Privacy Policy of folia-design.ru
1. General Provisions
This Privacy Policy (the "Policy") is approved by Individual Entrepreneur Aleksandr Vladimirovich Savenko (registered address: Russia, St. Petersburg, Gorokhovaya st., 16/71) (the "Operator", "Site Administration") in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" in order to establish the procedure for processing and protecting the personal data of Site Visitors.
The Policy governs the relations between the Site Administration and Visitors regarding the processing of personal data, defines the Operator's obligations of non-disclosure and protection of the confidentiality of personal data provided by the Visitor, as well as the Visitor's rights to privacy.
Use of the Site by the Visitor constitutes acceptance of this Policy. If the Visitor disagrees with the Policy, they must immediately stop using the Site.
This Policy applies to the site at https://folia-design.ru/ and its subdomains (the "Site"). The Site Administration does not control and is not responsible for third-party websites that the Visitor may access via links available on the Site.
For the purposes of this Policy, personal data includes:
— data provided by the Visitor directly when using the Site;
— data collected automatically by web analytics services, including IP address, cookie information, browser information, access time and the address of the requested page.
2. Terms
"Site Administration" - the Operator and persons authorized by it to manage the Site who organize and/or carry out the processing of personal data via the Site and determine the purposes, scope and operations of such processing.
"Personal data" - any information relating directly or indirectly to an identified or identifiable natural person (personal data subject).
"Personal data processing" - any action or set of actions performed with personal data, with or without automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), blocking, deletion and destruction.
"Confidentiality of personal data" - a mandatory requirement not to disclose personal data without the consent of the data subject or other legal grounds.
"Site" - the set of interconnected web pages located at https://folia-design.ru/ and its subdomains.
"Visitor" - a person with full legal capacity, resident or non-resident of the Russian Federation, who accesses the Site via the Internet and uses its information, materials and services.
"Cookie" - a fragment of text data sent by the Site's web server and stored on the Visitor's computer.
"IP address" - a unique network address identifying a device on the Internet or a local network.
"Web analytics" - a system for measuring, collecting, analyzing and interpreting information about website visitors for improvement and optimization purposes.
"Checkbox" - a graphical user interface element with two states - on and off - used on the Site to confirm the Visitor's consent to the processing of their personal data.
3. Purposes of Processing the Visitor's Personal Data
The following personal data of Site Visitors may be processed for the purpose of sending the feedback form via the Site:
— phone number;
— e-mail address;
— surname, first name, patronymic;
— company name.
The legal basis for processing is the data subject's consent.
Processing includes collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer, blocking, deletion and destruction of personal data.
Personal data is processed for 5 years from the moment of placing an order or until the Visitor withdraws their consent.
The specified data may also be processed to provide the Visitor with personalized services and to improve their quality.
4. Conditions of Processing
All personal data is processed in accordance with the legislation of the Russian Federation on personal data.
Processing is carried out both with and without automation tools.
The Site Administration may process other categories of personal data when Visitors send messages to the phone numbers and e-mail addresses indicated on the Site; such data is provided voluntarily.
The Administration takes the necessary organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution or other unlawful actions of third parties.
The Administration grants access to the Visitor's personal data only to persons authorized to work with personal data and bound by a non-disclosure obligation.
Disclosure of personal data may only take place in accordance with the current legislation of the Russian Federation at the request of a court, law enforcement agencies and in other cases provided for by law.
The Administration does not verify the accuracy of the information provided by the Visitor and assumes that the Visitor provides reliable and sufficient information in good faith.
5. Cookies and Web Analytics
The Site uses the following categories of cookies: essential, functional, advertising, analytical and personalization cookies.
The Site may also use the Yandex Metrica web analytics service to process Visitor data.
Via cookies, the Administration may receive standard reports (traffic, conversions, sources), visitor data (geography, age, gender, time of visits, time on site), content data (popular pages, entry and exit pages), technology data (browsers, screen resolution, operating systems, devices) and monitoring data (site load, traffic by minute, page speed).
The Visitor understands and agrees that the counter installed on the Site collects anonymized data about visits and the Visitor's device and automatically transfers it to Yandex LLC for aggregated statistics. Details on how Yandex Metrica works: https://yandex.ru/support/metrica/general/how-it-works.html.
The legal basis for the use of cookies is the Visitor's consent. The Visitor may disable cookies in their browser; this may make some materials and functions of the Site unavailable.
6. Granting Consent to Personal Data Processing
A link to this Privacy Policy is placed in all personal data collection forms on the Site.
The Visitor confirms consent to the processing of personal data by ticking the corresponding Checkbox present in all collection forms on the Site.
7. Requests and Applications of the Visitor
The Visitor has the right to receive information concerning the processing of their personal data, including confirmation of the fact of processing, legal grounds and purposes, processing methods, the name and location of the Operator, the list of processed data and its source, processing and storage periods, the procedure for exercising rights and information about cross-border transfers.
The Visitor has the right to withdraw consent to the processing of their personal data or to demand its destruction.
In the event of withdrawal, the Operator shall stop the processing and destroy the personal data within thirty days of receiving the withdrawal.
In case of a demand to stop processing, the Operator shall comply within ten business days (extendable by up to five business days with a reasoned notice).
8. Security Measures
To protect personal data, the Operator: appoints persons responsible for organizing the processing; approves the list of persons with access to personal data; carries out internal compliance control; assesses potential harm to data subjects; familiarizes persons processing data with the legislation; identifies security threats; applies organizational and technical protection measures; assesses their effectiveness; detects unauthorized access and takes measures; restores modified or destroyed data; establishes access rules and logs all operations; keeps records of data storage media and ensures their safety; uses certified information protection tools where necessary.
9. Information on Data Protection Requirements
When processing personal data, the Operator is guided by Federal Law No. 152-FZ "On Personal Data" and other applicable data protection legislation.
Protection is ensured by legal, organizational and technical measures: a person responsible for processing has been appointed; local regulations including this Policy have been approved; access and storage rules have been established; records of data media are kept; the applied protection measures are monitored.
10. The Visitor Has the Right To
Freely decide whether to provide their personal data required to use the Site's functions and consent to its processing.
Update and supplement previously provided personal data if it changes.
Request information about the processing of their personal data under Art. 14 of Federal Law No. 152-FZ, and demand clarification, blocking or destruction of personal data that is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose.
Withdraw consent at any time by sending a written notice to: Russia, St. Petersburg, Gorokhovaya st., 16/71, IE Aleksandr Savenko, marked "withdrawal of consent to personal data processing", or by e-mail to info@folia-design.ru. Withdrawal entails the destruction of records containing personal data in the Operator's systems, which may make it impossible to use the Site's services.
11. The Site Administration Has the Right To
Amend this Privacy Policy without the Visitor's consent, publishing the new version on the Site.
Request that the Visitor update previously provided personal data.
Continue processing without the data subject's consent after its withdrawal where permitted by clauses 2-11 of part 1 of Article 6, part 2 of Article 10 and part 2 of Article 11 of Federal Law No. 152-FZ.
12. The Visitor Must
Read the current version of this Policy before providing personal data to the Administration.
Observe precautions regarding the confidentiality of their personal data.
Update and supplement the provided personal data if it changes.
13. The Site Administration Must
Use the received information solely for the purposes specified in this Policy.
Keep confidential information secret and not disclose, sell, exchange or publish the Visitor's personal data without their prior written permission.
Take precautions to protect the confidentiality of the Visitor's personal data as required by the legislation of the Russian Federation.
Block the personal data of the relevant Visitor from the moment of a request by the Visitor, their legal representative or the authorized data protection authority for the period of verification if inaccurate data or unlawful actions are identified.
14. Procedure for the Destruction of Personal Data
Confirmation of the destruction of personal data is carried out in accordance with the requirements established by the authorized data protection authority.
Where processing is carried out without automation tools, destruction is confirmed by a destruction act; where automation tools are used - by a destruction act compliant with Roskomnadzor Order No. 179 of 28.10.2022 and an event log extract.
Personal data is destroyed when the processing purpose is achieved or no longer necessary, when the legal grounds change or expire, when unlawful processing is identified, or when the data subject withdraws consent.
Destruction of personal data on electronic media is performed by mechanically damaging the media or by guaranteed erasure methods that prevent reading and recovery of the data.
15. Liability of the Parties
The Administration that fails to fulfil its obligations is liable for losses incurred by the Visitor due to unlawful use of personal data in accordance with the legislation of the Russian Federation, except for the cases provided for in this Policy.
The Site Administration is not liable for lost or disclosed personal data if it: became public before its loss or disclosure; was received from a third party before being received by the Administration; was disclosed with the Visitor's consent.
The Administration may refuse further processing of data provided by the Visitor if it deems the information unacceptable or incomplete.
The Administration is not liable for any direct or indirect losses arising from the inability to use the Site or its individual services, or from unauthorized access to the Visitor's communications.
16. Applicable Law
This Privacy Policy and the relations between the Visitor and the Administration are governed by the current legislation of the Russian Federation.
17. Changes to the Privacy Policy
A new version of the Policy comes into force from the moment it is published on the Site, unless otherwise provided by the new version. All disputes related to the Site shall be resolved in the appropriate court under the general rules of jurisdiction.
All suggestions or questions regarding this Privacy Policy, as well as the applications and requests specified herein, should be sent to: Russia, St. Petersburg, Gorokhovaya st., 16/71, or by e-mail: info@folia-design.ru.
The current Privacy Policy is available at: https://folia-design.ru/privacy-policy.
