Privacy policy

1. General provisions

This personal data processing policy is prepared in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and defines the procedure for processing personal data and security measures taken by Novoskin (the "Operator").

1.1. The Operator's primary goal and condition for its activities is to respect human and civil rights and freedoms when processing personal data, including protection of privacy and personal and family secrets.

1.2. This Operator policy on personal data processing (the "Policy") applies to all information the Operator may obtain about website visitors.

2. Basic concepts used in the Policy

2.1. Automated personal data processing — processing using computer technology;
2.2. Blocking of personal data — temporary cessation of processing (except when processing is necessary to update data);
2.3. Website — a set of graphic and information materials and software ensuring availability on the Internet;
2.4. Personal data information system — databases and technologies for processing personal data;
2.5. Depersonalization — actions after which data cannot be attributed to a specific User without additional information;
2.6. Processing of personal data — any action or set of actions with personal data, with or without automation;
2.7. Operator — a state body, municipality, or legal/natural person organizing and/or carrying out personal data processing;
2.8. Personal data — any information relating directly or indirectly to a website User;
2.9. User — any website visitor;
2.10. Provision of personal data — disclosure to a specific person or group;
2.11. Dissemination — disclosure to an indefinite group;
2.12. Cross-border transfer — transfer to a foreign state authority or foreign person;
2.13. Destruction — irreversible deletion of personal data.

3. Personal data the Operator may process

3.1. Full name; email; phone numbers;
3.2. Date and place of birth;
3.3. Photographs;
3.4. The site also collects anonymized visitor data (including cookies) via web analytics (Yandex Metrica, Google Analytics, etc.).
3.5. The above data are collectively referred to as Personal data in this Policy.

4. Purposes of personal data processing

4.1. Purpose — informing the User by email;
4.2. The Operator may send notices about new products, offers, and events. The User may opt out by emailing novoskinC@yandex.com with the subject line refusing such notices.
4.3. Anonymized analytics data are used to understand User actions and improve the site.

5. Legal grounds for processing

5.1. The Operator processes personal data only when the User submits them via site forms, thereby consenting to this Policy.

5.2. Anonymized data are processed if allowed in the User's browser settings (cookies and JavaScript enabled).

6. Collection, storage, transfer, and other processing

Security of personal data processed by the Operator is ensured through legal, organizational, and technical measures required by applicable data protection law.

6.1. The Operator ensures data integrity and prevents unauthorized access.
6.2. Personal data will not be transferred to third parties except as required by law.
6.3. Users may update inaccurate data by emailing novoskinC@yandex.com with the subject "Personal data update".
6.4. Processing period is unlimited. Users may withdraw consent by emailing novoskinC@yandex.com with the subject "Withdrawal of consent to personal data processing".

7. Cross-border transfer of personal data

7.1. Before cross-border transfer, the Operator must ensure the foreign state provides reliable protection of data subjects' rights.

7.2. Transfer to states not meeting these requirements is allowed only with written consent and/or contract performance involving the data subject.

8. Final provisions

8.1. Users may request clarifications by emailing novoskinC@yandex.com.
8.2. Changes to this policy will be reflected in this document. The Policy is valid until replaced by a new version.
8.3. The current Policy is publicly available at /policy.