Personal Data Processing Policy

Revision dated August 10, 2026

1. General provisions

This Personal Data Processing Policy (hereinafter referred to as the "Policy") has been drawn up in accordance with paragraph 2 of Part 1 of Article 18.1 of Federal Law No. 0 dated 27.07.2006 "On Personal Data" (hereinafter referred to as the "Law") and defines the procedure for processing personal data and measures to ensure their security taken by the Operator.

The Operator sets as its most important goal the observance of human and civil rights and freedoms when processing personal data, including the protection of the rights to privacy, personal and family secrets.

2. Basic concepts

• Personal data — any information related directly or indirectly to a specific or identifiable natural person (personal data subject).
• Processing of personal data — any action or set of actions with personal data performed with or without automation tools (collection, recording, systematization, storage, clarification, use, transfer, depersonalization, blocking, deletion, destruction).
• Operator — an organization that independently or jointly with other persons organizes and/or processes personal data.
• The subject — the individual to whom the personal data relates.
• Website — a collection of web pages hosted at oneprom.ru .

3. Principles of personal data processing

The processing is carried out on a lawful and fair basis; it is limited to achieving specific, predetermined and legitimate goals; it is not allowed to combine databases created for incompatible purposes. Only data that meets the purposes of processing is processed; its content and volume correspond to the stated goals and are not redundant. The accuracy and relevance of the data are ensured; storage is carried out no longer than the processing purposes require.

4. Purposes of personal data processing

• processing of requests and applications from subjects received through the Website forms;
• providing feedback, consulting, preparation of commercial proposals;
• conclusion, execution and termination of contracts;
• informing about the Operator's goods, works and services (subject to consent);
• collecting anonymized Site traffic statistics.

5. Categories of subjects and list of processed data

The Operator processes the personal data of individuals who have sent a request through the Website, as well as representatives of counterparties. Processed data: surname, first name; name of the organization; contact phone number; e-mail address; other data voluntarily provided by the subject in the text of the request. The Operator does not process special categories of personal data and biometric personal data.

6. Legal grounds for processing

The legal grounds for processing are: the subject's consent to the processing of personal data; contracts concluded between the Operator and the subject; federal laws and other regulatory legal acts in the field of personal data protection.

7. Procedure and conditions of processing

The processing is carried out with the consent of the subject, as well as in cases provided for by Law. The processing is carried out both with and without automation tools. The operator has the right to entrust processing to another person with the consent of the subject on the basis of the concluded contract. There is no cross-border transfer of personal data by the Operator.

The condition for termination of processing is the achievement of the processing objectives, the expiration of consent, the withdrawal of consent by the subject, as well as the detection of unlawful processing.

8. Processing and storage periods

Personal data is processed until the purposes of processing are achieved or until the subject withdraws consent, unless another retention period is provided for by law or contract. Upon achievement of the processing objectives or in case of withdrawal of consent, the data is subject to destruction or depersonalization within the time limits established by law.

9. Rights of the personal data subject

The subject has the right to: receive information regarding the processing of his personal data; request clarification, blocking or destruction of data if they are incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose; revoke consent to processing; appeal the actions or omissions of the Operator to the authorized body for the protection of the rights of personal data subjects (Roskomnadzor) or in court. Requests are sent to the following e-mail address: info@oneprom.ru .

10. Security measures

The Operator takes legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as from other unlawful actions, including: appointment of responsible persons; restriction of access; use of information protection tools; control over measures taken and the level of security.

11. Use of cookies

The Website uses cookies to ensure the operation of the Website and collect anonymized statistics. By continuing to use the Site, the subject agrees to the processing of cookies. Disabling cookies is possible in the browser settings and may affect the operation of individual Website functions.

12. Final provisions

The Operator has the right to make changes to this Policy. The current edition is posted on the Website at oneprom.ru . This Policy is publicly available and must be posted on the Operator's Website.