Privacy Policy

1. General Provisions

This personal data processing policy is prepared in accordance with the requirements of Federal Law No. 152-FZ dated 27.07.2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data taken by LLC TC "Carbon" (hereinafter referred to as the Operator).

1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the rights to privacy, personal and family secrets, as its most important goal and condition for carrying out its activities.

1.2. This Policy of the Operator regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors to the website https://carbontc.ru/.

2. Key Terms Used in the Policy

2.1. Automated processing of personal data — processing of personal data using computer technology.

2.2. Blocking of personal data — temporary suspension of the processing of personal data (except in cases where processing is necessary to clarify personal data).

2.3. Website — a set of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://carbontc.ru/.

2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing.

2.5. Depersonalization of personal data — actions as a result of which it becomes impossible to determine the ownership of personal data by a specific User or other personal data subject without using additional information.

2.6. Personal data processing — any action (operation) or set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.7. Operator — a state or municipal authority, legal entity or individual that independently or jointly with others organizes and/or carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, and actions (operations) performed with personal data.

2.8. Personal data — any information related directly or indirectly to a specific or identifiable User of the website https://carbontc.ru/.

2.9. Personal data made publicly available by the personal data subject — personal data to which the data subject has granted access to an unlimited number of persons by giving consent to the processing of personal data for distribution, in the manner prescribed by the Personal Data Law (hereinafter — personal data allowed for distribution).

2.10. User — any visitor to the website https://carbontc.ru/.

2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a certain group of persons.

2.12. Distribution of personal data — any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or at making personal data known to an unlimited number of persons, including publication in mass media, placement in information and telecommunication networks, or providing access to personal data in any other way.

2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or foreign legal entity.

2.14. Destruction of personal data — any actions resulting in the irrevocable destruction of personal data with the impossibility of further recovery of the personal data content in the personal data information system and/or destruction of material carriers of personal data.

3. Main Rights and Obligations of the Operator

3.1. The Operator has the right to:
— receive reliable information and/or documents containing personal data from the personal data subject;
— continue processing personal data without the consent of the personal data subject if the subject withdraws consent or sends a request to stop processing, provided there are legal grounds specified in the Personal Data Law;
— independently determine the composition and list of measures necessary and sufficient to ensure compliance with obligations under the Personal Data Law and regulations, unless otherwise provided by the Personal Data Law or other federal laws.

3.2. The Operator is obliged to:
— provide the personal data subject with information regarding the processing of their personal data upon request;
— organize the processing of personal data in accordance with the laws of the Russian Federation;
— respond to inquiries and requests from personal data subjects and their legal representatives according to the Personal Data Law;
— provide the authorized body for the protection of the rights of personal data subjects with necessary information within 10 days of receiving such a request;
— publish or otherwise provide unrestricted access to this Policy regarding the processing of personal data;
— take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, and other unlawful actions;
— stop the transfer (distribution, provision, access) of personal data, cease processing, and destroy personal data in accordance with the Personal Data Law;
— fulfill other obligations provided for by the Personal Data Law.

4. Main Rights and Obligations of Personal Data Subjects

4.1. Personal data subjects have the right to:
— receive information concerning the processing of their personal data, except in cases stipulated by federal laws. The information is provided in an accessible form and must not contain personal data of other subjects unless there are legal grounds for disclosing such data. The list and procedure for obtaining such information are defined by the Personal Data Law;
— request the operator to clarify, block, or delete their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing, as well as to take legal measures to protect their rights;
— require prior consent for the processing of personal data for the purpose of promoting goods, works, and services on the market;
— withdraw consent to the processing of personal data and submit a demand to stop such processing;
— appeal unlawful actions or inactions of the Operator in processing personal data to the authorized body for the protection of personal data subjects' rights or in court;
— exercise other rights provided by the legislation of the Russian Federation.

4.2. Personal data subjects must:
— provide the Operator with reliable data about themselves;
— inform the Operator about updates (corrections, changes) to their personal data.

4.3. Persons who have provided the Operator with false information about themselves or information about another personal data subject without the latter’s consent are liable in accordance with the laws of the Russian Federation.

5. Principles of Personal Data Processing

5.1. Personal data is processed on a legal and fair basis.

5.2. The processing of personal data is limited to achieving specific, pre-defined, and legitimate goals. Processing of personal data incompatible with the purpose of data collection is not allowed.

5.3. It is not allowed to combine databases containing personal data processed for incompatible purposes.

5.4. Only personal data that meets the purposes of its processing is subject to processing.

5.5. The content and scope of the processed personal data must correspond to the stated processing purposes. The processing of excessive personal data in relation to the stated processing purposes is not allowed.

5.6. The accuracy, sufficiency, and, where necessary, relevance of personal data with respect to the purposes of processing must be ensured. The Operator takes necessary measures to delete or clarify incomplete or inaccurate data.

5.7. Personal data must be stored in a form that allows identifying the data subject no longer than required by the processing purposes unless a different storage period is established by federal law or contract to which the data subject is a party. Processed personal data must be destroyed or depersonalized upon achieving processing goals or if the need to achieve such goals is lost, unless otherwise provided by federal law.

6. Purpose of Personal Data Processing

— Purpose of processing: informing the User via email communications.
— Personal data: email address, phone numbers, full name, organization name, city.
— Legal basis: the Operator’s founding documents.
— Types of personal data processing: collection, recording, systematization, accumulation, storage, destruction, and depersonalization of personal data.

7. Conditions for Personal Data Processing

7.1. Personal data is processed with the consent of the personal data subject.

7.2. Personal data processing is necessary to achieve objectives defined by an international agreement or law of the Russian Federation or to fulfill the functions, powers, and duties imposed on the operator by Russian law.

7.3. Personal data processing is necessary to administer justice or enforce a judicial act or act of another authority or official that is enforceable under Russian law on enforcement proceedings.

7.4. Personal data processing is necessary to fulfill a contract to which the data subject is a party or beneficiary, or for concluding a contract at the request of the data subject.

7.5. Personal data processing is necessary to exercise the rights and legitimate interests of the operator or third parties, or to achieve socially significant goals, provided it does not violate the rights and freedoms of the data subject.

7.6. The processing of personal data made publicly available by the data subject or at their request is carried out (hereinafter — publicly available personal data).

7.7. The processing of personal data subject to publication or mandatory disclosure under federal law is carried out.

8. Procedure for Collection, Storage, Transfer, and Other Types of Personal Data Processing

The security of personal data processed by the Operator is ensured through legal, organizational, and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.

The website also collects and processes anonymized data about visitors (e.g., through “cookie” files) using internet analytics services (Yandex Metrica).

8.1. The Operator ensures the security of personal data and takes all possible measures to prevent access to personal data by unauthorized persons.

8.2. The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with current legislation or if the subject of personal data has given consent to the Operator to transfer the data to a third party for fulfilling obligations under a civil law contract.

8.3. In case of inaccuracies in personal data, the User can update them independently by sending a notification to the Operator’s email address info@carbontc.ru with the note “Updating personal data.”

8.4. The processing period of personal data is determined by achieving the purposes for which the personal data were collected, unless a different period is provided by a contract or applicable law. The User may withdraw consent to the processing of personal data at any time by sending a notification to the Operator via email at info@carbontc.ru with the note “Withdrawal of consent to the processing of personal data.”

8.5. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by the mentioned entities (Operators) in accordance with their User Agreement and Privacy Policy. The subject of personal data and/or the User is obliged to familiarize themselves with these documents in a timely manner. The Operator is not responsible for the actions of third parties, including service providers mentioned in this paragraph.

8.6. Prohibitions on the transfer (except for access provision), as well as on the processing or conditions of processing (except for gaining access) of personal data permitted by the subject of personal data for distribution do not apply in cases of processing personal data in state, public, and other public interests defined by Russian legislation.

8.7. The Operator ensures the confidentiality of personal data during processing.

8.8. The Operator stores personal data in a form that allows the identification of the subject of personal data no longer than required by the purposes of personal data processing, unless the storage period of personal data is established by federal law, a contract to which the subject of personal data is a party, beneficiary, or guarantor.

8.9. A condition for terminating the processing of personal data may be the achievement of the purposes of personal data processing, expiration of the consent period of the subject of personal data, withdrawal of consent by the subject of personal data, or a demand to stop the processing of personal data, as well as identification of unlawful processing of personal data.

9. List of actions performed by the Operator with personal data

9.1. The Operator performs the following actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, usage, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.

9.2. The Operator performs automated processing of personal data with or without receiving and/or transmitting the obtained information via information and telecommunication networks.

10. Cross-border transfer of personal data

10.1. Before starting the cross-border transfer of personal data, the Operator must ensure that the foreign state, to whose territory the transfer of personal data is intended, provides reliable protection of the rights of personal data subjects.

10.2. Cross-border transfer of personal data to the territory of foreign states that do not meet the above requirements can be carried out only if the personal data subject consents in writing to the cross-border transfer of their personal data and/or for the execution of a contract to which the personal data subject is a party.

11. Final provisions

11.1. The User can receive any clarifications on issues of interest regarding the processing of their personal data by contacting the Operator via email at info@carbontc.ru.

11.2. This document will reflect any changes in the Operator’s personal data processing policy. The policy is valid indefinitely until replaced by a new version.

11.3. The current version of the Policy is freely available on the Internet at https://carbontc.ru/policy