Documents Privacy Policy

1. Terms and Definitions

1.1. Operator — Sole Proprietor ____________________ / Taxpayer Identification Number _______________ / Primary State Registration Number of Individual Entrepreneurs _______________, processing personal data independently or jointly with other persons, organizing and/or processing personal data.
1.2. User / Personal Data Subject — an individual whose personal data is processed by the Operator.
1.3. Buyer — an individual who purchases one or more products on the Website, paying for them.
1.4. Agreement — A public offer containing the terms of the purchase and sale agreement on the Website and posted at the following address: https://kradroom.ru/legal/offer.
1.5. The Website is a collection of graphic and informational materials, as well as computer programs and databases that make them available on the Internet at the following address: https://kradroom.ru/.
1.6. Personal data is any information that directly or indirectly relates to the User and allows for their identification.
1.7. Processing of personal data is Any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
1.8. Dissemination of personal data — actions aimed at disclosing personal data to an indefinite number of persons.
1.9. Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific number of persons.
1.10. Blocking of personal data — Temporary suspension of the processing of Personal Data (except in cases where processing is necessary for their clarification).
1.11. Destruction of personal data — actions that make it impossible to restore the contents of Personal Data and/or that result in the destruction of tangible media containing Personal Data.
1.12. Anonymization of personal data — actions that make it impossible to determine the attribution of Personal Data to a specific subject without the use of additional information.
1.13. Cookies — identification cookies that are stored on the User's computer after visiting the website. They are designed to collect information about actions performed on the website and to improve the quality of the website and its content.

2. General Provisions

This policy has been compiled in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" and defines the procedure for processing personal data and the measures taken by the Operator to ensure the security of personal data.

2.1. The Operator's primary goal and condition for carrying out its activities is to respect the rights and freedoms of individuals and citizens when processing their personal data, including the protection of privacy, personal and family secrets.
2.2. This Operator policy regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may receive about Users of the Website. If the User does not agree with these terms, they should refrain from using the Website.

3. What Personal Data is Processed and How

The Operator performs the following actions with Personal Data: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction.

Categories of Personal Data Subjects: Buyers.

The purpose of processing Personal Data: fulfillment of contractual obligations.

Processed Personal Data: full name, telephone number, email address, actual residential address.
Categories of Personal Data Subjects: Website Users / Buyers.

The purpose of processing Personal Data is to provide the Personal Data Subject with information about the Operator's marketing events/products/services.

Processed Personal Data: Full name, phone number, email address.
Categories of Personal Data Subjects: Website Users / Buyers.

The purpose of processing Personal Data: conducting audits and other internal research to improve the quality of service, the Website, and its content.

Processed Personal Data: Buyer reviews, anonymized data about Website visitors collected using internet statistics services (IP address, cookie information, browser information, access time, referrer).

4. Legal Basis for Processing Personal Data

4.1. The legal basis for processing personal data is the set of regulatory legal acts pursuant to which and in accordance with which the Operator processes personal data, including:
1. 4.1.1. The Constitution of the Russian Federation;
2. 4.1.2. The Civil Code of the Russian Federation;
3. 4.1.3. Federal Law of July 27, 2006, No. 149-FZ "On Information, Information Technology, and Information Protection";
4. 4.1.4. Federal Law of July 27, 2006. Federal Law No. 152-FZ "On Personal Data";
5. 4.1.5. Other regulatory legal acts governing relations related to the Operator's activities.
4.2. The legal grounds for the Processing of personal data also include: the consent of the Personal Data Subject to the Processing of personal data and the Policy.

5. How the User consents to the Processing of personal data

5.1. By agreeing to the terms of the Policy, the User gives the Operator their informed and informed consent to the processing of the provided Personal Data under the terms stipulated by the Policy and the Federal Law of July 27, 2006. Federal Law No. 152-FZ "On Personal Data".
5.2. The User consents to the Processing of personal data by the Operator and agrees to the Policy in the event of:
1. 5.2.1. Using the Website;
2. 5.2.2. Completing the appropriate forms when placing an order;
3. 5.2.3. Disclosing Personal Data to the Operator during the execution of the Agreement.
5.3. The Operator also processes anonymized data about the User if this is permitted in the User's browser settings.
5.4. Upon receipt of the User's consent to the Processing of personal data, the Operator proceeds from the following:
1. 5.4.1. The User has provided completely accurate information. The Operator does not verify its authenticity. All risks of providing inaccurate or insufficient information lie with the User;
2. 5.4.2. The User has the right to give the relevant consent.
5.5. If the User transfers Personal Data of third parties in whose interests they are acting, the User guarantees that, prior to such transfer, they have obtained the consent of the said party to transfer the Personal Data to the Operator. The Operator assumes no obligation to verify the legality of the User's actions in this case or the veracity of the Personal Data of third parties provided by them. Responsibility for the legality and veracity of any Personal Data of third parties provided by them lies solely with the party providing it.

6. Duration of Personal Data Processing and Revocation of Consent to Personal Data Processing

6.1. The duration of personal data processing by the Operator is until the User revokes their consent.
6.2. The User has the right to revoke their consent to the Processing of personal data by sending a corresponding request to the Operator's email address help@kradroom.ru. The request must contain information identifying the User (full name, telephone number, and email address).
6.3. The Operator will cease processing personal data and destroy the User's personal data within 10 (ten) business days from the date of receipt of the request to revoke consent to the processing of personal data.
6.4. Personal data is destroyed by erasing or formatting it from the storage medium.

7. Terms and Procedure for Processing Personal Data

7.1. When Processing personal data, the Operator takes necessary and sufficient organizational and technical measures to protect Personal Data from unauthorized access, as well as from other illegal actions in relation to Personal Data.
7.2. The measures to protect Personal Data taken by the Operator include:
1. 7.2.1. Developing local documents, including this Policy, and posting it on the Website;
2. 7.2.2. Refusing to Process personal data in any way if it does not meet the pre-established purposes;
3. 7.2.3. Appointing a person responsible for organizing the Processing of personal data;
4. 7.2.4. Periodic risk assessment, concerning the Processing of Personal Data;
5. 7.2.5. Prevention of unauthorized access to systems storing Personal Data.
7.3. The User's Personal Data is kept confidential, except in cases where the User voluntarily provides information about themselves for general access to an unlimited number of persons.
7.4. Personal data is processed on the territory of the Russian Federation.
7.5. The User's Personal Data is not transferred to third parties, except in cases related to the fulfillment of the terms of the Agreement accepted by the Operator in relation to the User, and in compliance with applicable law.
7.6. The Operator is not responsible for:
1. 7.6.1. Information provided by the User on the Website, including for its Accuracy;
2. 7.6.2. Maintaining confidentiality and/or using Personal Data independently distributed or provided by the User to third parties;
3. 7.6.3. Actions of third parties who have gained access to the User's Personal Data due to the latter's fault;
4. 7.6.4. Possible misuse of the User's Personal Data due to technical failures in software, servers, or computer networks beyond the Operator's control.

8. Final Provisions

8.1. The User may obtain any clarification on any questions regarding the processing of their Personal Data by contacting the Operator via email at help@kradroom.ru.
8.2. The Operator undertakes to review the User's request within 30 (thirty) calendar days of its receipt.
8.3. This document will reflect any changes to the Operator's Personal Data Processing Policy. This Policy is valid indefinitely until it is replaced by a new version.
8.4. The current version of the Policy is publicly available online at https://kradroom.ru/legal/privacy-policy.

Cart