We recognise the importance of the confidentiality of information. This document describes what personal information we receive and collect when you use Inna Shukshina’s websites. We hope that this information will help you make informed decisions about the personal information you provide to us.

Publicly available information
If you simply browse the site without registering, no information about you is published on the site.
When you write or edit material on the site, you publish every word of what you have written, and that information will be stored and shown to other visitors of the project. This applies to articles, useful tips, materials, users’ personal pages, comments and so on.

Cookies
When you visit the site, one or more cookie files are sent to your computer. A cookie is a small file containing a set of characters that makes it possible to identify your browser.

We use cookies to improve the quality of our services by saving user preferences and tracking trends in user behaviour, for example when a search is performed. Most browsers are set up by default to accept cookies, but you can prohibit the use of cookies entirely or set your browser to notify you when they are sent. Note, however, that without cookies some features of the site may not work correctly.
Logging
Every time the site is visited, our servers automatically record the information your browser transmits when visiting web pages. As a rule this information includes the web page requested, the computer’s IP address, the browser type, the browser’s language settings, the date and time of the request, and one or more cookies that make it possible to identify your browser precisely.
Links
On this site links may be presented in a format that makes it possible to track whether visitors use them. This information is used to improve the quality of our advertising.
Changes to the privacy policy
Please note that the privacy policy may change from time to time. All changes to the privacy policy are published on this page.

 

Personal data processing policy

1. General provisions
The personal data processing policy of sole proprietor Shukshina Inessa Zufarovna (hereinafter — the Policy) has been developed in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (hereinafter — FZ-152).

This Policy defines the procedure for processing personal data and the measures taken to ensure the security of personal data at sole proprietor Shukshina Inessa Zufarovna (hereinafter — the Company), for the purpose of protecting the rights and freedoms of the individual and the citizen when processing their personal data, including the protection of the rights to inviolability of private life and to personal and family privacy.

The following core terms are used in the Policy:

automated processing of personal data — the processing of personal data using computing equipment;
blocking of personal data — the temporary suspension of the processing of personal data (except where the processing is necessary in order to correct the personal data);
personal data information system — the totality of personal data contained in databases together with the information technologies and technical means that ensure their processing;
depersonalisation of personal data — actions as a result of which it becomes impossible, without the use of additional information, to determine that personal data belongs to a specific data subject;
processing of personal data — any action (operation) or set of actions (operations) performed on personal data with or without the use of automation tools, including collection, recording, systematisation, accumulation, storage, correction (updating, amendment), extraction, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion and destruction of personal data;
operator — a state body, a municipal body, a legal entity or a natural person that, independently or jointly with other persons, organises and (or) carries out the processing of personal data, and also determines the purposes of processing personal data, the composition of the personal data to be processed, and the actions (operations) performed on personal data;
personal data — any information relating to a directly or indirectly identified or identifiable natural person (data subject);
provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons;
distribution of personal data — actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at making personal data known to an unlimited group of persons, including the publication of personal data in the mass media, placement in information and telecommunications networks, or the provision of access to personal data by any other means;
cross-border transfer of personal data — the transfer of personal data to the territory of a foreign state, to a foreign state authority, or to a foreign natural or legal person;
destruction of personal data — actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the physical media carrying the personal data are destroyed;
The Company is obliged to publish or otherwise ensure unrestricted access to this Personal Data Processing Policy in accordance with part 2 of article 18.1 of FZ-152.

2. Principles and conditions of personal data processing

2.1 Principles of personal data processing
The processing of personal data at the Company is carried out on the basis of the following principles:
• lawfulness and a fair basis;
• limiting the processing of personal data to the achievement of specific, predetermined and lawful purposes;
• not permitting the processing of personal data that is incompatible with the purposes for which the personal data were collected;
• not permitting the merging of databases containing personal data that are processed for purposes incompatible with each other;
• processing only those personal data that correspond to the purposes of their processing;
• the content and volume of the personal data processed corresponding to the declared purposes of processing;
• not permitting the processing of personal data that are excessive in relation to the declared purposes of their processing;
• ensuring the accuracy, sufficiency and relevance of personal data in relation to the purposes of processing personal data;
• the destruction or depersonalisation of personal data once the purposes of their processing have been achieved, or in the event that the need to achieve those purposes is lost, or where it is impossible for the Company to remedy the violations of personal data committed, unless otherwise provided for by federal law.
2.2 Conditions of personal data processing
The Company processes personal data where at least one of the following conditions is met:
• the processing of personal data is carried out with the consent of the data subject to the processing of their personal data;
• the processing of personal data is necessary in order to achieve purposes provided for by an international treaty of the Russian Federation or by law, or for the exercise and performance of the functions, powers and duties placed on the operator by the legislation of the Russian Federation;
• the processing of personal data is necessary for the administration of justice, the execution of a court order or of an act of another body or official subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings;
• the processing of personal data is necessary for the performance of a contract to which the data subject is a party, beneficiary or guarantor, and also for the conclusion of a contract at the initiative of the data subject or of a contract under which the data subject will be a beneficiary or guarantor;
• the processing of personal data is necessary for the exercise of the rights and legitimate interests of the operator or of third parties, or in order to achieve socially significant purposes, provided that this does not violate the rights and freedoms of the data subject;
• processing is carried out of personal data to which the data subject has granted access to an unlimited group of persons, or has done so at their request (hereinafter — publicly available personal data);
• processing is carried out of personal data that are subject to publication or mandatory disclosure in accordance with federal law.
2.3 Confidentiality of personal data
The Company and other persons who have obtained access to personal data are obliged not to disclose them to third parties and not to distribute personal data without the consent of the data subject, unless otherwise provided for by federal law.
2.4 Publicly available sources of personal data
For the purposes of information support, publicly available sources of subjects’ personal data may be created at the Company, including directories and address books. With the subject’s written consent, publicly available sources of personal data may include their surname, first name and patronymic, date and place of birth, position, contact telephone numbers, e-mail address and other personal data communicated by the data subject.
Information about a subject must be excluded from publicly available sources of personal data at any time at the request of the subject, or by decision of a court or of other authorised state bodies.
2.5 Special categories of personal data
The processing by the Company of special categories of personal data concerning racial or ethnic origin, political views, religious or philosophical beliefs, state of health or intimate life is permitted in cases where:
• the data subject has given written consent to the processing of their personal data;
• the personal data have been made publicly available by the data subject;
• the processing of personal data is carried out in accordance with the legislation on state social assistance, labour legislation, or the legislation of the Russian Federation on state pension provision and on employment pensions;
• the processing of personal data is necessary to protect the life, health or other vital interests of the data subject or the life, health or other vital interests of other persons, and it is impossible to obtain the consent of the data subject;
• the processing of personal data is carried out for medical and preventive purposes, in order to establish a medical diagnosis, or to provide medical and medico-social services, provided that the processing of personal data is carried out by a person professionally engaged in medical activity and obliged under the legislation of the Russian Federation to preserve medical confidentiality;
• the processing of personal data is necessary to establish or exercise the rights of the data subject or of third parties, and likewise in connection with the administration of justice;
• the processing of personal data is carried out in accordance with the legislation on compulsory types of insurance and with insurance legislation.
The processing of special categories of personal data must be terminated immediately if the reasons for which it was carried out have been eliminated, unless otherwise established by federal law.
The processing of personal data concerning criminal records may be carried out by the Company solely in the cases and in the manner determined in accordance with federal laws.
2.6 Biometric personal data
Information that characterises the physiological and biological features of a person, on the basis of which their identity can be established — biometric personal data — may be processed by the Company only with the written consent of the subject.
2.7 Assigning the processing of personal data to another person
The Company has the right to assign the processing of personal data to another person with the consent of the data subject, unless otherwise provided for by federal law, on the basis of a contract concluded with that person. A person processing personal data on the Company’s instructions is obliged to observe the principles and rules for processing personal data provided for by FZ-152.
2.8 Cross-border transfer of personal data
Before beginning any such transfer, the Company is obliged to satisfy itself that the foreign state to whose territory the personal data are to be transferred provides adequate protection of the rights of data subjects.
The cross-border transfer of personal data to the territory of foreign states that do not provide adequate protection of the rights of data subjects may be carried out in the following cases:
• the data subject has given written consent to the cross-border transfer of their personal data;
• performance of a contract to which the data subject is a party.

3. Rights of the data subject

3.1 Consent of the data subject to the processing of their personal data
The data subject decides to provide their personal data and gives consent to their processing freely, of their own will and in their own interest. Consent to the processing of personal data may be given by the data subject or their representative in any form that allows the fact of its receipt to be confirmed, unless otherwise established by federal law.
The obligation to provide evidence that the data subject’s consent to the processing of their personal data has been obtained, or evidence of the existence of the grounds specified in Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, rests with the Company.
3.2 Rights of the data subject
The data subject has the right to obtain from the Company information concerning the processing of their personal data, unless such a right is restricted in accordance with federal laws. The data subject has the right to require the Company to correct their personal data, or to block or destroy them, where the personal data are incomplete, out of date, inaccurate, unlawfully obtained or not necessary for the declared purpose of processing, and also to take the measures provided for by law to protect their rights.
The processing of personal data for the purpose of promoting goods, works and services on the market by means of direct contact with a potential consumer using means of communication, and also for the purposes of political campaigning, is permitted only with the prior consent of the data subject. Such processing of personal data is deemed to be carried out without the prior consent of the data subject unless the Company proves that such consent was obtained.
The Company is obliged to cease immediately, at the request of the data subject, the processing of their personal data for the above purposes.
It is prohibited to take decisions based solely on the automated processing of personal data that give rise to legal consequences for the data subject or otherwise affect their rights and legitimate interests, except in the cases provided for by federal laws or where the data subject has given written consent.

4. Ensuring the security of personal data
The security of the personal data processed by the Company is ensured through the implementation of the legal, organisational and technical measures necessary to meet the requirements of federal legislation in the field of personal data protection.
In order to prevent unauthorised access to personal data, the Company applies the following organisational and technical measures:
• appointment of officials responsible for organising the processing and protection of personal data;
• limiting the range of persons who have access to personal data;
• familiarising subjects with the requirements of federal legislation and of the Institution’s regulatory documents on the processing and protection of personal data;
• organising the recording, storage and handling of information media;
• identifying threats to the security of personal data during their processing and building threat models on that basis;
• developing a personal data protection system on the basis of the threat model;
• checking the readiness and effectiveness of the use of information protection tools;
• differentiating users’ access to information resources and to the hardware and software used to process information;
• registering and recording the actions of users of personal data information systems;
• using antivirus tools and tools for restoring the personal data protection system;
• applying, where necessary, firewalls, intrusion detection, security analysis tools and cryptographic information protection tools;

5. Final provisions

Other rights and obligations of the Company as a personal data operator are determined by the legislation of the Russian Federation in the field of personal data.
Officials of the Company who are guilty of violating the rules governing the processing and protection of personal data bear material, disciplinary, administrative, civil or criminal liability in the manner established by federal laws.