This personal data processing policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of 27.07.2006 «On personal data» and defines the procedure for processing personal data and the measures to ensure the security of personal data taken by Krista Unique (hereinafter – the Operator).
1.1. The Operator sets as its most important goal and as a condition of its activity the observance of the rights and freedoms of the person and citizen when processing their personal data, including the protection of the rights to privacy of private life and to personal and family secrets.
1.2. This policy of the Operator on the processing of personal data (hereinafter – the Policy) applies to all information that the Operator may obtain about the visitors of the Krista Fashion website.
2.1. Automated processing of personal data – processing of personal data by means of computing equipment;
2.2. Blocking of personal data – temporary termination of the processing of personal data (except where the processing is necessary to make personal data more accurate);
2.3. Website – a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the internet at the network address;
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing;
2.5. Anonymisation of personal data — actions after which it is impossible, without the use of additional information, to determine that personal data belong to a particular User or other subject of personal data;
2.6. Processing of personal data – any action (operation) or set of actions (operations) performed with personal data with or without the use of automation means, including collection, recording, systematisation, accumulation, storage, making more accurate (updating, changing), extraction, use, transfer (distribution, provision, access), anonymisation, blocking, deletion, destruction of personal data;
2.7. Operator – a state body, a municipal body, a legal entity or a natural person that, alone or jointly with other persons, organises and (or) carries out the processing of personal data and also determines the purposes of the processing of personal data, the composition of the personal data to be processed and the actions (operations) performed with personal data;
2.8. Personal data – any information relating directly or indirectly to a determined or determinable User of the Krista Fashion website;
2.9. User – any visitor of the Krista Fashion website;
2.10. Provision of personal data – actions aimed at disclosing personal data to a particular person or a particular circle of persons;
2.11. Distribution of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at acquainting an unlimited circle of persons with personal data, including the publication of personal data in mass media, the placement in information and telecommunication networks or the provision of access to personal data in any other way;
2.12. Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state, to an authority of a foreign state, to a foreign natural person or to a foreign legal entity;
2.13. Destruction of personal data – any actions as a result of which personal data are destroyed irrevocably, with no possibility of further restoration of the content of the personal data in the personal data information system, and (or) the material carriers of the personal data are destroyed.
3.1. Surname, first name, patronymic;
3.2. E-mail address;
3.3. Phone numbers;
3.4. Year, month, date and place of birth;
3.5. Address of the actual place of residence and of the registration at the place of residence and (or) at the place of stay;
3.6. The site also collects and processes anonymised data about visitors (including «cookie» files) with the help of internet statistics services (Yandex Metrica and Google Analytics and others).
3.7. The data listed above are further in the text of the Policy united under the general term Personal data.
4.1. The purpose of processing the personal data of the User — informing the User by sending e-mails; giving the User access to the services, information and/or materials contained on the website; processing user data for the online trade service.
4.2. The Operator also has the right to send the User notices about new products and services, special offers and various events. The User can always refuse to receive information messages by sending the Operator a letter to the e-mail address with the note «Refusal of notices about new products and services and special offers».
4.3. The anonymised data of Users collected with the help of internet statistics services serve to collect information about the actions of Users on the site and to improve the quality of the site and its content.
5.1. The Operator processes the personal data of the User only if the User fills them in and/or sends them independently through the special forms located on the Krista Fashion site. By filling in the corresponding forms and/or sending their personal data to the Operator, the User expresses their agreement with this Policy.
5.2. The Operator processes anonymised data about the User if this is allowed in the settings of the User browser (the saving of «cookie» files and the use of JavaScript technology are enabled).
The security of the personal data processed by the Operator is ensured by carrying out the legal, organisational and technical measures needed to meet in full the requirements of the current legislation in the field of personal data protection.
6.1. The Operator ensures the safekeeping of personal data and takes all possible measures to exclude access to personal data by unauthorised persons.
6.2. The personal data of the User will never, under any conditions, be transferred to third parties, except in cases connected with compliance with the current legislation.
6.3. If inaccuracies in the personal data are found, the User can update them independently by sending the Operator a notice to the e-mail address with the note «Updating of personal data».
6.4. The period of processing of personal data is unlimited. The User can at any moment withdraw their consent to the processing of personal data by sending the Operator a notice by e-mail to the e-mail address with the note «Withdrawal of consent to the processing of personal data».
7.1. Before starting a cross-border transfer of personal data, the Operator is obliged to make sure that the foreign state to whose territory the personal data are to be transferred provides reliable protection of the rights of the subjects of personal data.
7.2. A cross-border transfer of personal data to the territories of foreign states that do not meet the above requirements may be carried out only if there is written consent of the subject of the personal data to the cross-border transfer of their personal data and/or for the performance of a contract to which the subject of the personal data is a party.
8.1. The User can receive any explanations on questions of interest concerning the processing of their personal data by contacting the Operator by e-mail.
8.2. This document will reflect any changes in the policy of the Operator on the processing of personal data. The Policy is valid for an unlimited time until it is replaced by a new version.
8.3. The current version of the Policy is freely available on the internet at the link.