Personal data processing policy

1. General provisions

This Personal Data Processing Policy (the “Policy”) is based on the requirements of Russian Federal Law No. 152-FZ of 27 July 2006, “On Personal Data” (the “Law”), and governs the collection, storage, use and disclosure of personal data of users (the “User”) of the Company's website.

The Company safeguards individuals' rights and freedoms when processing personal data, including rights to privacy and personal and family confidentiality.

2. Purposes of personal data processing

Personal data is processed lawfully and fairly for the following purposes:

• providing customer support;
• informing the User about marketing and other events;
• conducting audits and internal research to improve service quality;
• fulfilling contractual obligations;
• complying with legal requirements.

3. Categories and scope of processed data

Personal data means information that can identify the User, including, but not limited to:

• family name, given name and patronymic;
• contact telephone numbers;
• email address;
• postal address;
• IP address;
• cookie data used to identify user sessions, personalize the interface, analyze visits and support the proper functioning of the website.

4. Cookies and other tracking technologies

The website uses cookies and similar technologies to improve usability and analyze visitor behavior. These technologies may:

• save the User's preferences and settings;
• support authentication and session security;
• provide visit statistics and help improve website functionality;
• display relevant advertising with the User's consent.

5. Processing and storage methods

Personal data is processed using automated and/or non-automated methods with measures to maintain security and confidentiality. Data is stored electronically and is not disclosed to third parties except as provided by law or this Policy.

6. Disclosure to third parties

The Company undertakes not to disclose personal data to third parties except:

• authorized Russian public authorities responding to lawful requests;
• partners involved in providing services or supplying products, who receive only the minimum data necessary to perform their specific functions.

7. User rights

The User has the right to:

• obtain confirmation that their personal data is being processed;
• know the purposes and methods of processing;
• request correction, restriction or deletion of data that is incomplete, outdated, inaccurate or processed unlawfully;
• withdraw consent to processing, unless otherwise provided by federal law.

8. Data security

The Company applies technical and organizational measures to protect personal data against unlawful or accidental access, destruction, alteration, restriction, copying, disclosure and other unlawful actions by third parties.

9. Changes to the Policy

The Company may amend this Policy by publishing an updated version on the website. The updated text takes effect upon publication; changes must comply with Russian law.