Privacy Policy

1.1. The Operator has developed this Privacy Policy in order to:
1.1.1. protect the rights and freedoms of Subjects when processing their Personal Data;
1.1.2. clearly and strictly comply with the requirements of the legislation of the Russian Federation in the field of personal data, including the requirements of Federal Law No. 152-FZ of July 27, 2007 "On Personal Data";
1.1.3. exclude unauthorized actions by any third parties in relation to Processing;
1.1.4. prevent the emergence of a possible threat to the security of Subjects.
1.2. The Operator has the right to make changes to this Privacy Policy. The new version of the Privacy Policy shall enter into force from the moment of its publication.
1.3. If the Subject continues to use the Site after the new version of the Privacy Policy comes into force, this will mean that they have accepted the terms of the new version.

2.1. The Operator processes Personal Data for the following purposes:

2.2. The Site User has the right to change the settings of their Internet browser and refuse to save cookies (Google Chrome, Yandex Browser, Mozilla Firefox, Safari).
2.3. For the purpose of analytical research of Site Users' behavior, the Operator processes the specified Personal Data using the Yandex.Metrica metric service.
2.4. Yandex.Metrica service:
2.4.1. Available at https://metrika.yandex.ru/
2.4.2. Owned by Yandex LLC, registered at 119021, Moscow, Leo Tolstoy St., 16 (hereinafter – Yandex).
2.5. The information stored in such cookie files is transferred and stored on Yandex servers. The Site User gives consent to the Operator to process and transfer data to Yandex.
2.6. The User has the right to block the Yandex.Metrica service by downloading and installing the add-on via the link.
2.7. If Yandex.Metrica is blocked, some functions of the Site may become unavailable.

3.1. The Operator processes Personal Data based on the following principles:
3.1.1. lawful and fair basis for Processing;
3.1.2. Processing in accordance with specific, predetermined and legitimate purposes;
3.1.3. preventing the merging of databases containing Personal Data processed for purposes that are incompatible with each other;
3.1.4. ensuring that the content and volume of Personal Data correspond to the stated purposes of Processing;
3.1.5. accuracy, sufficiency, relevance and reliability of Personal Data;
3.1.6. legality of technical measures aimed at Processing;
3.1.7. reasonableness and appropriateness of Processing;
3.1.8. storing Personal Data no longer than required by the purposes of Processing, unless the storage period is established by law or by a contract to which the subject is a party;
3.1.9. destruction of Personal Data upon achievement of the purposes of Processing or loss of the need to achieve them, unless otherwise provided by law.

4.1. Processing includes collection, recording, systematization, accumulation, storage, refinement (updating, modification), extraction, use, distribution, transfer (provision, access), blocking, deletion, destruction.

Collection of Personal Data
4.2. The Operator collects Personal Data:
4.2.1. through forms filled out by the Subject;
4.2.2. by receiving messages by email;
4.2.3. using technologies, web protocols, cookies, web beacons.

Storage of Personal Data
4.3. The Operator stores Personal Data:
4.3.1. exclusively on properly secured electronic media;
4.3.2. using databases located on the territory of the Russian Federation;
4.3.3. on the Site using automated processing;
4.3.4. until the end of the Processing term.

Transfer of Personal Data to third parties, entrusting the processing of Personal Data
4.4. The Operator has the right, to achieve the stated purposes, to transfer Personal Data and entrust the processing of Personal Data to third parties.
4.5. The list of third parties to whom the Operator transfers Personal Data or entrusts the processing of Personal Data is contained on this page.
4.6. The Operator does not provide Personal Data to third parties without the consent of the Subject, except in the following cases:
4.6.1. transfer to separate, independently functioning applications and databases that are part of the Site;
4.6.2. preventing and suppressing illegal actions of Subjects and protecting the legitimate interests of the Operator and third parties, as well as in cases established by the legislation of the Russian Federation;
4.6.3. sending a reasoned request to judicial authorities, state security authorities, prosecutor's office, police, investigative bodies, other bodies and organizations in cases established by mandatory regulatory legal acts.

Updating and destruction of Personal Data
4.7. The Operator updates Personal Data if their inaccuracy is confirmed.
4.8. The Operator destroys Personal Data in the following cases:
4.8.1. existence of a threat to the security of the Site;
4.8.2. expiration of the Personal Data processing term;
4.8.3. upon achievement of the purposes of Processing;
4.8.4. at the request of the Subject, if further Processing is not required by law.
4.9. The Operator destroys Personal Data by erasing or formatting the media without the possibility of data recovery.

5.1. The Subject has the following rights:

5.2. The Subject guarantees:
5.2.1. that the provided Personal Data is accurate, relevant and does not violate the laws of the Russian Federation;
5.2.2. that if the provided Personal Data relates to a third party, the Subject has obtained the third party's consent to transfer the Personal Data for Processing.

6.1. The Operator is obliged to:
6.1.1. provide, upon the Subject's request, information about Processing or a reasoned refusal;
6.1.2. take necessary and sufficient measures to fulfill the obligations provided for by the legislation of the Russian Federation;
6.1.3. at the request of the Subject, clarify the processed Personal Data, block or delete it if it is incomplete, outdated, inaccurate, obtained illegally or unnecessary for the stated purpose of Processing;
6.1.4. ensure the lawfulness of Processing. If it is impossible to ensure the lawfulness of Processing, the Operator shall, within no more than 10 business days from the date of discovery of unlawful Processing, destroy or ensure the destruction of the Personal Data;
6.1.5. within no more than 30 days from the date of receipt of the Subject's withdrawal of consent, cease Processing and destroy the Personal Data if their further storage is no longer required for the purposes of Processing; Exception – when Processing may be continued in accordance with the legislation of the Russian Federation.

7.1. The Operator implements legal, organizational and technical measures necessary and sufficient to ensure the protection of Personal Data.
7.2. Legal measures include, without limitation:
7.2.1. development by the Operator of local documents implementing the requirements of Russian legislation, including this Privacy Policy and its posting on the Site;
7.2.2. refusal of any methods of Processing that do not correspond to the purposes predetermined by the Operator.
7.3. Organizational measures include:
7.3.1. appointment of a person responsible for organizing Processing;
7.3.2. periodic risk assessment concerning the Processing process;
7.3.3. periodic audits to exercise internal control over the compliance of Processing with the requirements of the legislation of the Russian Federation.
7.4. Technical measures include:
7.4.1. preventing, including through internal investigations, unauthorized access to systems where Personal Data is stored;
7.4.2. backing up and restoring Personal Data, the operability of technical means and software, information security tools in Personal Data information systems;
7.4.3. other necessary security measures.

8.1. The Subject or their representative has the right to send their requests to the Operator, including withdrawing consent to Processing, in the form of an electronic document to the email address: order@artweb.ai
8.2. The request must contain the following information:
8.2.1. information confirming the Subject's participation in relations with the Operator – phone number, email address;
8.2.2. data of the representative and proof of their authority, if the request is made by the Subject's representative;
8.2.3. signature of the Subject or their representative.
8.3. The Operator will consider and send a response to the request within 10 business days from the date of receipt of the request.
8.4. All correspondence received by the Operator (requests in written or electronic form) is considered restricted access information and shall not be disclosed without the written consent of the Subject.

9.1. With the consent of the Subject, the Operator disseminates their data in the manner and by the methods specified in the consent.
9.2. Information about the conditions and prohibitions of Subjects on the dissemination of their personal data is posted on this page.

10.1. This Privacy Policy applies exclusively to the Site and does not apply to other Internet resources.
10.2. This Privacy Policy applies to all Personal Data received by the Operator.
10.3. The Operator is not responsible for the actions of third parties who gain access to Personal Data through the fault of the Subject.
10.4. The Operator does not verify:
10.4.1. the legal capacity of the Subject;
10.4.2. the accuracy of the provided Personal Data.