Privacy Policy on the Processing of Fakegram Users’ Personal Data

Personal data means any information relating to an identified or identifiable natural person (personal data subject). In particular, such information may include any information provided by the user: surname, first name, patronymic, phone number, email, as well as other information. Processing of personal data means any action (operation) or set of actions (operations) performed with personal data, whether by automated means or without such means, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion, and destruction of personal data. Such transfer is carried out in accordance with lawful instructions of authorized bodies or in accordance with the terms of an agreement under which the User gives consent to such processing. Confidentiality of personal data means the requirement for persons admitted to the processing of users’ personal data to duly observe the rules of processing and storage, not to allow their dissemination without the consent of the subject or another lawful basis, and to ensure such protection. Use of personal data means actions (operations) with personal data aimed at identifying the User in order to provide access to the service and confirm the accuracy of the information specified by the User.

Information means data (messages, data) regardless of the form in which it is presented. Publicly available personal data means personal data to which access is granted to an unlimited number of persons with the consent of the subject, or for which federal laws do not require confidentiality. Operator means the Company that processes users’ personal data in order to provide them with authorized access to all services, and that also determines the purposes of personal data processing, the composition of personal data, the actions (operations) performed with personal data, and the procedure for storing and destroying users’ personal data. User means a visitor to the service. Dissemination of personal data means any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at making personal data available to an unlimited circle of persons, including publication in mass media, placement in information and telecommunication networks, or granting access to personal data in any other way. Destruction of personal data means any actions as a result of which personal data is irreversibly destroyed with no possibility of further restoration of the content of personal data in the personal data information system and/or the physical media containing personal data are destroyed. Fakegram means the service itself, hereinafter the Operator.

2.1. The Operator has the right to: 2.1.1. Receive reliable information and/or documents containing personal data from the personal data subject. 2.1.2. If the personal data subject withdraws consent to the processing of personal data, the Operator has the right to continue processing personal data without the subject’s consent if there are grounds specified in the Personal Data Law. 2.1.3. Independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided for by the Personal Data Law and the regulatory legal acts adopted in accordance with it, unless otherwise provided by the Personal Data Law or other federal laws. 2.2. The Operator is obliged to: 2.2.1. Organize personal data processing in accordance with the procedure established by the current legislation of the Russian Federation. 2.2.2. Respond to appeals and requests of personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law.

2.2.3. Stop transfer (dissemination, provision, access) of personal data, stop processing, and destroy personal data in the procedure and in the cases provided for by the Personal Data Law. 2.3. Personal data subjects have the right to: 2.3.1. Receive information relating to the processing of their personal data, except in cases provided for by federal laws. 2.3.2. Demand that the operator clarify, block, or destroy their personal data if the personal data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing, as well as take measures provided by law to protect their rights. 2.4. Personal data subjects are obliged to: 2.4.1. Provide the Operator with reliable data about themselves. 2.4.2. Inform the Operator about clarification (updating, modification) of their personal data.

3.1. Personal data processing is carried out on a lawful and fair basis. 3.2. Personal data processing is limited to achieving specific, predetermined, and lawful purposes. Processing of personal data incompatible with the purposes of personal data collection is not permitted. 3.3. It is not allowed to merge databases containing personal data if their processing is carried out for purposes incompatible with each other. 3.4. Only personal data that corresponds to the purposes of its processing is subject to processing. 3.5. The content and volume of processed personal data correspond to the stated purposes of processing. Excessive personal data in relation to the stated purposes of processing is not permitted.

3.6. When processing personal data, the accuracy of personal data, its sufficiency, and, where necessary, its relevance to the purposes of personal data processing are ensured. The Operator takes necessary measures and/or ensures their adoption to delete or clarify incomplete or inaccurate data. 3.7. Personal data is stored in a form that allows identification of the personal data subject for no longer than required by the purposes of personal data processing, unless the storage period of personal data is established by federal law or by an agreement to which the personal data subject is a party, beneficiary, or guarantor. Processed personal data is destroyed or depersonalized upon achievement of the purposes of processing or in case of loss of the need to achieve these purposes, unless otherwise provided by federal law.

4.1. The purpose of processing the User’s personal data: 4.1.1. Informing the User. 4.1.2. Providing the User with access to the service.

4.2. The Operator has the right to send the User notifications about new products and services, special offers, and various events. The User may always refuse to receive informational messages by contacting the Operator via email.

5.1. The Operator and other persons who have gained access to personal data are obliged not to disclose personal data to third parties and not to disseminate personal data without the consent of the personal data subject, unless otherwise provided by federal law.

6.1. The User may obtain any clarifications on issues of interest concerning the processing of their personal data by contacting the Operator via email.

6.2. Any changes to the Operator’s personal data processing policy will be reflected in this document. The policy remains in force indefinitely until replaced by a new version.