1. General ProvisionsThis Privacy Policy on personal data processing has been prepared in accordance with Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter referred to as the “Personal Data Law”) and defines the procedure for processing personal data and the measures taken by Individual Entrepreneur Vladislav Olegovich Godunov (hereinafter referred to as the “Operator”) to ensure the security of personal data.
1.1. The Operator considers the observance of human and civil rights and freedoms during the processing of personal data to be one of its primary objectives and essential conditions of its activity, including the protection of the right to privacy, personal and family secrets.
1.2. This Privacy Policy (hereinafter — the “Policy”) applies to all information that the Operator may obtain about visitors to the website https://gdnv.ru/.
2. Basic Terms Used in the Policy2.1. Automated processing of personal data — processing of personal data using computing equipment.
2.2. Blocking of personal data — temporary suspension of personal data processing (except where processing is required to clarify personal data).
2.3. Website — a collection of graphical and informational materials as well as software and databases ensuring their accessibility on the Internet at https://gdnv.ru/.
2.4. Information system of personal data — a set of personal data contained in databases and the information technologies and technical means enabling their processing.
2.5. Anonymization of personal data — actions that make it impossible to identify a specific User or other data subject without additional information.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, or destruction of personal data.
2.7. Operator — a state or municipal authority, legal or natural person, independently or jointly with others organizing and/or carrying out the processing of personal data, determining the purposes of processing, the composition of personal data to be processed, and the actions performed with such data.
2.8. Personal data — any information directly or indirectly related to an identified or identifiable User of the website https://gdnv.ru/.
2.9. Personal data made publicly available by the data subject — personal data to which an unlimited number of persons have been granted access by the data subject through consent in accordance with the Personal Data Law.
2.10. User — any visitor to the website https://gdnv.ru/.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a defined group of persons.
2.12. Distribution of personal data — actions aimed at disclosing personal data to an indefinite number of persons or providing access to personal data, including publication in the media, posting online, or granting access by other means.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state, to a foreign state authority, a foreign individual, or a foreign legal entity.
2.14. Destruction of personal data — any actions that result in the irreversible destruction of personal data without the possibility of recovery and/or destruction of physical data carriers.
3. Operator’s Basic Rights and Obligations3.1. The Operator has the right to:
— receive from the data subject reliable information and/or documents containing personal data;
— continue processing personal data without the consent of the data subject in cases provided by the Personal Data Law (e.g., withdrawal of consent does not prevent processing under legal grounds);
— independently determine the composition and list of measures necessary and sufficient to ensure compliance with the Personal Data Law.
3.2. The Operator is obliged to:
— provide the data subject, upon request, with information regarding the processing of their personal data;
— organize personal data processing in accordance with applicable legislation of the Russian Federation;
— respond to requests and inquiries from data subjects or their legal representatives in accordance with the Personal Data Law;
— provide the authorized data protection authority with requested information within 10 days from receipt of such a request;
— publish or otherwise ensure unrestricted access to this Policy;
— implement legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, or other unlawful actions;
— cease dissemination or provision of personal data and destroy them as required by law;
— fulfill other obligations stipulated by the Personal Data Law.
4. Rights and Obligations of Personal Data Subjects4.1. Personal data subjects have the right to:
— obtain information regarding the processing of their personal data, except as provided by federal law;
— request correction, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose;
— require prior consent for processing of their personal data for marketing purposes;
— withdraw their consent to processing or demand termination of processing;
— appeal unlawful actions or omissions of the Operator to the authorized data protection authority or in court;
— exercise other rights provided by the legislation of the Russian Federation.
4.2. Personal data subjects must:
— provide the Operator with accurate information about themselves;
— inform the Operator of updates (changes) to their personal data.
4.3. Persons who have provided false information or personal data of another individual without consent bear responsibility under Russian law.
5. Principles of Personal Data Processing5.1. Processing of personal data is carried out on a lawful and fair basis.
5.2. Processing is limited to the achievement of specific, predetermined, and legitimate purposes. Processing incompatible with these purposes is not permitted.
5.3. It is prohibited to combine databases containing personal data processed for incompatible purposes.
5.4. Only personal data relevant to the purposes of processing shall be processed.
5.5. The scope and content of processed personal data must correspond to the declared purposes; excessive data processing is not allowed.
5.6. Accuracy, sufficiency, and relevance of personal data must be ensured; inaccurate or incomplete data must be deleted or clarified.
5.7. Personal data shall be stored in a form that allows identification of the data subject no longer than necessary for the purposes of processing, unless otherwise provided by law or contract. Upon achievement of the processing purposes or loss of necessity, personal data shall be deleted or anonymized.
6. Purpose of Personal Data ProcessingPurpose: clarifying order details
Personal data:
– full name
– email address
– phone numbers
– company name, social media nickname, project/budget details
Legal basis: Operator’s founding documents
Types of processing: collection, recording, systematization, accumulation, storage, destruction, and anonymization of personal data; sending informational emails.
7. Conditions for Personal Data Processing7.1.–7.7. Processing of personal data is performed with the consent of the data subject or on other lawful grounds, including execution of contracts, fulfillment of legal obligations, administration of justice, protection of legitimate interests, and processing of publicly available or legally disclosed data.
8. Procedure for Collection, Storage, Transfer, and Other ProcessingThe Operator ensures the security of processed personal data through legal, organizational, and technical measures required for full compliance with personal data protection legislation.
8.1. The Operator ensures confidentiality and takes all possible measures to prevent unauthorized access.
8.2. Personal data will never be transferred to third parties except as required by law or with the data subject’s consent.
8.3. If inaccuracies are found, the User may update their data by emailing the Operator at godunovlad@gmail.com with the subject “Personal Data Update”.
8.4. The processing period is determined by the purposes of collection, unless otherwise established by law or contract. The User may withdraw consent at any time by emailing godunovlad@gmail.com with the subject “Withdrawal of Consent for Personal Data Processing”.
8.5. Data collected by third-party services (e.g., payment systems, communications providers, or other service suppliers) are stored and processed by such parties under their own User Agreements and Privacy Policies. The Operator is not responsible for the actions of such third parties.
8.6.–8.9. The Operator maintains confidentiality, ensures lawful storage, and terminates processing upon achievement of purposes, expiration of consent, or detection of unlawful processing.
9. Actions Performed by the Operator with Personal Data9.1. The Operator performs collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
9.2. Automated processing may be performed with or without data transmission over telecommunication networks.
10. Cross-Border Transfer of Personal Data10.1. Prior to cross-border data transfer, the Operator must notify the authorized supervisory authority.
10.2. Before such notification, the Operator must obtain relevant information from the foreign authorities or entities receiving the data.
11. Confidentiality of Personal DataThe Operator and any persons granted access to personal data shall not disclose or distribute such data to third parties without the consent of the data subject, unless otherwise required by federal law.
12. Final Provisions12.1. Users may request clarification regarding the processing of their personal data by contacting the Operator at godunovlad@gmail.com.
12.2. Any amendments to this Policy will be reflected in this document. The Policy remains effective indefinitely until replaced by a new version.
12.3. The current version of this Policy is publicly available on the Internet at https://gdnv.ru/privacy.