This Consent to the Processing of Personal Data (the “Consent”) is given by the user of the website https://getdma.io (the “Website”) freely, by their own will and in their own interest, in accordance with Article 9 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.
By ticking the “I consent to the processing of personal data” box when placing an order, submitting a review or contacting support, the user confirms that they have read this Consent, accept its terms and grant the Operator consent to process their personal data on the terms set out below. Ticking the box is a conclusive action equivalent to a simple electronic signature.
1. The Operator
1.1. The Operator obtaining this consent is:
- Individual entrepreneur Artem Valeryevich Romanov;
- TIN (ИНН): 410116265412;
- correspondence address: Rossiyskiy Ave., Saint Petersburg, Russia, 193231;
- email: getdma.io@gmail.com.
1.2. Any question relating to the processing of personal data should be sent to the email address above.
2. Categories of personal data
2.1. Consent is given for the processing of the following personal data, which the user provides themselves:
- surname and first name, to the extent stated by the user;
- telephone number;
- email address;
- Telegram username;
- delivery address: settlement, street, building, apartment, postal code;
- order details: contents, amount, payment and delivery status;
- the text of a request, an order comment or a review;
- data transmitted automatically by the user's device: IP address, browser and operating system details, the date and time of access to the Website, cookies and web-analytics identifiers.
2.2. The Operator neither requests nor processes special categories of personal data (racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sex life), nor biometric personal data.
2.3. The Operator does not process the data of persons below the age at which transactions may be entered into independently. Where the user is a minor, consent is given by their legal representative.
3. Purposes of processing
3.1. Personal data is processed solely for the following purposes:
- concluding and performing the contract of sale: placing, confirming, assembling and handing over the order;
- accepting and settling payments, including issuing an invoice and confirming receipt;
- arranging delivery of the order and reporting its status;
- communicating with the user about the order, including advice and technical support;
- publishing a review, provided the user submitted it themselves;
- discharging obligations imposed on the Operator by the legislation of the Russian Federation, including record-retention obligations;
- improving the Website and analysing anonymised traffic statistics.
3.2. Processing for any other purpose, including the sending of advertising material, is not carried out without the user's separate consent.
4. Legal grounds
4.1. Processing is carried out on the following legal grounds:
- this Consent — Article 6(1)(1) of Law No. 152-FZ;
- performance of a contract to which the user is a party — Article 6(1)(5) of Law No. 152-FZ;
- discharge of obligations imposed on the Operator by law — Article 6(1)(2) of Law No. 152-FZ.
5. Operations and methods of processing
5.1. Consent is given for the following operations: collection, recording, systematisation, accumulation, storage, updating (renewal, alteration), retrieval, use, transfer (provision, access), anonymisation, blocking, deletion and destruction of personal data.
5.2. Processing is carried out both by automated means and without them (mixed processing).
5.3. The Operator does not take decisions producing legal effects for the user solely on the basis of automated processing of their personal data.
6. Transfer to third parties
6.1. The Operator may entrust the processing of personal data to persons whose involvement is necessary to fulfil the order — to the minimum extent required for the purposes in Section 3 and provided such persons observe confidentiality requirements:
- delivery services — to dispatch and hand over the shipment (name, telephone, delivery address, contents);
- payment services — to settle payment for the order;
- communications and hosting providers — to the extent necessary for the Website to operate;
- web-analytics services — in respect of anonymised Website visit data.
6.2. The Operator does not sell personal data and does not transfer it to third parties for advertising purposes.
6.3. Disclosure to public authorities takes place solely on the grounds and in the manner established by the legislation of the Russian Federation.
7. Cross-border transfer
7.1. Certain services used to communicate with the user and to accept payments are located outside the Russian Federation. Transfers of personal data may therefore be cross-border.
7.2. Such transfers are made to the minimum extent necessary to fulfil the order and communicate with the user, in compliance with Article 12 of Law No. 152-FZ.
8. Cookies and web analytics
8.1. The Website uses cookies necessary for its operation: preserving the state of the cart, the selected language and theme, and securing the session.
8.2. Yandex.Metrica is used to collect anonymised traffic statistics. The information collected does not permit identification of the user.
8.3. The user may disable the storage of cookies in their browser settings. Disabling necessary cookies may make it impossible to place an order.
9. Retention periods
9.1. Personal data is processed until the purposes of processing are achieved, namely until the obligations under the order have been fully performed, unless another period is established by law.
9.2. Documents containing personal data and relating to completed transactions are retained for the periods established by the accounting and tax legislation of the Russian Federation.
9.3. Once the purposes are achieved, or where consent is withdrawn, personal data is destroyed or anonymised within 30 days, except for data whose retention is mandatory by law.
10. Term and withdrawal of consent
10.1. This Consent takes effect when given and remains in force until the purposes of processing are achieved or until it is withdrawn by the user.
10.2. Consent may be withdrawn at any time by sending a request in free form to getdma.io@gmail.com. The request must allow the user to be identified and must contain the information specified in Article 14(3) of Law No. 152-FZ.
10.3. Upon receipt of a withdrawal, the Operator ceases processing and ensures destruction of the personal data within the period stated in clause 9.3, save where processing may continue without the subject's consent under Article 9(2) of Law No. 152-FZ.
10.4. Withdrawing consent before an order has been fulfilled may make it impossible to place and dispatch that order, since performance of the contract is objectively impossible without processing the data concerned.
11. Rights of the user
11.1. The user has the right to:
- obtain the information about the processing of their personal data provided for by Article 14(7) of Law No. 152-FZ;
- require that personal data be updated, blocked or destroyed where it is incomplete, out of date, inaccurate, unlawfully obtained or not necessary for the stated purpose of processing;
- withdraw this Consent in the manner set out in Section 10;
- appeal against the Operator's acts or omissions to the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) or before a court.
11.2. The Operator reviews requests within 30 days of receipt.
12. Security measures
12.1. The Operator takes the legal, organisational and technical measures necessary to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, provision and dissemination, in accordance with Article 19 of Law No. 152-FZ.
12.2. Data is transmitted between the user's device and the Website over the secure HTTPS protocol. Access to personal data is granted to a limited group of persons who require it to perform their duties.
13. Final provisions
13.1. The processing of personal data is further governed by the Privacy Policy. In the event of a conflict between the documents, the provisions granting the user the greater set of rights apply.
13.2. The Operator may amend this Consent. The current version is published on this page; continued use of the Website after publication constitutes agreement with the amendments.
13.3. This Consent is governed by the law of the Russian Federation.