Personal Data Processing Policy
Purpose of processing: informing the User by sending emails.
Personal data:
- surname, first name, patronymic;
- email address;
- phone numbers;
- photos.

Legal grounds:
- the Operator’s statutory (founding) documents;
- contracts concluded between the Operator and the subject of personal data.

Types of personal data processing:
Collection, recording, systematization, accumulation, storage, destruction, and anonymization of personal data;
Sending informational emails to the email address.
7. Conditions for processing personal data.
7.1. The processing of personal data is carried out with the consent of the subject of personal data to the processing of their personal data.
7.2. The processing of personal data is necessary to achieve the goals provided for in an international treaty of the Russian Federation or by law, to carry out the functions, powers and obligations assigned to the operator by the legislation of the Russian Federation.
7.3. The processing of personal data is necessary to carry out justice, to execute a judicial act, an act of another body or official that must be executed in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. The processing of personal data is necessary to fulfil a contract in which the data subject is a party, or the data subject is the beneficiary or guarantor, as well as to enter into a contract at the initiative of the data subject or to enter into a contract under which the data subject will be the beneficiary or guarantor.

7.5. The processing of personal data is necessary to exercise the rights and legitimate interests of the operator or third parties, or to achieve socially significant goals, provided that the rights and freedoms of the data subject are not violated.
7.6. Personal data is processed, and access to it by an unlimited number of persons is granted by the subject of personal data or at their request (hereinafter referred to as publicly available personal data).
7.7. Personal data is processed that is subject to publication or mandatory disclosure in accordance with federal law.
8. Procedure for collecting, storing, transferring, and other types of personal data processing
The security of personal data processed by the Operator is ensured by implementing the legal, organizational, and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.
8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized persons from accessing personal data.
8.2. The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to the enforcement of applicable laws, or if the subject of personal data has given the Operator consent to transfer the data to a third party to fulfill obligations under a civil law contract.
8.3. If inaccuracies in personal data are identified, the User may update them independently by sending a notification to the Operator at the Operator’s email address Gomonigor@gmail.com with the subject line “Updating Personal Data”.
8.4. The period for processing personal data is determined by the achievement of the purposes for which the personal data was collected, unless another period is provided for in the contract or by applicable law.
The user may revoke their consent to the processing of personal data at any time by sending a notification to the Operator via email to the Operator’s email address Gomonigor@gmail.com with the subject line “Revocation of consent to the processing of personal data”.
8.5. All information collected by third‑party services, including payment systems, communication tools and other service providers, is stored and processed by the specified entities (Operators) in accordance with their User Agreement and Privacy Policy. Subject of personal data and/or with the specified documents. The Operator is not liable for the actions of third parties, including the service providers specified in this clause.
8.6. The prohibitions established by the subject of personal data on the transfer (except for providing access), as well as on the processing or conditions of processing (except for obtaining access) of personal data permitted for dissemination, do not apply in cases of processing personal data in the public, social, and other public interests defined by the legislation of the Russian Federation.
8.7. When processing personal data, the Operator ensures the confidentiality of the personal data.
8.8. The Operator stores personal data in a form that allows identifying the subject of personal data for no longer than required by the purposes of processing personal data, unless the period for storing personal data is established by federal law, a contract to which the subject of personal data is a party, beneficiary, or guarantor.
8.9. The conditions for terminating the processing of personal data may include achieving the purposes of processing personal data, the expiration of the validity period of the subject of personal data’s consent, the subject of personal data’s withdrawal of consent, or a request to terminate the processing.
9. List of actions performed by the Operator with received personal data
9.1. The Operator collects, records, systematizes, accumulates, stores, clarifies (updates, changes), retrieves, uses, transfers (distributes, provides, accesses), depersonalizes, blocks, deletes, and destroys personal data.
9.2. The Operator carries out automated processing of personal data with or without the receipt and/or transmission of the received information via information and telecommunications networks.
10. Cross-border transfer of personal data
10.1. Prior to commencing any cross-border transfer of personal data, the Operator is obliged to notify the authorized body for the protection of the rights of personal data subjects of its intention to carry out the cross-border transfer of personal data (such notification is sent separately from the notification of intent to process personal data).
10.2. Prior to submitting the above notification, the Operator is obliged to obtain the relevant information from the authorities of the foreign state, foreign individuals, and foreign legal entities to whom the cross-border transfer of personal data is planned. 11. Confidentiality of Personal Data
The Operator and other persons who have access to personal data are obligated not to disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by federal law.
12. Final Provisions
12.1. The User may obtain any clarification on any questions regarding the processing of their personal data by contacting the Operator by email at Gomonigor@gmail.com.
12.2. This document will reflect any changes to the Operator's personal data processing policy. This policy is valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is publicly available online at https://npathai.com/personal_data_processing_policy.