Privacy Policy

Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy is prepared in accordance with the requirements of the Federal Law of July 27, 2006, No. 152-FZ "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and the measures taken by Evgeniya Furs Atelier (hereinafter referred to as the "Operator") to ensure the security of personal data.

1.1. The Operator considers the highest priority in its activities to be the observance of human and civil rights and freedoms when processing personal data, including the protection of privacy, personal, and family secrets.
1.2. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the website https://evgeniya-furs.shop.

2. Key Terms Used in the Policy

2.1. Automated Processing of Personal Data – processing of personal data using computer technology.
2.2. Blocking of Personal Data – temporary suspension of personal data processing (except when processing is necessary to clarify personal data).
2.3. Website – a collection of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://evgeniya-furs.shop.
2.4. Personal Data Information System – a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
2.5. Depersonalization of Personal Data – actions that make it impossible to determine the ownership of personal data by a specific User or other subject of personal data without using additional information.
2.6. Processing of Personal Data – any action (operation) or set of actions (operations) performed with or without automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction of personal data.
2.7. Operator – a state body, municipal authority, legal entity, or individual that independently or jointly with others organizes and/or processes personal data, as well as determines the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal Data – any information directly or indirectly related to an identified or identifiable User of the website https://evgeniya-furs.shop.
2.9. Personal Data Authorized for Dissemination – personal data to which an unlimited number of persons have access, granted by the personal data subject through consent to processing in accordance with the Personal Data Law.
2.10. User – any visitor to the website https://evgeniya-furs.shop.
2.11. Provision of Personal Data – actions aimed at disclosing personal data to a specific person or group of persons.
2.12. Dissemination of Personal Data – actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or making personal data available to an unlimited number of persons, including publication in mass media, posting on information and telecommunication networks, or providing access in any other way.
2.13. Cross-Border Transfer of Personal Data – the transfer of personal data to a foreign state’s authority, foreign individual, or foreign legal entity.
2.14. Destruction of Personal Data – actions resulting in the irreversible destruction of personal data, making it impossible to restore the content of personal data in the information system and/or the destruction of physical media containing personal data.

3. Key Rights and Obligations of the Operator

3.1. The Operator has the right to:

• Receive accurate information and/or documents containing personal data from the personal data subject.

• Continue processing personal data without the subject’s consent if grounds are provided by the Personal Data Law.

• Independently determine necessary measures to comply with legal obligations unless otherwise specified by law.

3.2. The Operator is obliged to:

• Provide the personal data subject, upon request, with information regarding the processing of their personal data.

• Process personal data in accordance with Russian law.

• Respond to requests from personal data subjects and their legal representatives.

• Notify the authorized body for personal data protection within 10 days of a request.

• Publish or otherwise ensure unrestricted access to this Policy.

• Implement legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, alteration, blocking, copying, or distribution.

• Cease processing and destroy personal data in cases stipulated by law.

4. Key Rights and Obligations of Personal Data Subjects

4.1. Personal data subjects have the right to:

• Obtain information about the processing of their personal data.

• Request correction, blocking, or destruction of inaccurate or unlawfully obtained data.

• Withdraw consent to processing.

• File complaints with authorized bodies or courts regarding unlawful processing.

4.2. Personal data subjects must:

• Provide accurate personal data.

• Notify the Operator of any changes to their personal data.

4.3. Persons providing false personal data or data of another subject without consent bear responsibility under Russian law.

5. Principles of Personal Data Processing

5.1. Processing is lawful and fair.
5.2. Processing is limited to specific, predefined, and legitimate purposes.
5.3. Merging databases with incompatible processing purposes is prohibited.
5.4. Only relevant and necessary personal data is processed.
5.5. Storage duration does not exceed legal or contractual requirements.

6. Purposes of Personal Data Processing

7. Conditions for Processing Personal Data

7.1. Processing requires the subject’s consent unless otherwise permitted by law.
7.2. Processing is allowed for legal compliance, contract fulfillment, or public interest.

8. Procedure for Collection, Storage, and Transfer

8.1. The Operator ensures data security and prevents unauthorized access.
8.2. Data is not transferred to third parties except as required by law or with consent.
8.3. Users may update their data by emailing privacy@evgeniya-furs.shop with the subject "Update Personal Data."
8.4. Processing ceases upon achieving the purpose, withdrawal of consent, or legal requirement.

9. Actions Performed by the Operator

9.1. The Operator collects, records, stores, updates, transfers, and destroys personal data.
9.2. Automated processing may involve data transmission via networks.

10. Cross-Border Data Transfer

10.1. The Operator must notify authorities before transferring data abroad.
10.2. Relevant information must be obtained from foreign entities beforehand.

11. Confidentiality

The Operator and authorized persons must not disclose personal data without consent unless required by law.

12. Final Provisions

12.1. Users may request clarifications by emailing privacy@evgeniya-furs.shop.
12.2. This Policy may be updated; the current version is available at https://evgeniya-furs.shop/privacy-policy.
12.3. The Policy remains effective until replaced by a new version.