Privacy Policy

1. General Provisions

1.1. This Privacy Policy regarding the processing of personal data of users of the website https://aigolova.com/ (hereinafter referred to as the Policy) defines the general conditions for the collection, processing, storage, transfer and destruction of Users’ personal data that may be transferred by the User when using the website https://aigolova.com/.

1.2. This Policy has been developed taking into account the requirements of the Constitution of the Russian Federation and legislative and other regulatory legal acts of the Russian Federation in the field of personal data.

1.3. The Operator has the right to amend this Policy by posting an amended version of the Policy on the Website without the User’s consent. After amendments are made, the Policy will apply to previously collected Personal Data only to the extent that it does not reduce the rights of the affected Individuals.

1.4. This Policy has been developed in accordance with the requirements of clause 2, part 1, article 18.1 of Federal Law No. 152-FZ dated July 27, 2006 “On Personal Data”.

2. Basic Concepts Used in the Policy

2.1. Automated processing of personal data means the processing of personal data using computer technology.

2.2. Blocking of personal data means the temporary suspension of personal data processing, except where processing is necessary to clarify personal data.

2.3. Website means the website located on the Internet at: https://aigolova.com/.

2.4. Personal data information system means a set of personal data contained in databases together with the information technologies and technical means that ensure its processing.

2.5. Depersonalization of personal data means actions that make it impossible to determine, without the use of additional information, whether personal data belongs to a specific User or another personal data subject.

2.6. Processing of personal data means any action (operation) or set of actions (operations) performed with personal data using automation tools or without using such tools, including collection, recording, systematization, accumulation, storage, clarification (updating or modification), extraction, use, transfer (distribution, provision or access), depersonalization, blocking, deletion and destruction of personal data.

2.7. Operator means https://aigolova.com/

2.8. Personal data means any information directly or indirectly relating to a specific or identifiable User of the Website https://aigolova.com/.

2.9. Personal data authorized by the personal data subject for distribution means personal data to which the personal data subject has granted access to an unlimited number of persons by consenting to the processing of personal data authorized by the personal data subject for distribution in the manner prescribed by the Personal Data Law (hereinafter referred to as personal data authorized for distribution).

2.10. User means any visitor to the website https://aigolova.com/.

2.11. Provision of personal data means actions aimed at disclosing personal data to a specific person or a specific group of persons.

2.12. Distribution of personal data means actions aimed at disclosing personal data to an indefinite number of persons.

2.13. Cross-border transfer of personal data means the transfer of personal data to the territory of a foreign state, to an authority of a foreign state, or to a foreign individual or foreign legal entity.

2.14. Destruction of personal data means actions that make it impossible to restore the contents of personal data in the personal data information system and/or that destroy physical media containing personal data.

3. Basic Rights and Obligations

3.1. Basic rights and obligations of the Operator:

3.1.1. The Operator has the right to:

• receive reliable information containing personal data from the personal data subject;
• require the personal data subject to promptly clarify the personal data provided.

3.1.2. The Operator is obliged to:

• process personal data in the manner established by the current legislation of the Russian Federation;
• consider requests from the personal data subject or their legal representative regarding the processing of personal data and provide reasoned responses;
• provide the personal data subject or their legal representative with free access to their personal data;
• take measures to clarify or destroy the personal data of the personal data subject in response to lawful and reasonable requests from the subject or their legal representative;
• organize the protection of personal data in accordance with the requirements of the legislation of the Russian Federation.

3.2. Basic rights and obligations of personal data subjects:

3.2.1. The personal data subject has the right to:

• obtain complete information about their personal data processed by the Operator;
• access their personal data, including the right to receive a copy of any record containing their personal data, except in cases established by the legislation of the Russian Federation;
• clarify, block or destroy their personal data where the data is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose of processing;
• withdraw consent to the processing of personal data;
• take measures to protect their rights in accordance with the legislation of the Russian Federation;
• appeal an action or omission of the Operator to the authorized body for the protection of the rights of personal data subjects or in court;
• exercise other rights provided for by the legislation of the Russian Federation.

3.2.2. Personal data subjects are obliged to:

• provide the Operator only with reliable information about themselves;
• inform the Operator when their personal data needs to be clarified, updated or changed.

3.3. Persons who provide the Operator with false information about themselves, or information about another personal data subject without that subject’s consent, are liable in accordance with the legislation of the Russian Federation.

3.4. The User has the right to send requests to the Operator for information regarding the processing and use of their personal data.

4. Legal Basis for Processing Personal Data

4.1. The legal grounds for the Operator’s processing of personal data are:

• the Constitution of the Russian Federation;
• the Civil Code of the Russian Federation;
• Federal Law No. 149-FZ dated July 27, 2006 “On Information, Information Technologies and Information Protection”;
• Federal Law No. 152-FZ dated July 27, 2006 “On Personal Data”;
• Decree of the President of the Russian Federation No. 188 dated March 6, 1997 “On Approval of the List of Confidential Information”;
• Resolution of the Government of the Russian Federation No. 1119 dated November 1, 2012 “On Approval of Requirements for the Protection of Personal Data During Its Processing in Personal Data Information Systems”;
• Order of Roskomnadzor No. 996 dated September 5, 2013 “On Approval of Requirements and Methods for Depersonalization of Personal Data”;
• Order of the FSTEC of Russia No. 21 dated February 18, 2013 “On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data During Its Processing in Personal Data Information Systems”;
• the Operator’s statutory documents;
• agreements concluded between the Operator and personal data subjects;
• the consent of personal data subjects to the processing of personal data;
• other grounds where consent to the processing of personal data is not required by law.

5. Scope and Categories of Personal Data Processed and Categories of Personal Data Subjects

5.1. The Operator may process personal data relating to the following categories of subjects:

• counterparties under civil-law agreements who are individuals;
• Website visitors.

5.2. Personal data processed by the Operator includes:

• e-mail address;
• history of requests, views and actions on the Websites and their services, and the date and time of the session;
• IP address, location information, device type and information about the User’s browser or other program used to access the Website.

5.3. The Operator ensures that the content and scope of personal data processed correspond to the stated purposes of processing and, where necessary, takes measures to eliminate data that is excessive in relation to those purposes.

5.4. The Operator does not process special categories of personal data concerning race, nationality, political views, religious or philosophical beliefs or intimate life.

5.5. The Operator does not carry out cross-border transfers of personal data.

5.6. The Operator does not process payments or information about the User’s bank card when a payment is made.

6. Purposes of Collecting Personal Data

6.1. The Operator processes personal data for the following purposes:

• identifying the User for use of the Website;
• providing the User with access to personalized Website resources;
• concluding agreements with personal data subjects and subsequently performing those agreements;
• conducting promotions, surveys, interviews, tests and research on the Website;
• communicating with personal data subjects, including processing their requests and inquiries and informing them about the operation of the Website;
• monitoring and improving the quality of the services offered on the Website;
• generating statistical reports;
• performing other functions, powers and duties assigned to the Operator by the legislation of the Russian Federation.

6.2. The Operator also has the right to send the User notifications about new products and services, special offers and various events. The User can always opt out of informational messages using the functionality of the relevant section of the User’s personal account on https://aigolova.com/.

6.3. Depersonalized User data collected using Internet statistics services is used to collect information about Users’ actions on the Website and to improve the quality of the Website and its content.

7. Procedure and Conditions for Processing Personal Data

7.1. The Operator processes personal data provided by the User using automated means.

7.2. The Operator collects, records, systematizes, accumulates, stores, clarifies (updates or modifies), extracts, uses, transfers (distributes, provides or grants access to), depersonalizes, blocks, deletes and destroys the User’s personal data.

7.3. The Operator processes personal data subject to obtaining the consent of the personal data subject (hereinafter referred to as Consent), except in cases established by the legislation of the Russian Federation where personal data may be processed without such Consent.

7.4. Consent to the processing of personal data (Appendix No. 1) and consent to receive mailings and promotional materials (Appendix No. 2) is provided by the User electronically in one of the following ways:

7.4.1. by clicking the “I Accept” button or another button with similar wording;

7.4.2. by selecting a checkbox on the Website;

7.4.3. by creating an account on the Website or registering on the Website in another manner;

7.4.4. by signing in to the Website using e-mail, social networks or other electronic services available for authentication purposes on the Website.

7.5. The Website uses cookies and collects information about Users, including through third-party software such as Yandex.Metrica and Google Analytics, as required by the Operator to analyze effectiveness and improve the operation of the Website. The composition of and conditions for collecting depersonalized data using third-party software are determined directly by the respective rights holders and may include:

• browser data (type, version and cookies);
• device data and its location;
• operating system data (type, version and screen resolution);
• request data (time, referral source and IP address).

7.6. When Users visit the Website, the Operator informs them about the collection and use of cookies.

7.7. The processing of personal data may be terminated when the purposes of processing have been achieved, Consent has expired or been withdrawn by the personal data subject, or unlawful processing of personal data has been identified.

7.8. Consent may be withdrawn by the personal data subject or their representative by sending a written statement to the Operator.

7.9. Consent to the processing of personal data authorized for distribution ceases to be valid from the moment the Operator receives the request specified in clause 7.7 of this Policy.

7.10. When processing personal data, the Operator takes or ensures the adoption of the necessary legal, organizational and technical measures to protect personal data against unauthorized or accidental access, destruction, modification, blocking, copying, provision and distribution, as well as against other unlawful actions involving personal data.

7.11. Personal data is stored in a form that permits identification of the personal data subject for no longer than required by the purposes of personal data processing, except where the storage period is established by federal law or by an agreement to which the personal data subject is a party, beneficiary or guarantor.

7.12. When storing personal data, the Operator uses databases located in the Russian Federation.

8. Updating, Correction, Deletion and Destruction of Personal Data and Responses to Requests from Personal Data Subjects for Access to Personal Data

8.1. If it is confirmed that personal data is inaccurate or is being processed unlawfully, the Operator must update the personal data or terminate its processing, as applicable.

8.2. The inaccuracy of personal data or unlawfulness of its processing may be established either by the personal data subject or by the competent state authorities of the Russian Federation.

8.3. In accordance with the procedure provided for in clause 7.7, the personal data subject has the right to require the Operator to clarify, block or destroy their personal data if the data is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose of processing, and to take measures provided for by law to protect their rights.

8.4. When the purposes of personal data processing have been achieved, or where the personal data subject withdraws Consent, the personal data must be destroyed unless:

• the Operator has the right to process the data without the personal data subject’s Consent;
• otherwise provided by an agreement to which the personal data subject is a party, beneficiary or guarantor;
• otherwise provided by another agreement between the Operator and the personal data subject.

9. Final Provisions

9.1. All matters concerning the processing of personal data that are not addressed in this Policy are governed by the legislation of the Russian Federation.

9.2. All information collected by payment systems, communication providers and other service providers is stored and processed by those persons (Operators) in accordance with their User Agreements and Privacy Policies. The personal data subject and/or User must independently review those documents in a timely manner. The Operator is not responsible for the actions of third parties, including the service providers referred to in this clause.

9.3. The Operator has the right to amend this Policy. When amendments are made, the current version indicates the date of the latest update. A new version of the Policy takes effect when it is posted on the Website unless otherwise provided by that version. The current version is permanently available on the Website at: https://aigolova.com/.