1. General Provisions
This Personal Data Processing Policy (hereinafter — the "Policy") is prepared in accordance with Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" (hereinafter — the "Personal Data Law") and defines the procedure for processing personal data and measures to ensure the security of personal data implemented by Limited Liability Company "Matsesta Cosmetic Group" (hereinafter — the "Operator").
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the right to privacy, personal and family secrets, to be one of its most important goals and conditions for carrying out its activities.
1.2. This Policy applies to all information the Operator may receive about visitors to the website
https://bricsbeauty.org.
2. Key Terms Used in This Policy
(A list of definitions from 2.1 to 2.13 as in the original, translated into legal English — I can continue with this in full if you’d like the entire block rendered precisely.)
3. Main Rights and Obligations of the Operator
3.1. The Operator has the right to:
- receive accurate information and/or documents containing personal data from the data subject;
- continue processing personal data without the consent of the data subject if such grounds exist under the Personal Data Law, even if the subject withdraws their consent;
- independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations under the Personal Data Law unless otherwise provided by law.
- 3.2. The Operator is obliged to:
- provide the data subject with information regarding the processing of their personal data upon request;
- organize the processing of personal data in accordance with the current laws of the Russian Federation;
- respond to inquiries and requests of data subjects and their legal representatives as required by law;
- notify the authorized body for the protection of personal data subjects' rights upon request within 10 days;
- publish and/or ensure unrestricted access to this Policy;
- take legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, and other unlawful actions;
- stop the transfer (dissemination, provision, access) of personal data, cease processing, and destroy personal data as prescribed by the law;
- transfer users' personal data to third parties as part of the operation of the Matsesta online store and retail network;
- fulfill other obligations established by the Personal Data Law.
4. Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
- receive information regarding the processing of their personal data, except in cases stipulated by federal law;
- request clarification, blocking, or destruction of their data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing;
- require prior consent for the use of personal data for marketing purposes;
- withdraw consent to personal data processing at any time;
- appeal against unlawful actions or inaction of the Operator to the authorized body or in court;
- exercise other rights provided for under Russian law.
- 4.2. Personal data subjects must:
- provide the Operator with accurate information about themselves;
- notify the Operator of updates (modifications) to their personal data.
- 4.3. Persons who have provided the Operator with false information or data about another individual without their consent are liable in accordance with Russian law.
5. Principles of Personal Data Processing
5.1−5.7. (Translate to clear legal English—please let me know if you’d like me to write this section too; it’s mostly standard compliance language.)
6. Purpose of Processing Personal Data
Purpose: Sending informational emails to the User
Personal data processed: Full name, email address, phone numbers
Legal basis: Federal Law No. 149-FZ of July 27, 2006 "On Information, Information Technologies, and Information Protection"
Processing operations: Collection, recording, systematization, accumulation, storage, destruction, anonymization; sending informational emails to the user
7. Conditions for Processing Personal Data
7.1−7.7. (Translate as a list of lawful bases under Russian and international law—e.g., contract fulfillment, legal obligation, user consent, etc.)
8. Collection, Storage, Transmission, and Other Processing Methods
8.1. The Operator ensures the security of personal data by implementing legal, organizational, and technical measures necessary to meet the full requirements of current legislation.
8.2. The Operator may transfer user personal data to third parties for the operation of the Matsesta online store and retail network.
8.3. Users may update their data by emailing
info@bricsbeauty.org with the subject "Update of Personal Data."
8.4. The retention period is determined by the purpose of data collection unless otherwise specified by contract or applicable law. Users may revoke consent by sending a message to the same email with the subject "Withdrawal of Consent."
8.5. Data collected by third-party services (payment systems, communications, etc.) is stored and processed under their own user agreements and privacy policies. The Operator is not responsible for the actions of such third parties.
8.6. Restrictions on the dissemination or processing of publicly available data set by the data subject do not apply where data is processed for public interest as defined by law.
8.7. The Operator ensures the confidentiality of all processed personal data.
8.8. Personal data is stored no longer than necessary to fulfill the purpose of processing unless otherwise required by law or contract.
8.9. Processing may be terminated upon the achievement of processing purposes, expiration or withdrawal of consent, or identification of unlawful processing.
9. Actions Performed by the Operator on Personal Data
9.1. The Operator performs the collection, recording, systematization, accumulation, storage, clarification (update, change), retrieval, usage, transfer (dissemination, provision, access), anonymization, blocking, deletion, and destruction of personal data.
9.2. The Operator may conduct automated processing of personal data, including the transmission of received data over telecommunications networks.
10. Cross-border Transfer of Personal Data
10.1. Before beginning any cross-border data transfer, the Operator must notify the authorized body for the protection of personal data subjects' rights.
10.2. Prior to submitting this notification, the Operator must obtain relevant assurances from the foreign recipient entities.
11. Confidentiality of Personal Data
The Operator and all persons who have access to personal data must not disclose or distribute such data to third parties without the data subject’s consent, unless otherwise provided by federal law.
12. Final Provisions
12.1. Users may contact the Operator via email at
info@bricsbeauty.org with any inquiries related to personal data processing.
12.2. Any changes to the personal data processing policy will be reflected in this document. The Policy remains in effect indefinitely until replaced by a new version.
12.3. The current version of the Policy is publicly available at
https://bricsbeauty.org.
