INTRODUCTION
This Personal Data Processing Policy (hereinafter "Policy") governs how Yana Nakhimova (the "Operator") processes personal data in compliance with applicable laws, including:
Federal Law No. 152-FZ "On Personal Data" (Russia),
The California Consumer Privacy Act (CCPA) (if applicable),
The General Data Protection Regulation (GDPR) for EU residents (if applicable),
And other relevant U.S. data privacy regulations.
The Policy applies to all personal data collected or processed by the Operator through online and offline methods.
KEY PROVISIONS
2.1. Purpose of ProcessingThe purpose of processing personal data is to provide services requested by the data subject and fulfill contractual obligations.
2.2. Principles of ProcessingThe Operator adheres to the following principles:
Transparency: Clear communication about data processing purposes.
Lawfulness: Compliance with applicable laws such as CCPA, GDPR, and Federal Law No. 152-FZ.
Data Minimization: Collecting only the data necessary for specified purposes.
Security: Implementing reasonable measures to protect data against unauthorized access or disclosure.
2.3. Personal Data CollectedThe Operator processes the following types of data:
Full name, phone number, email address.
Additional details provided voluntarily by users.
2.4. Data RetentionPersonal data is retained only as long as necessary to fulfill the purposes for which it was collected or as required by law.
2.5. Security MeasuresThe Operator uses encryption (e.g., HTTPS) and secure hosting platforms to protect personal data. For U.S.-based users, the Operator complies with security standards under CCPA and other applicable state laws.
2.6. User Rights
Under CCPA: California residents may request access to, deletion of, or information about their personal data.
Under GDPR: Data subjects have the right to data portability, erasure, and objection to processing.
2.7. Third-Party ServicesThe Operator uses third-party platforms (e.g., GetCourse and Selectel) for hosting and service delivery. These platforms comply with privacy standards applicable in their respective jurisdictions.