RU Book now

Policy on the Processing of Personal Data

This English version is a translation provided for convenience. In the event of any discrepancy between this translation and the Russian version, the Russian version shall prevail. The Russian version is available at https://vn.neva.beauty/privacy/.

1. General Provisions

This personal data processing policy has been drawn up in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" and defines the procedure for processing personal data and the measures taken by Neva Beauty (hereinafter, the "Operator") to ensure the security of personal data.

1.1. The Operator sets as its most important goal the observance of the rights and freedoms of the individual in the processing of his or her personal data, including the protection of the rights to inviolability of private life and to personal and family secrets.

1.2. This Policy applies to all information that the Operator may obtain about visitors to the website https://vn.neva.beauty.

2. Basic Terms

2.1. Automated processing — processing of personal data by means of computer technology.

2.2. Blocking — temporary suspension of the processing of personal data.

2.3. Website — the set of materials and programs available on the internet at https://vn.neva.beauty.

2.4. Processing of personal data — any actions performed with personal data, including collection, recording, storage, modification, use, transfer, depersonalization, blocking, deletion and destruction.

2.5. Operator — a person who organizes and/or carries out the processing of personal data and determines the purposes of such processing.

2.6. Personal data — any information relating directly or indirectly to a specific user of the website https://vn.neva.beauty.

2.7. User — any visitor to the website https://vn.neva.beauty.

2.8. Cross-border transfer — transfer of personal data to the territory of a foreign state.

2.9. Destruction — actions as a result of which personal data is irreversibly destroyed.

3. Basic Rights and Obligations of the Operator

3.1. The Operator has the right to:

  • receive accurate information from the personal data subject;
  • continue processing personal data without the subject's consent where there are grounds specified by law;
  • independently determine the set of measures necessary to comply with the requirements of legislation.

3.2. The Operator is obliged to:

  • provide the subject with information concerning the processing of his or her personal data;
  • organize processing in the manner established by applicable legislation;
  • respond to inquiries and requests from personal data subjects;
  • publish this Policy in publicly accessible form;
  • take technical and organizational measures to protect personal data against unlawful access, destruction or alteration.

4. Basic Rights and Obligations of Personal Data Subjects

4.1. Personal data subjects have the right to:

  • receive information about the processing of their personal data;
  • demand the rectification, blocking or destruction of personal data;
  • withdraw consent to the processing of personal data;
  • challenge the Operator's unlawful actions before the authorized body or in court.

4.2. Personal data subjects are obliged to provide the Operator with accurate data about themselves and to report changes to such data.

5. Principles of Personal Data Processing

5.1. Processing is carried out on a lawful and fair basis.

5.2. Processing is limited to the achievement of specific, predetermined and lawful purposes.

5.3. Only data that corresponds to the purposes of its processing is subject to processing.

5.4. Personal data is stored for no longer than the purposes of processing require.

6. Purposes of Personal Data Processing

Purpose of processing Personal data Legal grounds Types of processing
Providing access to the website's online services and materials Name, phone numbers Federal Law No. 149-FZ of July 27, 2006 "On Information, Information Technologies and Protection of Information" Collection, recording, storage, destruction and depersonalization; sending of informational letters

7. Conditions for Personal Data Processing

7.1. Processing is carried out with the consent of the personal data subject.

7.2. Processing may be carried out without consent in cases provided for by the legislation of the Russian Federation.

7.3. Processing is necessary for the performance of a contract to which the personal data subject is a party or of which the personal data subject is a beneficiary.

8. Procedure for Collecting, Storing and Transferring Personal Data

8.1. The Operator ensures the safekeeping of personal data and takes all possible measures that preclude unauthorized access to it.

8.2. The User's personal data will under no circumstances be transferred to third parties, except in cases related to compliance with applicable legislation.

8.3. If inaccuracies are found in the personal data, the User may update it by sending a notice marked "Personal Data Update" to the Operator's email address vaarootman@gmail.com.

8.4. The period of processing is determined by the achievement of the purposes for which the data was collected. The User may withdraw his or her consent at any time by sending a notice marked "Withdrawal of Consent to Personal Data Processing" to vaarootman@gmail.com.

8.5. The Operator is not responsible for the actions of third-party services and service providers that process data in accordance with their own privacy policies.

8.6. The Operator ensures the confidentiality of personal data.

9. List of Actions Performed with Personal Data

9.1. The Operator carries out the collection, recording, systematization, accumulation, storage, rectification, retrieval, use, transfer, depersonalization, blocking, deletion and destruction of personal data.

9.2. The Operator carries out automated processing of personal data with the receipt and/or transmission of information over information and telecommunications networks.

10. Cross-Border Transfer of Personal Data

10.1. The Operator is obliged to notify the authorized body of its intention to carry out cross-border transfers of personal data before commencing such activity.

10.2. The Operator is obliged to obtain the necessary information from the foreign persons to whom a cross-border transfer of data is planned.

11. Confidentiality of Personal Data

The Operator and other persons who have obtained access to personal data are obliged not to disclose personal data to third parties or distribute it without the consent of the personal data subject, unless otherwise provided by federal law.

12. Final Provisions

12.1. Any clarifications on matters related to the processing of personal data may be obtained by contacting the Operator by email at vaarootman@gmail.com.

12.2. All changes to the personal data processing policy will be reflected in this document. The Policy remains in effect indefinitely until it is replaced by a new version.

12.3. The current version of the Policy is available at https://vn.neva.beauty/en/privacy/.

For questions related to the processing of personal data, you can contact us: