Personal Data Processing Policy

1. General Provisions
This personal data processing policy has been developed in accordance with the requirements of the Federal Law No. 152-FZ of 07/27/2006 "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedures for processing personal data and measures to ensure the security of such data taken by the RUS Chemicals Group (hereafter referred to as "the Operator"). 1.1 The Operator's most important goal is to ensure the observance of human and civil rights and freedoms during the processing of its personal data, including protection of privacy, personal, and family secrets. 1.2 This policy applies to all the information the Operator collects about visitors to its website http://ruschemicals.tilda.ws/.

2. Basic Concepts Used in Politics
2.1 Automated processing of personal data - processing of personal information using computer technology.
2.2 Blocking of personal data - temporary suspension of the processing of personal information (except in cases where the processing is necessary to verify personal data).
2.3 Website - a collection of graphic and informational materials, as well as computer programs and databases, that ensure its availability on the internet at the network address http://ruschemicals.tilda.ws/.
2.4 Personal data information system - a collection of personal information stored in databases and the information technologies and technical tools that ensure its processing.
2.5 Depersonalization of personal information - actions that make it impossible, without additional information, to identify personal information to a specific user or other subject of personal information.
2.6. Processing of Personal Data - any action (operation) or a set of actions (operations) performed with or without the use of automated tools on personal data, including collecting, recording, organizing, accumulating, storing, clarifying (updating, modifying), extracting, using, transferring (distributing, providing, accessing), depersonalizing, blocking, deleting, destroying personal data.
2.7. Data Processor - a state body, municipality, legal entity, or individual who, independently or in conjunction with other parties, organizes and/or processes personal data, determines the purposes for processing personal data, and determines the composition of the personal data to be processed and the actions (operations) to be performed on the data.
2.8. Personal Data - information relating directly or indirectly to an identifiable user of the website https://ruschemicals.tilda.ws/.
2.9. Personal data authorized for sharing - personal data that the data subject has consented to be shared with an unlimited number of people. This includes personal data that has been processed in accordance with the procedures outlined in the Law on Personal Data.
2.10. A user is any person who visits the website http://ruschemicals.tilda.ws/.
2.11. Providing personal data means sharing personal information with a specific person or group of people.
2.12. Personal data dissemination - any actions aimed at disclosing personal data to an unspecified group of people (transfer of personal data) or making personal data available to an unlimited number of people, including publishing personal data in media, posting on information and telecommunication networks, or providing access to personal data in some other way.
2.13. Cross-border transfer of personal data - the transfer of personal data from the territory of the Russian Federation to the territory of a foreign country to an authority, individual, or legal entity of that country.
2.14. Destruction of personal data - any actions that permanently destroy personal data, making it impossible to restore the content of the data in the information system or destroy the physical media containing the data.

3. Basic Rights and Obligations of the Operator
3.1 The Operator has the right to:

• Receive reliable information and/or documents containing personal data from the personal data subject;
• In case the personal data subject withdraws their consent to the processing of their personal data, or sends a request to terminate the processing of their data, the operator has the right to continue processing the personal data without the personal data subject's consent if there are grounds specified in the law on personal data.
• Independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations under the law on personal data and regulatory legal acts adopted in accordance with it, unless otherwise provided for by the law on personal data or other federal laws.

3.2 The Operator is obligated to:

• Provide the personal data subject, upon request, with information regarding the processing of their personal data.
• Organize the processing of personal data in accordance with the procedures established by the current legislation of the Russian Federation.
• Respond to requests and inquiries from personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law.
• Inform the authorized body responsible for protecting the rights of personal data subjects of the necessary information within 10 days of receiving such a request, upon request from this body.
• Publish or otherwise make this Policy regarding the processing of personal data available to everyone without restriction. Take legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, alteration, blocking, or copying, as well as other illegal actions related to personal data.
• Stop transferring, distributing, providing access to, processing, or destroying personal data in any manner or in any cases provided for by the Law on Personal Data.
• Perform all other duties as provided for by the said law.

4. Basic Rights and Obligations of Personal Data Subjects
4.1 Personal data subjects have the right to:

• receive information regarding the processing of their personal data, except in cases provided for by federal laws. This information is provided by the operator in an accessible format and should not include personal data from other individuals, unless there are valid reasons for disclosing such information. The list of information and procedure for obtaining it are established by the Personal Data Act.
• request the operator to correct, block, or delete their personal data if it is incomplete, out-of-date, inaccurate, or obtained illegally, or if it is no longer needed for the stated purpose of processing. They also have the right to take legal measures to protect their data rights.
• To submit a request for prior consent to the processing of personal data when promoting goods, works, and services on the market.
• To revoke consent for the processing of personal data and send a request to cease processing.
• Appeal to the authorized body or court for protection of personal data rights if the Operator's actions or inactions are illegal.

4.2 Subjects of personal data must:
- Provide reliable information about themselves to the Operator.
- Notify the Operator of any changes or updates to their personal information.
4.3 Individuals who provide false information or share another person's personal data without their consent will be held liable under Russian law.

5. Principles of Personal Data Processing
5.1. Personal data are processed on a legal and fair basis.
5.2. Processing is limited to specific, predetermined, and legitimate goals. Incompatible processing is not permitted.
5.3. Combining databases with incompatible purposes is not allowed.
5.4. Personal data must meet the stated purpose of processing.
5.5. Content and volume correspond to stated purposes. Redundant data is not permitted.
5.6. The processing of personal data ensures the accuracy, completeness, and relevance of personal data in relation to their intended use. The Operator takes necessary measures to ensure that incomplete or inaccurate data is deleted or corrected.
5.7. Personal data is stored in a way that allows for identification of the data subject, for as long as necessary for the purposes of processing, unless a longer period is specified by federal law or an agreement between the data subject and the Operator. Processed personal data is either destroyed or anonymized upon completion of the processing objectives or in the event of a loss of necessity to achieve those objectives, unless otherwise specified by federal law.

6. Purposes of Personal Data Processing
6.1. The purpose of data processing is to provide information to the User by means of emails. Personal data includes the following: - Surname - First name - Patronymic - Email address - Phone numbers - Legal grounds and statutory documents of the Operator
6.2. Types of Personal Data Processing: - Collection - Recording - Systematization - Accumulation - Storage - Destruction - Depersonalization
6.3. Sending information letters via email is one of the purposes of personal data processing.

7. Terms of Personal Data Processing
7.1. Personal data processing is carried out with the consent of the individual whose personal data are being processed.
7.2. Personal data processing is necessary to achieve goals specified in an international agreement of the Russian Federation or in accordance with applicable law, as well as to carry out functions, powers, and duties assigned to the data processor by the legislation of the Russian Federation.
7.3. Personal data may also be processed for the purpose of administering justice, executing a judicial decision, or other act of an authorized body or official, in accordance with legislation of the Russian Federation governing enforcement proceedings.
7.4 The processing of personal data is necessary for the execution of an agreement in which the personal data subject is a party, or beneficiary, or guarantor, as well as for concluding an agreement at the initiative of the personal data subject, or an agreement where the personal data subject will be a beneficiary or guarantor.
7.5 The processing of personal data is also necessary to exercise the rights and legitimate interests of the operator, or third parties, or to achieve socially significant goals, provided that the rights and freedoms of the personal data subject are not violated.
7.6 Personal data that is publicly available, which means it is accessible to an unlimited number of people by the subject of the data or at their request, is processed.
7.7 Personal data that must be published or disclosed in accordance with federal law is also processed.

8. The process of collecting, storing, transferring and other types of processing personal data
The privacy of personal data handled by the operator is ensured through implementation of legal, organizational, and technical measures required to fully comply with current legislation regarding personal data protection.
8.1 The operator ensures the security of personal information and takes all reasonable measures to prevent unauthorized access to personal information.
8.2 Personal information of users will not be shared with third parties under any circumstances except in cases where it is necessary for compliance with applicable law or when the user has given permission to the operator to share their information with a third party in order to fulfill contractual obligations.
8.3 In case of any inaccuracies in the information provided, users can update it independently by contacting the operator via email.info@ruschemicals.com
8.4 The period of processing personal data is determined by the purpose for which the personal data was collected, unless a different period is specified in the contract or by current legislation. The User may withdraw their consent to the processing of their personal data at any time by contacting the Operator via email at info@ruschemicals.com and requesting a withdrawal of consent.
8.5 Information collected by third parties, such as payment systems and communication services, is stored and processed in accordance with the terms and conditions of their respective agreements. The Operator is not liable for the actions or decisions of these third parties.
8.6. The restrictions imposed by the entity on personal data transfer (except for access), as well as on processing or conditions for processing (except for obtaining access), of personal data permitted for distribution, do not apply in cases where personal data are processed in the interests of the state, public interest, or other public interest defined by the legislation of the Russian Federation.
8.7. The operator ensures the confidentiality of personal data during processing.
8.8. The operator stores personal data in a format that allows identifying the data subject for as long as necessary for the purpose of processing, unless a longer period is specified by federal law or an agreement that the data subject is a party to, beneficiary, or guarantor of.
8.9 The conditions for the termination of personal data processing may include the achievement of the objectives of the processing, the expiry of the period of time for which the consent to processing was given, the revocation of consent by the data subject, or a requirement to cease processing due to the identification of illegal processing.

9. List of Actions Performed by the Operator on Personal Data
9.1 The Operator collects, records, organizes, stores, updates, extracts, uses, shares (distributes), provides access to, de-identifies, blocks, and deletes personal data.
9.2 The Operator processes personal data automatically with or without transmitting the information through information and communication networks.

10. Cross-border Transfer of Personal Data
10.1 Prior to the commencement of the cross-border transfer of personal data, the Operator shall notify the designated authority for the protection of personal data rights of its intention to conduct such a transfer (this notification shall be sent separately from the notice of intention to process the personal data).
10.2 Before submitting the aforementioned notice, the Operator must obtain relevant information from the relevant authorities of the foreign country, as well as from foreign individuals and legal entities to which the personal data will be transferred.

11. Privacy of personal data
The operator and any other individuals or entities who have access to personal data must not disclose or share such data with third parties without the explicit consent of the individual whose data is being accessed, unless otherwise permitted by applicable federal law.

12. Final Provisions
12.1 The User may request any clarifications regarding issues of interest regarding the processing of their personal data by contacting the Operator via email at info@ruschemicals.com.
12.2 This document will be updated to reflect any changes made to the Operator's Personal Data Processing Policy. The Policy will remain in effect until it is superseded by a new version.
12.3 The current version of this Policy is freely accessible on the internet at http://www.ruschemicals.com/.