English
Privacy and Personal Data Processing Policy
Arkhangelsk
01.01.2026

  1. General Provisions
This Operator Policy is referred to as the Privacy and Personal Data Processing Policy (hereinafter referred to as the Policy). The Operator determines the rules for processing personal data (PD) on the website https://www.brend-severa.ru. The purpose of the document is to ensure the protection of the rights and freedoms of PD subjects when processing their personal data in accordance with the Federal Law of the Russian Federation No. 152-FZ "On Personal Data" and other applicable regulations.

Terms used in the Policy:
  • Personal Data (PD) — any information relating to a directly or indirectly identified or identifiable natural person (PD subject).
  • Operator — a person who, independently or jointly with others, organizes and/or carries out the processing of PD.
  • PD Processing — any action (operation) or set of actions performed with or without the use of automation tools in relation to PD, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction.
  • Consent of the PD subject — a free expression of the PD subject's will, expressed in writing or in another form that allows confirming the fact of its provision.
Information about the operator
  1. PD Operator:
  • Full Name: Vlasova Viktoriya Sergeevna
  • Status: professional income tax payer (NPD)
  • TIN: 292103095956
  • Location: Arkhangelsk
  • Website: https://www.brend-severa.ru
  • Contact for personal data processing inquiries: vlasovared@yandex.ru
1. List of personal data collected by the website
The Operator collects and processes the following categories of PD:
  • Identification data: Full Name.
  • Contact data: contact phone number, email address (e-mail).
  • Data required for order/contract fulfillment: delivery address, contact details for communication, data on ordered goods/services.
  • Service and technical data: IP address, server log data, browser and device information, cookies, and similar technologies.
  • Data from feedback forms: messages, comments, photos/descriptions of masters and products, attached files.
  • Other data that the subject provides voluntarily (for example, photos for a master's profile, descriptions, reviews).


2. Purposes of data processing
Processing of PD is carried out for the following purposes:
  • Acceptance and fulfillment of applications and contracts (execution of orders, delivery of goods, provision of services).
  • Communication with the user (feedback, responses to inquiries, order notifications).
  • Fulfillment of obligations to regulatory authorities and for the purpose of compliance with legislative requirements.
  • Analytics and improvement of the quality of the website and service (including using the Yandex.Metrica analytics service).
  • Protection of the rights and legitimate interests of the Operator (detection and prevention of fraud, ensuring security).
  • Maintaining statistics and reporting.


3. Legal grounds for processing
The legal grounds for the processing of PD are:

  • Consent of the PD subject to the processing of their personal data.
  • The necessity of processing PD for the execution of a contract to which the PD subject is a party or in which the PD subject acts as a beneficiary/payer.
  • Performance of duties imposed on the operator by the legislation of the Russian Federation.
  • Legitimate interests of the Operator (to the extent not exceeding the rights and freedoms of the subject).
4. Procedure and methods of collection and processing
  • Processing methods: automated processing (storage in databases, CRM, web analytics) and non-automated processing (paper media).
  • Sources of obtaining PD: directly from the PD subject (forms on the website, calls, letters), from contractors/payment aggregators/courier services (to the extent necessary for the fulfillment of obligations).
  • Storage periods: data is stored for the periods necessary to achieve the processing purposes and comply with legal requirements. Specific PD storage periods: order data — 3 years; contact data for newsletters — until withdrawal of consent; log files — 30–90 days.
  • Transfer to third parties: The Operator has the right to transfer PD to contractors for the fulfillment of obligations (courier services, payment aggregators, fiscal data operators, analytics services). List of processor types: courier services, payment providers, accounting/legal services, IT providers, analytics services (Yandex.Metrica). Transfer is carried out on the basis of processing agreements and in compliance with security requirements.

5. Conditions for data transfer to third parties
  • The Operator may transfer PD to third parties only to the extent and under the conditions necessary to achieve the processing purposes (order fulfillment, delivery, payment processing, etc.).
  • Types of third parties: payment aggregators, banks, courier services, fiscal data operators, contractors for the performance of services, IT contractors, analytics and advertising services.

6. Rights of personal data subjects and the procedure for their implementation
The PD subject has the right:
  • Receive information about the processing of their personal data, including confirmation of the fact of processing and access to personal data.
  • Demand clarification, updating, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, illegally obtained, or not necessary for the stated purpose of processing.
  • Withdraw consent for the processing of personal data (in the part processed on the basis of consent). Withdrawal of consent does not entail consequences that hinder the execution of contracts requiring continued processing on other grounds.
  • Demand restriction of personal data processing in cases provided for by law.
  • Lodge a complaint with the authorized body for the protection of the rights of personal data subjects or in court in case of violation of rights.
  • Exercise of rights: appeals (requests) regarding the processing of personal data are sent to the Operator's contact: vlasovared@yandex.ru. Requests are processed within the timeframes established by law (usually no later than 30 days from the date of receipt of the request); if necessary, the timeframes may be extended with notification to the subject.
7. Measures to protect personal data
  1. The Operator takes organizational and technical measures to protect PDn from unauthorized access, loss, misuse, or disclosure. In particular:
  • Information security tools are applied: encryption during data transmission (HTTPS), backup, password protection, and differentiation of employee access rights.
  • Despite the measures taken, 100% protection on the Internet cannot be guaranteed; the Operator takes reasonable measures to reduce risks.

8. Use of cookies and similar technologies
The Site uses cookies and similar technologies to:
  • Save session and authorization parameters.
  • Improve site performance and personalize the interface.
  • Collect statistics and analytics on user behavior (possibly using analytics services).
  • The User can disable cookies through browser settings or device settings. Disabling cookies may result in limited functionality of the site.

9. Changes to the Privacy Policy
  1. The Operator reserves the right to make changes to this Policy. Changes are published on the site and take effect from the moment of publication. Significant changes affecting the rights of PDn subjects will be accompanied by a notification on the site and (if possible) by sending messages to users.

In all cases not regulated by this Policy, the norms of the current legislation of the Russian Federation shall apply.

Operator details:
Operator: Vlasova Viktoriya Sergeyevna
TIN: 292103095956
Location: Arkhangelsk
Website: https://www.brend-severa.ru
vlasovared@yandex.ru
Made on
Tilda