Informational translation of the website's existing policy, not a new legal policy. The Russian original remains available.
1. General provisions
This Personal Data Processing Policy has been prepared in accordance with Federal Law No. 152-FZ of 27 July 2006, “On Personal Data” (the “Personal Data Law”). It defines the processing procedure and security measures adopted by Individual Entrepreneur Artyom Viktorovich Kibus, registration number 322330000006560, taxpayer identification number 772883319644 (the “Operator”).
1.1. The Operator treats respect for human and civil rights and freedoms during personal data processing, including privacy and personal and family confidentiality, as a principal objective and condition of its activities.
1.2. This Policy applies to all information the Operator may obtain about visitors to https://mikrozor.ru.
2. Terms used in this Policy
2.1. Automated processing: Processing personal data using computing equipment.
2.2. Blocking: Temporarily suspending processing, except where processing is necessary to clarify the data.
2.3. Website: The collection of graphic and informational materials, software and databases available online at https://mikrozor.ru.
2.4. Personal data information system: Personal data held in databases together with the information technologies and technical means used to process it.
2.5. Anonymization: Actions making it impossible, without additional information, to identify which User or other data subject the data relates to.
2.6. Processing: Any action or combination of actions involving personal data, automated or otherwise, including collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, distribution, provision, access, anonymization, blocking, deletion and destruction.
2.7. Operator: A public authority, municipal authority, legal entity or individual that independently or jointly organizes or performs processing and determines its purposes, the data to be processed and the operations performed.
2.8. Personal data: Any information directly or indirectly relating to an identified or identifiable User of https://mikrozor.ru.
2.9. Personal data authorized for dissemination: Data made accessible to an unlimited number of persons by the subject's consent in accordance with the Personal Data Law.
2.10. User: Any visitor to https://mikrozor.ru.
2.11. Provision: Actions disclosing personal data to a specific person or group.
2.12. Distribution: Actions disclosing data to an indefinite group, or allowing an unlimited number of persons to access it, including publication in the media, telecommunications networks or by other means.
2.13. Cross-border transfer: Transfer of data to a foreign state's authority or to a foreign individual or legal entity.
2.14. Destruction: Irreversible destruction of data so its contents cannot be restored, or destruction of physical media containing it.
3. The Operator's principal rights and obligations
3.1. The Operator may:
- Obtain accurate information and documents containing personal data from the data subject.
- Continue processing after consent is withdrawn or a request to stop processing is sent to oteleskopah@gmail.com, where grounds exist under the Personal Data Law.
- Independently determine sufficient measures to fulfill obligations under the Personal Data Law and related regulations, unless otherwise required by law.
3.2. The Operator must:
- Provide the subject, on request, with information concerning the processing of their data.
- Organize processing as required by Russian legislation.
- Respond to subjects and their legal representatives in accordance with the Personal Data Law.
- Provide the authorized personal data protection authority with requested information within ten days of receiving a request.
- Publish this Policy or otherwise make it freely accessible.
- Take legal, organizational and technical measures against unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution and other unlawful actions.
- Stop transfer and processing and destroy data in the cases and manner prescribed by law.
- Fulfill other obligations under the Personal Data Law.
4. Data subjects' principal rights and obligations
4.1. Data subjects may:
- Obtain information about the processing of their data, except where federal law provides otherwise. Information must be understandable and must not disclose another subject's data unless lawful grounds exist. The information and procedure are specified by the Personal Data Law.
- Require clarification, blocking or destruction of incomplete, outdated, inaccurate, unlawfully obtained or unnecessary data, and use legal measures to protect their rights.
- Require prior consent for processing intended to market goods, works or services.
- Withdraw consent and request that processing stop.
- Appeal the Operator's unlawful actions or inaction to the authorized authority or a court.
- Exercise other rights under Russian legislation.
4.2. Subjects must provide accurate information and inform the Operator of updates or changes.
4.3. Persons providing inaccurate information about themselves, or another person's data without that person's consent, are responsible under Russian legislation.
5. Processing principles
5.1. Processing is lawful and fair.
5.2. Processing is limited to specific, predetermined and legitimate purposes. Processing incompatible with the purposes of collection is not permitted.
5.3. Databases containing data processed for incompatible purposes must not be combined.
5.4. Only data relevant to the processing purposes is processed.
5.5. The contents and volume of data must correspond to the stated purposes and must not be excessive.
5.6. Data must be accurate, sufficient and, where necessary, up to date. The Operator takes or ensures measures to remove or clarify incomplete or inaccurate information.
5.7. Data is stored in an identifiable form only as long as necessary for the processing purposes, unless a different period is established by law or a relevant contract. It is destroyed or anonymized when those purposes are achieved or processing is no longer needed, unless federal law provides otherwise.
6. Processing purposes
| Item | Description |
|---|---|
| Purposes | Providing services and feedback; entering into, performing and terminating civil-law contracts; email communication; traffic analysis and service improvement; access to website services, information and materials. |
| Data | Surname, first name and patronymic; email; phone numbers; event venue address for orders; other information submitted in website forms; IP address, browser information and cookies. |
| Legal grounds | Contracts between the Operator and the subject; Federal Law No. 149-FZ of 27 July 2006, “On Information, Information Technologies and Information Protection”. |
| Operations | Collection, recording, systematization, storage, clarification, use, transfer, blocking, anonymization and deletion. |
7. Processing conditions
7.1. Processing takes place with the data subject's consent.
7.2. Processing is necessary to fulfill purposes established by an international treaty or law and to perform functions, powers and duties imposed on the Operator by Russian legislation.
7.3. Processing is necessary for the administration of justice or enforcement of a court ruling or another enforceable authority's or official's act.
7.4. Processing is necessary to perform a contract involving the subject as a party, beneficiary or guarantor, or to enter into a contract at the subject's initiative.
7.5. Processing is necessary to exercise the Operator's or third parties' rights and legitimate interests, or to achieve socially significant objectives, provided the subject's rights and freedoms are not infringed.
7.6. Processing includes data made publicly accessible by the subject or at their request.
7.7. Processing includes data subject to mandatory publication or disclosure under federal law.
8. Collection, storage, transfer and other processing
Security is supported by legal, organizational and technical measures necessary to meet applicable personal data protection requirements.
8.1. The Operator protects the data and takes possible measures to prevent unauthorized access.
8.2. User data is not transferred to third parties except as required by applicable legislation, or with the subject's consent where necessary to perform civil-law obligations.
8.3. A User may correct inaccuracies by emailing oteleskopah@gmail.com with the subject “Personal data update”.
8.4. Processing lasts until the collection purposes are achieved unless a contract or law sets another period. A User may withdraw consent at any time by emailing the Operator with the subject “Withdrawal of personal data consent”.
8.5. Information collected by third-party services, including payment systems, communications services and other providers, is stored and processed by those parties under their own user agreements and privacy policies. The Operator is not responsible for their actions.
8.6. Restrictions imposed by a subject on transfer, processing or processing conditions for data authorized for dissemination do not apply to processing in state, public or other public interests defined by Russian legislation, subject to the exceptions stated in the original policy.
8.7. The Operator maintains confidentiality during processing.
8.8. Identifiable data is retained only as long as required by the purposes, unless federal law or a relevant contract determines a period.
8.9. Processing may stop when purposes are achieved, consent expires or is withdrawn, the subject requests termination or unlawful processing is identified.
9. Operations performed by the Operator
9.1. The Operator collects, records, systematizes, stores, clarifies, retrieves, uses, transfers, distributes, provides access to, anonymizes, blocks, deletes and destroys data.
9.2. Automated processing may involve receiving or transmitting information through telecommunications networks or take place without such transmission.
9.3. The original policy states that cookies and similar technologies support usability, statistics and service improvement through services such as Yandex Metrica and Google Analytics. Users can disable cookies in their browser, which may affect website operation.
10. Cross-border transfer
10.1. The original policy states that cross-border transfer is subject to appropriate protection under Russian legislation. It identifies:
Google LLC (USA): Gmail and Google Analytics.
11. Confidentiality and third parties
Data may be transferred to third parties in the Russian Federation where necessary for the purposes or with the User's consent. The original policy identifies:
- Yandex LLC (Russia): Yandex Metrica.
- Sprinthost LLC (Russia): Hosting provider.
12. Final provisions
12.1. Questions about processing can be sent to oteleskopah@gmail.com.
12.2. Changes to the Operator's processing policy will be reflected in this document. The Policy remains effective until replaced.
12.3. The current Russian version is freely available at https://mikrozor.ru/politika-konfidencialnosti/.