General ProvisionsThis personal data processing policy is drafted in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006, “On Personal Data” (hereinafter referred to as the “Personal Data Law”) and defines the procedure for processing personal data and measures to ensure the security of personal data taken by Mikhailov Ivan Sergeevich (hereinafter referred to as the “Operator”).
1.1. The Operator’s primary goal and condition for carrying out its activities is to ensure the observance of human and civil rights and freedoms during the processing of personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. This Operator’s Personal Data Processing Policy (hereinafter — the “Policy”) applies to all information that the Operator may obtain about visitors of the website
https://duckside.store/.
Basic Terms Used in the Policy2.1.
Automated processing of personal data — processing of personal data using computer technology.
2.2.
Blocking of personal data — temporary suspension of the processing of personal data (except when processing is necessary to clarify personal data).
2.3.
Website — a set of graphic and informational materials, as well as computer programs and databases, ensuring their accessibility on the Internet at the network address
https://duckside.store/.
2.4.
Information system of personal data — a set of personal data contained in databases, along with information technologies and technical tools that enable their processing.
2.5.
Anonymization of personal data — actions resulting in the impossibility of determining, without the use of additional information, the affiliation of personal data to a specific User or another subject of personal data.
2.6.
Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
2.7.
Operator — a state or municipal authority, legal or natural person, independently or jointly with others organizing and/or performing the processing of personal data, as well as determining the purposes and composition of the processed personal data and actions performed with it.
2.8.
Personal data — any information relating directly or indirectly to a specific or identifiable User of the website
https://duckside.store/.
2.9.
Personal data permitted for distribution — personal data to which an unlimited number of persons has access through the subject’s consent to the processing of such data in accordance with the Personal Data Law.
2.10.
User — any visitor of the website
https://duckside.store/.
2.11.
Provision of personal data — actions aimed at disclosing personal data to a specific person or a certain circle of persons.
2.12.
Distribution of personal data — any actions aimed at disclosing personal data to an indefinite number of persons or granting access to personal data in any way.
2.13.
Cross-border transfer of personal data — the transfer of personal data to the territory of a foreign state to a foreign government authority, individual, or legal entity.
2.14.
Destruction of personal data — any actions resulting in the irreversible destruction of personal data, making further recovery impossible.
Operator’s Main Rights and Obligations3.1. The Operator has the right to:
— receive accurate information and/or documents containing personal data from the subject of personal data;
— continue processing personal data without the subject’s consent in cases provided by the Personal Data Law;
— independently determine the measures necessary to ensure compliance with the requirements of the Personal Data Law.
3.2. The Operator must:
— provide the subject of personal data with information about its processing upon request;
— organize processing in accordance with applicable Russian law;
— respond to requests and inquiries from data subjects;
— report required information to the authorized supervisory body within 10 days of request;
— publish or otherwise make this Policy publicly available;
— take legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, modification, or dissemination;
— stop processing and destroy personal data in the cases provided by law.
Rights and Obligations of Personal Data Subjects4.1. Subjects of personal data have the right to:
— obtain information about the processing of their personal data;
— request correction, blocking, or deletion of inaccurate or unlawfully obtained data;
— withdraw consent to processing;
— file complaints with the supervisory authority or court;
— exercise other rights provided by Russian law.
4.2. Subjects must:
— provide accurate data;
— inform the Operator about updates or corrections.
4.3. Persons who provide false data are liable under Russian law.
Principles of Personal Data ProcessingProcessing must be lawful, fair, limited to specific, legitimate purposes, and correspond to those purposes in scope and content. Personal data must be accurate, sufficient, and up to date. Storage shall not exceed the time required for processing purposes.
Purposes of Processing Personal DataPurpose: Informing the User via email.
Personal Data: full name, email address, phone numbers.
Legal Basis: Operator’s founding documents.
Processing Types: collection, storage, destruction, anonymization, and sending information emails.
Conditions for ProcessingPersonal data is processed with the subject’s consent or when required by law, for contract execution, public interest, or legitimate interests of the Operator not violating the subject’s rights.
Collection, Storage, Transfer, and Other Processing ProceduresThe Operator ensures security by implementing legal, organizational, and technical measures.
8.1. The Operator guarantees data protection against unauthorized access.
8.2. Personal data is never shared with third parties unless required by law or consented to by the User.
8.3. To update personal data, Users can send a request to
duckside000@gmail.com with the subject “Updating personal data.”
8.4. The processing duration corresponds to the achievement of stated purposes unless otherwise required by law. Consent withdrawal can be done via email with the subject “Withdrawal of consent to process personal data.”
8.5. Information collected by third-party services (payment systems, communications, etc.) is processed according to their own privacy policies. The Operator is not responsible for third-party actions.
8.6. Restrictions set by the subject do not apply when processing is carried out for public or state interests as defined by Russian law.
8.7. The Operator ensures confidentiality and stores personal data only as long as needed.
8.9. Processing ends upon achieving its purposes, expiration of consent, or identification of unlawful processing.
List of Actions with Personal DataThe Operator performs collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction of personal data, including automated processing through communication networks.
Cross-Border Transfer of Personal DataBefore initiating cross-border data transfer, the Operator must notify the authorized supervisory body and obtain necessary confirmations from foreign recipients.
Confidentiality of Personal DataThe Operator and other persons with access to personal data must not disclose or distribute it without the subject’s consent unless required by law.
Final Provisions12.1. Users may contact the Operator for clarification regarding personal data processing by email at
duckside000@gmail.com.
12.2. Any changes to this Policy will be reflected in this document. The Policy remains in effect until replaced by a new version.
12.3. The current version of the Policy is publicly available at
https://duckside.store/privacy-policy.