Политика обработки персональных данных
07/01/2026
1. GENERAL PROVISIONS
This Personal Data Processing Policy (hereinafter referred to as the “Policy”) determines the procedure and conditions for processing Limited Liability Company “Paevskaya Home Design” OGRN: 1257700140048, INN: 9728153168, KPP: 772801001, Address: 117630, Moscow, st. Vorontsovskie Ponds, 3, premises. 34/1, email address for requests regarding personal data: paevskayadesign@p-hd.ru (hereinafter referred to as the “Operator” or “We”), information about an individual that can be received by the Operator from such a person or from his authorized representative (hereinafter referred to as the “User”, “Personal Data Subject” or “You”), if the following relationships arise:
a) when using the website https://paevskayahomedesign.ru/, including all their domains, subdomains, pages, content, as well as Internet services and software offered by the Operator for use (hereinafter collectively - the “Site”);
b) when the Operator exercises the rights and obligations established by agreements and contracts concluded between the Operator and the User;
c) when processing appeals, complaints, requests and messages sent by the Operator and the User to each other.1.1. The purpose and purpose of the Policy is to ensure the proper legal regime of personal data. The policy cannot contain provisions limiting the rights and freedoms of the subject of personal data, establishing cases of processing of personal data of minors, unless otherwise provided by the legislation of the Russian Federation, as well as provisions allowing inaction of the subject of personal data as a condition for concluding an agreement/expressing consent.
1.2. This Policy applies to all information that the Operator can obtain about the User while using the Site and purchasing goods and/or services of the Operator.
1.3. The policy was developed in accordance with the requirements of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data” and other regulatory legal acts of the Russian Federation.
1.4. The operator processes personal data on a legal and fair basis, limits processing to the achievement of specific, predetermined and legitimate purposes, does not allow processing that is incompatible with the purposes of collecting personal data, and also ensures the accuracy, sufficiency and relevance of personal data.
1.5. The processing of personal data is carried out by the Operator:
using automation tools and (or) without the use of such tools;both directly by the Operator, and with the involvement of third parties - processors carrying out processing on behalf of the Operator, or independent operators acting on the basis of their own rules.
1.6. The Operator does not verify the accuracy of the personal data provided by the User, but assumes that the User provides reliable and current information and updates it in a timely manner.
2. DEFINITION OF TERMS
2.1. The following terms are used in this Policy:
2.1.1. “Personal data” - any information relating to a directly or indirectly identified or identifiable individual (subject of personal data).
2.1.2. “Processing of personal data” - any action (operation) or set of actions (operations) with personal data, including: collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (provision, access, distribution, depersonalization, blocking, deletion, destruction.
2.1.3. “Confidentiality of personal data” is a mandatory requirement for the Operator or any other person who has access to personal data to not allow their distribution without the consent of the subject of personal data or the presence of another legal basis.2.1.4. “Browser data files” (hereinafter referred to as cookies) are small pieces of data stored on the User’s device and used, among other things, for the correct operation of the Site and analytics.
2.1.5. “Processor” is a person processing personal data on behalf of the Operator on the basis of a contract.
2.1.6. “Independent operator” is a person who determines the purposes and means of processing personal data independently (for example, banks/instalment/payment services).2.1.7. “Products” - products for children’s spaces, interior solutions, as well as other products developed, manufactured or sold by the Operator.
2.1.8. “Services” - information, consulting, organizational, service, digital and other services provided by the Operator in connection with the development, production, sale, use and maintenance of Goods, as well as other services provided by the Operator as part of its activities.
3. SCOPE OF THE PRIVACY POLICY
3.1. This Policy establishes the Operator’s obligations to ensure the protection and confidentiality of the User’s personal data.
3.2. Personal data permitted for processing under this Policy is provided by the User by filling out forms on the Site, on the payment page, platform and (or) by sending messages to the Operator and may include:
3.2.1. last name, first name, patronymic of the User;3.2.2. User's contact phone number;
3.2.3. email address;
3.2.4. a photo image of the User, if the User independently uploads it to his profile, personal account or sends it to the Operator.
3.2.5. Publication of User reviews, as well as posting in the public domain on the Internet of personal data contained in the review, is permitted only with the User’s separate consent to the dissemination of personal data, formalized in accordance with Article 10.1 of the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data,” taking into account the prohibitions and conditions established by the User.
3.2.6. Public access to photographs and videos of the User that allow the User to be identified is permitted only if there is a separate consent to use the image in accordance with Article 152.1 of the Civil Code of the Russian Federation. The review can be published either with a name or in an anonymized form, depending on the consent option chosen by the User and the conditions established by him.
3.3. The site may automatically receive technical data, including when using cookies and analytics systems:
IP address;
data from cookies files;
browser, device and operating system information;
access time;
addresses of visited pages;
other technical parameters transmitted by the User’s browser.3.3.1. The user expresses his consent through a cookie banner or other mechanism on the Site that allows him to express his consent with an unambiguous action. Disabling cookies may result in the inability to access certain functions, sections of the Site and (or) incorrect operation of certain services.
3.3.2. What cookies are used:
Strictly necessary (technical) cookies: these cookies are necessary for the operation of the Site, platform and (or) information platforms and the provision of goods and (or) services; among other things, they allow the Operator to identify the User’s hardware and software, including browser type;
Statistical (analytical), they help to understand how the User interacts with our Service. The site uses Yandex. Metrica
Performance cookies: these cookies collect information about how Users interact with the Site, platforms and (or) information platforms, which allows us to identify errors and test new functions to improve the performance of the Site and other services of the Operator;
Functionality cookies: these cookies enable the provision of certain functions to facilitate Users' use of the Site and other Operator services, for example by storing Users' preferences (such as language and location);Marketing (advertising) cookies: These cookies collect information about Users, traffic sources, pages visited and advertisements displayed to the User, as well as the one that led the User to the advertised page. They allow you to display advertisements that may be of interest to the User, based on the analysis of Personal Information collected about the User. They are also used for statistical and research purposes.
3.3.3. The data collected using cookies does not belong to special categories or biometrics in accordance with Art. 10-11 152-FZ and are processed in an automated way.
3.3.4. The basis for processing your data in this case will be consent to the processing of personal data provided by the subject of personal data (site user) by performing implied actions - continued use of the site.
3.3.5. Upon reaching the processing time, personal data is destroyed by deletion from information systems using the built-in means of the information system.
3.3.6. First party cookies and third party cookies:
Basic cookies are created by the Site and used in the Site domain; the Operator does not transfer information to third parties. They are often used to improve user experience (UX) by remembering the Site user's preferences and settings.3.3.7. Third-party cookies are placed on the Service by third parties and collect user data for the third party. Third-party cookies are also placed so that the Site can remember something about the user later.
3.3.8. When visiting the Site for the first time, we request the User’s consent to use cookies. If, after the User has approved the use of cookies, the User wishes to change his or her decision. The user can manage cookies:
Basic cookies that are placed on the User's devices (tablet, smartphone, PC, etc.) The User can delete cookies, set permissions for them and revoke his consent to our use of cookies.
For third-party cookies, instructions for deleting or blocking third-party cookies in various browsers are available at the following links (Google Chrome, Internet Explorer, Opera, Mozilla Firefox, Safari)
3.4. Other personal information not specified above is processed by the Operator only in cases of its voluntary provision by the User and if there is a legal basis provided for in Section 4 of this Policy.
4. PURPOSES OF COLLECTING USER’S PERSONAL INFORMATION
4.1. The Operator may use the User’s personal data for the purposes of:
4.1.1. User identification, registration, account creation (personal account).4.1.2. Providing the User with access to personalized resources of the Site, platform and (or) information platforms.
4.1.3. Establishing feedback with the User, including sending notifications, requests, documents and messages regarding goods and (or) services, as well as processing the User’s requests and applications.
4.1.4. Ensuring security, preventing fraud and abuse when using the Site, platform, payment instruments within the legal framework.
4.1.5. Confirmation of the accuracy and completeness of personal data provided by the User to the extent necessary.
4.1.6. Processing and accounting of payments, registration of access after payment, returns, as well as fulfillment of accounting and tax accounting responsibilities.
4.1.7. Providing the User with customer and technical support.
4.1.8. Analyzing the use of the Site and improving its performance.
4.1.9. Providing the User with information about the Operator’s products and/or services, including advertising mailings, only with the User’s separate consent.
4.2. The processing of personal data is carried out in the presence of one or more legal grounds:
concluding and executing a contract with the User, as well as performing pre-contractual actions on the User’s initiative;
fulfillment of the duties assigned to the Operator by the legislation of the Russian Federation;User consent;
legitimate interest of the Operator, provided that processing is necessary to ensure security, prevent abuse and fraud, operate the Site and Platform, consider requests and claims, as well as protect the rights and legitimate interests of the Operator in the event of a dispute, and while maintaining a balance of rights and legitimate interests of the User.
5. METHODS AND TERMS OF PROCESSING PERSONAL INFORMATION
5.1. The processing of the User's personal data is carried out by legal means, including in personal data information systems using automation tools or without the use of such tools.
5.1.1. Personal data is stored no longer than required by the purposes of processing, unless a different period is established by the legislation of the Russian Federation.
5.1.2. Basic processing and storage times:
data on contracts, goods and/or services sold - for the duration of the contract and provision of access and up to 3 (three) years to protect the rights and legitimate interests of the Operator (statute of limitations), unless otherwise provided by law;
data on applications, correspondence - until the goal of considering the application is achieved and up to 3 years to protect rights;
data for advertising mailings - until the User withdraws consent or unsubscribes;
technical data - within the period necessary for the purposes of analytics and ensuring the operation of the Site up to 24 months, or until the User deletes cookies.5.1.3. Upon achieving the purposes of processing, personal data is subject to destruction or depersonalization, unless otherwise provided by the legislation of the Russian Federation. Destruction of personal data is carried out by deleting personal data from the Operator’s information systems and deleting or destroying material media, if they were used, in ways that exclude the possibility of recovering personal data.
5.2. The operator has the right to entrust the processing of personal data to processors and transfer personal data to third parties if there is a legal basis and solely for the purposes specified in this Policy. When entrusting processing, the Operator ensures that there is an agreement for entrusting the processing of personal data with the processor. Transfer on the basis of legitimate interest is permitted only to ensure security, prevent abuse, consider requests and claims, as well as protect the rights of the Operator in the event of a dispute, while maintaining a balance of the rights and legitimate interests of the User.
5.2.1. The operator uses the following services and third parties as processors or independent operators:
a) Yandex LLC, Yandex.Metrica service - web analytics and processing on behalf of the service within the rules.
Data categories: cookies/identifiers, IP address, device parameters, browser parameters, events on the site.b) Banks, payment and installment services - independent operators: - T-Bank; — Yandex Split; - In shares; — acquiring banks, payment infrastructure, including SBP; — operator of fiscal data when generating cash receipts.
Data categories: payment information, order information, transaction IDs, contact information. The processing procedure by such persons is determined by their own rules and policies, as well as the User’s agreement with the relevant service or bank.
5.3. The User’s personal data may be transferred to authorized government bodies of the Russian Federation only on the grounds and in the manner established by the legislation of the Russian Federation.
5.4. In case of loss or unlawful transfer/access to personal data, the Operator acts in accordance with the requirements of the legislation of the Russian Federation, including taking measures to prevent further violations and notifying the authorized body in cases and within the time limits provided for by law.
5.5. The Operator takes the necessary organizational and technical measures to protect the User’s personal information from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as from other unlawful actions of third parties.5.6. The Operator, together with the User, takes the necessary measures to prevent losses or other negative consequences caused by the loss or unlawful processing of the User’s personal data.
5.7. Localization of personal data: when collecting personal data of citizens of the Russian Federation using the Internet, the Operator ensures recording, systematization, accumulation, storage, clarification and retrieval of personal data using databases located on the territory of the Russian Federation, except for cases provided for by the legislation of the Russian Federation.
5.8. Purposes of processing personal data by third parties:
5.8.1. Registration, account creation, identification, delivery and return of goods, provision of services.
Grounds: conclusion and execution of a contract or performance of pre-contractual actions on the initiative of the User.
Term: the duration of the agreement and provision of access, as well as up to three years to protect the rights and legitimate interests of the Operator, unless a different period is established by law.
Data categories: last name, first name, patronymic, email address, phone number, order and access information, technical account identifiers.
5.8.2. Communications, technical support.
Grounds: agreement or legitimate interest of the Operator while maintaining a balance of interests.
Duration: until the purpose of processing is achieved and up to three years to protect rights.Data categories: contact information, order information, content of requests and messages.
5.8.3. Analytics of the use of the Site and improvement of its performance.
Grounds: consent of the User regarding analytical cookies and the Yandex.Metrica service; legitimate interest regarding mandatory technical cookies.
Duration: within the period necessary for analytics purposes, usually no more than twenty-four months or until the User deletes the cookies.
Categories of data: IP address, device and browser information, technical identifiers, information about actions on the site.
Recipient: Yandex LLC.
5.8.4. Sending advertising messages.
Reason: separate consent of the User.
Duration: until consent is withdrawn.
Data categories: email address and telephone number, name if available.
Processor: Paevskaya Home Design LLC when using the mailing functionality.
5.8.5. Process payments and perform accounting and tax duties.
Basis: agreement and requirements of the legislation of the Russian Federation.
Term: deadlines established by the legislation of the Russian Federation.
Data categories: order information, payment information, transaction identifiers, contact information to the extent necessary.
Recipients: banks, payment organizations, installment payment services and fiscal data operator.
5.8.6. Placement (publication) of User reviews in the public domain.Grounds: separate consent to the dissemination of personal data under Article 10.1 of Federal Law No. 152-FZ.
Duration: until consent for distribution is withdrawn or until the purpose of publication is achieved, whichever occurs first.
Data categories: name, nickname, profile link, review text and other personal data that the User provided in the review.
Processors and recipients: Website, social networks and other information platforms of the Operator (depending on the place of publication).
5.8.7. Placing photographs and videos of the User in the public domain.
Grounds: separate consent to use the image under Article 152.1 of the Civil Code of the Russian Federation.
Duration: until consent to use the image is withdrawn or until the purpose of placement is achieved.
Data categories: User's image and related information that allows the User to be identified.
Processors and recipients: Website, social networks and other information platforms of the Operator.
5.9. Cross-border transfer: not available
6. OBLIGATIONS OF THE PARTIES
6.1. The user is obliged:
6.1.1. Provide personal data necessary for using the Site, delivery and return of goods, provision of services, to the extent required for the relevant purpose.
6.1.2. Update and actualize the provided personal data in case of changes.6.1.3. Do not provide the Operator with personal data of third parties without legal grounds.
6.2. The operator is obliged:
6.2.1. Use the information received solely for the purposes specified in section 4 of this Policy.
6.2.2. Ensure that confidential information is kept secret and not disclosed without legal grounds, except in cases provided for by this Policy and the legislation of the Russian Federation.
6.2.3. Take precautions to protect the confidentiality of personal data.
6.2.4. At the User's request, clarify, block or destroy personal data if there are grounds and in the manner prescribed by the legislation of the Russian Federation.
6.2.5. Consider the User's requests regarding personal data and provide a response within the time limits established by law.
7. GENERAL PROVISIONS
7.1. The User’s consent to the processing of personal data by the Operator is expressed by performing one of the following actions, depending on the interface of the Site, platform, bot:
putting a tick in the checkbox indicating consent to the processing of personal data; and/or
pressing the button to submit the form, register, pay if there is a link to the Policy and the text of consent next to the form; and/or
other unambiguous action that allows you to confirm the will of the User.7.2. The User's consent to receive advertising mailings is expressed separately: by a separate check box or a separate button, and is not a condition for the purchase of goods and (or) services, unless otherwise provided by law. Refusal to provide consent to advertising mailings does not affect the User’s ability to purchase goods and (or) services of the Operator.
7.3. The User has the right to withdraw consent to the processing of personal data at any time by sending a notification to the Operator's email: paevskayadesign@p-hd.ru.
7.4. The user has the right to withdraw consent to receive advertising mailings by sending a notification to paevskayadesign@p-hd.ru and (or) by using the unsubscribe functionality, if provided.
7.5. The user has the right to request information about the processing of personal data, to demand clarification, blocking or destruction of personal data if there are grounds, as well as other rights provided for by the legislation of the Russian Federation.
7.5.1. The User has the right at any time to withdraw consent to the distribution of personal data, as well as change the established prohibitions and conditions of distribution by sending a notification to the Operator's e-mail: paevskayadesign@p-hd.ru. The operator stops disseminating personal data within the time limits and in the manner prescribed by the legislation of the Russian Federation.7.6. The procedure for exercising rights and response deadlines: the request is sent to paevskayadesign@p-hd.ru, the response is provided within 10 (ten) working days with the possibility of extension by no more than 5 (five) working days in cases provided for by law, with a reasoned notification of the extension being sent to the User.
8. RESPONSIBILITY OF THE PARTIES
8.1. An operator who fails to fulfill its obligations is liable for losses incurred by the User in connection with the unlawful use of personal data, in accordance with the legislation of the Russian Federation.
8.2. The operator is not responsible if confidential information:
8.2.1. became public property before its loss or disclosure through no fault of the Operator;
8.2.2. was received from a third party before it was legally received by the Operator;
8.2.3. was disclosed with the consent of the User or on other legal grounds.
9. DISPUTE RESOLUTION
9.1. Before filing a claim in court regarding disputes arising from the relationship between the User and the Operator under this Policy, it is mandatory to submit a claim.
9.2. The recipient of the claim within 30 (thirty) calendar days from the date of its receipt notifies the applicant in writing of the results of consideration of the claim.
9.3. If it is impossible to resolve disagreements, the dispute is subject to consideration by a judicial authority in accordance with the current legislation of the Russian Federation.9.4. The current legislation of the Russian Federation applies to this Policy and the relationship between the User and the Operator.
10. ADDITIONAL TERMS
10.1. The Operator has the right to make changes to this Policy without the User’s consent. The new edition comes into force from the moment it is posted on the Site, unless otherwise provided by the new edition.
10.2. All suggestions or questions regarding this Policy should be sent to: paevskayadesign@p-hd.ru.
10.3. The current Policy is posted on the page at: https://paevskaya-test.ru/privacy/.
10.4. Yandex's privacy policy is available at: https://yandex.ru/legal/confidential/.
Operator:
PAEVSKAYA HOME DESIGN LLC
Address: 117630 Moscow, st. Vorontsovskie Ponds, 3, office 34/1. entrance 8
INN: 9728153168
Checkpoint: 772801001
OGRN: 1257700140048
Email address: paevskayadesign@p-hd.ru