Personal data processing policy

This Policy has been drawn up in accordance with the Constitution of the Russian Federation, Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and other applicable laws and regulations of the Russian Federation.

The Policy applies to personal data that the operator receives through the website when orders are placed, paid for and delivered, when the operator is contacted, and when the website’s technical features are used. The operator does not process special categories of personal data or biometric personal data through the website.

Operator

Individual Entrepreneur Nikita Igorevich Kuznetsov

INN

770470443780

OGRNIP

324774600411399

Address

apt. 22, bldg. A, 14 Ulansky Lane, Moscow, Russia

Email for data enquiries

panels@recycleobject.com

The operator processes only the data necessary for specific, predefined and lawful purposes, does not merge databases whose processing purposes are incompatible, ensures that the data are accurate and keeps them no longer than the purposes of processing or the law require. Access is granted only to persons who need it for their work.

The grounds for processing are: the consent of the personal data subject; the need to conclude or perform a contract at the subject’s initiative; the performance of obligations imposed on the operator by law; and the operator’s legitimate interest in ensuring the security of the website and protecting its rights, provided that the rights and freedoms of the subject are not violated.

Consent to the processing of personal data is drawn up separately from other documents and is confirmed by a separate action of the user. Consent to receive advertising messages is not requested through the website’s forms, and no advertising mailings are sent on that basis.

The operator may carry out the collection, recording, systematisation, accumulation, storage, clarification, retrieval, use, provision to authorised recipients, blocking, deletion and destruction of data. Processing is carried out using automated means and, where necessary to fulfil an order, without them.

The operator does not disseminate or publish personal data and does not make decisions that produce legal consequences solely on the basis of automated processing.

To the extent necessary for a specific operation, data may be provided to:

• Bank Tochka LLC and Tochka JSC — to process and confirm payments;
• CDEK-Global LLC — to calculate and arrange the chosen delivery;
• a Russian hosting, database and backup provider acting on the operator’s instructions;
• public authorities — only in the cases and to the extent provided for by law.

The operator enters into contracts with persons processing data on its instructions that set out requirements for confidentiality, security, localisation and deletion of data.

When personal data of citizens of the Russian Federation are collected via the internet, their recording, systematisation, accumulation, storage, clarification and retrieval are carried out using databases located in the territory of the Russian Federation.

The operator does not carry out cross-border transfer of personal data collected through the website’s forms. A service involving such transfer may be connected only after the requirements of Article 12 of Federal Law No. 152-FZ have been met, this Policy has been updated and, where required, separate consent has been obtained.

The website uses only strictly necessary cookies and browser local storage entries: for the cart, an applied promo code, remembering the choice made in the cookie notice, and secure staff access to restricted sections. They are not used for advertising profiling or cross-site tracking.

Users can delete such data in their browser settings. After deletion, some website features, such as the cart or signing in to a restricted section, may need to be set up again.

The operator applies legal, organisational and technical protection measures: access control, secure data transmission, logging of actions in information systems, backups, software updates, incident monitoring and confidentiality obligations for persons with access to the data.

Once the purpose of processing has been achieved, the data are destroyed or depersonalised within no more than 30 days, unless a contract or the law provides another ground for retaining them. If unlawful processing is identified, the operator stops it and takes action within the time limits set by Article 21 of Federal Law No. 152-FZ.

The subject has the right to obtain information about the processing of their data, to demand that the data be clarified, blocked or destroyed, to withdraw consent, to demand that processing be stopped, and to appeal against the operator’s actions to Roskomnadzor (the Federal Service for Supervision of Communications, Information Technology and Mass Media) or in court.

Requests can be sent to panels@recycleobject.com. A request should state the sender’s full name, contact details for the reply, information confirming their relationship with the operator, and the substance of the request. The operator responds within the time limits established by law; a request to stop processing is, as a rule, considered within 10 working days.

The operator may update the Policy when its processes, services or legislation change. A new version takes effect from the moment it is published on this page. The version date is shown at the beginning of the document.