Privacy Policy

PROVISION ON THE COLLECTION, STORAGE, PROCESSING AND PROTECTION OF PERSONAL DATA OF THE WEBSITE USERS

(PRIVACY POLICY)

This Personal Data Privacy Policy (hereinafter referred to as the "Privacy Policy", the "Statement") applies to all information provided by the Online Store "Space Smoke Shop", located on the website https://spaceshop.top can get about the User while using the website of the Online Store, programs and products of the Online Store

1. DEFINITION OF TERMS

1.1. In this Provision on the collection, storage, processing and protection of personal data of users of the website "Space Smoke Shop" (hereinafter referred to as the "Site") (hereinafter referred to as the "Regulation"), the following terms are used:

1.1.1. "Administration of the Online Shop Site (hereinafter referred to as "Site Administration")" - authorized employees to manage the site, acting on behalf of the Individual entrepreneur Nikita Dmitrievich Neizvestnykh (OGRNIP 321703100003751), which organizes and (or) carries out the processing of personal data, as well as determines the purpose of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.

1.1.2. "Personal data" — any information related directly or indirectly to a specific or identifiable individual (data subject).

1.1.3. "Personal data processing" means any action (operation) or a set of actions (operations) performed with or without the use of automation equipment with personal data, including the collection, recording, systematization, accumulation, storage, clarification (update, modification), extraction, use, transmission (dissemination, provision, access), depersonalization, blocking, deletion, destruction of personal data.

1.1.4. "Personal data dissemination" — an action aimed at disclosing personal data to a certain group of persons with prior consent, and in cases provided for by law and / or this Policy;

1.1.5. "Personal data provision" — actions aimed at disclosing personal data to a certain person or a certain circle of persons;

1.1.6. "Blocking of personal data" — temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data).

1.1.7. "Destruction of personal data" — actions that make it impossible to restore the content of personal data in the personal data information system and/or as a result of which the material carriers of personal data are destroyed.

1.1.8. "Personal data depersonalization" — actions that make it impossible to determine the identity of personal data to a specific personal data subject without using additional information.

1.1.9. "Confidentiality of personal data" — a mandatory requirement for the Operator or other person who has access to personal data to prevent its dissemination without the consent of the data subject or the presence of other valid grounds.

1.1.10. "Operator" — an organization that independently or jointly with other persons organizes the personal data processing, as well as determines the purposes of processing personal data to be processed, actions (operations) performed with personal data.

The operator is: Individual entrepreneur Nikita Dmitrievich Neizvestnykh., address of location: Seversk, Severnaya st. Seversk, 8 Severnaya St., bld. 41, Seversk city, Tomsk region., OGRNIP 321703100003751, INN 702410257115.

1.11. "Site User (hereinafter referred to as the User)" – a person who has access to the website via the Internet and including the use of the website, but not limited to, and being a customer of an Online Store located on the website https://spaceshop.top.

Automated processing of personal data – processing of personal data with the use of computer technologies.
Personal Information Management Systems (or PIMS) – a set of personal data contained in databases and information technologies and technical means that ensure their processing.
Federal Law – Federal Law No. 152 of 27.07.2006 "On Personal Data" (hereinafter referred to as the Law on Personal Data).

1.1.15. "Cookies" — a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open a page of the corresponding site.

1.1.16. "IP address" — a unique network address of a node in a computer network built over the IP protocol.

1.1.17. Website https://spaceshop.top does not control and is not responsible for third-party websites to which the User can click the links available on the website https://spaceshop.top.

2. GENERAL PROVISIONS

2.1. The User's use of the website means that they agree to these Terms and conditions for processing the User's personal data.

2.2. In case of disagreement with the terms of Provisions, the User must stop using the Site.

2.3 These Regulations shall only apply to the Space Smoke Shop website located at https://spaceshop.top, owned by IE Neizvestnykh Nikita DmitrievichNeizvestny Shop, does not control and is not responsible for any third party websites which you may link to from this website.

2.4. The Site Administration does not verify the accuracy of the personal data provided by the Site User.

2.5. The Provision on the collection, storage, processing and protection of personal data of Users of the website (hereinafter referred to as the Provision) is designed to comply with the requirements of the legislation of the Russian Federation, containing personal data and identifying Users who are on the website.

2.6. The provision is developed in accordance with the Constitution of Russian Federation, the Civil Code of Russian Federation, the current legislation of Russian Federation in the field of personal data protection.

2.7. The Regulation establishes the procedure for processing personal data of Users of the website: actions for collecting, systematizing, accumulating, storing, clarifying (updating, changing), destroying, depersonalizing personal data.

Principles of personal data processing:

- the processing of personal data must be carried out on a legal and fair basis;

- the processing of personal data should be limited to the achievement of specific, predetermined and legitimate objectives. Personal data processing that is incompatible with the purposes of personal data collection is not allowed;

- it is not allowed to combine databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other;

- only personal data that meets the purposes of their processing is subject to processing;

- the contents and amount of the processed personal data must correspond to the stated purposes of processing. The processed personal data must not be redundant in relation to the processing of stated purposes;

– when processing personal data, the accuracy of personal data, its sufficiency, and, if necessary, its relevance to the purposes of personal data processing must be ensured;

- the storage of personal data should be carried out no longer than the purposes of personal data processing require, unless the period of personal data storage is established by a federal law or an agreement to which the User is a party;

- the processed personal data is subject to destruction or depersonalization upon achievement of the processing purposes or in case of the need loss to achieve these purposes, unless otherwise provided by Federal Law.

2.8. Principles of personal data processing.

2.8.1. The processing of personal data of Users of the website is carried out on the basis of the Civil Code of Russian Federation, the Constitution of Russian Federation, the current legislation of Russian Federation in the field of personal data protection.

2.8.2. The processing of personal data on the website is carried out in compliance with the principles and rules provided by the Regulations and the legislation of the Russian Federation.

The processing of personal data is allowed in the following cases:

- the processing of personal data is necessary for the use of the website to which the User is a party;

- the processing of personal data is necessary to achieve the purposes specified in section 4 of this Provision;

- the processing of personal data is necessary to exercise the rights and legitimate interests of the Operator or third parties or to achieve socially significant goals, provided that the rights and freedoms of the Site Users are not violated;

- the processing of personal data is carried out for statistical or other research purposes, subject to the User's consent to the processing of his personal data.

2.9. Processing of personal data.

2.9.1. The processing of personal data of Users of the website is carried out in order to provide the User with the opportunity to interact with the website, as well as to achieve the goals set out in Section 4 of the Provisions.

2.9.2. The information that constitutes personal data on the website is any information related to an individual (the subject of personal data) identified or determined on the basis of such information.

2.10. Sources of obtaining personal data of Users.

2.10.1. The source of information about all the User's personal data is the User himself.

2.10.2. The source of information about the User's personal data is the information obtained as a result of the Operator granting the User the rights to use the website.

2.10.3. Personal data of Users is classified as confidential information of limited access.

2.10.4. The confidentiality of personal data is not required in the case of depersonalization, as well as in relation to publicly available personal data.

2.10.5. The Operator does not have the right to collect and process the User's personal data about their race, nationality, political views, religious or philosophical beliefs, or private life, except in cases provided by current legislation.

2.10.6. The Operator does not have the right to receive and process the User's personal data about their membership in public associations or their trade union activities, except for cases provided by Federal Law.

2.11. Principles of personal data processing.

2.11.1. The processing of the User's personal data is carried out in any legal way, including personal data information systems with or without the use of automation equipment.

The User agrees that the Site Administration has the right to transfer personal data to third parties with whom the Operator has concluded a contract, in particular, courier services, postal organizations, telecommunications operators, solely for the purpose of fulfilling the User's order placed on the website of the online store "Space Smoke Shop", including the shipping of goods. The transfer of data to these third parties is subject to the fulfillment of the obligations of the Online Store and the achievement of the purposes of data processing.

The User's personal data may be transferred to the authorized state authorities of the Russian Federation only on the grounds and in accordance with the procedure established by the legislation of Russian Federation.

In case of loss or disclosure of personal data, the site Administration informs the User about the loss or disclosure of personal data.

The site Administration takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, dissemination, as well as from other illegal actions of third parties.

The site Administration, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.

2.12. Subjective (Users') rights of personal data.

2.12.1. The User has the right to receive information about the Operator, about his location, about the availability of personal data related to a specific personal data subject (User), as well as to get acquainted with such personal data, except for the cases provided in part 8 of Article 14 of the Law on Personal Data.

2.12.2. The User has the right to receive the following information from the Operator when contacting him personally or when the Operator receives a written request from the User regarding the processing of his personal data, including the following information:

- confirmation of the fact of processing of personal data by the Operator, as well as the purpose of such processing;

- legal basis and purposes of personal data processing;

- the purposes and methods of personal data processing used by the Operator;

- the name and location of the Operator, information about persons (except for the operator's employees) who have access to personal data or to whom personal data may be disclosed on the basis of a contract with the Operator or on the basis of a Federal law;

- processed personal data related to the relevant personal data subject, the source of data collection, unless otherwise provided for by Federal law;

- terms of processing of personal data, including the terms of their storage;

- the procedure for the exercise by the subject of personal data of the rights provided by a Federal law;

- information about the cross-border data transfer that has been carried out or is expected to be carried out;

- name or surname, first name and address of the person who processes personal data on behalf of the Operator, if the processing is or will be entrusted to such a person;

– other information provided by a Federal law or other federal laws;

- demand changes, clarifications, and destruction of information about yourself;

- appeal against illegal actions or omissions in the processing of personal data and demand appropriate compensation in court;

- supplement personal data of an evaluative nature with a statement expressing his own point of view;

- identify representatives to protect your personal data;

- require the Operator to notify of any changes or exceptions made to them.

2.12.3. The User has the right to appeal to the authorized body for the protection of the rights of personal data subjects or in court against the actions or inactions of the Operator, if he believes that the latter processes his personal data in violation of the requirements of the Federal Law "On Personal Data" or otherwise violates his rights and freedoms.

2.12.4. The user of personal data has the right to protect his rights and legitimate interests, including compensation for damages and (or) compensation for non-pecuniary damage in court if the Operator is found guilty by the court.

2.13. Personal data privacy mode.

2.13.1. The operator ensures the confidentiality and security of personal data when processing them in accordance with the requirements of the legislation of Russian Federation.

2.13.2. The Operator does not disclose or disseminate personal data to third parties without the consent of the personal data subject, unless otherwise provided by a Federal Law or specified in this Provision.

In case of loss or disclosure of personal data, the site Administration informs the User about the loss or disclosure of personal data.

2.13.3. In accordance with the list of personal data processed on the website, the personal data of Users of the Site is confidential information.

2.13.4. Persons who process personal data are obliged to comply with the requirements of the Operator's regulatory documents in terms of ensuring the confidentiality and security of personal data.

3. SUBJECT OF THE PROVISION

3.1. This Regulation establishes the obligations of the Site Administration under non-disclosure and ensure the confidentiality of personal data which the User provides at the request of the Site Administration when registering on the Site or performing other actions on the Site, and also establishes the main terms and conditions for the collection, storage, processing and protection of personal data of Site Users.

3.2. The personal data allowed for processing under this Privacy Policy is provided by the User by filling out the registration form and (or) the order form and (or) the feedback form on the Website of the online store "Space Smoke Shop" and includes the following information:

3.2.1. last name, first name of the User;

3.2.2. User's contact phone number;

3.2.3. e-mail address (e-mail);

3.2.4. delivery address of the Product

(hereinafter referred to as personal data).

3.3. The online shop protects the Data that is automatically transmitted when viewing ad units and when visiting pages on which the system's statistical script ("pixel") is installed:

IP address;
information from cookies;
information about the browser (or other program that provides access to the display of ads);
access time;
the address of the page where the ad block is located;
referrer (address of the previous page).

3.3.1. Disabling cookies may result the inability to access parts of the Online store site that require authorization.

3.3.2. The online store collects statistics about the IP addresses of its users. This information is used to identify and solve technical problems, and to monitor the legality of made financial payments.

3.4. Any other personal information not mentioned above (purchase history, browsers and operating systems used, etc.) is subject to safe storage and non-dissemination, except for the cases provided for in clause 2.13.2. of this Privacy Policy.

3.5. Persons who have the right to access personal data.

3.5.1. The right of access to the personal data of subjects is granted to persons who have the appropriate powers in accordance with their official duties.

3.5.2. The list of persons who have access to personal data is approved by the General Director of the Operator.

3.6. Any other personal information not mentioned above (purchase history, browsers and operating systems used, etc.) is subject to safe storage and non-dissemination, except for the cases provided for in clause 2.13.2. of this Privacy Policy.

3.7. Legal basis for processing of personal data

3.7.1 The Operator processes the User's personal data only if it is sent by the User through the forms located on the website https://spaceshop.top. By sending your personal data to the Operator, the User agrees to this Policy.

3.7.2 The Operator processes depersonalized data about the User if this is allowed in the User's browser settings (saving cookies and using JavaScript technology is enabled).

4. THE PURPOSES OF COLLECTING THE USER'S PERSONAL INFORMATION AND THE LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA

4.1. The Site Administration may use the User's personal Data for the following purposes:

- Providing the User with access to individual Site resources.

- Establishing feedback with the User, including sending notifications, requests related to the use of the Site, the provision of services, processing requests and orders from the User.

- Information received by a user about marketing events.

- Fulfillment of the obligations of the Seller to the Buyer: in terms of the formation, execution of Orders through the Site (the online store of the Site).

- Conducting audits and other internal research to improve the quality of services/products provided.

- Confirmation of the accuracy and completeness of the personal data provided by the User.

- Creating an account on the Site, registering a User on the Site.

- Providing the User with effective customer and technical support in case of problems related to the use of the Site, ordering Goods.

- User participation in advertising events.

- Informing and providing the User with access to the websites or services of the organisation's partners in order to receive products, updates and services.

- To inform User about Products and events, by sending User newsletters, notifications. Also to inform the User by notifications, newsletters about new products/goods, services, special offers and different events. At the same time the User can always refuse to receive information messages by sending a notification to the Operator's address or by leaving a message on the Website in the tab "Feedback".

- Identification of the User registered on the Online Shop website, in order to place an order and (or) to conclude an agreement for the sale of goods by remote means.

- Providing the User with access to the personalized resources of the Online store Site.

- Determining the location of the User to ensure security, prevent fraud.

- Confirmation of the accuracy and completeness of the personal data provided by the User.

- Notifications to the User of the Online Store Site about the Order status.

- Processing and receiving payments, confirming tax or tax benefits, challenging the payment, determining the right to receive a credit line by the User.

The anonymised User data collected through the Internet Statistics service is used to collect information about the User's activities on the Website, to improve the quality of the Website and its contents.

4.2. The Operator processes the User's personal data only if they are filled in and / or sent by the User independently through special forms located on the Site.

By filling out the relevant forms and / or sending your personal data to the Operator, the User agrees to this Provision.

The Operator processes depersonalized data about the User if this is allowed in the User's browser settings (saving cookies and using JavaScript technology is enabled).

5. METHODS AND TERMS OF PROCESSING AND STORAGE OF PERSONAL DATA

5.1. The processing of the User's personal data is carried out in any legal way, including personal data information systems with or without the use of automation equipment.

5.2. The User's personal data may be transferred to the authorized state authorities of the Russian Federation only on the grounds and in accordance with the procedure established by the legislation of Russian Federation.

5.3. In case of loss or disclosure of personal data, the site Administration informs the User about the loss or disclosure of personal data.

5.4. The site Administration takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, dissemination, as well as from other illegal actions of third parties.

5.5. The terms of processing and storage of personal data of Users on the Site are unlimited and are put into effect from the moment of acceptance (acceptance) by the User of this Provision and the User Agreement on the Site and are valid until the individual (User) unsubscribes from advertising and news, newsletters and messages. The processing of personal data may also be terminated at the request of the personal data subject.

The terms of processing and storage of personal data on the Site are also valid until the User states their desire to remove their personal data from the Site and/or revoke their consent to the processing of personal data. The User may withdraw their consent to personal data processing at any time by sending a notice to the Operator (Site Administration) at the following address: Seversk, Seversk, Tomsk Oblast. Seversk, Seversk, 8 Severnaya St., bld. 41 or by e-mail to info@spaceshop.top.

The User expresses his consent to the terms of this Provision, as well as to the terms of the User Agreement and to the processing of his personal data by accepting, which is expressed in putting a mark in the form of a "web mark" in the columns of the website on the page:

"I consent to the processing of my personal data»;

"I agree to the terms of the Provision on the Collection, Storage, Processing and Protection of Personal Data" (Privacy Policy);

"I agree to and accept the terms and conditions of the User Agreement".

5.6. If the data is deleted from the website at the initiative of one of the parties, namely, the termination of the use of the website, the User's personal data is stored in the Operator's databases for five years in accordance with the legislation of Russian Federation.

After the above-mentioned period of processing and storage of the User's personal data expires, the User's personal data is deleted automatically by the specified algorithm set by the Operator.

The Operator does not process Users ' personal data on physical media.

5.7. Processing of personal data.

5.7.1. The blocking of personal data is understood as the temporary termination by the Operator of operations on their processing at the request of the User when it detects the unreliability of the processed information or illegal, in the opinion of the subject of personal data, actions in relation to his data.

5.7.2. The Operator shall not transfer personal data to third parties and shall not entrust processing of personal data to third parties and organizations, except for cases in paragraphs 2.13.2, 5.9. of this Policy, and giving the User's consent to transfer his personal data for processing to third parties - strategic partners, with whom the Operator has a Contract and to whom the Operator transfers personal data for performing the purposes specified in this consent, namely: recording, systematization, accumulation, storage, specification (updating, modification) of personal data and the User's data. In other cases the personal data of the Users of the Site are processed only by the Operator's employees (database administrators, etc.), admitted to the processing of the Users' personal data by the established procedure.

5.7.3. The blocking of personal data on the website is carried out on the basis of a written application from the subject of personal data.

5.8. Destruction of personal data.

5.8.1. "Destruction of personal data" — actions that make it impossible to restore the content of personal data in the personal data information system and/or as a result of which the material carriers of personal data are destroyed.

5.8.2. The personal data subject has the right to request the destruction of his personal data in a writing form if the personal data is incomplete, outdated, unreliable, illegally obtained or is not necessary for the stated purpose of processing. The subject of personal data has the right to unilaterally withdraw his consent to the processing of personal data in a writing form.

5.8.3. To the extent of the possibility of destroying personal data, the Operator blocks such personal data.

5.8.4. The destruction of personal data is carried out by erasing the information using certified software with guaranteed destruction (in accordance with the specified characteristics for the installed software with guaranteed destruction).

5.9. The User agrees that the site Administration has the right to transfer personal data to third parties with whom the Operator has concluded a Contract, in particular, to courier services, postal organizations, telecommunication operators, solely for the purpose of fulfilling the User's order placed on the website of the online store "Space Smoke Shop", including the delivery of Goods, as well as for the purposes of advertising and/or information mailing, provided that the User agrees to provide him with the mailing data and for other processing purposes.

5.10. There is no cross-border transfer of personal data.

6. WAYS OF PROTECTING PERSONAL DATA

6.1 Ensuring the security of personal data shall be achieved, inter alia

6.1.1 Identification of security threats to personal data when processed in personal data information systems;

6.1.2. Application of organisational and technical measures to ensure security of personal data during its processing in personal data information systems, necessary to meet the requirements for the protection of personal data;

6.1.3. The application of duly approved conformity assessment procedures for data protection equipment;

6.1.4 Evaluation of the effectiveness of the measures taken to ensure the security of personal data prior to the commissioning of the personal data information system;

6.1.5. Accounting for machine-readable personal data media;

6.1.6 Detecting unauthorised access to personal data and taking action;

6.1.7. Restoring personal data that has been modified or destroyed as a result of unauthorised access;

6.1.8. Establishing rules for access to personal data processed in the personal data information system, as well as ensuring registration and recording of all actions performed with personal data in the personal data information system;

6.1.9. Monitor the measures taken to ensure the security of personal data and the level of security of personal data information systems.

6.1.10. Installation of certified anti-virus software with regularly updated databases.

6.1.11. Detecting unauthorised access to personal data and taking action.

6.2 The operator shall ensure the security of personal data transferred to it and shall take all possible measures to exclude access to personal data by unauthorised persons.

7. OBLIGATIONS OF THE PARTIES

7.1 The User shall:

7.1.1 Provide the personal data required to use the Website, place an order, and purchase goods remotely.

7.1.2. to update, supplement the provided information on personal data in case of changes in this information, by notifying the Operator via Feedback on the Website, or at the address of the Operator indicating the data which is outdated and/or which should be changed, deleted/destroyed and indicating the correct data.

7.1.3. independently update their personal data in case of inaccuracies by sending to the Operator's address or notifying the Operator via the Feedback on the Website, marked "Update of personal data".

7.2. The Site Administration shall:

7.2.1 Use the information obtained solely for the purposes set out in clause 4 of this Privacy Policy.

7.2.2. ensure storage of personal data in secrecy, not to disclose without prior written permission of the User and/or cases established by RF legislation, as well as not to sell, exchange, publish, or disclose in other possible ways the transferred personal data of the User, except for clauses 5.2. 5.2, 5.9., 2.13.2. of these Terms.

7.2.3 Take precautions to protect the confidentiality of personal data of the User in accordance with the procedures generally used to protect such information in current business practice.

7.2.4 To block personal data relating to the relevant User from the moment of application or request of the User or its legal representative or authorised body for the protection of the rights of subjects of personal data for the period of inspection, in case of detection of inaccurate personal data or unlawful actions.

8. LIABILITY OF THE PARTIES

8.1. The Website Administration, which has not fulfilled its obligations, shall be liable for losses sustained by the User in connection with misuse of personal data in accordance with the legislation of the Russian Federation, except cases stipulated by Clauses 5.2 and 7.2, 5.9, 2.13.2 of these Regulations and in case of proven fault of the Website Administration/Operator.

8.2 In the event of loss or disclosure of Confidential Information, the Website Administration shall not be liable if the Confidential Information is lost or disclosed:

8.2.1. has become in the public domain prior to its loss or disclosure.

8.2.2. has been received from a third party prior to its receipt by the Site Administration.

8.2.3. has been disclosed with the User's consent.

9.DISPUTE RESOLUTION

9.1 Before going to court to settle disputes arising from relations between the Website User and the Website Administration, a claim (written offer to settle a dispute voluntarily) shall be submitted.

9.2 The recipient of the claim shall, within 30 calendar days of receipt of the claim, notify the claimant in writing of the results of the examination of the claim.

9.3 If no agreement is reached, the dispute will be referred to a judicial authority at the location of the Operator.

9.4 This Policy and the relationship between the User and the Website Administration shall be governed by the applicable laws of the Russian Federation.

10. ADDITIONAL CONDITIONS

10.1 The Website Administration has the right to change this Privacy Policy without the User's consent.

10.2 The new Privacy Policy shall take effect as soon as it is posted on the Webshop Website, unless otherwise provided for in the new Privacy Policy.

10.3 Any suggestions or questions about this Privacy Policy should be emailed to info@spaceshop.top .

10.4 The current Privacy Policy can be found at https://spaceshop.top/policy.