Personal Data Processing Policy
1. General Provisions
This personal data processing policy is drawn up in accordance with the requirements of the Federal Law No. 152-FZ "On Personal Data" dated 27.07.2006 (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data, as well as the measures taken by Individual Entrepreneur Bashirova Elizaveta Ruslanovna (hereinafter referred to as the "Operator") to ensure the security of personal data.
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of privacy, personal, and family confidentiality, as its most important goal and condition for conducting its activities.
1.2. This Operator's policy regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may receive about visitors to the website https://moonofwoman.ru.
2. Basic Terms Used in the Policy
2.1. Automated processing of personal data – processing of personal data using computing technology.
2.2. Blocking of personal data – temporary suspension of personal data processing (except in cases where processing is necessary for personal data clarification).
2.3. Website – a collection of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at https://moonofwoman.ru.
2.4. Personal data information system – a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.5. Depersonalization of personal data – actions that make it impossible to determine the ownership of personal data to a specific User or another personal data subject without additional information.
2.6. Processing of personal data – any action (operation) or a set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator – a state or municipal authority, legal or natural person who independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of personal data processing, the composition of personal data subject to processing, and actions (operations) performed with personal data.
2.8. Personal data – any information related directly or indirectly to a specific or identifiable User of the website https://moonofwoman.ru.
2.9. Personal data permitted by the personal data subject for distribution – personal data to which an unlimited number of people have access, provided by the personal data subject by giving consent to the processing of personal data permitted for distribution in accordance with the procedure established by the Personal Data Law (hereinafter referred to as "personal data permitted for distribution").
2.10. User
A user is any visitor to the website https://moonofwoman.ru.
2.11. Provision of personal data
Actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12. Distribution of personal data
Any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or at making personal data available to an unlimited number of persons, including publication in mass media, posting in information and telecommunication networks, or providing access to personal data in any other way.
2.13. Cross-border transfer of personal data
The transfer of personal data to the territory of a foreign state, to a foreign government authority, a foreign individual, or a foreign legal entity.
2.14. Destruction of personal data
Any actions that result in the irreversible destruction of personal data, making it impossible to restore their content in a personal data information system and/or the destruction of physical media containing personal data.
3. Main Rights and Obligations of the Operator3.1. The Operator has the right to:
– Receive accurate information and/or documents containing personal data from the personal data subject.
– Continue processing personal data without the subject’s consent in cases where the processing is permitted by the Personal Data Law.
– Independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations set forth by the Personal Data Law and related regulatory legal acts, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator is obligated to:
– Provide the personal data subject with information regarding the processing of their personal data upon request.
– Organize the processing of personal data in accordance with the current legislation of the Russian Federation.
– Respond to inquiries and requests from personal data subjects and their legal representatives in accordance with the Personal Data Law.
– Provide the authorized body for the protection of personal data subjects' rights with necessary information within 30 days of receiving a request from that body.
– Publish or otherwise ensure unrestricted access to this Personal Data Processing Policy.
– Implement legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as other unlawful actions.
– Cease the transfer (distribution, provision, access) of personal data, stop processing, and destroy personal data in cases specified by the Personal Data Law.
– Fulfill other obligations stipulated by the Personal Data Law.
4. Main Rights and Obligations of Personal Data Subjects4.1. Personal data subjects have the right to:
– Receive information regarding the processing of their personal data, except in cases provided by federal laws. The Operator provides this information in an accessible form, ensuring that it does not contain personal data related to other subjects unless there are legal grounds for disclosure. The list of information and the procedure for obtaining it are established by the Personal Data Law.
– Request the Operator to correct, block, or delete their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the declared purpose of processing, as well as take legal measures to protect their rights.
– Set a condition for prior consent to the processing of their personal data for the purpose of marketing goods, works, and services.
– Withdraw consent for the processing of their personal data.
– Appeal to the authorized body for the protection of personal data subjects' rights or take legal action against unlawful actions or inaction by the Operator in processing their personal data.
– Exercise other rights provided by the legislation of the Russian Federation.
4.2. Personal data subjects are obligated to:
– Provide the Operator with accurate personal data.
– Inform the Operator of any updates (changes, modifications) to their personal data.
4.3. Individuals who provide false information about themselves or information about another personal data subject without their consent are liable in accordance with the legislation of the Russian Federation.5. The Operator May Process the Following User Personal Data5.1.
– Last name, first name, and middle name.
– Email address.
– Phone numbers.
5.2.
The website also collects and processes anonymized visitor data (including cookies) using internet analytics services (Yandex Metrica, Google Analytics, and others).
5.3.
The aforementioned data is collectively referred to as "Personal Data" in this Policy.
5.4.
The Operator does not process special categories of personal data related to racial or ethnic origin, political opinions, religious or philosophical beliefs, or intimate life.
5.5.
Processing of personal data permitted for distribution from among the special categories of personal data specified in Article 10(1) of the Personal Data Law is allowed if the prohibitions and conditions established by Article 10.1 of the Personal Data Law are observed.
5.6.
The User's consent to the processing of personal data permitted for distribution is documented separately from other consents for the processing of their personal data. This consent must comply with the conditions established in Article 10.1 of the Personal Data Law. The requirements for the content of such consent are determined by the authorized body for the protection of personal data subjects' rights.
5.8.1.
The User provides consent for the processing of personal data permitted for distribution directly to the Operator.
5.8.2.
The Operator is required to publish information about the processing conditions, as well as any restrictions and conditions on processing personal data permitted for distribution by an unlimited number of persons, no later than three working days from the moment of receiving the User’s consent.
5.8.3.
The transfer (distribution, provision, access) of personal data permitted for distribution by the personal data subject must be stopped at any time at the request of the personal data subject. This request must include the last name, first name, and middle name (if available), contact information (phone number, email address, or postal address) of the personal data subject, as well as a list of personal data for which processing should be discontinued. The personal data specified in this request may only be processed by the Operator to whom the request is addressed.
5.8.4.
Consent to the processing of personal data permitted for distribution ceases to be effective upon receipt by the Operator of the request specified in Clause 5.8.3 of this Personal Data Processing Policy.
6. Principles of Personal Data Processing6.1.
The processing of personal data is carried out on a lawful and fair basis.
6.2.
The processing of personal data is limited to achieving specific, predetermined, and legitimate purposes. The processing of personal data that is incompatible with the purposes of data collection is not allowed.
6.3.
The merging of databases containing personal data that are processed for purposes incompatible with each other is not allowed.
6.4.
Only personal data that meets the purposes of processing is subject to processing.
6.5.
The content and volume of processed personal data must correspond to the declared purposes of processing. The processing of excessive personal data in relation to the stated purposes is not allowed.
6.6.
When processing personal data, the accuracy, sufficiency, and, when necessary, relevance of the data in relation to the purposes of its processing must be ensured. The Operator takes necessary measures and/or ensures that necessary measures are taken to delete or clarify incomplete or inaccurate data.
6.7.
Personal data is stored in a form that allows identifying the personal data subject no longer than required for the purposes of processing, unless a longer storage period is established by federal law, a contract to which the personal data subject is a party, a beneficiary, or a guarantor. The processed personal data must be destroyed or anonymized upon achieving the purposes of processing or if there is no longer a need to achieve those purposes, unless otherwise provided by federal law.
7. Purposes of Personal Data Processing7.1.
The purpose of processing the User’s personal data:
– Informing the User via email notifications.
– Conclusion, execution, and termination of civil law contracts.
– Providing the User with access to services, information, and/or materials available on the website https://moonofwoman.ru.
7.2.
The Operator is also entitled to send notifications to the User regarding new products and services, special offers, and various events. The User can always opt out of receiving informational messages by sending an email to the Operator at info@moonofwoman.ru with the subject line "Unsubscribe from notifications about new products and special offers."
7.3.
Anonymized User data collected via internet analytics services is used to gather information about User actions on the website, improve its quality, and enhance its content.
8. Legal Basis for Personal Data Processing8.1.
The legal bases for the processing of personal data by the Operator include:
– Regulatory legal acts governing activities related to the Operator's field of work (e.g., the Federal Law "On Information, Information Technologies, and Information Protection" No. 149-FZ of 27.07.2006).
– The Operator’s charter documents.
– Contracts concluded between the Operator and the personal data subject.
– Federal laws and other regulatory legal acts on personal data protection.
– User consent for the processing of their personal data, including consent for the processing of personal data permitted for distribution.
8.2.
The Operator processes the User's personal data only if it is voluntarily provided by the User through special forms on the website https://moonofwoman.ru or sent to the Operator via email. By filling out these forms and/or sending their personal data to the Operator, the User agrees to this Policy.
8.3.
The Operator processes anonymized User data if the User has enabled such data collection in their browser settings (e.g., allowing the use of cookies and JavaScript technology).
8.4.
The personal data subject independently decides to provide their personal data and gives consent freely, by their own will, and in their own interest.
9. Conditions for Personal Data Processing9.1.
Personal data is processed with the consent of the personal data subject.
9.2.
Personal data processing is necessary for achieving purposes provided for by international treaties of the Russian Federation or laws, as well as for performing functions, powers, and obligations assigned to the Operator by Russian legislation.
9.3.
Personal data processing is necessary for the administration of justice, execution of court rulings, or execution of other legal acts subject to enforcement under Russian law.
9.4.
Personal data processing is necessary for the performance of a contract in which the personal data subject is a party, a beneficiary, or a guarantor, as well as for concluding a contract at the initiative of the personal data subject or a contract in which the personal data subject will be a beneficiary or guarantor.
9.5.
Personal data processing is necessary for the exercise of the rights and legitimate interests of the Operator or third parties, provided that such processing does not violate the rights and freedoms of the personal data subject.
9.6.
Processing of publicly available personal data is carried out when the personal data subject has provided access to an unlimited number of people or has requested such access.
9.7.
Processing of personal data subject to publication or mandatory disclosure is carried out in accordance with federal law.
10. Procedure for Collecting, Storing, Transmitting, and Other Types of Personal Data Processing10.1.
The security of personal data processed by the Operator is ensured through legal, organizational, and technical measures necessary for full compliance with current legislation on personal data protection.
10.2.
The Operator ensures the security of personal data and takes all possible measures to prevent unauthorized access.
10.3.
The User's personal data will never be transferred to third parties under any circumstances, except as required by law or when the personal data subject has given explicit consent for such transfer to fulfill contractual obligations.
10.4.
If inaccuracies in personal data are identified, the User can update them by sending a request to info@moonofwoman.ru with the subject line "Personal Data Update."
10.5.
The processing period for personal data is determined by the achievement of processing purposes, unless a different period is specified by law or contract. The User may revoke consent for personal data processing at any time by sending an email to info@moonofwoman.ru with the subject line "Revocation of Personal Data Processing Consent."
10.6.
Information collected by third-party services, such as payment systems and communication service providers, is stored and processed by those entities according to their terms of service and privacy policies. The personal data subject must independently review those policies, as the Operator is not responsible for third-party service providers.
10.7.
The prohibitions set by the personal data subject on the transfer (except for access provision) and processing conditions do not apply when processing is necessary for state, public, or other legally significant interests.
10.8.
The Operator ensures the confidentiality of personal data.
10.9.
Personal data processing is terminated upon achieving processing purposes, expiration of consent, revocation of consent, or detection of unlawful data processing.
11. List of Actions Performed by the Operator with Collected Personal Data11.1.
The Operator performs the collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
11.2.
The Operator carries out automated processing of personal data, including the receipt and/or transmission of the obtained information through information and telecommunication networks or without such transmission.
12. Cross-Border Transfer of Personal Data12.1.
Before carrying out the cross-border transfer of personal data, the Operator must ensure that the foreign country to which the personal data is to be transferred provides reliable protection of the rights of personal data subjects.
12.2.
The cross-border transfer of personal data to foreign countries that do not meet the above requirements may be carried out only with the written consent of the personal data subject for such transfer and/or for the execution of a contract in which the personal data subject is a party.
13. Confidentiality of Personal Data
The Operator and other persons who have gained access to personal data are required not to disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by federal law.
14. Final Provisions14.1.
The User may obtain any clarifications regarding questions related to the processing of their personal data by contacting the Operator via email at info@moonofwoman.ru.
14.2.
Any changes to the Operator’s personal data processing policy will be reflected in this document. The Policy remains in effect indefinitely until it is replaced by a new version.
14.3.
The current version of the Policy is freely available on the Internet at https://moonofwoman.ru.
