Privacy Policy1. General Provisions
This Privacy Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of the Russian Federation dated July 27, 2006, "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data as well as the measures taken by Olga Gaiduk (hereinafter referred to as the "Operator") to ensure the security of personal data.
1.1.
The Operator's primary objective and essential condition for carrying out its activities is to respect and protect the rights and freedoms of individuals when processing their personal data, including the protection of the right to privacy, personal confidentiality, and family confidentiality.
1.2.
This Privacy Policy (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the website:
https://sherbranding.ru
2. Definitions2.1. Automated Processing of Personal Data
Processing of personal data using computer technology.
2.2. Blocking of Personal Data
Temporary suspension of the processing of personal data, except where processing is required to clarify or update the personal data.
2.3. Website
A collection of graphical and informational materials, software, and databases made available on the Internet at:
https://sherbranding.ru
2.4. Personal Data Information System
A set of databases containing personal data together with the information technologies and technical means used for processing such data.
2.5. Depersonalization (Anonymization) of Personal Data
Actions that make it impossible to identify a specific User or another data subject without the use of additional information.
2.6. Processing of Personal Data
Any operation or set of operations performed on personal data, whether by automated means or otherwise, including:

• collection;
• recording;
• systematization;
• accumulation;
• storage;
• updating (modification);
• retrieval;
• use;
• transfer (distribution, provision, or granting access);
• anonymization;
• blocking;
• deletion;
• destruction.

2.7. Operator
A governmental authority, municipal authority, legal entity, or individual who independently or jointly with others organizes and/or carries out the processing of personal data, determines the purposes of processing, the categories of personal data to be processed, and the actions performed on such personal data.
2.8. Personal Data
Any information relating directly or indirectly to an identified or identifiable User of the website:
https://sherbranding.ru
2.9. Personal Data Authorized for Public Distribution
Personal data to which the data subject has granted public access by providing consent for its distribution in accordance with the Personal Data Law.
2.10. User
Any visitor to the website:
https://sherbranding.ru
2.11. Provision of Personal Data
Actions aimed at disclosing personal data to a specific person or a defined group of persons.
2.12. Distribution of Personal Data
Any actions aimed at disclosing personal data to an unlimited number of persons, including publication in the media, placement in information and telecommunications networks, or otherwise making personal data publicly available.
2.13. Cross-Border Transfer of Personal Data
Transfer of personal data to the territory of a foreign state, to a foreign governmental authority, foreign individual, or foreign legal entity.
2.14. Destruction of Personal Data
Any actions resulting in the irreversible destruction of personal data, making it impossible to restore the content of such personal data within the personal data information system and/or destroying the physical media containing the personal data.
3. Rights and Obligations of the Operator3.1. The Operator has the right to:

• obtain accurate information and/or documents containing personal data from the data subject;
• continue processing personal data without the consent of the data subject if the consent has been withdrawn or the data subject has requested termination of processing, provided that there are legal grounds established by the Personal Data Law;
• independently determine the scope and list of legal, organizational, and technical measures necessary and sufficient to comply with the obligations established by the Personal Data Law and other applicable regulations, unless otherwise provided by law.

3.2. The Operator is obliged to:

• provide the data subject, upon request, with information concerning the processing of their personal data;
• organize the processing of personal data in accordance with the applicable legislation of the Russian Federation;
• respond to requests and inquiries from data subjects and their legal representatives in accordance with the Personal Data Law;
• provide the authorized supervisory authority with the requested information within ten (10) days from the date of receiving such request;
• publish this Privacy Policy or otherwise ensure unrestricted access to it;
• implement legal, organizational, and technical measures to protect personal data against unauthorized or accidental access, destruction, modification, blocking, copying, disclosure, distribution, and any other unlawful processing;
• cease the transfer (distribution, provision, or granting of access to), processing, and destroy personal data in the cases provided for by the Personal Data Law;
• fulfill any other obligations established by the applicable personal data legislation.

4. Rights and Obligations of Personal Data Subjects4.1. Personal data subjects have the right to:

• obtain information regarding the processing of their personal data, except where otherwise provided by applicable law. Such information shall be provided by the Operator in an accessible form and shall not contain personal data relating to other individuals unless there are legal grounds for such disclosure;
• request that the Operator correct, block, or delete their personal data if such data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of processing, as well as exercise any other rights provided by applicable law;
• require prior consent for the processing of personal data for the purposes of marketing, advertising, or promoting goods, services, or works;
• withdraw their consent to the processing of personal data at any time and request the termination of such processing;
• appeal unlawful actions or omissions of the Operator related to the processing of personal data before the competent supervisory authority or in a court of law;
• exercise any other rights granted under the applicable legislation of the Russian Federation.

4.2. Personal data subjects are obliged to:

• provide the Operator with accurate and up-to-date personal information;
• promptly notify the Operator of any changes, updates, or corrections to their personal data.

4.3.
Individuals who provide the Operator with inaccurate information about themselves or disclose another person's personal data without that person's consent shall bear responsibility in accordance with the applicable legislation of the Russian Federation.
5. Principles of Personal Data Processing5.1.
Personal data shall be processed lawfully, fairly, and transparently.
5.2.
Personal data shall be processed solely for specified, explicit, and legitimate purposes. Processing incompatible with those purposes is prohibited.
5.3.
Databases containing personal data processed for purposes that are incompatible with one another shall not be combined.
5.4.
Only personal data that is relevant and necessary for the stated processing purposes shall be processed.
5.5.
The scope and content of the personal data processed shall correspond to the stated purposes of processing. Excessive processing of personal data is not permitted.
5.6.
The Operator shall ensure that personal data is accurate, adequate, and, where necessary, kept up to date in relation to the purposes for which it is processed. Appropriate measures shall be taken to correct, update, or delete incomplete or inaccurate personal data.
5.7.
Personal data shall be stored in a form that permits identification of the data subject for no longer than is necessary to achieve the purposes for which it was collected, unless a longer retention period is required by applicable law or by a contract to which the data subject is a party, beneficiary, or guarantor.
Once the purposes of processing have been fulfilled, or when such purposes are no longer relevant, the personal data shall be deleted or anonymized unless otherwise required by applicable law.
6. Purposes of Personal Data ProcessingPurpose of Processing
To provide information to the User by sending email communications.
Categories of Personal Data Processed

• first name;
• last name;
• patronymic (where applicable);
• email address;
• telephone number.

Legal Basis for Processing
The Operator's constitutional (founding) documents and other applicable legal grounds established by the legislation of the Russian Federation.
Types of Personal Data Processing
The Operator may perform the following operations with personal data:

• collection;
• recording;
• systematization;
• accumulation;
• storage;
• updating (modification);
• anonymization;
• deletion;
• destruction.

The Operator may also send informational emails to the User's email address.

7. Conditions for Processing Personal Data7.1.
Personal data shall be processed only with the consent of the data subject, unless otherwise provided by applicable law.
7.2.
The processing of personal data is permitted where it is necessary to fulfill the purposes established by an international treaty of the Russian Federation or by law, as well as for the performance of functions, powers, and obligations assigned to the Operator under the legislation of the Russian Federation.
7.3.
The processing of personal data is permitted where it is necessary for the administration of justice, the enforcement of a court decision, or the execution of an act issued by another authorized authority or official in accordance with the legislation of the Russian Federation.
7.4.
The processing of personal data is permitted where it is necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, or for entering into a contract at the initiative of the data subject.
7.5.
The processing of personal data is permitted where it is necessary for the legitimate interests of the Operator or third parties, or for achieving objectives of public interest, provided that such processing does not violate the rights and freedoms of the data subject.
7.6.
The processing of personal data is permitted where the data has been made publicly available by the data subject or at their request (hereinafter referred to as "publicly available personal data").
7.7.
The processing of personal data is also permitted where such data is subject to mandatory publication or disclosure under applicable law.
8. Procedure for the Collection, Storage, Transfer, and Other Processing of Personal Data
The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the applicable legislation governing personal data protection.
8.1.
The Operator shall ensure the security of personal data and take all reasonable measures to prevent unauthorized persons from accessing personal data.
8.2.
Under no circumstances shall the User's personal data be disclosed to third parties, except where required by applicable law or where the data subject has expressly consented to such disclosure for the performance of obligations arising under a civil law agreement.
8.3.
If the User identifies any inaccuracies in their personal data, they may update such information by sending a notification to the Operator via email at:
o.sher@brandsher.com
with the subject line:
"Personal Data Update"
8.4.
Personal data shall be processed only for as long as necessary to achieve the purposes for which it was collected, unless a different retention period is required by law or contract.
The User may withdraw their consent to the processing of personal data at any time by sending a notification to the Operator via email at:
o.sher@brandsher.com
with the subject line:
"Withdrawal of Consent to Personal Data Processing"
8.5.
Any information collected by third-party service providers, including payment systems, communication services, and other service providers, shall be stored and processed by such providers in accordance with their respective Terms of Service and Privacy Policies.
The Operator shall not be liable for the actions or omissions of such third parties.
8.6.
Restrictions established by the data subject regarding the transfer (except granting access), processing, or conditions of processing of personal data authorized for public distribution shall not apply where such processing is carried out in the public, governmental, or other legally protected interests as established by the legislation of the Russian Federation.
8.7.
The Operator shall ensure the confidentiality of personal data throughout the entire processing period.
8.8.
Personal data shall be retained only for the period necessary to achieve the purposes of processing unless a longer retention period is required by applicable law or by a contract to which the data subject is a party, beneficiary, or guarantor.
8.9.
The processing of personal data shall be terminated in the following cases:

• upon achievement of the purposes of processing;
• upon expiration of the data subject's consent;
• upon withdrawal of consent by the data subject;
• upon receipt of a request from the data subject to cease processing;
• upon detection of unlawful processing of personal data.

9. Operations Performed by the Operator on Personal Data9.1.
The Operator may perform the following operations on personal data:

• collection;
• recording;
• systematization;
• accumulation;
• storage;
• updating (modification);
• retrieval;
• use;
• transfer (distribution, provision, or granting of access);
• anonymization;
• blocking;
• deletion;
• destruction.

9.2.
The Operator carries out automated processing of personal data, including the receipt and/or transmission of information through information and telecommunications networks, with or without the use of such networks.
10. Cross-Border Transfer of Personal Data10.1.
Before commencing any cross-border transfer of personal data, the Operator shall notify the competent authority responsible for the protection of personal data subjects of its intention to carry out such transfer. This notification shall be submitted separately from the notification regarding the processing of personal data.
10.2.
Prior to submitting the above notification, the Operator shall obtain the necessary information from the competent authorities of the foreign state, foreign individuals, or foreign legal entities to whom the cross-border transfer of personal data is intended.
11. Confidentiality of Personal Data
The Operator and any other persons who have been granted access to personal data shall maintain the confidentiality of such data and shall not disclose or distribute it to third parties without the prior consent of the data subject, unless otherwise required by applicable law.
12. Final Provisions12.1.
Users may request clarification regarding any matters related to the processing of their personal data by contacting the Operator via email at:
o.sher@brandsher.com
12.2.
The Operator reserves the right to amend this Privacy Policy at any time. Any changes shall become effective upon publication of the updated version on the website, unless otherwise specified in the revised Policy.
This Privacy Policy shall remain in effect indefinitely until replaced by a new version.
12.3.
The current version of this Privacy Policy is publicly available at:
https://sherbranding.ru