ИП Мозолин Сергей Владимирович's Policy on the Processing of Personal Data

1.1. This Policy (hereinafter referred to as the “Policy”) has been prepared in accordance with Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data," and defines the policy of the personal data operator — ИП Мозолин Сергей Владимирович, located at: 670033, республика Бурятия, г Улан-Удэ, мкр. 140А, д. 18, кв. 31 (hereinafter referred to as the "Operator") regarding the processing of personal data collected through the use of the website https://dzenpizza.ru/ (hereinafter referred to as the "Site"), and contains information about the requirements for protecting such personal data implemented by the Operator.

1.2. The legal grounds for the processing of personal data are the regulatory acts of the Russian Federation, local regulations of the Operator, agreements with subjects of personal data, and consents of subjects of personal data to process their personal data.

1.3. The terms contained in Article 3 of Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" are used in this Policy with the same meaning.

1.4. The processing of personal data is carried out while maintaining confidentiality. The Operator does not disclose or distribute the personal data of personal data subjects to third parties without the consent of the personal data subject unless otherwise provided by the legislation of the Russian Federation.

2.1. The personal data operator has the following rights:

2.2. The personal data operator undertakes to:

2.3. Rights of subjects of personal data:

2.4. Obligations of subjects of personal data:

3.1. The Operator processes personal data of the following categories of subjects whose personal data may be collected by the Operator using the Site:

3.2. The processing of personal data of other categories of subjects of personal data is regulated by other local acts of the Operator. The personal data processed by the Operator of unregistered and registered users of the Site, as well as recipients of goods and services sold by the Operator, include all information provided to the Operator by users via the Site, including by filling in the corresponding fields of personal data on the Site, among which are:

5.1. The Operator may process personal data using automated means or without using such means by collecting, recording, systematizing, accumulating, storing, updating (amending, changing), extracting, using, transferring (providing, accessing), blocking, deleting, destroying.

5.2. The Operator has the right to transfer personal data to third parties or entrust the processing of personal data to third parties if it is necessary to achieve the goal of their processing in accordance with this Policy, as well as in cases provided for by the current legislation of the Russian Federation on personal data.

5.3. The Operator will process personal data no longer than required by the purposes of their processing, unless longer periods are provided for by the current legislation of the Russian Federation on personal data.

6.1. The Operator takes a responsible approach to the protection of collected personal data and implements the requirements for their protection by taking a set of measures that are necessary and sufficient to ensure compliance with the obligations provided for by the current legislation of the Russian Federation on personal data.

6.2. At the same time, the Operator is not responsible for third parties obtaining personal data by gaining access to the personal accounts of registered users. Registered users of the Site must independently ensure the security of their login credentials for their personal account.

7. Consent to the processing of personal data and applicable disclaimers

7.1. The user of the Site freely, voluntarily, and in his own interest provides his personal data to the Operator.

7.2. By accepting the terms of this Policy, the user of the Site hereby confirms that the personal data he has provided is accurate. The Operator assumes that the user of the Site provides accurate personal data and keeps them up-to-date.

7.3. By filling in the data fields provided on the Site, the user of the Site accepts this Policy and gives his consent to the processing of his personal data in the manner and under the conditions specified in this Policy.

7.4. By filling in the data fields related to the recipients of goods and services sold by the Operator, the user of the Site guarantees that these recipients of goods and services have given their consent to the processing of their personal data in the manner and under the conditions specified in this Policy. In this case, the user of the Site also undertakes to notify such recipients of goods and services sold by the Operator about the transfer of their personal data to the Operator and guarantees such notification.

7.5. By accepting the terms of this Policy, the user of the Site confirms that he is aware of his rights and obligations provided for by the current legislation of the Russian Federation on personal data, in particular, the right to access his personal data, to revoke his consent.

7.6. The condition for terminating the processing of personal data is the achievement of the goals of processing personal data, the expiration of the term of validity of the consent, or the withdrawal of the consent of the subject of personal data to the processing of his personal data, as well as the detection of unauthorized processing of personal data. The subject of personal data can revoke his consent to the processing of his personal data by sending a written notice to the email address indicated on the Site on the "Offer" page.

7.7. If the user of the Site does not intend to provide personal data or does not accept this Policy, then he should stop using the Site, in which case the Operator will not be able to ensure the user's use of the Site.

8.1. The Operator may collect information about visits to the Site by users without providing such information themselves. This information can be obtained using various methods, tools, and instruments of internet statistics and settings (including cookies, Yandex.Metrica service, Google Analytics). The Operator may use these methods, tools, and instruments to promote goods and services sold by the Operator, provide information on available goods and services through targeted advertising, as well as enhance user convenience by creating profiles for registered users. However, these methods, tools, and instruments are not used to identify unregistered users.

8.2. If a user does not agree with cookies being saved on their device, they can disable this option in their browser settings. Saved cookies can also be deleted at any time in the system settings of the browser. A user can change their browser settings to accept or reject all cookies by default, or cookies from specific websites, including the Site.

8.3. Disabling certain cookies may result in some sections or features of the Site becoming unavailable.

8.4. If a user disagrees with the use of internet statistics and configuration tools, they should stop using the Site. In that case, the Operator will not be able to ensure the user's access to the Site.

9.1. Upon achieving the goals of personal data processing, expiration of consent for personal data processing, as well as upon revocation of consent by the subject of personal data, personal data must be destroyed unless:

9.2. If personal data is processed by the Operator without using automation means, the document confirming the destruction of personal data is the act of destruction of personal data.

9.3. If personal data is processed by the Operator using automated means, documents confirming the destruction of personal data include the act of destruction of personal data and the log export from the event registration journal in the personal data information system.

9.4. If personal data is processed by the Operator both with and without the use of automated means, documents confirming the destruction of personal data include the act of destruction of personal data and the log export from the event registration journal in the personal data information system.

9.5. The act of destruction of personal data and the log export must be stored for 3 years from the date of destruction of personal data.

10.1. This Policy is subject to changes or additions if corresponding amendments are made to the current legislation of the Russian Federation regarding personal data. It may also be changed at any time at the discretion of the Operator. The current version of the Operator's Policy is always available for viewing by an unlimited number of persons on the Site.

10.2. All relationships involving the Operator concerning the processing and protection of personal data that have not been directly reflected in this Policy shall be governed according to the provisions of the current legislation of the Russian Federation on personal data.