Personal Data Processing Policy
1. General Provisions
This Personal Data Processing Policy is drafted in compliance with Federal Law No. 152-FZ dated July 27, 2006, "On Personal Data" (hereinafter – the "Personal Data Law") and defines the procedure for processing personal data and security measures implemented by I.P. Sorokina V.V. (hereinafter – the "Operator").
1.1. The Operator’s highest priority and condition for its operations is respect for human and civil rights and freedoms when processing their personal data, including protection of privacy rights, and personal and family confidentiality.
1.2. This Operator’s policy regarding personal data processing (hereinafter – the "Policy") applies to all information that the Operator may obtain about visitors to the website https://vhvroyal.com.
2. Key Terms Used in the Policy
2.1. Automated Processing of Personal Data – processing using computer equipment.
2.2. Blocking of Personal Data – temporary cessation of processing (except where clarification is required).
2.3. Website – a set of graphical/informational materials and computer programs/databases ensuring accessibility at https://vhvroyal.com.
2.4. Personal Data Information System – a set of personal data contained in databases and enabling their processing.
2.5. Depersonalization of Personal Data – actions making it impossible to identify data subjects without additional information.
2.6. Processing of Personal Data – any action/operation performed with personal data (including collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, depersonalization, blocking, deletion, destruction).
2.7. Operator – a state/municipal body, legal entity, or individual organizing and/or performing personal data processing and defining its purposes.
2.8. Personal Data – any information relating to an identified or identifiable user of https://vhvroyal.com.
2.9. Personal Data Permitted for Dissemination – data accessible to an unlimited circle of persons by consent of the data subject under the Personal Data Law.
2.10. User – any visitor to https://vhvroyal.com.
2.11. Provision of Personal Data – disclosure to a specific person/group.
2.12. Dissemination of Personal Data – disclosure to an unlimited circle of persons (including media publication).
2.13. Cross-Border Transfer of Personal Data – transfer to a foreign authority/entity.
2.14. Destruction of Personal Data – irreversible deletion with no possibility of recovery.
3. Operator’s Rights and Obligations
3.1. Operator’s Rights:
– Obtain reliable data/documents from the data subject;
– Continue processing without consent if grounds exist under the Personal Data Law;
– Determine necessary security measures independently.
3.2. Operator’s Obligations:
– Provide processing information upon request;
– Organize processing per Russian legislation;
– Respond to data subjects’ inquiries;
– Disclose information to authorized bodies within 30 days;
– Publish this Policy openly;
– Implement legal/organizational/technical security measures;
– Terminate processing/destroy data as prescribed by law.
4. Data Subjects’ Rights and Obligations
4.1. Data Subjects’ Rights:
– Access their processed data (except where restricted);
– Demand clarification, blocking, or destruction of inaccurate data;
– Withdraw processing consent;
– Appeal unlawful Operator actions;
– Exercise other rights under Russian law.
4.2. Data Subjects’ Obligations:
– Provide accurate personal data;
– Notify the Operator of data updates.
4.3. Persons providing false data bear responsibility under Russian law.
5. Personal Data Processed by the Operator
5.1. Full name;
5.2. Email;
5.3. Phone numbers;
5.4. Depersonalized visitor data (cookies) via Yandex Metrica, Google Analytics, etc.;
5.5. The above constitute "Personal Data" under this Policy;
5.6. No processing of special categories (race, politics, religion, intimate life);
5.7. Processing of special categories permitted for dissemination requires compliance with Art. 10.1 of the Personal Data Law;
5.8. Consent for disseminable data is obtained separately;
5.8.1 User provides consent directly to the Operator;
5.8.2 Operator publishes processing conditions within 3 business days;
5.8.3 Transfer must cease upon data subject’s request (must include full name, contact details, data list);
5.8.4 Consent becomes void upon receipt of such request.
6. Processing Principles
6.1. Lawful and fair basis;
6.2. Limited to predefined legitimate purposes;
6.3. No incompatible database merging;
6.4. Only relevant data is processed;
6.5. Content/scope match stated purposes;
6.6. Accuracy ensured; incomplete data rectified;
6.7. Storage duration limited to processing purposes.
7. Processing Purposes
7.1. User purposes:
– Email communication;
– Execution/termination of civil contracts;
– Access to https://vhvroyal.com services/materials.
7.2. Operator may notify about new products/services (opt-out via aprilandblush@gmail.com labeled "Unsubscribe");
7.3. Depersonalized data improves site quality.
8. Legal Grounds
8.1. Operator’s statutory documents;
8.2. Russian personal data laws;
8.3. User consent;
8.4. Data submitted via website forms/email implies consent;
8.5. Depersonalized data processed if cookies/JavaScript enabled.
9. Processing Conditions
9.1. Requires data subject’s consent;
9.2. Necessary for:
– Russian legal obligations;
– Justice administration;
– Contract execution;
– Operator’s legitimate interests;
9.3. Publicly accessible data;
9.4. Federally mandated disclosure.
10. Security Measures
10.1. Operator ensures security against unauthorized access;
10.2. No transfer to third parties except:
– Legal requirements;
– Contractual obligations with subject’s consent;
10.3. Users update data via aprilandblush@gmail.com labeled "Data Update";
10.4. Processing duration limited to purpose fulfillment;
10.5. Consent withdrawal via aprilandblush@gmail.com labeled "Consent Withdrawal";
10.6. Third-party services (payment systems, etc.) operate under their own policies;
10.7. Confidentiality maintained;
10.8. Storage duration minimized;
10.9. Processing ceases upon:
– Purpose achievement;
– Consent expiry/withdrawal;
– Unlawful processing detection.
11. Processing Actions
11.1. Operator performs: collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, depersonalization, blocking, deletion, destruction;
11.2. Automated processing with/without information networks.
12. Cross-Border Transfer
12.1. Permitted only if the foreign state ensures adequate data protection;
12.2. Otherwise requires written consent or contract execution.
13. Confidentiality
Operator and authorized persons must not disclose data without consent, unless required by law.
14. Final Provisions
14.1. User inquiries via aprilandblush@gmail.com;
14.2. Policy updated periodically; valid until replaced;
14.3. Current version available at https://vhvroyal.com/policy.