Approved by
the director of the Joint Directorate "Crimean Protected Areas" Federal State Budgetary Institution

A.V. Borodin


PRIVACY POLICY

FOR PERSONAL DATA

Of the Joint Directorate "Crimean Protected Areas" Federal State Budgetary Institution

This Privacy Policy for personal data (hereinafter referred to as the Privacy Policy) applies to all information collected by the FSBI "Crimean Protected Areas" located on domain https://zapovedcrimea.ru/en, while the user is using the site.


1. DEFINITIONS

1.1. The following terms are used in this Privacy Policy:

1.1.1. Website Administration is composed of the employees authorized by FSBI "Crimean Protected Areas" that organize and/or execute the processing of personal data and determines the purposes of processing personal data, composition of personal data subject to processing, and actions (operations) performed with personal data.

1.1.2. Personal Data are any information related directly or indirectly to a specific or identifiable individual (subject of personal data).

1.1.3. Processing of Personal Data is any action (operation) or a set of actions (operations) performed with personal data with or without the use of automation tools. Such actions include collection, recording, systematization, accumulation, storage, clarification (updating, modification), modification, use, transfer (distribution, provision, access), impersonation, blocking, removal, deletion of personal data.

1.1.4. Confidentiality of personal data is a mandatory requirement for the Operator or any other person who has access to personal data to prevent their distribution without the consent of the subject of personal data or the presence of other legal grounds.

1.1.5. Website User is a person having access to the Website over the Internet and using the Website.

1.1.6. Cookies are small pieces of data sent by a web server and stored on the

user's computer. Cookies are sent by the web client or web browser to web server in an HTTP request each time the user tries to open the page of the corresponding site.

1.1.7. IP address is a unique network address of a device in a computer network built using the IP protocol.


2. GENERAL PROVISIONS

2.1. By using the Website the User accepts this Privacy Policy and the terms of processing of the User's personal data.

2.2. In case of disagreement with the terms of the Privacy Policy, the User must stop using the Website.

2.3. This Privacy Policy applies only to the website https://zapovedcrimea.ru/en. The Website does not control and is not responsible for third-party websites which the User can access by clicking on the links available on the Website.

2.4. The Website Administration does not verify the accuracy of the personal data provided by the Website User.


3. SUBJECT OF THE PRIVACY POLICY

3.1. This Privacy Policy stipulates the obligations of the Website Administration

in terms of non-disclosure and protection of personal data provided by the User upon the request of the Website Administration when signing up.

3.2. Personal data allowed for processing under this Privacy Policy shall be provided by the User through filling out the registration form on the Website https://zapovedcrimea.ru/en and shall include the following:

3.2.1. User's full name (last name, first name, patronymic);

3.2.2. User's contact phone number;

3.2.3. Email address (e-mail);

3.3. The Website protects the Data that is automatically transmitted while viewing ad blocks and visiting pages on which the statistical system script ("pixel") is installed:

IP address;

cookies information;

information about the browser (or another program that provides access to the ads);

access time:

the address of the page where the ad block is located;

referrer (address of the previous page).


3.3.1. Disabling cookies may result in the inability to access parts of the site that require authorization.

3.3.2. The Website collects statistics about the IP addresses of its visitors. This information is used for identifying and solving technical problems as well as for monitoring

the legality of financial payments.

3.4. Any other personal data not mentioned above (purchase history, browsers and operating systems used, etc.) is subject to secure storage and

non-disclosure, except for the cases stipulated in paragraphs 5.2. and 5.3. of this

Privacy Policy.


4. PURPOSES OF COLLECTING THE USER'S PERSONAL DATA

4.1. The Website Administration is entitled to use the User's personal data for the following purposes:

4.1.1. Granting the User access to personalized resources of the Website.

4.1.2. Establishing contact with the User, including sending notifications and requests related to the use of the Website, rendering services, processing User requests.

4.1.3. Identifying the User's location to ensure security and prevent fraud.

4.1.4. Verifying the reliability and completeness of personal data provided by the

User.

4.1.5. Creating an account for making purchases, if the User has agreed to

create an account.

4.1.6. Providing the User with effective customer and technical support in case of any problem related to the use of the Website.

4.1.7. Upon User's consent, providing the User with product updates, special offers, price information, newsletters and other information on behalf of the Website.

4.1.8. Exercising advertising activities with the User's consent.


5. PERSONAL DATA PROCESSING METHODS AND TERMS

5.1. Personal data provided by the User may be processed for an unlimited time, by any legitimate means including processing data in data systems with or without the use of automation tools.

5.2. The User agrees that the Website Administration is entitled to transfer personal data to third parties, in particular, courier services, postal organizations, telecommunications operators, solely for the purpose of fulfilling an order placed on the Websites of the FSBI "Crimean Protected Areas".

5.3. The User's personal data may only be furnished to governmental authorities of the Russian Federation on legal grounds and in the manner stipulated by Russian law.

5.4. If the User's personal data are lost or disclosed, the Website Administration shall inform

The User of such a loss or disclosure event.

5.5. The Website Administration shall take all relevant organizational and technical measures to protect the User's personal data from unauthorized or accidental access, deletion, change, blocking, copying, distribution, or other illegal actions performed by third parties.

5.6. Jointly with the User, the Website Administration shall take all necessary measures to prevent losses or other adverse effects caused by a loss or disclosure of the User's personal data.


6. OBLIGATIONS OF THE PARTIES

6.1. The User is required to:

6.1.1. Provide information about personal data necessary for the use of the Website.

6.1.2. Update and complete the provided information about personal data in case this information changes.

6.2. Website Administration is required to:

6.2.1. Use the User's personal information exclusively for the purposes stipulated in paragraph 4

of this Privacy Policy.

6.2.2. Ensure secure storage of personal data, never disclose such data without the prior written consent of the User, never sell, exchange, publish, or disclose such data except for cases stipulated in paragraphs 5.2 and 5.3 of this Privacy Policy.

6.2.3. Take preventive measures to ensure privacy protection of the User's personal data in the manner appropriate for protecting such data.

6.2.4. Block the personal data related to the User from the moment of the User's request or the request from their legal representative or the authorized body for the protection of the rights of personal data subjects for the period of verification, in case of identification of false personal data or any illegal actions.


7. LIABILITY OF THE PARTIES

7.1. If the Website Administration fails to fulfill its obligations, it shall be held liable for losses suffered by the User due to the unauthorized use of their personal data,

in compliance with Russian law (except for cases stipulated in paragraphs 5.2. 5.3 and 7.2 of this Privacy Policy).

7.2. The Website Administration shall not be held liable for any loss or disclosure of the User's personal data if such data:

7.2.1. Had gone public before the loss or disclosure event.

7.2.2. Had been obtained from a third party before the Website Administration obtained it.

7.2.3. Had been disclosed with the User's consent.


8. DISPUTE RESOLUTION

8.1. Before applying to the court with a claim for disputes arising from the relationship between the Website User and the Website Administration, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).

8.2. It shall take 30 calendar days from the day when the charged Party receives the claim to consider such a claim and prepare a substantiated response.

8.3. If the Parties cannot reach an agreement, they are entitled to take legal action in compliance with Russian law.

8.4. This Privacy Policy and the relationship between the User and the Website Administration shall be subject to Russian law.


8. ADDITIONAL PROVISIONS

9.1. The Website Administration is entitled to change or update this Privacy Policy without the User's consent.

9.2. The updated Privacy Policy shall come into effect on the day of publication on the Website unless otherwise stipulated by the updated Privacy Policy.

9.3. Any suggestions or questions regarding this Privacy Policy should be reported.

9.4. This Privacy Policy can be found at https://zapovedcrimea.ru/en.