Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy (hereinafter — the Policy) has been drawn up in accordance with the requirements of Russian Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" and defines the procedure for processing personal data and the security measures taken by Crystal Core (hereinafter — the Operator).

The Operator's key priority is to respect human and civil rights and freedoms in the processing of personal data, including the protection of the rights to privacy and to personal and family confidentiality.

The Policy applies to all information the Operator may obtain about visitors of the website crystal-core.com (hereinafter — the Website).

2. Key Definitions

Personal data — any information relating directly or indirectly to an identified or identifiable natural person (the personal data subject).

Personal data processing — any operation or set of operations performed on personal data, with or without the use of automated means: collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion, destruction.

Cookies — small files stored by the visitor's browser that keep the Website working correctly and allow the collection of anonymized visit statistics.

3. What Data the Operator Processes

• data voluntarily submitted through the contact form: name, contact details (Telegram, phone number or email address), message content;
• anonymized technical data collected automatically: IP address, browser and device information, pages visited, cookies.

The Operator does not process special categories of personal data (racial or ethnic origin, political opinions, health status, etc.) or biometric personal data.

4. Purposes of Processing

• communicating with the visitor: responding to requests, inquiries and messages;
• concluding and performing contracts for the Operator's services;
• keeping the Website operational and improving its quality based on anonymized statistics.

5. Legal Grounds for Processing

Personal data is processed on the basis of the personal data subject's consent (Article 6 of Law No. 152-FZ), which the visitor gives by submitting the contact form or by continuing to use the Website after being notified about the use of cookies.

6. Processing Procedure and Conditions

Processing is carried out using automated means. The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized access, destruction, modification, blocking, copying and dissemination: the connection to the Website is secured with HTTPS, access to data is restricted, and requests are transmitted over secure channels.

Personal data is stored no longer than required by the purposes of its processing, after which it is deleted or anonymized. No cross-border transfer of personal data is performed.

7. Rights of the Personal Data Subject

The personal data subject has the right to:

• receive information concerning the processing of their personal data;
• demand that their data be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate or unlawfully obtained;
• withdraw consent to the processing of personal data;
• appeal against the Operator's actions or omissions to Roskomnadzor (the Russian data protection authority) or in court.

To exercise your rights, send a request to the email address info@crystal-core.com. The Operator will respond within 10 business days of receiving the request.

8. Cookies

The Website uses cookies to operate correctly and to collect anonymized statistics. Visitors may disable cookies in their browser settings, although this may affect the functionality of certain features of the Website. By continuing to use the Website after being notified, the visitor agrees to the use of cookies.

9. Final Provisions

The Operator may amend this Policy. A new revision takes effect from the moment it is published on the Website. The current version is always available at crystal-core.com/privacy.

Please direct any questions about this Policy to info@crystal-core.com.