1. General provisions

1.1. This Policy determines the procedure for processing and protecting the personal data of Users of the website https://menshechem3.com (hereinafter referred to as the Website).
1.2. The Personal Data Operator is Individual Entrepreneur Litvenenko Maria Igorevna, INN 504710263478, OGRN 504710263478 (hereinafter referred to as the Operator).
1.3. The Operator sets as its most important goal the observance of human and civil rights and freedoms when processing personal data, including the protection of rights to privacy.
1.4. This Policy applies to all information that the Operator may obtain about visitors to the Website.

2. Composition of personal data

2.1. The Operator processes the following data provided by the User:
- Surname, First Name, Patronymic;
- Email address;
- Contact phone number;
- Goods delivery address;
- Telegram messenger nickname.
2.2. The Website also collects anonymized data about visitors (including "cookie" files) using internet statistics services.
2.3. The User can independently restrict or prohibit the collection of cookie files using their browser settings. Disabling cookies may lead to restricted access to some functions of the Website.

3. Purposes of data processing

3.1. Data is processed for the following purposes:
- Conclusion and execution of the purchase and sale agreement (Public Offer);
- Delivery of orders to Buyers;
- Sending notifications about order status;
- Sending marketing newsletters (subject to separate consent, by checking the box);
- Posting reviews and materials provided by Users for marketing purposes on the Website and in the Operator's official social media accounts.
3.2. The User has the right to withdraw this consent at any time by using the "unsubscribe" link in the text of the email or by contacting support: https://t.me/mc3_support or, as a backup, info@menshechem3.com.

4. Legal grounds for processing

4.1. The legal basis for processing is Clause 5, Part 1, Article 6 of Federal Law No. 152-FZ — processing is necessary for the execution of an agreement to which the personal data subject (User) is a party.
4.2. For marketing newsletters, the basis is the User's consent, expressed by checking the corresponding box on the Website.

5. Procedure and terms of processing. Third parties

5.1. Personal data processing is carried out using automation tools.
5.2. Cross-border transfer of personal data is not carried out. All data is stored on servers located within the territory of the Russian Federation.
5.3. Personal data is processed until the achievement of the processing goals indicated in clause 3.1, or until the User withdraws consent. Upon expiration of the processing period or in case of withdrawal of consent, data is destroyed within 30 days, unless otherwise provided by the agreement or law.
5.4. To achieve the processing goals, the Operator has the right to entrust processing (transfer necessary data) to the following persons:
- Banking organizations and payment services (T-Bank) - exclusively for payment processing. The Operator does not have access to Users' bank card data.
- CDEK delivery service — for organizing logistics within Russia and abroad.
- Unisender service - for carrying out automated notifications and newsletters.
5.5. When following links to payment service pages, the User undertakes to familiarize themselves with the data processing conditions of the corresponding credit organization.

6. Ensuring security

6.1. The Operator takes necessary legal, organizational, and technical measures to protect data from unauthorized access.
6.2. In case of establishing the fact of unlawful or accidental transfer (leak) of data, the Operator undertakes to notify Roskomnadzor within 24 hours and provide the results of an internal investigation within 72 hours.

7. User rights

7.1. The User has the right to receive information regarding the processing of their personal data, as well as to its clarification, blocking, or destruction.
7.2. The User undertakes to provide reliable personal data and promptly inform the Operator about its changes.
7.3. A request for data deletion can be sent to support: https://t.me/mc3_support or, as a backup, info@menshechem3.com.
7.4. Destruction of personal data is carried out by irrevocable erasure from the Operator's information systems, excluding the possibility of their restoration. The fact of destruction of personal data is confirmed by an Act on the destruction of personal data and an extract from the event log in the information system.
7.5. The Operator is obliged to terminate processing and destroy data in case of detection of unlawful actions with personal data, if it is impossible to eliminate the committed violations, within a period not exceeding 10 working days.

8. Final provisions

8.1. This Policy is valid indefinitely until replaced by a new version.
8.2. The current version is always available on the page: https://menshechem3.com/documents/policy.