Policy on personal data processing

1. General provisions
This personal data processing policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter — the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by IE Vasilenko Daria Vladimirovna (hereinafter – the Operator).
1.1. The Operator's most important goal and condition for carrying out its activities is to observe the rights and freedoms of individuals and citizens when processing their personal data, including protecting the rights to privacy, personal and family secrets.
1.2. This Operator's policy regarding the processing of personal data (hereinafter – the Policy) applies to all information that the Operator may obtain about visitors to the website https://prostarch.ru/en/.
1.3. The processing of Users' personal data is carried out exclusively using databases located on the territory of the Russian Federation. The Operator does not carry out cross-border transfer of personal data to the territories of foreign states. 
1.4. The Operator does not disseminate the User's personal data in publicly available sources.
1.5. On the website, the Operator uses Yandex Metrica metric programs.

2. Basic concepts used in the Policy
2.1. Personal data operator - IE Vasilenko Daria Vladimirovna (OGRNIP: 319237500248691, INN: 233101864590), who organizes and carries out the processing of personal data, and also determines the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data.
2.2. Website – a collection of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://prostarch.ru.
2.3. Personal data processing – any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (provision, access), deletion, destruction of personal data.
2.4. Personal data – any information directly or indirectly related to an identified or identifiable User of the website https://prostarch.ru.
2.5. User – any individual using the website.
2.6. Cookies – alphanumeric files (a small piece of data) that are stored in the User's browser or on the User's device when visiting the website.

3. Terms and purposes of personal data processing
3.1. Conditions for processing Users' personal data for the purpose of preparing, concluding, and executing civil law contracts:
3.1.1. The legal basis for the Operator's processing of personal data is the User's consent to the processing of personal data, as well as Article 6 of the Personal Data Law, which provides the Operator with the right to process personal data without the User's consent if processing is necessary for the performance of a contract to which the personal data subject is a party.
3.1.2. List of personal data processed: surname, first name, patronymic, contact phone numbers, email address, position, current employment data including employer's name.
3.1.3. Method of personal data processing: mixed processing of personal data. The Operator processes data by collecting, systematizing, storing, recording, accumulating, clarifying (updating, changing), extracting, using, blocking, deleting, destroying.
3.1.4. The Operator processes personal data from the moment the User provides consent until the purposes for which the personal data were collected are achieved, or until the User withdraws consent to the processing of their personal data, unlawful processing of personal data is identified, or the Operator's business activities cease.
3.2. Conditions for processing Users' personal data for the purpose of identifying unique website visitors and the devices from which the website is accessed, as well as collecting website visit statistics to improve its operation and eliminate various errors that may occur on the website:
3.2.1. The legal basis for the Operator's processing of personal data is the User's consent to the processing of personal data, provided by performing conclusive actions – continuing to use the website.
3.2.2. List of personal data processed: cookies necessary to ensure the correct operation of the website; cookies that record data on User behavior on the website; cookies that allow optimizing the content of the website for Users. Cookies do not belong to special categories of personal data or biometric personal data.
3.2.3. Method of personal data processing: automated processing of personal data. The Operator processes data by collecting, systematizing, storing, recording, accumulating, clarifying (updating, changing), extracting, using, blocking, deleting, destroying.
3.2.4. The Operator processes personal data from the moment the User provides consent until the purposes for which the personal data were collected are achieved, or until the User withdraws consent to the processing of their personal data, unlawful processing of personal data is identified, or the Operator's business activities cease.
3.3. Conditions for processing personal data for the purpose of processing User applications for participation in the X International Conference ProStarch 2026: From Raw Materials to Bioeconomy:
3.3.1. The legal basis for the Operator's processing of personal data is the User's consent to the processing of personal data. 
3.3.2. List of personal data processed: surname, first name, patronymic, contact phone numbers, email address.
3.3.3. Method of personal data processing: mixed processing of personal data. The Operator processes data by collecting, systematizing, storing, recording, accumulating, clarifying (updating, changing), extracting, using, blocking, deleting, destroying.
3.3.4. The Operator processes personal data from the moment the User provides consent until the purposes for which the personal data were collected are achieved, or until the User withdraws consent to the processing of their personal data, unlawful processing of personal data is identified, or the Operator's business activities cease.

4. Transfer of personal data to third parties
4.1. The Operator has the right to transfer Users' personal data to third parties, which may only include:
  • TimePad Ltd (OGRN: 1127746675275, INN: 7726703662, KPP: 772601001).
  • Association of value-added grain processing companies (OGRN: 1027739465160, INN: 7701197132, KPP: 770101001).
  • The Operator's contractors providing support services for the information systems used, hosting, auditing, and other services acquired by the Operator for the purposes indicated above.
  • Authorized state authorities of the Russian Federation only on the grounds and in the manner established by the legislation of the Russian Federation. 
4.2. The Operator has the right to engage third parties in the processing of received personal data and/or transfer the received data to them, as well as receive data from them for the specified purposes without additional consent from the User, provided that the said third parties ensure the confidentiality and security of personal data during processing. Processing of personal data by the said third parties is permitted with and without the use of automation tools, as well as the performance by them of any actions for processing personal data that do not contradict the legislation of the Russian Federation. 
4.3. The processing of personal data by a third party may be carried out only on the basis of an agreement that defines the list of actions (operations) to be performed with personal data, the purposes of processing, provisions for ensuring the security of personal data, including the requirement not to disclose or disseminate personal data without the User's consent, unless otherwise provided by the legislation of the Russian Federation.

5. Measures for the protection of personal data
5.1 When processing personal data, the operator, at its discretion, takes the necessary legal, organizational, and technical measures to protect them from unauthorized or accidental access:
  • identifies threats to the security of personal data during their processing in personal data information systems;
  • applies organizational and technical measures to ensure the security of personal data, including during their processing in personal data information systems, necessary to fulfill the requirements for personal data protection, the implementation of which ensures the levels of personal data protection established by the Government of the Russian Federation;
  • evaluates the effectiveness of the measures taken to ensure the security of personal data before commissioning the personal data information system;
  • ensures timely detection of unauthorized access to personal data and takes necessary measures to prevent such incidents and eliminate their consequences;
  • establishes rules for accessing personal data processed in the personal data information system, and also ensures the registration and accounting of all actions performed with personal data in the personal data information system;
  • ensures control over the measures taken to ensure the security of personal data and the level of protection of personal data information systems;
  • publishes the Privacy Policy on the website and ensures unlimited access to it;
  • carries out internal control of the compliance of personal data processing with personal data legislation;
  • determines the storage locations of personal data.
6. Final Provisions
6.1. To obtain information about the processing of their personal data, to submit an application for clarification, blocking or destruction of personal data, as well as to withdraw their consent to the processing of personal data, the User may contact the Operator by sending an email to: pr@starchunion.com.
6.2. The Operator reserves the right to unilaterally amend this Policy, which come into force after the publication of the updated version of the Policy on the website. The current version of the Policy is freely available on the Internet at https://prostarch.ru/en/policy
6.3. All relations concerning the processing of personal data not reflected in this Policy are governed by the current legislation of the Russian Federation.