Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy has been drawn up in accordance with the requirements of the Federal Law of 27.07.2006 No. 152-FZ “On Personal Data” (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and the measures taken by Yakunin Vladislav Ivanovich (hereinafter referred to as the Operator) to ensure the security of personal data.

1.1. The Operator considers compliance with human rights and freedoms, including the protection of privacy, personal, and family secrets, as a key objective of its activities.

1.2. This Policy applies to all information that the Operator may receive about visitors to the website https://chudo-kniga.ru.

2. Key Terms

2.1. Automated processing of personal data — processing personal data using computing tools.

2.2. Blocking of personal data — temporary suspension of personal data processing (except when processing is necessary to clarify personal data).

2.3. Website — a set of graphic and informational materials, as well as software and databases, available on the Internet at https://chudo-kniga.ru.

2.4. Information system of personal data — a set of databases containing personal data and the technologies and tools used to process them.

2.5. Anonymization of personal data — actions that make it impossible to identify a specific user without additional information.

2.6. Processing of personal data — any action or set of actions performed with personal data, with or without automation, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer, anonymization, blocking, deletion, or destruction.

2.7. Operator — a government body, municipal authority, legal entity, or individual that organizes and/or processes personal data and determines the purposes and scope of processing.

2.8. Personal data — any information relating directly or indirectly to an identified or identifiable user of the website https://chudo-kniga.ru.

2.9. Personal data authorized for dissemination — personal data for which unrestricted access is granted by the data subject in accordance with the law.

2.10. User — any visitor of the website https://chudo-kniga.ru.

2.11. Providing personal data — actions aimed at disclosing personal data to a specific person or group of persons.

2.12. Dissemination of personal data — actions aimed at disclosing personal data to an indefinite circle of persons, including publication in media or placement in information networks.

2.13. Cross-border transfer — transfer of personal data to a foreign state or foreign entity.

2.14. Destruction of personal data — irreversible deletion of personal data or destruction of physical media containing it.

3. Operator’s Rights and Obligations

3.1. The Operator has the right to:

  • Obtain accurate information and/or documents containing personal data from the data subject;
  • Continue processing personal data if consent is withdrawn, when permitted by law;
  • Determine necessary measures to comply with data protection legislation.

3.2. The Operator is obliged to:

  • Provide information about personal data processing upon request;
  • Organize data processing in accordance with Russian law;
  • Respond to inquiries and requests from data subjects and their representatives;
  • Provide necessary information to the authorized data protection body within 30 days;
  • Publish or otherwise ensure access to this Policy;
  • Implement legal, organizational, and technical measures to protect personal data;
  • Stop processing or transfer and destroy personal data as required by law;
  • Fulfill other obligations established by law.

4. Data Subject Rights and Obligations

4.1. Data subjects have the right to:

  • Access information regarding the processing of their personal data;
  • Request clarification, blocking, or destruction of inaccurate or unnecessary data;
  • Give prior consent for marketing purposes;
  • Withdraw consent or request to stop processing;
  • Appeal unlawful actions or inaction to the authorized body or court;
  • Exercise other rights provided by law.

4.2. Data subjects are obliged to provide accurate personal data and notify the Operator of any updates.

4.3. Providing false data or data about another person without consent may result in legal liability.

5. Principles of Personal Data Processing

  • Processing is lawful, fair, and limited to specific purposes.
  • Only relevant data is processed; databases with incompatible purposes must not be combined.
  • Data must be accurate, sufficient, and updated as necessary.
  • Data is stored only as long as required to achieve processing purposes, then anonymized or destroyed.

6. Purpose and Scope of Processing

The purposes of processing include providing users with access to website services and materials. Personal data collected may include full name, phone number, email, payment details, device information, IP address, cookies, log files, and uploaded images. Processing is based on contractual obligations and includes collection, storage, anonymization, and sending informational emails.

7. Conditions of Processing

Processing is carried out with the data subject’s consent or as required by law, contract, or public interest. Publicly available data can be processed without additional consent, and mandatory disclosure under federal law is permitted.

8. Collection, Storage, and Transfer

  • Personal data is securely stored and protected from unauthorized access.
  • Data is not shared with third parties except by law or with consent for contractual obligations.
  • Users may update or withdraw consent via info@chudo-kniga.ru.
  • Third-party services process data according to their privacy policies. The Operator is not responsible for their actions.
  • Confidentiality of data is maintained at all times.

9. Actions Performed by the Operator

The Operator collects, stores, updates, extracts, uses, transfers, anonymizes, blocks, deletes, and destroys personal data. Automated processing may involve data transfer over networks.

10. Cross-Border Transfer

The Operator must notify the authorized body before transferring personal data abroad and obtain relevant information from foreign authorities or entities.

11. Confidentiality

The Operator and anyone with access to personal data must not disclose or distribute it without consent, unless required by law.

12. Final Provisions

  • Users may request clarifications via info@chudo-kniga.ru.
  • Changes to this Policy will be published on the website. The Policy remains in effect until replaced.
  • The current version is available at https://chudo-kniga.ru/documents/privacy-policy.