Privacy Policy

Privacy Policy for Personal Data Processing
1. General Provisions
This personal data processing policy is developed in accordance with the requirements of Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006 (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and measures to ensure the security of personal data taken by LLC Trading House Karlaman (hereinafter referred to as the "Operator").
1.1. The Operator's primary goal and condition for carrying out its activities is to respect and protect the rights and freedoms of individuals when processing their personal data, including the right to privacy, personal, and family secrets.
1.2. This policy applies to all information that the Operator may collect about visitors to the website https://karlamantd.ru.
2. Key Terms Used in the Policy
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary cessation of processing personal data (except when processing is necessary for the clarification of personal data).
2.3. Website — a collection of graphic and informational materials, as well as software and databases that provide their availability on the internet under the address https://karlamantd.ru.
2.4. Personal Data Information System — a collection of personal data contained in databases and technologies and technical tools ensuring their processing.
2.5. Anonymization of personal data — actions that make it impossible to identify personal data without using additional information.
2.6. Processing of personal data — any action (operation) or set of actions (operations) with personal data, performed using or without automation tools, including collection, recording, systematization, accumulation, storage, updating, extraction, use, transmission, anonymization, blocking, deletion, destruction of personal data.
2.7. Operator — a state authority, a municipal body, a legal entity, or an individual who organizes and/or performs personal data processing either independently or together with others and defines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal Data — any information related directly or indirectly to a specific or identifiable user of the website https://karlamantd.ru.
2.9. Personal data allowed for dissemination by the subject of personal data — personal data made available to an unlimited circle of individuals by the subject of personal data through consent to the processing of such data in accordance with the Personal Data Law.
2.10. User — any visitor of the website https://karlamantd.ru.
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific individual or a specific group of people.
2.12. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite group of people (transferring personal data) or making personal data available to an unlimited group of people, including publication in mass media, placement on telecommunication networks, or providing access to personal data in any other way.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to the authority of a foreign state or to a foreign physical or legal entity.
2.14. Destruction of personal data — any action resulting in irreversible destruction of personal data with no possibility of recovery of personal data in the personal data system and/or destruction of material carriers of personal data.
3. Operator’s Rights and Obligations
3.1. Operator has the right to:
— Receive reliable information and/or documents containing personal data from the subject of personal data;
— Continue processing personal data without the subject's consent if there are grounds stated in the Personal Data Law after the withdrawal of consent for processing;
— Determine independently the composition and list of measures necessary for fulfilling the obligations under the Personal Data Law and related regulations.
3.2. The Operator is obligated to:
— Provide information regarding the processing of personal data to the subject of personal data upon request;
— Organize the processing of personal data as established by Russian Federation law;
— Respond to requests from subjects of personal data in accordance with the Personal Data Law;
— Inform the authorized body for protection of personal data rights if requested, within 10 days;
— Publish or ensure unrestricted access to this Policy;
— Take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other illegal actions;
— Cease the transmission, processing, and destruction of personal data as specified by the Personal Data Law;
4. Rights and Obligations of Subjects of Personal Data
4.1. The subjects of personal data have the right to:
— Receive information about the processing of their personal data, except as provided by federal laws;
— Request clarification, blocking, or destruction of personal data if they are incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the stated purpose;
— Withdraw consent to the processing of their personal data, as well as request cessation of processing.
4.2. The subjects of personal data are obligated to:
— Provide the Operator with accurate information about themselves;
— Inform the Operator of any updates or changes to their personal data.
5. Principles of Personal Data Processing
5.1. Personal data is processed lawfully and fairly.
5.2. Processing of personal data is limited to achieving specific, predefined, and legitimate purposes.
5.3. Only personal data necessary for the stated purposes will be processed.
6. Purpose of Personal Data Processing
The purpose of processing is to inform the User through sending emails.
Personal data: surname, first name, patronymic, phone numbers.
Legal grounds: contracts between the Operator and the subject of personal data.

Types of personal data processing: collection, recording, systematization, accumulation, storage, destruction, and anonymization of personal data.

7. Conditions for Personal Data Processing
7.1. Personal data is processed with the consent of the subject.
7.2. Personal data processing may be required by Russian Federation law.
7.3. Personal data may be processed to fulfill a contract or fulfill legal obligations.
8. Security of Personal Data
The Operator ensures the security of personal data through legal, organizational, and technical measures.
9. Actions Performed by the Operator with Personal Data
9.1. The Operator collects, records, systematizes, stores, updates, uses, transmits, anonymizes, blocks, deletes, and destroys personal data.
10. Cross-Border Transfer of Personal Data
The Operator must notify the authorized body before transferring personal data abroad.
11. Confidentiality
Personal data must not be disclosed without consent, except as required by law.
12. Final Provisions
12.1. The User can get clarifications by contacting the Operator via email.
12.2. This Policy may be updated at any time.
12.3. The current version of the Policy is available online.