Personal Data Processing Policy - Privacy Policy1. General Provisions
This Personal Data Processing Policy is drafted in accordance with the requirements of the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data" (hereinafter - the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by
Arnika Limited Liability Company (INN 9729037020 / OGRN 5167746301652), located at: 121471 Moscow, Ryabinovaya st. 32, office 59-64, Russian Federation (hereinafter - the Operator).
1.1. The Operator's primary goal and condition for its activities is the observance of human and civil rights and freedoms when processing personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. This Operator's Policy regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator may receive about visitors to the website https://www.cheesecakeclub.ru.
2. Key Concepts Used in the Policy
2.1. Automated processing of personal data - processing of personal data using computer technology.
2.2. Blocking of personal data - temporary termination of personal data processing (unless processing is necessary to clarify personal data).
2.3. Website - a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://www.cheesecakeclub.ru.
2.4. Personal data information system - a set of personal data contained in databases and information technologies and technical means ensuring their processing.12
2.5. Depersonalization of personal data - actions as a result of which it is impossible to determine, without the use of additional information, the ownership of personal data to a specific User or other subject of personal da3ta.45
2.6. Processing of personal data6 - any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, re7cording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
2.7. Operator - a legal or natural person who independently or jointly with others organizes and/or performs the processing of personal data, as well as determines the purposes of processing, the composition of data, and actions performed with it.
2.8. Personal data - any information relating directly or indirectly to a specific or identifiable User of the website https://www.cheesecakeclub.ru.
2.9. User - any visitor to the website https://www.cheesecakeclub.ru.
3. Main Rights and Obligations of the Operator
3.1. The Operator has the right to receive accurate information/documents from the subject and independently determine the list of necessary security measures.
3.2. The Operator is obliged to provide the subject with information regarding their data processing upon request, organize data protection in accordance with the law, and respond to inquiries within 10 days.
4. Main Rights and Obligations of Subjects
4.1. Subjects have the right to receive information regarding the processing of their data, demand clarification, blocking or destruction if the data is incomplete or inaccurate, and withdraw their consent at any time.
4.2. Subjects are obliged to provide the Operator with accurate data and inform the Operator about any updates or changes to their personal data.
5. Principles of Personal Data Processing
5.1. Processing is carried out on a legal and fair basis.
5.2. Processing is limited to achieving specific, predetermined, and legitimate goals.
5.3. The content and volume of processed data must correspond to the stated purposes. Excessiveness of data is not permitted.
5.4. Storage is carried out in a form that allows identifying the subject for no longer than the purposes of processing require, unless the storage period is established by law or contract.
6. Purposes of Personal Data Processing
6.1.
Purposes:- Facilitating contacts and providing consultations to Website Users;
- Identifying the User, informing about advertising/marketing promotions, surveys, and market research;
- Communicating with the User, including sending notifications and requests related to the use of the Website;
- Improving service quality and developing new services.
- 6.2. Data processed: Full name, email address, phone numbers, delivery addresses.
7. Conditions for Processing
Processing is carried out with the consent of the subject, or for the execution of a contract, or to fulfill legal obligations imposed on the Operator by law.
8. Procedure for Collection, Storage, and Transfer
8.1. The Operator ensures the safety of data and takes all possible measures to exclude access by unauthorized persons.
8.2. Personal data will never, under any circumstances, be transferred to third parties, except for cases related to the execution of current legislation.
8.3. In case of inaccuracies, the User may update data by sending a notification to
info@cheesecakeclub.ru marked "Update of personal data".
8.4. The User may withdraw consent at any time by emailing
info@cheesecakeclub.ru marked "Withdrawal of consent for personal data processing".
9. List of Actions Performed by the Operator
The Operator performs collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer (provision, access), depersonalization, blocking, deletion, and destruction of data.
10. Cross-border Transfer
The Operator is obliged to notify the authorized body for the protection of the rights of personal data subjects of its intention to carry out cross-border transfer before it begins.
11. Confidentiality of Personal Data
The Operator and other persons who have gained access to personal data are obliged not to disclose it to third parties without the consent of the subject, unless otherwise provided by law.
12. Final Provisions
12.1. The User can receive any clarifications regarding their personal data by contacting the Operator via email at
info@cheesecakeclub.ru.12.2. This document will reflect any changes to the policy. The policy is valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available at:
https://www.cheesecakeclub.ru/EN/privacy