Privacy Policy

General Provisions

This Privacy Policy regarding Personal Data Processing is compiled in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedures for processing personal data and measures for ensuring personal data security taken by IE Davit Nazarbegov (hereinafter referred to as the "Operator").
1.1. The Operator's primary goal and condition for conducting its activities is to respect human and civil rights and freedoms during personal data processing, including protecting rights to privacy, personal, and family secrets.
1.2. This Policy applies to all information that the Operator may obtain about visitors to the website https://davidov-chocolate.com/.

Key Terms Used in This Policy

2.1. Automated personal data processing – processing of personal data using computing devices.
2.2. Blocking of personal data – temporary cessation of personal data processing (unless processing is necessary to clarify personal data).
2.3. Website – a collection of graphic and informational materials, computer programs, and databases accessible via the Internet at the network address https://davidov-chocolate.com/.
2.4. Personal Data Information System – a set of databases containing personal data and information technologies and technical means ensuring their processing.
2.5. Anonymization of personal data – actions resulting in the impossibility to determine the ownership of personal data to a specific User or another subject without additional information.
2.6. Personal data processing – any action (operation) or set of actions performed using automation tools or without such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
2.7. Operator – a state body, municipal body, legal entity or individual that independently or jointly organizes and/or processes personal data and determines the purposes, the composition of personal data subject to processing, and actions (operations) performed with personal data.
2.8. Personal data – any information relating directly or indirectly to an identified or identifiable User of the website https://davidov-chocolate.com/.
2.9. Personal data allowed by the subject for distribution – personal data to which an unlimited number of persons have access provided by the subject of personal data by consent given under the procedure established by the Personal Data Law.
2.10. User – any visitor to the website https://davidov-chocolate.com/.
2.11. Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific circle of persons.
2.12. Distribution of personal data – any actions aimed at disclosing personal data to an unlimited circle of persons or familiarizing an unlimited circle of persons with personal data, including publication in mass media or placement in information and telecommunication networks.
2.13. Cross-border transfer of personal data – transfer of personal data to a foreign state's territory, authority, individual, or legal entity.
2.14. Destruction of personal data – any actions resulting in the irreversible destruction of personal data without the possibility of further restoration.

Main Rights and Obligations of the Operator

3.1. The Operator has the right:

to obtain reliable information/documents containing personal data from the subject;
to continue processing personal data without consent if legal grounds are established by the Personal Data Law;
to independently determine necessary and sufficient measures ensuring obligations fulfillment according to the Personal Data Law.

3.2. The Operator is obligated to:

provide information regarding personal data processing upon the subject's request;
organize processing according to current legislation of the Russian Federation;
respond to personal data subjects and their representatives;
provide necessary information to authorized bodies within 10 days upon request;
publish or ensure unlimited access to this Privacy Policy;
take legal, organizational, and technical measures to protect personal data;
cease processing and destroy personal data under conditions provided by law;
fulfill other obligations stipulated by the Personal Data Law.

Main Rights and Obligations of Personal Data Subjects

4.1. Subjects have the right:

to access information related to their personal data processing;
to demand clarification, blocking, or destruction of personal data;
to withdraw consent for processing;
to protect rights through authorized bodies or courts.

4.2. Subjects are obliged:

to provide accurate personal data;
to inform the Operator of updates or changes.

4.3. Individuals providing inaccurate personal data or information about another subject without consent bear legal responsibility according to Russian Federation law.

Principles of Personal Data Processing

Processing is lawful, fair, limited to predefined legal purposes, ensuring accuracy and relevance of personal data, and avoiding data redundancy.

Purposes of Personal Data Processing

Purpose: informing Users via email Personal Data: full name, email address, phone numbers Legal basis: contracts between Operator and subject Processing methods: collection, recording, storage, destruction, anonymization

Conditions of Personal Data Processing

Processing occurs with subject consent, necessity for contract execution, compliance with legal obligations, public interests, or data openly provided by subjects.

Procedure for Personal Data Collection, Storage, Transfer, and Other Processing

Personal data security is ensured by legal, organizational, and technical measures. Data is not transferred to third parties unless legally required or consented to by subjects.
Subjects may update data or withdraw consent via email: davidov.chocolate@gmail.com.
Third-party services follow their own policies, and Operator is not liable for third-party actions.

Actions Performed with Personal Data by the Operator

Collection, recording, storage, updating, transfer, anonymization, blocking, deletion, and destruction, including automated data processing.

Cross-border Transfer of Personal Data

Operator must inform the authorized body prior to transfer and obtain necessary assurances from foreign recipients.

Confidentiality

Data confidentiality is strictly maintained and not disclosed without subject consent unless legally mandated.

Final Provisions

Subjects can request clarifications via email: davidov.chocolate@gmail.com. The current Policy version is available at https://davidov-chocolate.com/privacy-en and remains effective indefinitely until updated.