Personal Data Processing Policy

1. General provisions

1.1. This Policy defines the procedure for the processing and protection of the personal data of individuals (hereinafter — the subjects, Users) carried out by the Operator, and is adopted in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (hereinafter — the Law).

1.2. The Policy applies to all personal data that the Operator receives from Users through the website, booking and contact forms, external booking forms (the online-booking service), web analytics tools and by other lawful means.

1.3. By using the website and (or) submitting their data to the Operator through the forms placed on the site, the User confirms that they have read this Policy. The Policy itself does not constitute consent to the processing of personal data — consent is given by a separate document (see Section 4 and the separate document "Consent to Personal Data Processing»).

1.4. The current version of the Policy is permanently available on the site at https://domresnic.ru/privacy.

2. Key concepts

2.1. Personal data (PD) — any information relating to a directly or indirectly identified or identifiable individual.

2.2. Processing of PD — any action or set of actions with PD (collection, recording, systematisation, accumulation, storage, clarification, use, transfer, anonymisation, blocking, deletion, destruction).

2.3. Operator — the person specified in the details below who, alone or jointly, organises the processing of PD and determines the purposes and composition of the data processed.

2.4. Processing on instruction — the transfer of PD processing to a third party on the Operator's instruction under Part 3 of Article 6 of the Law, while the Operator remains responsible to the subject.

2.5. Cookie — small text files saved by the User's browser; the procedure for their use is set out in a separate "Cookie Policy».

3. Purposes of personal data processing

The Operator processes PD solely for the following purposes:

3.1. Receiving, processing and confirming requests and bookings for services (lash extensions and lamination, brow shaping and tinting, other cosmetic services of the salon).

3.2. Concluding and performing the service agreement to which the subject is a party (beneficiary), including at their initiative.

3.3. Communication with the User: confirming the booking, reminders of the visit, informing about the request status, handling enquiries and feedback.

3.4. Maintaining a client database and visit history for the purpose of providing services.

3.5. Improving the site's operation, analysing traffic and visitor behaviour using web analytics services (on the basis of consent — see Section 4 and the Cookie Policy).

3.6. Sending advertising and informational messages (newsletters, promotions) — only with the separate consent of the subject for this purpose.

3.7. Compliance with the requirements of the legislation of the Russian Federation (tax, accounting, etc.).

4. Legal bases for processing

The Operator processes PD on the following legal bases (Part 1 of Article 6, Article 9 of the Law):

4.1. Consent of the subject (Clause 1, Part 1, Article 6 of the Law) — the main basis for data collected through the forms on the site and through web analytics tools. Consent is given by a separate document and provided by an active action of the User (ticking a checkbox) before processing begins.

4.2. Performance of a contract to which the subject is a party, beneficiary or guarantor, as well as concluding a contract at their initiative (Clause 5, Part 1, Article 6 of the Law) — for data directly necessary to provide the service.

4.3. Fulfilment of obligations imposed on the Operator by the legislation of the Russian Federation (Clause 2, Part 1, Article 6 of the Law) — for accounting, tax and other reporting purposes.

Processing is carried out only to the extent necessary for the stated purposes; excessive data is not requested.

5. Categories of subjects and composition of the data processed

5.1. Categories of subjects: Website Users, clients and potential clients of the salon.

5.2. Composition of data provided through booking / contact forms:

• surname, first name (and patronymic, if any);
• phone number;
• email address;
• other information voluntarily provided by the User in free form fields (e.g. the desired service, date and time of visit, comment).

5.3. Data obtained automatically (through cookies and web analytics): anonymised and indirectly identifying data — IP address, browser and device information, referral source, actions and preferences on the site, cookie identifiers. Their composition and processing are described in the Cookie Policy.

5.4. The Operator does not process special categories of PD (health, etc.) or biometric PD.

6. Procedure and conditions of processing

6.1. Collection through the site's forms. PD is entered by the User voluntarily. A form can only be submitted after reading this Policy and giving consent (a checkbox with a link to the consent text).

6.2. External online-booking form (the YCLIENTS service). Booking for services may be carried out through the online-booking service integrated into the site. This service processes PD on the Operator's instruction (Part 3 of Article 6 of the Law) on the basis of a concluded agreement containing terms on confidentiality and data security. The service operator:

LLC "WYCLIENTS"
INN: 7708274185 KPP: 771501001
Legal address: 127055, Moscow, Obraztsova St., 4, bldg. 1, floors 1-5.
Actual/postal address: 127055, Moscow, Obraztsova St., 4, bldg. 1
Settlement account: 40702 810 9013 0000 8233
Bank: JSC "ALFA-BANK", BIC: 044525593, corr. account: 30101 810 2000 0000 0593

6.3. Localisation (Part 5 of Article 18 of the Law). Recording, systematisation, accumulation, storage, clarification and extraction of the PD of Russian citizens are carried out using databases located within the territory of the Russian Federation.

6.4. Transfer to third parties. PD is not transferred to third parties, except in cases of: processing on instruction (clause 6.2), compliance with legal requirements, and with the subject's consent. The Operator requires persons processing data on instruction to maintain confidentiality and comply with Articles 18.1 and 19 of the Law.

6.5. Cross-border transfer. The Operator does not carry out cross-border transfer of PD.

7. Processing and storage periods

7.1. PD is processed until the purposes of processing are achieved or until the subject withdraws consent, unless a different period is provided by law or contract.

7.2. Upon achieving the purposes or upon withdrawal of consent, the data is subject to destruction or anonymisation within the period established by the Law (as a general rule — no later than 30 days), unless its storage is required by legislation (e.g. for accounting documents).

7.3. Cookie retention periods are specified in the Cookie Policy.

8. Security measures

In compliance with Articles 18.1 and 19 of the Law, the Operator takes the necessary legal, organisational and technical measures, including:

• appointing a person responsible for organising the processing of PD;
• issuing internal regulations on the processing and protection of PD;
• restricting and differentiating access to PD;
• accounting for storage media, monitoring the measures taken and assessing harm;
• using information security tools and backups;
• familiarising employees with the requirements of PD legislation.

9. Rights of the personal data subject

The subject has the right to (Articles 14, 21 of the Law):

• receive information about the processing of their PD and access to it;
• demand the clarification, blocking or destruction of incomplete, inaccurate, unlawfully obtained or unnecessary data;
• withdraw consent to the processing of PD at any time;
• appeal the Operator's actions to Roskomnadzor or to court.

Requests and withdrawal of consent are sent to the email info@domresnic.ru or to the Operator's location address. The Operator reviews the request within the periods established by the Law.

10. Cookies and web analytics

10.1. The site uses cookies and web analytics services (including Yandex.Metrica and Top.Mail.ru). These tools make it possible to single out a unique visitor and form information about their behaviour and preferences, which is recognised as processing of PD.

10.2. Analytical and marketing cookies are connected and collect data only after obtaining the consent of the User via the cookie banner. Technical cookies that ensure the site's operation are used on the basis provided for the functioning of the service.

10.3. The detailed procedure is set out in a separate "Cookie Policy».

11. Changes to the Policy

11.1. The Operator may make changes to the Policy. A new version takes effect from the moment it is posted on the site, unless the version provides otherwise.

11.2. It is recommended to periodically check the current version at the publication address.

12. Contacts

For all questions regarding personal data processing: Sole proprietor Ekaterina Pavlovna Shpak, e-mail: info@domresnic.ru, tel.: +7 4012 508-805, address: 236022, Kaliningrad Region, Kaliningrad, 3 Kirova St..