Privacy Policy for the Processing of Personal Data

This Privacy Policy for the Processing of Personal Data has been prepared in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006, On Personal Data, and defines the procedure for processing personal data and the measures implemented to ensure the security of personal data by Shanghai CSS Industry Co., Ltd (hereinafter referred to as the "Operator").

The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy and personal and family confidentiality, to be its highest priority and an essential condition for carrying out its business activities.

This Privacy Policy of the Operator regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the website css.biz.

Automated processing of personal data means the processing of personal data using computer technology.

Blocking of personal data means the temporary suspension of the processing of personal data, except where processing is necessary to clarify personal data.

Website means a collection of graphic and informational materials, as well as computer programs and databases, made available on the Internet at the network address css.biz.

Personal data information system means a set of personal data contained in databases, together with information technologies and technical means ensuring their processing.

Depersonalization of personal data means actions that make it impossible to determine, without additional information, whether personal data belongs to a specific User or another personal data subject.

Processing of personal data means any action (operation) or set of actions (operations) performed on personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.

Operator means a state authority, municipal authority, legal entity, or individual that independently or jointly with others organizes and/or carries out the processing of personal data, and also determines the purposes of the processing of personal data, the composition of the personal data to be processed, and the actions (operations) performed with personal data.

Personal data means any information relating directly or indirectly to an identified or identifiable User of the website css.biz.

User means any visitor to the website css.biz.

Provision of personal data means actions aimed at disclosing personal data to a specific person or a specific group of persons.

Dissemination of personal data means any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or making personal data available to an unrestricted number of persons, including publication in the media, placement in information and telecommunication networks, or providing access to personal data by any other means.

Cross-border transfer of personal data means the transfer of personal data to the territory of a foreign state, to a foreign state authority, foreign individual, or foreign legal entity.

Destruction of personal data means any actions resulting in the irreversible destruction of personal data, making it impossible to restore the content of personal data in a personal data information system and/or resulting in the destruction of physical media containing personal data.

The Operator may process the following personal data of the User:

• Last name, first name, patronymic;
• Email address;
• Phone numbers.

The website also collects and processes anonymized data about visitors (including cookies) using internet analytics services (including Yandex Metrica, Google Analytics, and others).

The above-listed data are hereinafter collectively referred to in this Policy as Personal Data.

The purpose of processing the User’s personal data is to inform the User by sending emails.

The Operator also has the right to send the User notifications about new products and services, special offers, and various events. The User may opt out of receiving informational messages at any time by sending an email to info@css.biz with the subject line "Opt-out of notifications about new products, services, and special offers".

Anonymized User data collected through internet analytics services are used to gather information about User activity on the website and to improve the quality of the website and its content.

The Operator processes the User’s personal data only if the User fills in and/or submits such data independently through special forms located on the website css.biz. By filling out the relevant forms and/or submitting personal data to the Operator, the User expresses consent to this Policy.

The Operator processes anonymized data about the User if this is permitted in the User’s browser settings (including the saving of cookies and the use of JavaScript technology).

Anonymized User data collected through internet analytics services are used to gather information about User activity on the website and to improve the quality of the website and its content.

The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the current legislation on personal data protection.

The Operator ensures the safekeeping of personal data and takes all possible measures to prevent unauthorized persons from accessing personal data.

The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with applicable law.

If inaccuracies in personal data are identified, the User may update such data independently by sending a notice to the Operator at info@css.biz with the subject line "Update of personal data".

The period of processing personal data is unlimited. The User may withdraw consent to the processing of personal data at any time by sending a notice to the Operator by email to info@css.biz with the subject line "Withdrawal of consent to the processing of personal data".

Before initiating any cross-border transfer of personal data, the Operator must ensure that the foreign state to whose territory the transfer is to be made provides reliable protection of the rights of personal data subjects.

Cross-border transfer of personal data to the territories of foreign states that do not meet the above requirements may be carried out only if the personal data subject has given written consent to such cross-border transfer of personal data and/or if such transfer is required for the performance of an agreement to which the personal data subject is a party.

The User may obtain any clarifications regarding matters of interest related to the processing of personal data by contacting the Operator via email at info@css.biz.

Any changes made by the Operator to this personal data processing policy will be reflected in this document. This Policy remains in effect indefinitely until replaced by a new version.

The current version of the Policy is freely available on the Internet at css.biz/privacy.