Personal Data Processing Policy

1. General ProvisionsThis Personal Data Processing Policy is prepared in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and the measures to ensure the security of personal data undertaken by Lezhneva Daria (hereinafter referred to as the Operator).
1.1. The Operator’s main goal and condition for carrying out its activities is to respect the rights and freedoms of individuals and citizens in the processing of their personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website https://calamansilab.com.
2. Basic Terms Used in This Policy2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of personal data processing (except where processing is necessary to clarify personal data).
2.3. Website — a set of graphic and information materials, as well as software and databases, ensuring their availability on the Internet at https://calamansilab.com.
2.4. Information system of personal data — a set of personal data contained in databases and the information technologies and technical means that ensure their processing.
2.5. Depersonalization of personal data — actions that make it impossible to determine, without additional information, to which User or subject the personal data belongs.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator — a government body, municipal authority, legal entity, or individual that independently or jointly with others organizes and/or carries out the processing of personal data, determines the purposes of personal data processing, the composition of personal data to be processed, and the actions (operations) performed on personal data.
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable User of the website https://calamansilab.com.
2.9. Personal data made publicly available by the subject — personal data made accessible to an unlimited number of persons by the subject through consent, in accordance with the Personal Data Law.
2.10. User — any visitor of the website https://calamansilab.com.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or group of persons.
2.12. Distribution of personal data — any actions aimed at disclosing personal data to an unlimited number of persons, including publication in the media, posting online, or providing access in any other way.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state, a foreign authority, or a foreign individual/legal entity.
2.14. Destruction of personal data — actions resulting in the irreversible destruction of personal data without the possibility of restoration.
3. Rights and Obligations of the Operator3.1. The Operator has the right to:
— receive reliable information and/or documents containing personal data from the data subject;
— continue processing personal data without consent if provided for by the Personal Data Law;
— independently determine the composition of measures sufficient to fulfill the Operator’s obligations under the Personal Data Law.
3.2. The Operator is obliged to:
— provide the data subject with information about the processing of their personal data upon request;
— organize personal data processing in accordance with current Russian legislation;
— respond to requests of data subjects and their legal representatives;
— notify the authorized data protection authority upon request within 10 days;
— publish or otherwise provide unrestricted access to this Policy;
— take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, or distribution;
— stop processing and destroy personal data as provided by law;
— fulfill other obligations under the Personal Data Law.
4. Rights and Obligations of Personal Data Subjects4.1. Data subjects have the right to:
— receive information regarding the processing of their personal data, except where restricted by law;
— demand clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose;
— withdraw consent for data processing;
— file complaints with the authorized data protection authority or in court regarding unlawful actions of the Operator;
— exercise other rights provided by law.
4.2. Data subjects are obliged to:
— provide the Operator with accurate information about themselves;
— inform the Operator of any updates to their personal data.
4.3. Persons who provide inaccurate or unauthorized information are liable in accordance with Russian law.
5. Principles of Personal Data Processing5.1. Processing is carried out lawfully and fairly.
5.2. Processing is limited to specific, legitimate purposes.
5.3. Combining databases with incompatible purposes is not allowed.
5.4. Only data necessary for processing purposes are subject to processing.
5.5. The scope and content of processed data correspond to the declared purposes.
5.6. Data must be accurate, sufficient, and, where necessary, up to date.
5.7. Data storage shall not exceed the period necessary for processing purposes. After the purposes are achieved, the data shall be destroyed or anonymized.
6. Purpose of Personal Data ProcessingPurpose: The website does not collect or process users’ personal data.
Personal data: philosophical beliefs.
Legal basis: Federal Law “No. 149-FZ On Information, Information Technologies, and Information Protection” dated 27 July 2006.
Types of processing: transfer of personal data.
7. Conditions for Personal Data Processing7.1. Processing is carried out with the consent of the data subject.
7.2.–7.7. (As stated in the original document) — processing may also occur where required by law or for public interest purposes.
8. Procedure for Collection, Storage, and TransferThe Operator ensures the security of personal data through legal, organizational, and technical measures.
8.1. The Operator guarantees the protection of personal data and prevents unauthorized access.
8.2. Personal data will never be shared with third parties unless required by law or with the data subject’s consent.
8.3. In case of inaccuracies, the User may update their data by emailing calamansilab@gmail.com with the subject line “Personal Data Update”.
8.4. The processing period is limited to achieving the purpose of collection. The User may withdraw consent by emailing calamansilab@gmail.com with the subject “Withdrawal of Consent”.
8.5. Information collected by third-party services (such as payment systems or communication providers) is stored and processed according to their respective Privacy Policies. The Operator is not responsible for the actions of third parties.
8.6.–8.9. The Operator ensures confidentiality and stores data only as long as necessary. Processing ends once purposes are achieved, consent expires, or data processing is deemed unlawful.
9. Actions Performed with Personal Data9.1.–9.2. The Operator may carry out collection, recording, storage, use, transfer, blocking, and destruction of personal data, including automated processing via communication networks or otherwise.
10. Cross-Border Data Transfer10.1.–10.2. Before cross-border data transfer, the Operator must notify the authorized data protection authority and obtain necessary information from foreign recipients.
11. ConfidentialityThe Operator and other parties with access to personal data are obliged not to disclose or distribute it without the subject’s consent unless required by law.
12. Final Provisions12.1. Users may contact the Operator for any questions regarding personal data processing via calamansilab@gmail.com.
12.2. Any changes to this Policy will be reflected in the updated version. The Policy is valid indefinitely until replaced by a new version.
12.3. The current version is publicly available online at https://calamansilab.com/privacyru.у https://calamansilab.com/privacyru.