1. General ProvisionsThis Personal Data Processing Policy is drawn up in accordance with the requirements of the Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and the measures to ensure its security undertaken by Ivan Sergeevich Mikhailov (hereinafter referred to as the “Data Controller”).
1.1. The Data Controller considers it a primary objective and prerequisite of its activities to respect human and civil rights and freedoms when processing their personal data, including protecting rights to privacy, personal and family secrets.
1.2. This Policy of the Controller regarding personal data processing (hereinafter referred to as the “Policy”) applies to all information that the Controller may obtain about visitors to the
bossclub.dating website.
2. Key Terms Used in the Policy2.1. Automated processing of personal data means processing personal data using computer equipment.
2.2. Blocking personal data means temporarily ceasing the processing of personal data (except when processing is required to clarify personal data).
2.3. Website means the set of graphical and informational materials, as well as computer programs and databases, ensuring access via the Internet at
bossclub.dating.
2.4. Information system of personal data means the combination of personal data contained in databases and the IT and technical means ensuring their processing.
2.5. Depersonalization of personal data means actions resulting in the impossibility to identify the data subject without additional information.
2.6. Personal data processing means any operation or combination of operations performed with or without automation tools with personal data, including collection, recording, systematization, accumulation, storage, updating, extraction, usage, transfer, depersonalization, blocking, deletion, and destruction of personal data.
2.7. Data Controller means a government body, municipality, legal or natural person alone or jointly organizing and/or carrying out personal data processing and determining the objectives and contents of such processing.
2.8. Personal data means any information relating directly or indirectly to an identified or identifiable user of
bossclub.dating.
2.9. Personal data permitted for dissemination means data that the subject has consented to make available to an unrestricted range of persons.
2.10. User means any visitor to
bossclub.dating.
2.11. Provision of personal data means actions aimed at disclosing personal data to a specific person or group.
2.12. Dissemination of personal data means any action aimed at disclosing personal data to an undefined circle of persons.
2.13. Cross-border transfer of personal data means transferring personal data to foreign states, authorities, or foreign entities.
2.14. Destruction of personal data means any action causing irreversible deletion of personal data such that it cannot be restored, either from the system or its physical carriers.
3. Main Rights and Obligations of the Data Controller3.1. The Controller has the right to:— Receive accurate information and/or documents containing personal data from the data subject;
— Continue processing personal data without consent if the data subject revokes consent, provided there are legal grounds;
— Independently determine the necessary measures to fulfill obligations defined by law, unless otherwise specified.
3.2. The Controller is obliged to:— Provide the data subject with information about their personal data processing upon request;
— Organize data processing in compliance with Russian law;
— Respond to inquiries of data subjects or their legal representatives;
— Notify the authorized data protection authority within 10 days upon request;
— Publish and provide free access to this Policy;
— Implement legal, organizational, and technical measures to safeguard personal data;
— ease data transfer, processing, and destroy personal data when legally required;
— Fulfill other obligations under the Personal Data Law.
4. Main Rights and Obligations of Data Subjects4.1. Data subjects have the right to:
— Obtain information about their personal data processing (except as provided by federal law);
— Request clarification, blocking, or destruction of inaccurate, outdated, or unlawfully obtained data;
— Set prior consent conditions for data processing for marketing purposes;
— Withdraw consent at any time and request processing to stop;
— Appeal to authorities or court against violation;
— Exercise other rights as provided by law.
4.2. Data subjects must:
— Provide accurate personal data;
— Inform the Controller of updates or changes to their personal data.
4.3. Persons providing false data or data about others without consent bear legal responsibility.
5. Principles of Personal Data Processing5.1. Processing is lawful and fair.
5.2. Processing is limited to specific, legitimate purposes.
5.3. No mixing of databases with incompatible purposes.
5.4. Only data relevant to processing purposes is collected.
5.5. Data content and volume must match the declared purposes—no excess data.
5.6. Accuracy, sufficiency, and relevancy are ensured with updating or deleting outdated data.
5.7. Personal data is stored only as long as needed; after that, it is deleted or anonymized unless law requires otherwise.
6. Purposes of Personal Data Processing- Purpose: Providing Users access to services, information, and materials on the website. Personal data: Email address.
- Legal basis: Federal Law No. 149-FZ “On Information, Information Technologies and Information Protection” dated July 27, 2006
- Processing actions: collection, recording, systematization, storage, destruction, and anonymization
7. Conditions of Personal Data Processing7.1. Processing is carried out with the data subject’s consent.
7.2. Processing is necessary for treaty obligations or legal duties of the Controller.
7.3. The processing of personal data is necessary for the administration of justice, the execution of a court decision, or an act issued by another authority or official subject to enforcement in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. The processing of personal data is necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, as well as for the conclusion of a contract at the initiative of the data subject or a contract under which the data subject will be a beneficiary or guarantor.
7.5. The processing of personal data is necessary for the exercise of the rights and legitimate interests of the operator or third parties, or for achieving socially significant goals, provided that this does not violate the rights and freedoms of the data subject.
7.6. The processing is carried out on personal data made publicly available by the data subject or at their request (hereinafter referred to as publicly available personal data).
7.7. The processing is carried out on personal data subject to publication or mandatory disclosure in accordance with federal law.
8. Procedure for Collection, Storage, Transfer, etc.The Controller ensures data security by implementing legal, organizational, and technical measures.
8.1. Takes measures to prevent unauthorized access.
8.2. Will not share personal data with third parties, except when required by law or with user consent.
8.3. Users can update data by emailing
privacy@thismywebsite.com with the subject “Update Personal Data.”
8.4. Storage term is based on data purpose unless a contract or law sets the term; users may withdraw consent at any time by emailing the same address.
8.5. Data collected via third-party services (e.g. payment systems) is governed by their policies; the Controller is not responsible for third-party actions.
8.6. Data subject’s restrictions do not apply when processing is needed for public interest.
8.7. The operator ensures the confidentiality of personal data during its processing.
8.8. The operator stores personal data in a form that allows the identification of the data subject for no longer than is necessary for the purposes of personal data processing, unless a longer retention period is established by federal law or by a contract to which the data subject is a party, beneficiary, or guarantor.
8.9. Processing stops when purposes are achieved, consent expires, consent is withdrawn, or unlawful processing is detected.
9. List of Operations Performed by the Controller9.1. Performs collection, recording, systematization, storage, updating, extraction, use, transfer, depersonalization, blocking, deletion, and destruction of personal data.
9.2. Carries out automated data processing with or without transmission via telecommunications networks.
10. Cross-Border Transfer of Personal Data10.1. Before cross-border transfer, the Controller must notify the authorized data protection agency.
10.2. Must obtain information from foreign authorities or entities receiving the data.
11. Confidentiality of Personal DataThe Controller and others with access are obliged not to disclose personal data without consent, unless federal law provides otherwise.
12. Final Provisions12.1. Users may ask questions about data processing by emailing
privacy@thismywebsite.com.
12.2. Any changes to the Policy will be reflected in this document. This Policy is valid indefinitely until replaced.
12.3. The current version is available at the site
thismywebsite.com/privacy/.