Privacy Policy (Personal Data Processing)

1. General provisions

The operator processes personal data lawfully, fairly, and only for specific predefined purposes.

Operator details and data-subject contact channels are published at /privacy/operator.

2. Definitions

• •Personal data means any information relating to an identified or identifiable natural person.
• •Data subject means the site user.
• •Processing includes collection, recording, storage, use, transfer, blocking, deletion, and related operations.
• •Cookies and identifiers (including local storage and session/device identifiers) may qualify as personal data depending on context.

3. Legal bases for processing

• •Contract performance (orders, payments, delivery, returns).
• •Data-subject consent (mailings, analytics/marketing cookies, profiling).
• •Legitimate interest (security, anti-fraud, claims handling) subject to user rights safeguards.

4. Data categories and scope

• •Visitors, customers, support users, and marketing subscribers (where consent is provided).
• •Identity/contact details, delivery details, order data, transaction status metadata.
• •Technical data (IP, device/browser metadata, logs, identifiers).
• •Support correspondence and attachments submitted by the user.

5. Processing purposes

• •Authentication and account-related functionality (where available).
• •Order lifecycle execution and user support.
• •Service notifications and legal compliance obligations.
• •Security and abuse prevention.
• •Analytics and product improvement on opt-in basis when non-essential tracking is used.
• •Marketing communication only with explicit opt-in and unsubscribe options.

6. Processors and transfers

The operator may engage processors (hosting, payments, delivery, CRM, messaging, analytics) under data processing agreements and strict need-to-know scope.

Processor categories and purposes are listed at /privacy/processors.

7. Russian data localization

For Russian citizens, primary recording and storage are performed in databases located in the Russian Federation in line with Article 18.1 of 152-FZ.

A high-level localization overview is published at /privacy/localization.

8. Cross-border transfers

Cross-border processing, where applicable, follows Article 12 of 152-FZ and internal compliance procedures.

Applicable scenarios, destination countries, and legal grounds are published at /privacy/crossborder.

9. Cookies and similar technologies

• •Necessary cookies are always enabled for core functionality and security.
• •Functional, analytics, and marketing categories are managed through opt-in consent preferences.
• •Analytics/marketing trackers are not activated before consent.
• •Users can update choices any time via the “Cookie settings” link.

10. Retention periods

Data is retained no longer than required for processing purposes unless a longer legal retention period applies.

A retention matrix is published at /privacy/retention.

11. Data subject rights

• •Access processing information.
• •Request rectification, restriction, or deletion where legally applicable.
• •Withdraw consent where consent is the legal basis.
• •Challenge operator actions or inaction via lawful channels.

12. Security

The operator implements legal, organizational, and technical safeguards including access controls, logging, encryption in transit, backup procedures, vulnerability management, and incident response.

13. Policy updates

The operator may update this policy. The latest version is published on the site with an updated effective date.

要提交数据主体请求，请使用表格 提交请求