Privacy Policy
1. General Provisions
This Privacy Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of the Russian Federation dated July 27, 2006, "On Personal Data" (the "Personal Data Law") and defines the procedure for processing personal data as well as the measures taken by LTD "ART-TRANS" (the "Operator") to ensure the security of personal data.
1.1.
The Operator considers the protection of human and civil rights and freedoms, including the right to privacy and the protection of personal and family confidentiality, to be one of its highest priorities when processing personal data.
1.2.
This Privacy Policy (the "Policy") applies to all information that the Operator may obtain about visitors to the website:
https://art-transwork.ru/china/en

2. Definitions
2.1.
Automated Processing of Personal Data means the processing of personal data using computer technologies and automated systems.
2.2.
Blocking of Personal Data means the temporary suspension of the processing of personal data, except where processing is necessary to verify or update such personal data.
2.3.
Website means the collection of graphical materials, information, software, and databases available on the Internet at:
https://art-transwork.ru/china/en
2.4.
Personal Data Information System means a combination of databases containing personal data together with information technologies and technical means used for processing such data.
2.5.
Depersonalization (Anonymization) of Personal Data means actions that make it impossible to identify a specific data subject without the use of additional information.
2.6.
Processing of Personal Data means any operation or set of operations performed on personal data, whether by automated means or otherwise, including:

• collection;
• recording;
• systematization;
• accumulation;
• storage;
• updating (modification);
• retrieval;
• use;
• transfer (distribution, provision or granting of access);
• anonymization;
• blocking;
• deletion;
• destruction.

2.7.
Operator means a governmental authority, municipal authority, legal entity, or individual that independently or jointly with others organizes and/or carries out the processing of personal data and determines the purposes, scope, and methods of such processing.
2.8.
Personal Data means any information relating directly or indirectly to an identified or identifiable user of the website:
https://art-transwork.ru/china/en
2.9.
Personal Data Authorized for Public Distribution means personal data made publicly available by the data subject through explicit consent in accordance with the Personal Data Law.
2.10.
User means any visitor of the website:
https://art-transwork.ru/china/en
2.11.
Provision of Personal Data means actions aimed at disclosing personal data to a specific person or a defined group of persons.
2.12.
Distribution of Personal Data means any actions aimed at disclosing personal data to an indefinite number of persons, including publication in mass media, posting on information and telecommunications networks, or providing access by any other means.
2.13.
Cross-Border Transfer of Personal Data means the transfer of personal data to the territory of a foreign state, to a foreign public authority, foreign individual, or foreign legal entity.
2.14.
Destruction of Personal Data means any actions resulting in the irreversible destruction of personal data without the possibility of subsequent restoration, including the destruction of physical media containing such data.
3. Rights and Obligations of the Operator
3.1. The Operator has the right to:

• obtain accurate information and/or documents containing personal data from the data subject;
• continue processing personal data without the consent of the data subject where such consent has been withdrawn or where the data subject has requested the termination of processing, provided that there are legal grounds established by the Personal Data Law;
• independently determine the composition and scope of legal, organizational, and technical measures necessary and sufficient to ensure compliance with the requirements of the Personal Data Law and other applicable legislation, unless otherwise provided by law.

3.2. The Operator is obliged to:

• provide the data subject, upon request, with information relating to the processing of their personal data;
• organize the processing of personal data in accordance with the applicable legislation of the Russian Federation;
• respond to requests and inquiries from data subjects and their authorized representatives in accordance with the Personal Data Law;
• provide the competent authority responsible for the protection of personal data subjects' rights with the requested information within ten (10) days from the date of receipt of such request;
• publish or otherwise ensure unrestricted access to this Privacy Policy;
• implement legal, organizational, and technical measures to protect personal data against unauthorized or accidental access, destruction, modification, blocking, copying, disclosure, distribution, and any other unlawful actions;
• cease the transfer (distribution, provision, or granting of access), processing, and destroy personal data in cases provided for by the Personal Data Law;
• fulfill other obligations established by applicable legislation.

4. Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:

• receive information concerning the processing of their personal data, except where restricted by applicable law;
• request the correction, blocking, or deletion of their personal data if such data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purposes of processing;
• require prior consent for the processing of personal data for the purpose of marketing goods, works, or services;
• withdraw consent to the processing of personal data at any time;
• request the termination of personal data processing;
• challenge unlawful actions or omissions of the Operator before the competent supervisory authority or in a court of law;
• exercise any other rights provided under the legislation of the Russian Federation.

4.2. Personal data subjects are obliged to:

• provide the Operator with accurate personal data;
• promptly notify the Operator of any changes, updates, or corrections to their personal data.

4.3.
Persons who provide the Operator with inaccurate personal data or disclose personal data relating to another individual without that individual's consent shall be held liable in accordance with the legislation of the Russian Federation.

5. Principles of Personal Data Processing
5.1.
Personal data shall be processed lawfully, fairly, and transparently.
5.2.
Personal data shall be processed solely for specified, explicit, and legitimate purposes. Processing that is incompatible with the original purposes of collection is prohibited.
5.3.
Databases containing personal data processed for incompatible purposes shall not be merged.
5.4.
Only personal data that is necessary for the stated purposes of processing shall be processed.
5.5.
The scope and content of processed personal data shall correspond to the stated purposes of processing. Excessive processing of personal data is not permitted.
5.6.
The Operator shall ensure that personal data is accurate, sufficient, and, where necessary, kept up to date. Appropriate measures shall be taken to correct or remove incomplete or inaccurate personal data.
5.7.
Personal data shall be stored in a form that permits identification of the data subject for no longer than is necessary to achieve the purposes of processing, unless a longer retention period is required by applicable law or by a contract to which the data subject is a party, beneficiary, or guarantor.
Processed personal data shall be deleted or anonymized once the purposes of processing have been fulfilled or when there is no longer a legitimate need to retain such data, unless otherwise required by applicable law.
6. Purposes of Personal Data Processing

7. Conditions for Personal Data Processing
7.1.
Personal data shall be processed with the consent of the personal data subject.
7.2.
Personal data may be processed where necessary to achieve the purposes established by an international treaty of the Russian Federation or by applicable law, as well as for the performance of functions, powers, and obligations imposed on the Operator by Russian legislation.
7.3.
Personal data may be processed where necessary for the administration of justice or the execution of a judicial act or another act subject to enforcement under the legislation of the Russian Federation.
7.4.
Personal data may be processed where necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, or for entering into a contract at the initiative of the data subject.
7.5.
Personal data may be processed where necessary for the legitimate interests of the Operator or third parties, provided that such processing does not violate the rights and freedoms of the data subject.
7.6.
Personal data that has been made publicly available by the data subject or at their request may be processed in accordance with applicable law.
7.7.
Personal data subject to mandatory publication or disclosure under applicable legislation may also be processed.

8. Procedure for the Collection, Storage, Transfer, and Other Processing of Personal Data
The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to comply with the applicable legislation governing personal data protection.
8.1.
The Operator shall take all reasonable measures to ensure the security of personal data and prevent unauthorized persons from gaining access to such data.
8.2.
The User's personal data shall not be disclosed to third parties under any circumstances, except where required by applicable law or where the data subject has expressly consented to such disclosure for the purpose of fulfilling contractual obligations.
8.3.
If inaccuracies are identified in personal data, the User may update such data by sending a notification to the Operator via email at:
info@art-trans.ru
with the subject line:
"Personal Data Update."
8.4.
Personal data shall be processed only for as long as necessary to achieve the purposes for which it was collected, unless a different retention period is required by law or by contract.
The User may withdraw their consent to the processing of personal data at any time by sending an email to:
info@art-trans.ru
with the subject line:
"Withdrawal of Consent to Personal Data Processing."
8.5.
Any information collected by third-party service providers, including payment systems, communication services, or other external providers, shall be processed and stored in accordance with their respective Terms of Service and Privacy Policies.
The Operator shall not be responsible for the actions or practices of such third parties.
8.6.
Restrictions established by the data subject concerning the transfer, processing, or publication of personal data intended for public distribution shall not apply where such processing is carried out in the public interest in accordance with the legislation of the Russian Federation.
8.7.
The Operator shall maintain the confidentiality of personal data throughout the processing activities.
8.8.
Personal data shall be stored in a form that permits identification of the data subject for no longer than is necessary to achieve the purposes of processing unless a longer retention period is required by applicable law or by contract.
8.9.
Processing of personal data shall cease upon:

• achievement of the purposes of processing;
• expiration of the consent period;
• withdrawal of consent by the data subject;
• receipt of a request to terminate processing;
• identification of unlawful processing of personal data.

9. Processing Activities Performed by the Operator
9.1.
The Operator performs the following processing activities with personal data:

• collection;
• recording;
• systematization;
• accumulation;
• storage;
• updating (modification);
• retrieval;
• use;
• transfer (including provision of access where applicable);
• anonymization;
• blocking;
• deletion;
• destruction of personal data.

9.2.
The Operator carries out automated processing of personal data, with or without the transmission of such data via information and telecommunication networks.

10. Cross-Border Transfer of Personal Data
10.1.
Prior to carrying out any cross-border transfer of personal data, the Operator shall notify the competent authority responsible for the protection of personal data subjects' rights of its intention to perform such transfer, in accordance with the applicable legislation of the Russian Federation.
10.2.
Before submitting such notification, the Operator shall obtain all information required by applicable law from the foreign public authorities, foreign individuals, or foreign legal entities to whom the personal data is intended to be transferred.

11. Confidentiality of Personal Data
The Operator and any other persons who obtain access to personal data shall maintain the confidentiality of such information and shall not disclose or distribute personal data to third parties without the prior consent of the data subject, unless otherwise required by applicable law.

12. Final Provisions
12.1.
Users may request clarification regarding the processing of their personal data by contacting the Operator via email:
info@art-trans.ru
12.2.
Any amendments to this Privacy Policy shall be published in this document. This Policy remains in effect indefinitely until replaced by a new version.
12.3.
The current version of this Privacy Policy is available at:
https://art-transwork.ru/china/en/privacy