Personal Data Processing Policy

1. General Provisions
This Personal Data Processing Policy is prepared in accordance with the requirements of the Federal Law of July 27, 2006, No. 152-FZ "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and the measures taken to ensure the security of personal data by Individual Entrepreneur Oxana Anatolyevna Nikityuk (hereinafter referred to as the "Operator").
1.1. The Operator considers the highest priority and condition of its activities to be the observance of human and civil rights and freedoms when processing their personal data, including the protection of the rights to privacy, personal, and family secrets.
1.2. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the website: oniraclub.com.
2. Key Terms Used in the Policy
2.1. Automated Processing of Personal Data
Processing of personal data using computer technology.
2.2. Blocking of Personal Data
Temporary suspension of personal data processing (except when processing is necessary to clarify personal data).
2.3. Website
A collection of graphical and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address: https://oniraclub.com.
2.4. Personal Data Information System
A set of personal data contained in databases and the information technologies and technical means ensuring their processing.

2.5. Depersonalization of Personal Data
Actions resulting in the impossibility of determining the ownership of personal data by a specific User or another subject of personal data without using additional information.
2.6. Processing of Personal Data
Any action (operation) or set of actions (operations) performed with personal data, with or without automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction of personal data.
2.7. Operator
A state body, municipal body, legal entity, or individual organizing and/or carrying out the processing of personal data independently or jointly with others, as well as determining the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal Data
Any information relating directly or indirectly to an identified or identifiable User of the website: https://oniraclub.com.
2.9. Personal Data Permitted for Dissemination
Personal data to which an unlimited number of persons have access, granted by the personal data subject through consent to processing in accordance with the Personal Data Law (hereinafter referred to as "Disseminable Personal Data").
2.10. User
Any visitor to the website: oniraclub.com.
2.11. Provision of Personal Data
Actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12. Dissemination of Personal Data
Any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or making personal data available to an unlimited number of persons, including publication in mass media or placement in information and telecommunication networks, or providing access in any other way.
2.13. Cross-Border Transfer of Personal Data
Transfer of personal data to the territory of a foreign state, to a foreign authority, foreign individual, or foreign legal entity.
2.14. Destruction of Personal Data
Any actions resulting in the irreversible destruction of personal data, making it impossible to restore the content of personal data in the information system and/or the destruction of physical media containing personal data.
3. Key Rights and Obligations of the Operator
3.1. The Operator has the right to:
  • Receive from the personal data subject reliable information and/or documents containing personal data.
  • Continue processing personal data without the subject’s consent if there are grounds specified in the Personal Data Law.
  • Independently determine the necessary measures to comply with legal obligations regarding personal data protection.
3.2. The Operator is obliged to:
  • Provide the personal data subject, upon request, with information regarding the processing of their personal data.
  • Process personal data in accordance with Russian legislation.
  • Respond to requests from personal data subjects and their legal representatives.
  • Notify the authorized body for personal data protection upon request within 10 days.
  • Publish or otherwise provide unrestricted access to this Policy.
  • Implement legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, alteration, blocking, copying, or dissemination.
  • Cease processing and destroy personal data in cases stipulated by law.

4. Key Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
  • Receive information about the processing of their personal data.
  • Demand correction, blocking, or destruction of inaccurate or unlawfully processed data.
  • Withdraw consent to processing.
  • Appeal unlawful actions of the Operator.
4.2. Personal data subjects must:
  • Provide accurate personal data.
  • Notify the Operator of any changes in their personal data.
4.3. Persons providing false personal data or data of another subject without consent bear responsibility under Russian law.
5. Principles of Personal Data Processing
5.1. Processing is carried out lawfully and fairly.
5.2. Processing is limited to specific, predefined, and legitimate purposes.
5.3. Merging databases with incompatible processing purposes is prohibited.
5.4. Only data relevant to processing purposes is processed.
5.5. Data must be accurate, sufficient, and up-to-date.
5.6. Storage must not exceed the necessary period unless required by law.
5.7. Data is destroyed or anonymized after processing purposes are fulfilled.
6. Purposes of Personal Data Processing
Purpose:
Marketing of goods, works, and services.
Processed Data:
  • Full name
  • Email address
  • Phone numbers
  • Cookies (user behavior data)

Legal Basis: Consent of the personal data subject.
Processing Types: Collection, recording, systematization, storage, destruction, and anonymization.
7. Conditions of Personal Data Processing
7.1. Processing requires the subject’s consent.
7.2. Processing is permitted for legal compliance, contract execution, or public interest.
7.3. Publicly available data may be processed without additional consent.
8. Procedure for Collection, Storage, and Transfer of Personal Data
8.1. The Operator ensures data security and prevents unauthorized access.
8.2. Data is not transferred to third parties except as required by law or with consent.
8.3. Users may update their data by emailing: info@oniraclub.com with the subject "Update Personal Data."
8.4. Processing continues until the purpose is fulfilled or consent is withdrawn.
8.5. Third-party services (payment systems, etc.) process data under their own policies.
8.6. Restrictions on data dissemination do not apply in cases of public interest.
8.7. The Operator ensures confidentiality.
8.8. Data is stored only as long as necessary.
8.9. Processing ceases upon purpose fulfillment, consent withdrawal, or unlawful processing detection.
9. Actions Performed by the Operator with Personal Data
9.1. The Operator performs collection, recording, storage, clarification, use, transfer, anonymization, blocking, and destruction of data.
9.2. Automated processing may involve data transmission via networks.
10. Cross-Border Data Transfer
10.1. The Operator must notify authorities before cross-border transfers.
10.2. The Operator must obtain necessary information from foreign entities before transfer.
11. Confidentiality of Personal Data
The Operator and authorized persons must not disclose data without consent unless required by law.
12. Final Provisions
12.1. Users may request clarifications via: info@oniraclub.com.
12.2. This Policy may be updated; the current version is available at https://oniraclub.com/privacy
12.3. The Policy remains effective indefinitely until replaced.
Made on
Tilda