Privacy policy

1. General provisions

1. This Privacy Policy (hereinafter referred to as the «Policy») has been developed in accordance with Federal Law No. 152-FZ of 27.07.2006 «On Personal Data», as well as other normative legal acts of the Russian Federation in the field of personal data protection.
2. The Policy defines the procedure for processing personal data of Users of the Samson-fit online store (hereinafter referred to as the «Site»), owned by an Individual Entrepreneur (hereinafter referred to as the «Operator»).
3. Use of the Site means the User's unconditional agreement with this Policy and the conditions for processing personal data specified herein.
4. The Operator reserves the right to make changes to this Policy. The current version of the Policy is always posted on this page.

2. Key definitions

1. Personal data — any information relating directly or indirectly to an identified or identifiable natural person (subject of personal data).
2. Processing of personal data — any action (operation) or set of actions performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
3. Operator — a state body, municipal body, legal or natural person who independently or jointly with other persons organizes the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, and the actions performed with personal data.
4. User — any person who has access to the Site via the Internet and uses the Site.
5. Cookies — small text files sent by the web server and stored on the User's computer, which the User's web browser transmits to the server each time the Site is visited.

3. Rights and obligations of the Operator

1. The Operator has the right to process the User's personal data for the purposes specified in this Policy.
2. The Operator may make changes to this Policy without prior notice to the User. The new version of the Policy takes effect from the moment it is posted on the Site.
3. The Operator is obliged to take the necessary organizational and technical measures to protect the User's personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.
4. The Operator is obliged to provide the User with information about the processing of their personal data upon request.
5. The Operator has the right to refuse to provide services to the User if the latter refuses to provide the necessary personal data.

4. User rights

1. The User has the right to decide on providing their personal data to the Operator under the conditions of this Policy.
2. The User has the right to access their personal data and may demand that the Operator clarify, block, or destroy personal data if they are incomplete, outdated, unreliable, or processed unlawfully.
3. The User has the right to withdraw consent to the processing of personal data by sending a written statement to the Operator.
4. The User has the right to appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects.

5. Categories of personal data

1. The Operator processes the following categories of User personal data:
   • Last name, first name, patronymic;
   • Phone number;
   • Email address;
   • Delivery address (city, street, building, apartment);
   • Data automatically transmitted when using the Site (IP address, cookie files, browser data, access time);
   • Information about orders and purchases.
2. Processing of the User's personal data is carried out to the extent necessary to achieve the processing purposes provided for by this Policy.

6. Purposes of personal data processing

1. Processing of the User's personal data is carried out for the following purposes:
   • Registration and authorization of the User on the Site;
   • Processing of the User's orders and provision of services;
   • Delivery of goods to the User;
   • Feedback, including sending notifications and newsletters;
   • Improving service quality and Site functionality;
   • Conducting statistical and other research;
   • Informing the User about order status, promotions, and special offers.
2. The Operator does not process personal data that is not related to the purposes of their processing, except in cases directly provided for by law.

7. Legal basis for processing personal data

1. Processing of personal data is carried out on the following legal grounds:
   • Consent of the personal data subject to the processing of their personal data;
   • Fulfillment of a contract to which the personal data subject is a party;
   • Fulfillment of requirements of the legislation of the Russian Federation;
   • Protection of the vital interests of the personal data subject;
   • Exercise of the rights and legitimate interests of the Operator.
2. The Operator processes the User's personal data only to the extent necessary to achieve the purposes of their processing.

8. Procedure for processing personal data

1. Processing of the User's personal data is carried out using automation tools and without them.
2. The User's personal data is stored on the Operator's servers and is protected by security measures against unauthorized access, copying, distribution, and other unlawful actions of third parties.
3. The period of personal data processing is determined by the purpose of their processing and does not exceed the period necessary to achieve the specified purpose.
4. Upon achieving the processing purposes or upon the User's withdrawal of consent, personal data is destroyed within 30 (thirty) days, unless otherwise provided by law.

9. Use of cookies and similar technologies

1. The Site uses cookies to improve performance and user convenience.
2. The following types of cookies are used on the Site:
   • Necessary (strictly required) — ensure the operation of the Site, authentication, and security;
   • Functional — remember the User's preferences (language, currency, region);
   • Analytical — help understand how Users interact with the Site for its improvement;
   • Marketing — used to display relevant advertising and track the effectiveness of advertising campaigns.
3. The User can manage cookie settings in their browser, including blocking their receipt or deleting them.
4. Disabling cookies may result in limited Site functionality.

10. Transfer of personal data to third parties

1. The Operator does not transfer the User's personal data to third parties without their consent, except in the following cases:
   • Upon request of a court or other law enforcement agencies in the manner prescribed by law;
   • For the fulfillment of a contract to which the User is a party;
   • For the delivery of goods — name, phone, and delivery address are transmitted to courier services and transport companies;
   • For payment processing — data necessary for making a payment is transmitted to payment systems;
   • In other cases directly provided for by the current legislation of the Russian Federation.
2. When transferring personal data, the Operator requires third parties to ensure the confidentiality and security of the processed data.

11. Ensuring the security of personal data

1. The Operator takes the necessary organizational and technical measures to protect the User's personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.
2. Security measures include:
   • Use of SSL/TLS protocol for data transmission;
   • Restriction of access to personal data of Operator employees;
   • Storage of personal data on secure servers;
   • Regular updates of security tools;
   • Data backup.
3. The Operator is not responsible for personal data leaks caused by the User's fault (weak password, use of public networks, etc.).

12. Retention period for personal data

1. The User's personal data is stored for the period necessary to achieve the purposes of their processing, but not less than the period established by the legislation of the Russian Federation.
2. Data on completed purchases is stored for 5 (five) years for accounting and tax purposes.
3. Upon expiration of the established retention period, the User's personal data is destroyed.

13. Cross-border transfer of personal data and GDPR

1. The Operator may carry out cross-border transfer of personal data to states that provide adequate protection of the rights of personal data subjects.
2. Regarding the personal data of European Union citizens, the Operator is guided by the following regulatory acts:
   • GDPR — General Data Protection Regulation of the European Union (Regulation (EU) 2016/679);
   • FZ-152 — Federal Law of the Russian Federation of 27.07.2006 No. 152-FZ «On Personal Data».
3. Cross-border transfer of personal data is carried out only to states that provide adequate protection of the rights of personal data subjects, in accordance with Article 12 of the Federal Law «On Personal Data».
4. EU citizen Users have the right to file a complaint with the supervisory authority of their country in the field of personal data protection.

14. Final provisions

1. This Policy takes effect from the moment it is posted on the Site and remains in force indefinitely.
2. The User confirms that they have read the terms of this Policy and accept them in full.
3. All disputes arising in connection with the execution of this Policy shall be resolved through negotiations, and if agreement cannot be reached — in court at the location of the Operator.
4. If any part of this Policy is found to be invalid, this does not affect the validity of the remaining provisions.

Contact information