Policy on personal data processing

1. General provisions
This personal data processing policy is compiled in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter — the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by IE Vasilenko Daria Vladimirovna (hereinafter – the Operator).
1.1. The Operator considers its most important goal and condition for its activities to be the observance of human and civil rights and freedoms when processing their personal data, including the protection of rights to privacy, personal and family secrets.
1.2. This Operator's policy regarding the processing of personal data (hereinafter – the Policy) applies to all information that the Operator may obtain about visitors to the website https://prostarch.ru/en/.
1.3. The processing of Users' personal data is carried out exclusively using databases located on the territory of the Russian Federation. The Operator does not carry out cross-border transfer of personal data to the territories of foreign states. 
1.4. The Operator does not disseminate the User's personal data in publicly available sources.
1.5. On the website, the Operator uses Yandex Metrica metric programs.

2. Basic concepts used in the Policy
2.1. The personal data operator is IE Vasilenko Daria Vladimirovna (OGRNIP: 319237500248691, INN: 233101864590), who organizes and carries out the processing of personal data, and also determines the purposes of personal data processing, the composition of personal data subject to processing, and the actions (operations) performed with personal data.
2.2. Website – a collection of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://prostarch.ru.
2.3. Processing of personal data – any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), deletion, destruction of personal data.
2.4. Personal data – any information directly or indirectly related to a specific or identifiable User of the website https://prostarch.ru.
2.5. User – any individual using the website.
2.6. Cookies – alphanumeric files (a small piece of data) that are stored in the User's browser or on the User's device when visiting the website.

3. Terms and purposes of personal data processing
3.1. Terms of processing Users' personal data for the purpose of preparing, concluding, and executing civil law contracts:
3.1.1. The legal basis for the Operator's processing of personal data is the User's consent to the processing of personal data, as well as Article 6 of the Personal Data Law, which provides for the Operator's right to process personal data without the User's consent if the processing is necessary for the performance of a contract to which the personal data subject is a party.
3.1.2. List of personal data processed: surname, first name, patronymic, contact phone numbers, email address, position, employment data at the current time indicating the employer's name.
3.1.3. Method of personal data processing: mixed personal data processing. The Operator processes data by collecting, systematizing, storing, recording, accumulating, clarifying (updating, changing), extracting, using, blocking, deleting, destroying.
3.1.4. The Operator processes personal data from the moment the User provides consent until the purposes for which the personal data were collected are achieved, or until the User withdraws consent to the processing of their personal data, the identification of unlawful personal data processing, or the termination of the Operator's business activities.
3.2. Conditions for processing Users' personal data for the purpose of identifying unique website visitors and the devices from which the website is accessed, as well as collecting website visit statistics to improve its operation and eliminate various errors that may occur on the website:
3.2.1. The legal basis for the Operator's processing of personal data is the User's consent to the processing of personal data, provided by performing conclusive actions – continuing to use the website.
3.2.2. List of personal data processed: cookies necessary to ensure the correct operation of the website; cookies that record data on User behavior on the website; cookies that allow optimizing the content of the website for Users. Cookies do not belong to special categories of personal data or biometric personal data.
3.2.3. Method of personal data processing: automated processing of personal data. The Operator processes data by collecting, systematizing, storing, recording, accumulating, clarifying (updating, changing), extracting, using, blocking, deleting, destroying.
3.2.4. The Operator processes personal data from the moment the User provides consent until the purposes for which the personal data was collected are achieved, or until the User withdraws consent to the processing of their personal data, unlawful processing of personal data is identified, or the Operator ceases business activities.
3.3. Conditions for processing personal data for the purpose of processing User applications for participation in the X International Conference ProStarch 2026: From Raw Materials to Bioeconomy:
3.3.1. The legal basis for the Operator's processing of personal data is the User's consent to the processing of personal data. 
3.3.2. List of personal data processed: surname, first name, patronymic, contact phone numbers, email address.
3.3.3. Method of personal data processing: mixed processing of personal data. The Operator processes data by collecting, systematizing, storing, recording, accumulating, clarifying (updating, changing), extracting, using, blocking, deleting, destroying.
3.3.4. The Operator processes personal data from the moment the User provides consent until the purposes for which the personal data were collected are achieved, or until the User withdraws consent to the processing of their personal data, unlawful processing of personal data is identified, or the Operator's business activities cease.

4. Transfer of personal data to third parties
4.1. The Operator has the right to transfer Users' personal data to third parties, which may only include:
  • TimePad Ltd (OGRN: 1127746675275, INN: 7726703662, KPP: 772601001).
  • Association of value-added grain processing companies (OGRN: 1027739465160, INN: 7701197132, KPP: 770101001).
  • contractors of the Operator providing support services for the information systems used, hosting, auditing, and other services acquired by the Operator for the purposes mentioned above.
  • to authorized state authorities of the Russian Federation only on the grounds and in the manner established by the legislation of the Russian Federation. 
4.2. The Operator has the right to engage third parties to process the received personal data and/or transfer the received data to them, as well as receive data from them for the specified purposes without the User's additional consent, provided that these third parties ensure the confidentiality and security of personal data during processing. The processing of personal data by these third parties is permitted with and without the use of automation tools, as well as the performance of any actions by them for processing personal data that do not contradict the legislation of the Russian Federation. 
4.3. Processing of personal data by a third party may only be carried out on the basis of an agreement that defines the list of actions (operations) to be performed with personal data, the purposes of processing, provisions for ensuring the security of personal data, including the requirement not to disclose or disseminate personal data without the User's consent, unless otherwise provided by the legislation of the Russian Federation.

5. Measures for personal data protection
5.1 When processing personal data, the operator, at its discretion, takes the necessary legal, organizational, and technical measures to protect them from unauthorized or accidental access:
  • identifies threats to the security of personal data during their processing in personal data information systems;
  • applies organizational and technical measures to ensure the security of personal data, including during their processing in personal data information systems, necessary to fulfill the requirements for personal data protection, the implementation of which is ensured by the personal data protection levels established by the Government of the Russian Federation;
  • evaluates the effectiveness of measures taken to ensure the security of personal data before commissioning the personal data information system;
  • ensures timely detection of unauthorized access to personal data and takes necessary measures to prevent such incidents and eliminate their consequences;
  • establishes rules for accessing personal data processed in the personal data information system, and also ensures the registration and accounting of all actions performed with personal data in the personal data information system;
  • ensures control over the measures taken to ensure the security of personal data and the level of protection of personal data information systems;
  • publishes the Privacy Policy on the website and ensures unlimited access to it;
  • carries out internal control of personal data processing compliance with personal data legislation;
  • determines personal data storage locations.
6. Final Provisions
6.1. To obtain information about the processing of their personal data, to submit an application for clarification, blocking or destruction of personal data, as well as to withdraw their consent to the processing of personal data, the User may contact the Operator by sending an email to: pr@starchunion.com.
6.2. The Operator reserves the right to unilaterally amend this Policy, which amendments shall take effect upon publication of the updated version of the Policy on the website. The current version of the Policy is freely available online at https://prostarch.ru/en/policy
6.3. All relations concerning the processing of personal data not reflected in this Policy are governed by the current legislation of the Russian Federation.