure for processing personal data and the measures to ensure the security of personal data applied by Pupkin I. I. (hereinafter referred to as the “Operator”).

1.1. The Operator considers it a priority task and the main condition for carrying out its activities to respect the rights and freedoms of individuals and citizens when processing their personal data, including the protection of the rights to privacy, personal and family secrets.

1.2. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to the processing of personal data of visitors to the website https://samurai-armor.ru/, applicants, clients, customers and other individuals within the scope of the purposes specified in this Policy.

2. Key concepts used in the Policy

2.1. Automated processing of personal data — the processing of personal data using computer technology.

2.2. Blocking of personal data — the temporary cessation of the processing of personal data (except in cases where the processing is necessary to clarify the personal data).

2.3. A website is a set of graphic and informational materials, as well as computer programs and databases, which ensure their availability on the Internet at the network address https://samurai-armor.ru/.

2.4. An information system for personal data is a set of personal data contained in databases and the information technologies and technical means that ensure their processing.

2.5. Depersonalization of personal data is the process by which it becomes impossible to determine, without using additional information, whether the personal data belongs to a specific User or another subject of personal data.

2.6. Processing of personal data is any action (operation) or a set of actions (operations) performed using automation tools or without such tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (update, modification), extraction, use, transfer (dissemination, provision, access), anonymization, blocking, deletion, and destruction of personal data.

2.7. The operator is a state body, municipal body, legal entity, or individual who, independently or together with other persons, organizes and/or carries out the processing of personal data, as well as determines the purposes of personal data processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.

2.8. Personal data is any information relating to a directly or indirectly identified or identifiable natural person (the subject of personal data).

2.9. User — any visitor to the website https://samurai-armor.ru /.

2.10. Providing personal data is an action aimed at disclosing personal data to a specific person.

2.11. The dissemination of personal data is any actions aimed at disclosing personal data to an undefined group of persons (the transfer of personal data) or at making personal data available to an unlimited number of persons, including the publication of personal data in the media, posting on information and telecommunications networks, or providing access to personal data in any other way.

2.12. The cross‑border transfer of personal data is the transfer of personal data to the territory of a foreign state to a foreign government authority, a foreign individual, or a foreign legal entity.

2.13. Destruction of personal data — any actions as a result of which personal data is destroyed irrevocably, with the impossibility of further recovery of the content of personal data in the information system of personal data, and/or the material carriers of personal data are destroyed.

3. Basic rights and obligations of the Operator

3.1. The Operator has the right:

  • to receive reliable information and/or documents containing personal data from the subject of personal data;
  • in the event that the subject of personal data withdraws consent to the processing of personal data, as well as in the event of submitting a request to stop the processing of personal data, the Operator has the right to continue processing personal data without the consent of the subject of personal data if there are grounds specified in the Law on Personal Data;
  • to independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations stipulated by the Law on Personal Data and the regulatory legal acts adopted in accordance with it, unless otherwise provided for by the Law on Personal Data or other federal laws.

3.2. The operator is obliged to:

  • provide the subject of personal data, upon their request, with information concerning the processing of their personal data;
  • to organize the processing of personal data in accordance with the current legislation of the Russian Federation;
  • to respond to appeals and requests from subjects of personal data and to