+7 (702) 348-71-70
+7 (702) 348-71-70
  • Home
  • Политика в отношении обработки персональных данных
Personal Data Processing Policy

  1. General Provisions

    1. This Personal Data Processing Policy (hereinafter, the Policy) has been drawn up in accordance with Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter, the Law) and defines the procedure for processing personal data and the measures taken by DEREVOPARK LLC (hereinafter, the Operator) to ensure its security.
    2. The Operator regards the observance of human rights and freedoms in the processing of personal data, including the protection of the rights to privacy and to personal and family confidentiality, as its most important goal.
    3. The Policy applies to all information the Operator may obtain about visitors of the website https://derevopark.com (hereinafter, the Site).

  2. Key Terms Used in This Policy

    The following terms are used in this Policy:

    1. Automated processing of personal data – processing carried out by means of computer technology.
    2. Blocking of personal data – temporary suspension of processing (except where processing is necessary to update the data).
    3. Website – the totality of graphic and informational materials, computer programs and databases made accessible on the Internet at https://derevopark.com.
    4. Personal data information system – the totality of databases and the information technologies and technical means that enable their processing.
    5. Depersonalization of personal data – actions as a result of which it becomes impossible to attribute the data to a specific subject without the use of additional information.
    6. Processing of personal data – any action (operation) or set of actions performed with or without the use of automation, including the collection, recording, systematization, accumulation, storage, updating (renewal, modification), retrieval, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion and destruction of personal data.
    7. Operator – a legal entity that, independently or jointly with other persons, organizes and carries out the processing of personal data and determines the purposes of processing, the composition of the personal data and the actions performed with it.
    8. Personal data – any information relating directly or indirectly to an identified or identifiable User of the Site.
    9. Personal data authorized for dissemination – data to which the subject has granted access to an unlimited range of persons by giving consent to its processing in the manner provided for by the Law.
    10. User – any visitor of the Site.
    11. Provision of personal data – actions aimed at disclosing data to a specific person or range of persons.
    12. Dissemination of personal data – actions aimed at disclosing data to an unlimited range of persons (transfer, publication, posting in information and telecommunication networks, etc.).
    13. Cross-border transfer of personal data – transfer of data to the territory of a foreign state, to a foreign public authority, or to a foreign individual or legal entity.
    14. Destruction of personal data – actions as a result of which the data is destroyed irretrievably, with no possibility of restoring its content.

  3. Main Rights
    and Obligations of the Operator

    1. The Operator has the right to:
      • receive from the personal data subject accurate information and/or documents containing personal data;
      • continue processing after consent has been withdrawn or a demand to stop processing has been made, where grounds provided for by the Law exist;
      • independently determine the composition and list of measures necessary to fulfill its data protection obligations.
    2. The Operator is obliged to:
      • provide the subject, at their request, with information concerning the processing of their data;
      • organize the processing of data in the manner established by the legislation of the Russian Federation;
      • respond to applications and requests from data subjects and their legal representatives;
      • provide the authorized body for the protection of data subjects’ rights, at its request, with the necessary information within 10 days;
      • publish this Policy or otherwise ensure unrestricted access to it;
      • take legal, organizational and technical measures to protect data from unlawful access, destruction, modification, blocking, copying, provision, dissemination and other unlawful actions;
      • cease the transfer and processing of data and destroy it in the cases provided for by the Law;
      • perform other obligations provided for by the Law.

  4. Main Rights
    and Obligations of Personal Data Subjects

    1. Personal data subjects have the right to:
      • receive information concerning the processing of their data, except in the cases established by federal laws (the information is provided in an accessible form and does not include data relating to other subjects, unless otherwise provided by law);
      • demand that the Operator update, block or destroy their data if it is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose of processing;
      • make prior consent a condition of the processing of their data for the purpose of promoting goods, works and services;
      • withdraw their consent to processing or demand that processing be stopped;
      • appeal against the Operator’s actions or inaction to the authorized body or in court;
      • exercise other rights provided for by the legislation of the Russian Federation.
    2. Personal data subjects are obliged to:
      • provide the Operator with accurate data about themselves;
      • notify the Operator of any updates (renewal, modification) to their data.
    3. Persons who have provided the Operator with inaccurate information about themselves, or with information about another subject without that subject’s consent, are liable under the legislation of the Russian Federation.

  5. Principles of Personal Data Processing

    Personal data is processed on a lawful and fair basis, and processing is limited to the achievement of specific, predetermined and legitimate purposes. Processing incompatible with the purposes of collection is not permitted, nor is the merging of databases processed for incompatible purposes. Only data that serves the purposes of processing is processed, and its content and scope are not excessive. The Operator ensures the accuracy, sufficiency and currency of the data and takes measures to delete or update incomplete or inaccurate data. Data is stored in a form that makes it possible to identify the subject for no longer than the purposes of processing require, unless a different period is established by law or by contract. Once the purposes have been achieved or the need for the data no longer exists, the data is destroyed or depersonalized.

  6. Purposes of Personal Data Processing

    1. Processing requests for landscape design, holding consultations, and arranging a specialist’s visit to the site for measurements and inspection.

      For this purpose the following data is processed: last name, first name, patronymic, phone numbers, email address, and the address of the property (site).

      The legal basis is the subject’s consent and the contractual relationship (Article 6 of the Law, as well as Federal Law No. 149-FZ of July 27, 2006 “On Information, Information Technologies and Information Protection”).

      Types of processing: collection, recording, systematization, accumulation, storage, updating, retrieval, use, depersonalization, blocking, deletion, destruction.

    2. Concluding and performing a contract for the development of a landscape project, conducting negotiations and agreeing on the stages of work.

      For this purpose the following data is processed: last name, first name, patronymic, passport details (where required for concluding the contract), contact details, and the address of the site.

      The legal basis is the Civil Code of the Russian Federation and the contract with the subject itself. The types of processing include all actions provided for in clause 2.6, including the transfer of personal data to subcontractors (surveyors, contracting organizations) – solely with the subject’s consent and to the extent necessary to fulfill the obligations under the contract.

    3. Sending informational and promotional materials about the company’s services, special offers and completed projects.

      This purpose is pursued only with the subject’s separate consent. The following data is processed: last name, first name, patronymic, email address and phone number. The legal basis is the subject’s consent. Types of processing: collection, use, transfer (dissemination) – only to the extent and in the manner provided for by that consent.

  7. Conditions for Personal Data Processing

    Personal data is processed when at least one of the following conditions is met:

    1. the subject has consented to the processing of their personal data;
    2. processing is necessary to achieve the purposes provided for by an international treaty or by law, or to carry out the functions, powers and duties assigned to the Operator;
    3. processing is necessary for the administration of justice or the execution of a judicial act or an act of another body;
    4. processing is necessary for the performance of a contract to which the subject is a party, beneficiary or guarantor;
    5. processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, or to achieve socially significant purposes, provided that the subject’s rights and freedoms are not violated;
    6. the personal data being processed is publicly available;
    7. the data being processed is subject to publication or mandatory disclosure under federal law.

  8. Procedure for Collecting, Storing, Transferring
    and Otherwise Processing Personal Data

    The security of personal data is ensured through the legal, organizational and technical measures necessary to meet the requirements of data protection legislation.

    1. The Operator ensures the safekeeping of personal data and takes every possible measure to prevent access to it by unauthorized persons.
    2. The User’s personal data is never, under any circumstances, transferred to third parties, except where required to comply with applicable law or, with the subject’s consent, to fulfill obligations under a works contract (for example, to surveyors, subcontractors, or suppliers of materials).
    3. If any inaccuracies are found, the User may update the data themselves by sending the Operator a notice to the email address info@derevopark.com marked “Personal data update”.
    4. The processing period is determined by the achievement of the purposes of processing, unless a different period is provided for by contract or applicable law. The User may withdraw their consent by sending a notice to the same address marked “Withdrawal of consent to personal data processing”.
    5. Information collected by third-party services (payment systems, online consultant services, messengers, analytics systems) is stored and processed by those parties in accordance with their own policies. The Operator is not responsible for the actions of third parties.
    6. Prohibitions imposed by the subject on the transfer (except for granting access) of personal data authorized for dissemination, as well as on its processing or the conditions of its processing, do not apply where the data is processed in the state, societal or other public interests defined by the legislation of the Russian Federation.
    7. The Operator ensures the confidentiality of personal data.
    8. Data is stored in a form that makes it possible to identify the subject for no longer than the purposes of processing require, unless a different period is established by federal law or by contract.
    9. Processing may be terminated once the purposes have been achieved, the consent has expired, the subject has withdrawn consent or demanded that processing be stopped, or unlawful processing has been discovered.

  9. List of Actions Performed by the Operator
    with the Data Received

    The Operator collects, records, systematizes, accumulates, stores, updates (renews, modifies), retrieves, uses, transfers (disseminates, provides, grants access to), depersonalizes, blocks, deletes and destroys personal data. Processing is carried out both by automated means and without the use of automation.

  10. Cross-Border Transfer of Personal Data

    The Operator notifies the authorized body of its intention to carry out cross-border transfers of personal data before commencing such activity, and obtains the relevant information from the foreign recipients. At present, no cross-border transfers are carried out.

  11. Confidentiality of Personal Data

    The Operator and any other persons who have gained access to personal data are obliged not to disclose it to third parties or disseminate it without the subject’s consent, unless otherwise provided by federal law.

  12. Final Provisions

    1. The User may obtain clarifications on any matters concerning the processing of their data by contacting the Operator by email at info@derevopark.com.
    2. The Operator amends this Policy unilaterally. The new version is published on the Site. The Policy remains in force indefinitely until replaced by a new version.

    Last updated: July 3, 2026.