Privacy Policy on Personal Data Processing 1. General ProvisionsThis Personal Data Processing Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006,
“On Personal Data” (hereinafter referred to as the “Personal Data Law”) and defines the procedure for processing personal data and measures to ensure their security, undertaken by
Arna Sacman (hereinafter referred to as the “Operator”).
1.1. The Operator’s main goal and condition for conducting its activities is to respect the rights and freedoms of individuals and citizens when processing their personal data, including the protection of privacy, personal and family secrets.
1.2. This Policy applies to all information that the Operator may obtain about visitors to the website
https://arnasacman.com/.
2. Basic Terms Used in the Policy2.1.
Automated processing of personal data — processing using computing equipment.
2.2.
Blocking of personal data — temporary suspension of processing (except where processing is required to clarify data).
2.3.
Website — a collection of graphic and informational materials, as well as software and databases, available on the Internet at
https://arnasacman.com/.
2.4.
Information system of personal data — a set of personal data contained in databases and technologies used for their processing.
2.5.
Depersonalization of personal data — actions that make it impossible to identify a specific User without additional information.
2.6.
Processing of personal data — any action or set of actions performed with or without automation tools, including collection, recording, systematization, accumulation, storage, updating, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction of personal data.
2.7.
Operator — a public authority, legal or natural person that independently or jointly organizes and/or carries out personal data processing, and determines the purposes and scope of such data.
2.8.
Personal data — any information relating directly or indirectly to a specific or identifiable User of
https://arnasacman.com/.
2.9.
Personal data permitted by the data subject for dissemination — data made publicly available by the data subject in accordance with the Personal Data Law.
2.10.
User — any visitor of the website
https://arnasacman.com/.
2.11.
Provision of personal data — actions aimed at disclosing personal data to a specific person or group of persons.
2.12.
Dissemination of personal data — any actions aimed at disclosing personal data to an unlimited number of persons.
2.13.
Cross-border transfer of personal data — transfer to the territory of a foreign state.
2.14.
Destruction of personal data — any actions resulting in irreversible destruction of personal data without the possibility of recovery.
3. Rights and Obligations of the Operator3.1. The Operator has the right to:
- receive accurate information and/or documents containing personal data from the data subject;
- continue processing personal data without consent if allowed under the Personal Data Law;
- determine the necessary measures to ensure compliance with the Personal Data Law.
3.2. The Operator must:
- provide information to the data subject about their personal data processing upon request;
- organize processing in accordance with Russian law;
- respond to data subject requests;
- notify the authorized body on data protection upon request within 10 days;
- publish and maintain unrestricted access to this Policy;
- implement measures to protect personal data from unauthorized access, alteration, or destruction;
- cease processing and destroy personal data as required by law.
4. Rights and Obligations of Data Subjects4.1. Data subjects have the right to:
- obtain information on their personal data processing;
- request correction, blocking, or deletion of incomplete or inaccurate data;
- withdraw consent to processing;
- file complaints to the authorized data protection body or in court.
4.2. Data subjects must:
- provide accurate personal data;
- inform the Operator of updates.
4.3. Individuals providing false information bear responsibility under Russian law.
- 5. Principles of Personal Data ProcessingProcessing must be lawful and fair.
- Data must only be processed for specific, legitimate purposes.
- Combining incompatible databases is prohibited.
- Only data relevant to processing purposes may be processed.
- Accuracy and relevance of data must be ensured.
- Data storage must not exceed the period necessary for processing purposes.
6. Purpose of Data Processing
Purpose: providing the User with access to services, information, and materials on the website.
Personal Data: name, email address, phone number.
Legal Grounds: the Operator’s founding documents.
Processing Types: collection, recording, accumulation, storage, destruction, depersonalization, and informational email distribution.
7. Conditions for ProcessingProcessing may occur:
- with consent of the data subject;
- to fulfill legal obligations or court orders;
- to execute a contract with the User;
- to protect the Operator’s or third-party legitimate interests;
- with publicly available data or when required by law.
8. Procedure for Collection, Storage, Transfer, and Other ProcessingThe Operator ensures security through legal, organizational, and technical measures.
- Personal data will never be transferred to third parties without consent, except when required by law.
- Users can update their data by emailing webandprintsolution@gmail.com with the subject “Update of Personal Data.”
- Users may withdraw consent by sending an email to the same address with the subject “Withdrawal of Consent.”
- Third-party services (e.g., payment systems) handle data according to their own privacy policies.
- The Operator ensures confidentiality and stores data only as long as necessary to achieve processing purposes.
9. Actions Performed by the OperatorThe Operator collects, records, systematizes, stores, updates, uses, transmits, depersonalizes, blocks, deletes, and destroys personal data, including through automated processing.
10. Cross-Border Data TransferBefore transferring data abroad, the Operator must notify the authorized data protection body and ensure that the foreign entity provides adequate data protection guarantees.
11. ConfidentialityThe Operator and any persons having access to personal data must not disclose or distribute it without the subject’s consent, unless otherwise required by law.
- 12. Final ProvisionsUsers may contact the Operator for any questions regarding personal data processing at webandprintsolution@gmail.com.
- Any changes to this Policy will be reflected in this document.
- The Policy is valid indefinitely until replaced by a new version.
- The current version is available at https://arnasacman.com/privacy.