This Policy sets out the procedure for processing and protecting personal data of NP Studio website users, persons who submit requests and messages, and customers ordering works.
The personal data controller is individual entrepreneur RUSLAN FLUROVICH MURTAZIN.
This Policy applies to website visitors, persons who submit requests and messages, and NP Studio buyers and customers.
Depending on how a person contacts NP Studio, the following may be processed: name, email, Telegram, VK, phone number, message content, information about the order, product size, selected materials, delivery address and method, country and city of delivery, and other information that the user voluntarily provides to the controller.
The controller does not intend to process special categories of personal data or biometric personal data.
Personal data are processed only to the extent necessary for a specific purpose.
The legal grounds for processing may include the data subject’s consent, processing necessary to enter into and perform a contract at the data subject’s initiative, and the controller’s obligations under the laws of the Russian Federation.
Consent to receive messages about new works is obtained separately and is not a condition for submitting an ordinary request.
The controller may collect, record, organize, accumulate, store, update, retrieve, use, transfer personal data to the extent necessary for the operation of the services used and order fulfilment, as well as anonymize, block, delete and destroy personal data.
Processing may be carried out with or without automated means.
Tilda, Tilda CRM, email services, Telegram, VK and other technical tools selected by the user for communication may be used to operate the website and process enquiries.
When fulfilling an order, the necessary data may be transferred to communications operators, postal or courier services and other persons only to the extent required for delivery or order fulfilment.
Personal data are not transferred to third parties for their own advertising use without a separate lawful basis.
When collecting personal data of citizens of the Russian Federation through the website, the controller complies with legal requirements concerning the recording, organization, accumulation, storage, updating and retrieval of such data using databases located in the Russian Federation.
Data are stored no longer than necessary for the stated processing purposes, unless another retention period is required by law or needed for contract performance, settlements, delivery, dispute resolution or protection of the controller’s legitimate interests.
Once the processing purposes have been achieved, or other grounds provided by law arise, the data are deleted or destroyed in accordance with the established procedure.
The controller takes the necessary legal, organizational and technical measures to protect personal data against unlawful or accidental access, alteration, blocking, copying, disclosure, dissemination, destruction and other unlawful actions.
Access to personal data is granted only to the extent necessary to handle an enquiry or order.
The user may request information about the processing of their personal data, require its correction, blocking or deletion in cases provided by law, and withdraw previously given consent.
A request may be sent by email to contactrusel@gmail.com. The request should include information sufficient to identify the data to which it relates.
Withdrawal of consent does not affect processing that may continue on another lawful basis.
When the website is visited, its technical infrastructure may automatically receive information necessary for operation: IP address, browser and device information, date and time of access, technical logs and cookies.
This information is used to ensure website operation and security and for technical statistics within the services used.
The Policy applies in the version posted on this page. Its text may be updated if the methods or purposes of processing or legal requirements change.
