Privacy Policy on Personal Data Processing

1. General Provisions
   This personal data processing policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006, “On Personal Data” (hereinafter referred to as the “Personal Data Law”) and establishes the procedure for processing personal data and the measures taken by MNGS RS LLC (hereinafter referred to as the “Operator”) to ensure the security of personal data.
   1.1. The Operator’s key objective and condition for carrying out its activities is the protection of the rights and freedoms of individuals during the processing of their personal data, including safeguarding the right to privacy, personal, and family secrecy.
   1.2. This policy applies to all information that the Operator may obtain about visitors to the website https://mngs-pc.ru/.

2. Key Terms Used in the Policy
   2.1. Automated processing of personal data — processing of personal data using computing devices.
   2.2. Blocking of personal data — temporary suspension of processing personal data (except where processing is necessary to clarify personal data).
   2.3. Website — a collection of graphic and informational materials, as well as software and databases that provide access to them on the internet at the network address https://mngs-pc.ru/.
   2.4. Information system of personal data — a set of personal data contained in databases, and the information technologies and technical means used to process them.
   2.5. Anonymization of personal data — actions that make it impossible to identify the personal data subject without using additional information.
   2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with personal data using automation tools or without such tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
   2.7. Operator — a government body, municipal body, legal or natural person that organizes and/or carries out the processing of personal data independently or jointly with other persons, and also determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
   2.8. Personal data — any information related directly or indirectly to a specific or determinable User of the website https://mngs-pc.ru/.
   2.9. Personal data authorized by the data subject for dissemination — personal data to which the data subject has granted access to an indefinite group of individuals by consenting to the processing of personal data, as permitted under the Personal Data Law.
   2.10. User — any visitor to the website https://mngs-pc.ru/.
   2.11. Provision of personal data — actions aimed at disclosing personal data to a specific individual or a specific group of individuals.
   2.12. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite group of individuals (transfer of personal data) or making personal data accessible to an unlimited number of individuals, including publication in mass media, placement in information and telecommunication networks, or providing access to personal data in any other way.
   2.13. Cross-border transfer of personal data — the transfer of personal data to the territory of a foreign state to a foreign government authority, a foreign physical person, or a foreign legal entity.
   2.14. Destruction of personal data — any actions resulting in the irreversible destruction of personal data, making it impossible to restore the content of personal data in the information system or destruction of physical carriers of personal data.

3. Main Rights and Duties of the Operator
   3.1. The Operator has the right to:
   — obtain reliable information and/or documents containing personal data from the data subject;
   — if the data subject withdraws their consent to the processing of personal data, or makes a request to cease the processing of personal data, the Operator may continue processing personal data without the consent of the data subject if there are grounds specified in the Personal Data Law;
   — independently determine the composition and list of measures necessary to fulfill the obligations under the Personal Data Law and related regulatory legal acts, unless otherwise provided by the Personal Data Law or other federal laws.
   3.2. The Operator is obligated to:
   — provide the data subject with information regarding the processing of their personal data upon request;
   — organize the processing of personal data in accordance with the laws of the Russian Federation;
   — respond to requests and inquiries from data subjects and their legal representatives in compliance with the Personal Data Law;
   — provide the authorized body for personal data protection with necessary information upon request within 10 days of receiving such a request;
   — publish or otherwise ensure unrestricted access to this Privacy Policy;
   — take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, or any other unlawful actions concerning personal data;
   — stop the transfer (dissemination, provision, access) of personal data, cease processing, and destroy personal data in cases provided for by the Personal Data Law;
   — fulfill other obligations set forth by the Personal Data Law.

4. Main Rights and Duties of Data Subjects
   4.1. Data subjects have the right to:
   — receive information regarding the processing of their personal data, except in cases provided by federal laws. This information is provided by the Operator in an accessible form, and it should not include personal data of other data subjects unless there are legal grounds to disclose such data. The list of information and the procedure for obtaining it is set forth in the Personal Data Law;
   — require the Operator to correct their personal data, block it, or destroy it if the personal data is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing;
   — set a condition for prior consent when processing personal data for marketing purposes;
   — withdraw consent for the processing of personal data and submit a request for the termination of processing of their personal data;
   — appeal to the authorized body for personal data protection or to the court against unlawful actions or omissions of the Operator in processing their personal data;
   — exercise other rights provided for by the laws of the Russian Federation.
   4.2. Data subjects must:
   — provide accurate data about themselves to the Operator;
   — inform the Operator of any changes (updating, modification) to their personal data.
   4.3. Individuals who provide the Operator with inaccurate information about themselves or information about another data subject without consent are responsible in accordance with the laws of the Russian Federation.

5. Principles of Personal Data Processing
   5.1. Personal data is processed lawfully and fairly.
   5.2. Personal data processing is limited to achieving specific, predefined, and legal purposes. Personal data shall not be processed for purposes incompatible with the original purposes.
   5.3. Personal data databases that are processed for incompatible purposes shall not be merged.
   5.4. Only personal data necessary for processing purposes shall be processed.
   5.5. The content and volume of processed personal data must correspond to the stated purposes. Excessive personal data shall not be processed.
   5.6. The accuracy, sufficiency, and relevance of the personal data to the processing purposes shall be ensured. The Operator takes necessary measures to delete or update incomplete or inaccurate data.
   5.7. Personal data is stored in a form that allows identification of the data subject for no longer than is necessary to achieve the processing purposes unless otherwise prescribed by federal law or contract.

6. Purposes of Personal Data Processing
   Purpose: providing access to the User to services, information, and/or materials available on the website.
   Personal Data: philosophical beliefs
   Legal Grounds: Charter documents of the Operator
   Types of Data Processing: collection, recording, systematization, accumulation, storage, destruction, and anonymization of personal data

7. Conditions for Personal Data Processing
   7.1. Personal data processing is carried out with the data subject’s consent.
   7.2. Personal data processing is necessary for fulfilling the purposes defined by international agreements of the Russian Federation or laws, and for fulfilling the Operator’s functions and responsibilities.
   7.3. Processing is necessary for judicial proceedings, execution of a court decision, or an act of another authority or official.
   7.4. Processing is necessary for fulfilling a contract, where the data subject is a party or a beneficiary.
   7.5. Processing is necessary for the legal interests of the Operator or third parties, or for public purposes, provided that the rights and freedoms of the data subject are not violated.
   7.6. Processing of publicly available personal data authorized by the data subject for dissemination.
   7.7. Processing required by law for publication or mandatory disclosure.

8. Collection, Storage, Transfer, and Other Types of Processing of Personal Data
   The Operator ensures the security of personal data by implementing legal, organizational, and technical measures necessary to comply with applicable data protection laws.
   8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access to the data.
   8.2. Personal data will never be shared with third parties except as required by law or with the data subject’s consent for fulfilling civil law obligations.
   8.3. The User may update their personal data by sending a notification to the Operator at info@mngs-pc.ru with the subject line “Update of Personal Data.”
   8.4. Personal data is processed for the duration required to fulfill the objectives for which it was collected unless otherwise stipulated by contract or applicable law.

9. Actions Performed by the Operator with Personal Data
   The Operator performs collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
   9.2. The Operator performs automated processing of personal data, which includes receiving or transmitting information via information and telecommunication networks.

10. Cross-Border Transfer of Personal Data
    10.1. The Operator must notify the authorized body for personal data protection before engaging in cross-border data transfers.
    10.2. The Operator must obtain appropriate information from foreign authorities, individuals, or entities involved in the cross-border transfer.

11. Confidentiality of Personal Data
    The Operator and others with access to personal data are prohibited from disclosing or distributing personal data without the data subject’s consent, unless required by law.

12. Final Provisions
    12.1. The User can request clarifications regarding the processing of their personal data by contacting the Operator at info@mngs-pc.ru.
    12.2. This document will reflect any changes to the Operator’s personal data processing policy. The policy remains in force until replaced by a new version.
    12.3. The current version of the policy is available at https://mngs-pc.ru/privacy.