Personal Data Processing Policy

This Policy sets out the procedure for processing and protecting personal data of users of the SHAULA online store located at https://shaula-shop.ru.

Personal data operator:
Individual Entrepreneur Maria Yuryevna Ermilova

Taxpayer Identification Number (INN): 770871412652
Primary State Registration Number of the Individual Entrepreneur (OGRNIP): 322774600496002

Email for enquiries about personal data:
shaula007@yandex.ru

The Policy applies to personal data that the Operator receives from website users during registration, placement and fulfilment of orders, use of the personal account, submission of enquiries, returns, and claims, and during the user’s technical interaction with the website.

Purposes of processing

Personal data may be processed for:

• creating and operating the user account;
• placing, fulfilling, and supporting orders;
• arranging delivery and payment;
• communicating with the Buyer;
• handling returns, claims, and enquiries;
• complying with the requirements of the legislation of the Russian Federation;
• ensuring the security and technical operation of the website.

Personal data is not used for purposes incompatible with those specified above without a separate legal basis.

Personal data that may be processed

Depending on the website function used, the Operator may process:

• first and last name;
• email address;
• telephone number;
• information required to create an account;
• delivery address and other information required for delivery;
• information about orders, payment, delivery, and returns;
• the contents of user enquiries;
• technical data required for operation of the website and the user session.

SHAULA does not request data that is objectively unnecessary for the relevant function.

SHAULA must not store full bank card details where they are processed by the payment operator.

Legal grounds

Processing is carried out on the grounds provided by Federal Law No. 152-FZ “On Personal Data”, including:

• for entering into and performing a contract with the personal data subject;
• for performing obligations established by the legislation of the Russian Federation;
• with the consent of the personal data subject where such consent is required by law.

Where processing is based on consent, such consent is requested separately in the cases provided by law.

Processing and storage

The Operator performs only those operations with personal data that are necessary for the relevant purposes: collection, recording, systematisation, accumulation, storage, clarification, use, transfer in the prescribed cases, blocking, deletion, and destruction.

Personal data is stored no longer than required by the purposes of processing or the legislation of the Russian Federation.

Once the purpose of processing is achieved, the data is deleted or destroyed unless further storage is required by law.

Transfer to third parties

Personal data may be transferred to persons involved in fulfilling an order or supporting the operation of the online store only to the extent necessary and where a lawful basis exists.

After the relevant services are connected, such persons may include a payment operator, fiscalisation operator, delivery service, provider of email services used for service notifications, and technical contractors required for the website to function.

The specific list of such recipients must correspond to the services actually used by SHAULA.

Localisation and security

When collecting personal data of citizens of the Russian Federation via the Internet, SHAULA complies with the statutory requirements for the use of databases located in the Russian Federation.

The Operator takes legal, organisational, and technical measures to protect personal data against unlawful access, alteration, destruction, dissemination, and other unlawful actions.

Cookies and technical data

The website may use technical cookies and similar technologies required for the user session, language selection, authentication, shopping cart, and correct operation of the website.

If analytics, advertising, or other optional technologies are connected in the future, the terms of their use and the relevant consent mechanisms must be added separately before such use begins.

User rights

The user has the right to obtain information about the processing of their personal data, request its correction, blocking, or deletion in the cases provided by law, and withdraw previously given consent where processing is based on such consent.

Enquiries about personal data processing and withdrawal of consent may be sent to:
shaula007@yandex.ru

Withdrawal of consent does not prevent further processing where the Operator has another legal basis for such processing.

Changes to the Policy

The Operator may update this Policy when legislation or personal data processing operations change.

The current version of the Policy is permanently published at shaula-shop.ru.