Personal Data Processing Policy

1. General Provisions
This Personal Data Processing Policy is compiled in accordance with the requirements of Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter – the Personal Data Law) and determines the procedure for processing personal data and measures to ensure the security of personal data taken by Sole Proprietor Maria Lyapunova (hereinafter – the Operator).
1.1. The Operator considers observance of human and civil rights and freedoms in the processing of their personal data, including protection of privacy, personal and family secrets, as its utmost goal and condition for business execution.
1.2. This Operator Policy applies to all information that the Operator can receive about website visitors at https://egodesign.studio/.

2. Main Terms Used in the Policy
2.1. Automated processing of personal data — processing of personal data using means of computer technology.
2.2. Blocking of personal data — temporary cessation of personal data processing (except if processing is necessary to clarify personal data).
2.3. Website — a set of graphic and information materials, as well as computer programs and databases, ensuring their availability at https://egodesign.studio/.
2.4. Personal data information system — a set of databases containing personal data and their processing technologies and technical means.
2.5. Anonymization of personal data — actions resulting in it being impossible to determine the belonging of personal data to a specific User without additional information.
2.6. Personal data processing — any action (operation) or set of actions (operations) conducted with or without automated means on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution/provision/access), anonymization, blocking, deletion, destruction of personal data.
2.7. Operator — a state, municipal, legal or physical entity that organizes and/or performs processing of personal data and determines the purposes of such processing, the volume, and actions (operations) with personal data.
2.8. Personal data — any information directly or indirectly relating to a specific or identifiable User of the website https://egodesign.studio/.
2.9. Personal data permitted by the data subject for dissemination — personal data for which the data subject has given consent for dissemination.
2.10. User — any visitor to the website https://egodesign.studio/.
2.11. Personal data provision — actions aimed at disclosing personal data to a specific or indefinite number of persons.
2.12. Personal data dissemination — any actions aimed at disclosing personal data to an indeterminate group, including mass media publication, placement in information/telecommunication networks, or other access provision.
2.13. Cross-border transfer — transfer of personal data to the territory of a foreign state.
2.14. Destruction of personal data — any actions resulting in the irreversible destruction of personal data.

3. Main Rights and Responsibilities of the Operator
3.1. The Operator may:
— receive accurate information/documents containing personal data from the data subject;
— continue processing personal data, without the subject’s consent, in the case of withdrawal, and if required by law;
— independently determine the scope and list of measures required and sufficient to ensure the fulfillment of the duties stipulated by law.
3.2. The Operator must:
— provide the data subject, upon request, with information regarding the processing of their personal data;
— organize personal data processing in accordance with applicable law;
— respond to appeals and requests from data subjects;
— publish or otherwise enable access to this Policy;
— take legal, organizational, and technical measures to protect personal data;
— stop processing and destroy personal data in the cases stipulated by law;
— fulfill other statutory duties.

4. Main Rights and Responsibilities of Personal Data Subjects
4.1. Personal data subjects have the right to:
— obtain information on their personal data processing, with exceptions provided for by law;
— require the operator to update, block, or destroy personal data if it is incomplete, outdated, inaccurate, or unlawfully processed;
— set preconditioned consent when processing personal data for direct marketing;
— withdraw consent to personal data processing;
— challenge actions or inaction of the Operator in the authorized body or in court;
— exercise other rights provided for by law.
4.2. Data subjects must:
— provide truthful data about themselves;
— inform about changes/updates to their personal data.
4.3. Persons who provide untruthful or third-party data without proper consent are liable according to Russian law.

5. Processing Principles
5.1. Personal data processing is legal and fair.
5.2. Processing is limited to concrete, lawful purposes.
5.3. Combining databases processed for incompatible purposes is not allowed.
5.4. Only data relevant to processing goals are subject to processing.
5.5. Content and volume of processed personal data correspond to declared goals. No surplus is allowed.
5.6. Precision, sufficiency, and relevance of data ensured.
5.7. Storage must not exceed the time needed unless required by law.

6. Purposes of Processing Personal Data
Purposes:
— access to website services/products,
— execution of agreements,
— participation in loyalty programs,
— sending informational/promotional materials.
Personal data processed:
— surname, first name, patronymic,
— email,
— phone numbers.
Legal grounds:
— agreements,
— federal laws, etc.
Types of processing:
— collection, recording, systematization, accumulation, storage, destruction, anonymization,
— email newsletters.

7. Processing Conditions
Processing is performed with the subject’s consent, for fulfillment of legal or contractual obligations, to perform judicial acts, or other legitimate purposes. Consent can be withdrawn at any time by email: info@egodesign.studio.

8. Data Collection, Storage, Transmission, and Other Processing
The Operator ensures data security legally, organizationally, and technically. Data isn't transferred to third parties unless agreed upon or required by law.

9. List of Actions with Personal Data
Includes collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, anonymization, blocking, deletion, and destruction.

10. Cross-Border Transfer of Personal Data
Operator must notify (and obtain confirmation from) receiving parties in foreign countries about compliance prior to cross-border transfers.

11. Confidentiality of Personal Data
All persons who have access to personal data must keep it confidential unless required otherwise by law.

12. Final Provisions
Users may seek clarifications via info@egodesign.studio. Any updates to this Policy will be published at https://egodesign.studio/privacy.

Maria Lyapunova

Head and Creative Director of the Studio