Privacy Policy on Personal Data Processing

1. General Provisions
This Privacy Policy on the processing of personal data has been developed in accordance with Federal Law No. 152-FZ dated 27.07.2006 “On Personal Data” (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by LLC "Razreshenie" (hereinafter referred to as the "Operator").
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family secrets, to be its highest priority.
1.2. This Policy applies to all information the Operator may obtain about visitors to the website https://rsn.company/en
2. Key Terms
2.1. Automated processing of personal data — processing using computer technology.
2.2. Blocking of personal data — temporary suspension of processing (except when necessary for data clarification).
2.3. Website — a collection of graphic and information materials, software, and databases available at https://rsn.company/en
2.4. Personal data information system — databases and technologies for processing personal data.
2.5. Depersonalization — processing that renders it impossible to identify a data subject without additional information.
2.6. Personal data processing — any operation involving personal data, whether automated or not, including collection, recording, systematization, accumulation, storage, updating, retrieval, usage, transfer (dissemination, provision, access), depersonalization, blocking, deletion, and destruction.
2.7. Operator — a person or entity that organizes and/or processes personal data and determines the purposes and scope of processing.
2.8. Personal data — any information related directly or indirectly to an identified or identifiable User of the website https://rsn.company/en
2.9. Personal data authorized for dissemination — data made publicly available by the data subject by granting consent for dissemination under the law.
2.10. User — any visitor to the website https://rsn.company/en
2.11. Provision of personal data — actions aimed at disclosing data to a specific person or group.
2.12. Dissemination of personal data — disclosure to an indefinite group of people, including publication or internet distribution.
2.13. Cross-border transfer — transfer of data to a foreign country, authority, or entity.
2.14. Destruction of personal data — irreversible deletion of data from systems and/or physical media.
3. Rights and Obligations of the Operator
3.1. The Operator has the right to:
– receive accurate data and documentation from the subject;
– continue processing data even after withdrawal of consent under grounds defined by law;
– define the scope of measures necessary to comply with legal obligations.
3.2. The Operator must:
– provide information about processing upon request;
– process data in accordance with Russian law;
– respond to data subject inquiries;
– notify the authorized data protection body within 10 days upon request;
– publish this Policy or otherwise ensure unrestricted access to it;
– implement legal, organizational, and technical safeguards;
– stop processing or disseminating data under certain legal conditions;
– fulfill other obligations prescribed by law.
4. Rights and Obligations of Data Subjects
4.1. Data subjects have the right to:
– access processing information (with restrictions defined by law);
– request clarification, blocking, or deletion of incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary data;
– require consent for marketing-related processing;
– withdraw consent or request processing to stop;
– file complaints with the data protection authority or court;
– exercise other rights provided by law.
4.2. Data subjects must:
– provide accurate information;
– inform the Operator of updates to their personal data.
4.3. Individuals who provide inaccurate data or unauthorized third-party data bear legal responsibility.
5. Principles of Personal Data Processing
5.1. Lawfulness and fairness.
5.2. Specific, lawful processing goals.
5.3. Incompatibility of purposes prevents merging of databases.
5.4. Only relevant data should be processed.
5.5. Data volume must match declared purposes.
5.6. Data must be accurate, complete, and up-to-date.
5.7. Data is stored no longer than necessary and destroyed or depersonalized once the goal is achieved.
6. Purposes of Processing Personal Data
Purpose: Informing the User via email
Personal data processed: Full name, email address, phone numbers
Legal basis: Federal Law No. 149-FZ “On Information, Information Technologies and Protection of Information”
Types of processing: Collection, recording, systematization, accumulation, storage, destruction, depersonalization, and sending informational emails
7. Conditions for Processing Personal Data
7.1. With the User’s consent.
7.2. To fulfill legal obligations or international agreements.
7.3. For the administration of justice or legal enforcement.
7.4. To fulfill a contract with the data subject or at their initiative.
7.5. For legitimate interests or public benefit, provided it does not violate rights.
7.6. Processing of publicly accessible data.
7.7. As required by law for publication or disclosure.
8. Procedure for Collecting, Storing, and Transmitting Personal Data
The Operator ensures data security by implementing appropriate legal, organizational, and technical measures.
8.1. The Operator ensures confidentiality and prevents unauthorized access.
8.2. Data will never be transferred to third parties without legal basis or the subject's consent, unless required by law.
8.3. Users may update their data by emailing: resolution.expert@mail.ru (subject: “Personal Data Update”).
8.4. Data is processed until the purpose is achieved unless otherwise required. Consent can be withdrawn via email to the same address (subject: “Withdrawal of Consent”).
8.5. Data collected by third-party services is governed by their policies. The Operator is not responsible for such third parties.
8.6. Restrictions on dissemination do not apply where data is processed for public interest under Russian law.
8.7. The Operator ensures confidentiality during processing.
8.8. Personal data is stored no longer than necessary.
8.9. Processing is stopped when: the purpose is achieved, consent expires or is withdrawn, or unlawful processing is discovered.
9. Actions Performed with Personal Data
9.1. The Operator performs collection, recording, systematization, accumulation, storage, updating, retrieval, usage, transfer, depersonalization, blocking, deletion, and destruction.
9.2. Automated processing may involve data transfer over telecommunications networks.
10. Cross-Border Data Transfer
10.1. The Operator must notify the data protection authority before such transfer.
10.2. Before this, the Operator must receive necessary information from the foreign recipients.
11. Confidentiality
The Operator and any other persons with access to personal data must not disclose or distribute it without consent, unless required by law.
12. Final Provisions
12.1. Users can contact the Operator at resolution.expert@mail.ru for any questions.
12.2. Changes to this Policy will be reflected in this document. The Policy remains in effect until replaced.
12.3. The current version is available at: https://rsn.company/en/policy