Personal data processing policy

1. General Provisions
This Personal Data Processing Policy (hereinafter referred to as the "Policy") is drafted in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and the measures implemented to ensure their security by IE Kolbina Ekaterina Evgenievna (hereinafter referred to as the "Operator").

1.1. The Operator considers the protection of human and civil rights and freedoms, including the right to privacy, personal and family secrets, as its highest priority in processing personal data.
1.2. This Policy applies to all information that the Operator may obtain about visitors to the website macaronsmania.ru.

2. Key Definitions Used in the Policy
2.1. Automated Processing of Personal Data — processing performed using computer technology.
2.2. Blocking of Personal Data — temporary suspension of processing (unless necessary to clarify data).
2.3. Website — a collection of graphical and informational materials, as well as computer programs and databases, accessible online at https://macaronsmania.ru.
2.4. Personal Data Information System — a set of personal data stored in databases and processed using IT tools.
2.5. Depersonalization of Personal Data — actions rendering data impossible to attribute to a specific User without additional information.
2.6. Processing of Personal Data — any action (operation) or set of actions performed with or without automation, including collection, recording, systematization, storage, updating, retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction.
2.7. Operator — a state or municipal authority, legal entity, or individual processing personal data independently or jointly with others, determining the purposes and means of processing.
2.8. Personal Data — any information relating to an identified or identifiable User of https://macaronsmania.ru.
2.9. Personal Data Authorized for Dissemination — data to which unlimited access is granted by the subject via consent under the Personal Data Law.
2.10. User — any visitor to https://macaronsmania.ru.
2.11. Provision of Personal Data — disclosure to a specific person or circle of persons.
2.12. Dissemination of Personal Data — disclosure to an unlimited circle of persons (e.g., via media or the internet).
2.13. Cross-Border Transfer of Personal Data — transfer to a foreign state’s authority, individual, or legal entity.
2.14. Destruction of Personal Data — irreversible deletion with no possibility of recovery.

3. Rights and Obligations of the Operator
3.1. The Operator has the right to:
Obtain accurate data and documents from the subject.
Continue processing without consent if grounds exist under the Personal Data Law.
Determine necessary measures to comply with legal obligations.

3.2. The Operator must:
Provide the subject with information about processing upon request.
Process data in accordance with Russian law.
Respond to requests from subjects or their representatives.
Provide required information to the authorized body within 10 days.
Publish this Policy openly.
Implement legal, organizational, and technical measures to protect data.
Cease processing or destroy data as required by law.

4. Rights and Obligations of Personal Data Subjects
4.1. Subjects may:
Request information about their data processing.
Demand correction, blocking, or deletion of inaccurate data.
Withdraw consent or demand cessation of processing.
Appeal unlawful actions to the authorized body or court.

4.2. Subjects must:
Provide accurate data.
Notify the Operator of updates.

4.3. Persons providing false data bear responsibility under Russian law.
5. Principles of Personal Data Processing
5.1. Lawful and fair processing.
5.2. Limited to predefined, legitimate purposes.
5.3. No merging of databases with incompatible purposes.
5.4. Only relevant and non-excessive data is processed.
5.5. Storage duration aligns with processing purposes.
5.6. Accuracy and relevance are maintained.

6. Purposes of Processing



7. Processing Conditions
7.1. Based on subject’s consent.
7.2. Required for legal compliance or contract execution.
7.3. Necessary for judicial or executive proceedings.
7.4. For contract performance where the subject is a party.
7.5. For Operator’s or third parties' legitimate interests (without violating subject’s rights).
7.6. Publicly available data.
7.7. Mandatory disclosure under federal law.

8. Collection, Storage, and Transfer
8.1. The Operator ensures security and restricts unauthorized access.
8.2. Data is not transferred to third parties except as required by law or with consent.
8.3. Users may update data by emailing mail@macaronsmania.ru (subject: "Data Update").
8.4. Processing ceases upon achieving purposes or subject’s withdrawal of consent.
8.5. Third-party services (e.g., payment systems) handle data per their own policies.
8.6. Restrictions do not apply to processing in public interest under Russian law.

9. Actions Performed by the Operator
9.1. Collection, recording, storage, updating, use, transfer, depersonalization, blocking, deletion, and destruction.
9.2. Automated processing with or without information networks.

10. Cross-Border Transfer
10.1. The Operator must notify the authorized body before transferring data abroad.
10.2. Relevant information must be obtained from foreign recipients.

11. Confidentiality
The Operator and authorized persons must not disclose data without consent, unless required by law.

12. Final Provisions
12.1. Users may contact the Operator at mail@macaronsmania.ru for clarifications.
12.2. This Policy may be updated; the current version is available at https://macaronsmania.ru/privacyen.
12.3. The Policy remains effective until replaced by a new version.