Personal data processing policy

1. General provisions

This personal data processing policy is drawn up in accordance with Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006, and defines the procedure for processing personal data and the security measures taken by Phoenix LLC (the "Operator").

The Operator considers respecting human and civil rights and freedoms when processing personal data, including the right to privacy and personal and family confidentiality, to be a fundamental goal and condition of its activity.

This policy applies to all information the Operator may obtain about visitors of the fenixrepair.com website.

2. Key definitions

Personal data means any information directly or indirectly related to a specific or identifiable user of the website.

Processing of personal data means any action or set of actions performed on personal data, including collection, recording, systematization, storage, clarification, use, transfer, anonymization, blocking and destruction.

The Operator is the legal entity that independently organizes and carries out the processing of personal data and determines the purposes and scope of the data processed.

A user is any visitor of the fenixrepair.com website.

3. Rights and obligations of the Operator

The Operator is entitled to:

request accurate information and documents containing personal data from the data subject;
continue processing personal data without consent where grounds provided by the Personal Data Law apply, even after consent has been withdrawn;
independently determine the scope of measures necessary to comply with personal data protection legislation.

4. Rights and obligations of data subjects

Data subjects are entitled to:

receive information regarding the processing of their personal data;
request clarification, blocking or destruction of data that is incomplete, outdated or unlawfully obtained;
withdraw consent to personal data processing at any time;
appeal against the Operator's actions or inaction to the authorized body or in court.

5. Principles of personal data processing

Personal data is processed on a lawful and fair basis and is limited to achieving specific, predetermined purposes.

Combining databases processed for incompatible purposes is not allowed, nor is processing data that is excessive relative to the stated purposes.

Personal data is stored no longer than required by the purposes of its processing and is destroyed or anonymized once those purposes are achieved.

6. Purposes of personal data processing

The purpose of processing is to inform the user by email and to respond to a request submitted through the website form.

Data processed: full name, email address, phone number.

Legal basis: Federal Law "On Information, Information Technologies and Information Protection" No. 149-FZ dated July 27, 2006.

7. Conditions of personal data processing

Personal data is processed with the consent of the data subject, as well as in other cases directly provided for by Russian legislation: to perform a contract, to exercise the rights and legitimate interests of the Operator or third parties, to process publicly available data, and to process data subject to mandatory disclosure by law.

8. Collection, storage, transfer and other processing of personal data

The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access to it.

A user's personal data is not transferred to third parties, except where required by applicable law, or where the data subject has consented to the transfer of data to a third party for the performance of a contract.

If inaccuracies are found in personal data, the user may update it by sending a notification to the Operator's email marked "Personal data update".

The user may withdraw consent to personal data processing at any time by sending a notification to the Operator's email marked "Withdrawal of consent to personal data processing".

The Operator is not responsible for the actions of third parties, including service providers, whose processing of information is governed by their own privacy policies.

9. Actions performed with personal data

The Operator collects, records, systematizes, accumulates, stores, clarifies, extracts, uses, transfers, anonymizes, blocks, deletes and destroys personal data, including with the use of automation tools.

10. Cross-border transfer of personal data

Where cross-border transfer of personal data is required, the Operator notifies the authorized body for the protection of data subjects' rights of its intention in advance and obtains the necessary information from the receiving party in accordance with the requirements of the Personal Data Law.

11. Confidentiality of personal data

The Operator and any other persons who gain access to personal data are obliged not to disclose it to third parties and not to distribute it without the consent of the data subject, unless otherwise provided by federal law.

12. Final provisions

A user can obtain clarification on any questions regarding the processing of their personal data by contacting the Operator at [email protected].

Any changes to this personal data processing policy will be reflected in this document. The policy is valid indefinitely until replaced by a new version.

The current version of the policy is freely available at fenixrepair.com/privacy.