Privacy Policy

1. General Provisions

This Privacy Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter — the Law on Personal Data) and defines the procedure for processing personal data and measures to ensure the security of such data implemented by Karina Andreevna Tulupova (hereinafter — the Operator).

1.1. The Operator considers respect for the rights and freedoms of individuals, including the right to privacy, personal and family secrecy, as one of its most important objectives and conditions for carrying out its activities.
1.2. This Privacy Policy applies to all information that the Operator may receive about visitors to the website https://karinatulupova.com

2. Basic Terms

Automated processing of personal data — processing by means of computer technology.

Blocking of personal data — temporary suspension of data processing (except when necessary for clarification).

Website — a collection of graphic and informational materials, software and databases available at https://karinatulupova.com

Personal data information system — a set of personal data contained in databases and IT tools ensuring their processing.

Depersonalization of personal data — actions that make it impossible to identify the individual without additional information.

Processing of personal data — any action performed with or without automation, including collection, storage, updating, use, transfer, blocking, or destruction.

Operator — a state body, legal entity or individual organizing and/or carrying out personal data processing.

Personal data — any information relating directly or indirectly to a specific or identifiable user of the website.

User — any visitor to https://karinatulupova.com

Provision / dissemination / cross-border transfer / destruction — actions as defined in the Law on Personal Data.

3. Rights and Obligations of the Operator

The Operator has the right to:

• receive accurate personal data and/or documents from the data subject;
• continue processing without renewed consent in cases provided for by law;
• determine the necessary and sufficient measures to ensure compliance with legal obligations.

The Operator is obliged to:

• provide the data subject with information on processing upon request;
• organize data processing in accordance with current legislation;
• respond to requests and inquiries from data subjects and authorities;
• ensure the security and confidentiality of personal data;
• cease processing and destroy data when legal grounds arise.

4. Rights and Obligations of Data Subjects

The data subject has the right to:

• receive information regarding the processing of their personal data;
• request correction, blocking, or deletion of inaccurate or unlawfully obtained data;
• withdraw consent to data processing;
• file complaints to the authorized data protection body or court;
• exercise other rights as established by Russian law.

The data subject is obliged to provide accurate data and inform the Operator of updates.

5. Principles of Data Processing

Processing shall be:

• lawful and fair;
• limited to specific, legitimate purposes;
• proportional and relevant to those purposes;
• accurate and kept up to date;
• stored no longer than necessary to fulfill its purpose.

6. Purpose of Data Processing

Purpose: informing the User by sending emails.
Personal Data: full name, email address, phone number.
Legal Grounds: statutory documents of the Operator.
Types of Processing: collection, storage, use, destruction, and depersonalization of personal data; email distribution.

7. Conditions of Data Processing

7.1. Processing is carried out with the consent of the data subject.
7.2. Processing may also be necessary to comply with laws, court orders, or contracts, or to pursue legitimate interests of the Operator provided the rights of the subject are not violated.
7.3. Processing of publicly available personal data is permitted.
7.4. Data required by law to be published or disclosed will be processed accordingly.

8. Procedure for Collection, Storage, and Transfer

The Operator ensures the security of personal data through legal, organizational, and technical measures.

8.1. Personal data will not be shared with third parties except as required by law or with the subject’s consent.
8.2. Users may update their data by emailing the Operator at karinatulupovades@gmail.com
with the subject line “Personal Data Update.”
8.3. Users may withdraw consent at any time by emailing “Withdrawal of Consent for Personal Data Processing.”
8.4. The Operator is not responsible for actions of third-party service providers (such as payment systems or communication platforms) which process data under their own privacy policies.
8.5. Data are stored only as long as required for their purpose. Upon achieving the purpose, data are deleted or anonymized.

9. Data Processing Actions

The Operator performs collection, recording, organization, accumulation, storage, updating, use, transfer, depersonalization, blocking, deletion, and destruction of personal data, including automated processing.

10. Cross-Border Transfer of Personal Data

Before transferring data to another country, the Operator shall notify the authorized supervisory authority and obtain confirmation that adequate data protection measures are in place.

11. Confidentiality of Personal Data

The Operator and other persons who have access to personal data are obliged not to disclose or distribute them without the subject’s consent, unless required by law.

12. Final Provisions

12.1. Users may contact the Operator with any questions regarding personal data processing by emailing karinatulupovades@gmail.com
12.2. Any updates to this Policy will be reflected in the current version. The Policy remains in effect until replaced by a new version.
12.3. The current version of the Policy is available online at https://karinatulupova.com/privacy