Privacy Policy for Personal Data Processing
1. General Provisions
This policy for the processing of personal data is prepared in accordance with Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and measures taken by Yulia Sokhibovna Millieva (hereinafter referred to as the "Operator") to ensure the security of personal data.
1.1 The Operator's primary goal in processing personal data is to respect and protect the rights and freedoms of individuals, particularly their right to privacy, personal and family secrets.
1.2 This policy on the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may collect about visitors to the website https://www.orospace.online.
2. Key Terms Used in the Policy
2.1 Automated Processing of Personal Data: Processing personal data using computer technology.
2.2 Blocking of Personal Data: Temporary suspension of the processing of personal data (unless processing is necessary for clarification).
2.3 Website: A set of graphic and informational materials, as well as computer programs and databases, ensuring access via the internet at https://www.orospace.online.
2.4 Information System of Personal Data: A set of personal data contained in databases and the technology and tools used to process them.
2.5 Anonymization of Personal Data: Actions that make it impossible to identify the subject of personal data without additional information.
2.6 Processing of Personal Data: Any action (operation) or set of actions (operations) performed on personal data, with or without automation, including collection, recording, organization, accumulation, storage, refinement (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction.
2.7 Operator: A government agency, municipal authority, legal or individual entity that organizes and/or performs the processing of personal data, defines the purposes of data processing, the composition of data to be processed, and the actions (operations) performed with personal data.
2.8 Personal Data: Any information directly or indirectly relating to an identified or identifiable User of the website https://www.orospace.online.
2.9 Personal Data Allowed for Distribution: Personal data that the subject of personal data has consented to disclose to the public as per the procedure provided in the Personal Data Law.
2.10 User: Any visitor to the website https://www.orospace.online.
2.11 Provision of Personal Data: Actions aimed at disclosing personal data to a specific person or group of people.
2.12 Distribution of Personal Data: Actions aimed at disclosing personal data to an indefinite number of people (transfer of personal data) or making it available to the public, including publishing personal data in media, posting in information and telecommunication networks, or providing access to personal data in any other way.
2.13 Cross-border Transfer of Personal Data: Transfer of personal data to a foreign country, foreign government authority, foreign individual, or foreign legal entity.
2.14 Destruction of Personal Data: Actions resulting in the irreversible destruction of personal data, making it impossible to restore the content of personal data in the information system and/or destroy physical media containing personal data.
3. Key Rights and Duties of the Operator
3.1 The Operator has the right to: — Obtain accurate information and/or documents containing personal data from the subject; — Continue processing personal data without the subject's consent if there are legal grounds, even if consent is withdrawn; — Independently determine the composition and list of necessary and sufficient measures to fulfill obligations under the Personal Data Law unless otherwise specified by law.
3.2 The Operator must: — Provide the subject of personal data with information about the processing of their data upon request; — Organize the processing of personal data in accordance with current legislation; — Respond to requests from data subjects and their legal representatives as required by law; — Notify the authorized body on personal data protection within 10 days of receiving a request for information; — Publish and provide unrestricted access to this Policy on personal data processing; — Take legal, organizational, and technical measures to protect personal data; — Cease distribution, access, or processing of personal data and destroy it under certain conditions specified in the Personal Data Law; — Fulfill other duties as required by law.
4. Key Rights and Duties of Personal Data Subjects
4.1 Personal data subjects have the right to: — Obtain information related to the processing of their data except as provided by federal law; — Request the Operator to update, block, or delete their data if it is incomplete, outdated, inaccurate, obtained illegally, or unnecessary for the stated purpose of processing; — Withdraw consent for data processing or require cessation of processing; — File complaints with the authorized body or court regarding wrongful actions or inaction by the Operator in processing their data.
4.2 Personal data subjects must: — Provide the Operator with accurate information; — Notify the Operator about updates to their personal data.
5. Principles of Personal Data Processing
5.1 Data processing is based on lawful and fair practices.
5.2 Data processing is limited to achieving specific, legitimate objectives. Data processing that is incompatible with the purposes of data collection is prohibited.
5.3 Only personal data that corresponds to the purposes of processing is subject to processing.
6. Purposes of Personal Data Processing
The purpose of processing is to inform the User through electronic mail.
Personal data: Last name, first name, middle name, and email address.
Legal grounds: Federal Law “On Information, Information Technologies, and Information Protection” No. 149-FZ dated July 27, 2006.
Types of processing: Collection, recording, organization, accumulation, storage, anonymization, and deletion.
7. Conditions for Processing Personal Data
7.1 Data processing is carried out with the subject's consent.
7.5 Data processing is essential to exercise the rights and legitimate interests of the Operator or third parties.
8. Collection, Storage, Transfer, and Other Types of Personal Data Processing
The security of personal data is ensured by legal, organizational, and technical measures.
8.2 User data will never be transferred to third parties unless required by law or with the subject’s consent.
8.3 In case of inaccuracies, the User can update their data by sending an email to y.millieva@orospace.online with "Personal Data Update" as the subject.
9. Actions Performed by the Operator with Received Personal Data
The Operator collects, records, organizes, stores, updates, retrieves, uses, distributes, anonymizes, blocks, deletes, and destroys personal data.
10. Cross-border Transfer of Personal Data
The Operator must notify the authorized body before cross-border data transfer.
11. Confidentiality of Personal Data
The Operator and any others with access to personal data must not disclose it to third parties without the subject’s consent unless required by law.
12. Final Provisions
12.1 Users may contact the Operator for any questions related to their personal data by emailing y.millieva@orospace.online.
12.3 The latest version of the Policy is publicly available at https://www.orospace.online/privacypolicy.