1. General Provisions
This Personal Data Processing Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and the measures taken to ensure the security of personal data by Anna Deynega (hereinafter referred to as the Operator).
1.1. The Operator considers the observance of human and civil rights and freedoms when processing personal data, including the protection of the right to privacy and personal and family confidentiality, to be the most important goal and condition of its activities.
1.2. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website https://annadeynega.com/
2. Key Terms Used in the Policy
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of the processing of personal data (except where processing is necessary to clarify personal data).
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at the address
website https://annadeynega.com/
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means used for their processing.
2.5. Depersonalization of personal data — actions that make it impossible to determine, without additional information, the ownership of personal data by a specific User or other personal data subject.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with personal data using automation tools or without them, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator — a state authority, municipal authority, legal entity, or individual that independently or jointly with others organizes and/or carries out the processing of personal data, and determines the purposes of personal data processing, the composition of personal data to be processed, and the actions performed with personal data.
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable User of the website website https://annadeynega.com/
2.9. Personal data permitted by the personal data subject for distribution — personal data to which an unlimited number of persons have been granted access by the personal data subject through consent to the processing of personal data permitted for distribution in accordance with the Personal Data Law.
2.10. User — any visitor to the website website https://annadeynega.com/
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12. Distribution of personal data — any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or making personal data available to an unlimited number of persons, including publication in mass media, placement in information and telecommunications networks, or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign government authority, foreign individual, or foreign legal entity.
2.14. Destruction of personal data — any actions resulting in the irreversible destruction of personal data with no possibility of further recovery of its content in a personal data information system and/or destruction of physical media containing personal data.
3. Basic Rights and Obligations of the Operator
3.1. The Operator has the right to:— receive reliable information and/or documents containing personal data from the personal data subject;
— continue processing personal data without the consent of the personal data subject in cases where the subject withdraws consent or submits a request to terminate processing, provided there are legal grounds specified in the Personal Data Law;
— independently determine the composition and list of measures necessary and sufficient to ensure compliance with obligations stipulated by the Personal Data Law and related legal acts.
3.2. The Operator is obliged to:— provide the personal data subject with information regarding the processing of their personal data upon request;
— organize personal data processing in accordance with the legislation of the Russian Federation;
— respond to requests and inquiries from personal data subjects and their legal representatives;
— provide the authorized body for the protection of personal data subjects with necessary information within 10 days from receiving such a request;
— publish or otherwise ensure unrestricted access to this Policy;
— take legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution, or other unlawful actions;
— terminate the transfer, processing, and destroy personal data in cases provided for by the Personal Data Law;
— fulfill other obligations stipulated by the Personal Data Law.
4. Basic Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:— obtain information regarding the processing of their personal data, except in cases provided by federal law;
— require clarification, blocking, or destruction of personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
— require prior consent for personal data processing for marketing purposes;
— withdraw consent for personal data processing;
— appeal unlawful actions or inaction of the Operator to the authorized body for the protection of personal data subjects or in court;
— exercise other rights provided by the legislation of the Russian Federation.
4.2. Personal data subjects are obliged to:— provide the Operator with accurate personal data;
— notify the Operator of updates or changes to their personal data.
4.3. Persons who provide the Operator with false information about themselves or about another personal data subject without consent bear responsibility in accordance with the legislation of the Russian Federation.
5. Principles of Personal Data Processing
5.1. Personal data processing is carried out on a lawful and fair basis.
5.2. Processing is limited to specific, predetermined, and legitimate purposes.
5.3. Databases containing personal data processed for incompatible purposes must not be merged.
5.4. Only personal data relevant to the purposes of processing may be processed.
5.5. The volume and content of processed personal data must correspond to the stated purposes.
5.6. The Operator ensures the accuracy, sufficiency, and relevance of personal data.
5.7. Personal data is stored only for the time necessary to achieve processing purposes unless otherwise provided by law.
6. Purposes of Personal Data Processing
- Purpose: informing the User by sending emails.
- Personal data: surname, first name, patronymic, email address, phone numbers.
- Legal basis:Federal Law No. 149-FZ of July 27, 2006 “On Information, Information Technologies and Information Protection”.
- Types of personal data processing: collection, recording, systematization, accumulation, storage, destruction, depersonalization of personal data, and sending informational emails.
7. Conditions for Personal Data ProcessingPersonal data processing is permitted in the following cases:
- with the consent of the personal data subject;
- to fulfill international agreements or legal obligations;
- for administration of justice or execution of court acts;
- for performance of a contract with the personal data subject;
- for legitimate interests of the Operator or third parties provided that the rights of the personal data subject are not violated;
- for processing publicly available personal data;
- for data subject to mandatory publication in accordance with federal law.
8. Procedure for Collection, Storage, Transfer and Other Types of ProcessingThe security of personal data processed by the Operator is ensured through legal, organizational, and technical measures necessary to fully comply with personal data protection legislation.
8.1. The Operator ensures the safety of personal data and prevents unauthorized access.
8.2. Personal data will not be transferred to third parties except where required by law or with consent of the data subject.
8.3. Users may update personal data by sending a request to
annadeynega@mail.ru with the subject “Personal Data Update”.
8.4. Users may withdraw consent at any time by sending a request to
annadeynega@mail.ru with the subject “Withdrawal of Consent for Personal Data Processing”.
8.5. Third-party services process personal data in accordance with their own privacy policies. The Operator is not responsible for their actions.
8.6. Restrictions on data distribution do not apply when processing personal data in public interests defined by Russian law.
8.7. The Operator ensures confidentiality of personal data.
8.8. Personal data is stored only as long as necessary for processing purposes.
8.9. Processing may cease when its purposes are achieved, consent expires, consent is withdrawn, or unlawful processing is identified.
9. Actions Performed with Personal DataThe Operator performs the following actions:
collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction of personal data.
Processing may be automated and carried out via telecommunications networks.
10. Cross-Border Transfer of Personal Data
10.1. Before initiating cross-border transfer of personal data, the Operator must notify the authorized authority for personal data protection.
10.2. Before submitting such notification, the Operator must obtain relevant information from foreign authorities, individuals, or legal entities to whom the personal data will be transferred.
11. Confidentiality of Personal DataThe Operator and other persons who have gained access to personal data are obliged not to disclose or distribute personal data to third parties without the consent of the personal data subject unless otherwise required by federal law.
12. Final Provisions
12.1. Users may request clarification regarding personal data processing by contacting the Operator at
annadeynega@mail.ru.
12.2. Any changes to the Policy will be reflected in this document. The Policy remains valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is publicly available at
https://annadeynega.com/policy.