Privacy Policy

1. General Provisions

This Privacy Policy has been prepared in accordance with Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter referred to as the “Personal Data Law”) and defines the procedure for processing personal data and the measures to ensure the security of personal data implemented by Sole Proprietor Dvoeglazova A.S. (hereinafter referred to as the “Operator”).

1.1. The Operator considers compliance with the rights and freedoms of individuals when processing their personal data, including the right to privacy, personal and family secrets, as one of the most important objectives and conditions of its activities.

1.2. This Privacy Policy of the Operator applies to all information that the Operator may obtain about visitors to the website https://abituworld.com.

This Policy constitutes a public offer for individuals.

2. Key Terms

2.1. Automated processing of personal data — processing of personal data using computing equipment.

2.2. Blocking of personal data — temporary suspension of personal data processing (except when processing is necessary to clarify the data).

2.3. Website — a set of graphic and informational materials, software, and databases ensuring their availability on the Internet at https://abituworld.com.

2.4. Information system of personal data — a set of personal data contained in databases and the information technologies and technical means ensuring their processing.

2.5. Anonymization of personal data — actions making it impossible to determine, without additional information, the affiliation of personal data to a specific User or other subject of personal data.

2.6. Processing of personal data — any action (operation) or set of actions (operations) performed using automation tools or without them with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.

2.7. Operator — a state body, municipal authority, legal entity, or individual who organizes and/or performs the processing of personal data independently or jointly with others, and determines the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.

2.8. Personal data — any information directly or indirectly relating to an identified or identifiable User of the website https://abituworld.com.

2.9. Personal data permitted for distribution — personal data whose access to an unlimited circle of persons is granted by the data subject by giving consent for the processing of personal data permitted for distribution in the manner provided by the Personal Data Law.

2.10. User — any visitor of the website https://abituworld.com.

2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.

2.12. Distribution of personal data — any actions aimed at disclosing personal data to an indefinite circle of persons, including publication in the mass media, placement in information and telecommunication networks, or providing access to personal data in any other way.

2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a state authority, foreign individual, or foreign legal entity.

2.14. Destruction of personal data — any actions resulting in the irreversible destruction of personal data with the impossibility of further recovery of the content of personal data in the information system of personal data and/or destruction of physical media containing personal data.

3. Operator’s Rights and Obligations

3.1. The Operator has the right to:

obtain accurate information and/or documents containing personal data from the data subject;
in the case of withdrawal of consent to the processing of personal data by the data subject, continue processing personal data without consent if there are grounds specified in the Personal Data Law;
independently determine the composition and list of measures necessary and sufficient to fulfill the obligations provided by the Personal Data Law and other legal acts adopted in accordance with it, unless otherwise provided by law.

3.2. The Operator is obliged to:

provide the data subject, upon request, with information related to the processing of their personal data;
organize the processing of personal data in accordance with Russian law;
respond to inquiries and requests from data subjects and their legal representatives in accordance with the Personal Data Law;
provide the authorized body for the protection of personal data subjects with necessary information upon request within 30 days from the date of receipt of such request;
publish or otherwise ensure unrestricted access to this Privacy Policy;
take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, dissemination, and other unlawful actions;
terminate the transfer (distribution, provision, access) of personal data, cease processing, and destroy personal data as required by law;
fulfill other obligations stipulated by the Personal Data Law.

4. Rights and Obligations of Data Subjects

4.1. Data subjects have the right to:

receive information concerning the processing of their personal data, except in cases provided by federal laws; information must be provided in an accessible form and must not contain personal data relating to other subjects unless there are legal grounds;
demand the clarification, blocking, or destruction of their personal data if they are incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose, and take legal measures to protect their rights;
give prior consent for the processing of personal data for marketing purposes;
withdraw consent to the processing of personal data;
appeal unlawful actions or inaction of the Operator to the authorized body or in court;
exercise other rights provided by Russian law.

4.2. Data subjects are obliged to:

provide the Operator with accurate personal data;
inform the Operator of updates or changes to their personal data.

4.3. Persons who provide false information about themselves or another data subject without their consent bear responsibility in accordance with Russian law.

5. Personal Data Processed by the Operator

5.1. Full name.
5.2. Email address.
5.3. Phone numbers.
5.4. The website also collects and processes anonymized user data (including cookies) using web analytics services such as Yandex.Metrica, Google Analytics, and others.
5.5. The above data are collectively referred to as Personal Data in this Policy.
5.6. Processing of special categories of personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, sexual life) is not conducted by the Operator.
5.7. Processing of personal data permitted for distribution from the special categories above is allowed if restrictions and conditions of Article 10.1 of the Personal Data Law are observed.

6. Purposes of Personal Data Processing

6.1. The purposes of processing the User’s personal data are:

informing the User via email;
entering into, executing, and terminating civil-law contracts;
providing the User with access to services, information, and materials on the website https://abituworld.com.

6.2. The Operator may send notifications about new products, services, special offers, and events. The User can opt out by sending an email marked “Unsubscribe from updates and offers” or using the available website functionality.

6.3. Anonymized user data collected through analytics services is used to improve website performance and content.

7. Legal Grounds for Processing Personal Data

7.1. Legal grounds for processing personal data include:

statutory documents of the Operator;
federal laws and regulations in the field of personal data protection;
consent of Users for the processing of their personal data or personal data permitted for distribution.

7.2. The Operator processes personal data only if the User submits it voluntarily through forms on the website or by email. Submission constitutes consent to this Privacy Policy.

7.3. The Operator processes anonymized data if allowed in the User’s browser settings (cookies and JavaScript enabled).

7.4. Data subjects voluntarily provide their personal data.

8. Conditions for Processing Personal Data

8.1. Personal data are processed with the data subject’s consent.
8.2. Processing is necessary to achieve purposes established by international treaties of the Russian Federation or by law, to perform functions assigned to the Operator.
8.3. Processing is necessary for justice or enforcement of court or other legal acts.
8.4. Processing is necessary for contract execution, where the data subject is a party or beneficiary, or initiates the contract.
8.5. Processing is necessary to exercise the rights and legitimate interests of the Operator or third parties without violating the rights of the data subject.
8.6. Processing of publicly available personal data is allowed.
8.7. Processing required by law or mandatory disclosure is allowed.

10. Actions Performed with Personal Data

10.1. Collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction.

10.2. Automated processing with transfer or reception of information via telecommunication networks or without them.

11. Cross-Border Data Transfer

11.1. The Operator ensures that foreign countries receiving personal data provide reliable protection of data subjects’ rights.

11.2. Transfer to countries not meeting this requirement is only allowed with written consent or for contract execution.

12. Confidentiality of Personal Data

The Operator and other parties with access must not disclose or distribute personal data without consent unless required by law.

13. Final Provisions

13.1. Users may request clarifications regarding processing by contacting the Operator.
13.2. All changes are reflected in this Policy. It is valid indefinitely until replaced.
13.3. The current version is available at https://abituworld.com/privacy.