Supply of spare parts

1. General Provisions
This Personal Data Processing Policy is drafted in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by SHUTTLE SERVICE LLC (hereinafter referred to as the "Operator").
1.1. The Operator’s highest priority and condition for its operations is the observance of human and civil rights and freedoms when processing their personal data, including the protection of rights to privacy, personal, and family secrets.
1.2. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the website https://shuttle-space.ru.
2. Key Terms Used in the Policy
2.1. Automated processing of personal data – processing of personal data using computer technology.
2.2. Blocking of personal data – temporary cessation of personal data processing (except where processing is necessary to clarify personal data).
2.3. Website – a collection of graphical and informational materials, as well as computer programs and databases, ensuring their availability on the internet at the network address https://shuttle-space.ru.
2.4. Personal data information system – a set of personal data contained in databases and information technologies and technical means enabling their processing.
2.5. Depersonalization of personal data – actions rendering it impossible to determine, without additional information, the affiliation of personal data to a specific User or other subject of personal data.
2.6. Processing of personal data – any action (operation) or set of actions (operations) performed with personal data, with or without automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction of personal data.
2.7. Operator – a state body, municipal body, legal entity, or individual that independently or jointly with others organizes and/or processes personal data, as well as determines the purposes of processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal data – any information directly or indirectly related to an identified or identifiable User of the website https://shuttle-space.ru.
2.9. Personal data permitted for dissemination – personal data to which unlimited access is granted by the subject of personal data by consenting to processing under the Personal Data Law (hereinafter referred to as "dissemination-permitted personal data").
2.10. User – any visitor to the website https://shuttle-space.ru.
2.11. Provision of personal data – actions aimed at disclosing personal data to a specific person or circle of persons.
2.12. Dissemination of personal data – actions aimed at disclosing personal data to an indefinite circle of persons or making personal data publicly available, including publication in media or placement in information and telecommunications networks.
2.13. Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state to a foreign authority, foreign individual, or foreign legal entity.
2.14. Destruction of personal data – actions resulting in the irreversible destruction of personal data with no possibility of recovery in the personal data information system and/or destruction of physical media containing personal data.
3. Operator’s Key Rights and Obligations
3.1. The Operator has the right to:

• Receive accurate information and/or documents containing personal data from the subject of personal data;
• Continue processing personal data without the subject’s consent if grounds are specified in the Personal Data Law;
• Determine the composition of measures necessary to comply with the Personal Data Law.

3.2. The Operator is obliged to:

• Provide the subject of personal data, upon request, with information regarding the processing of their personal data;
• Process personal data in accordance with Russian law;
• Respond to requests from subjects of personal data and their legal representatives;
• Notify the authorized body for personal data protection of any breaches within 10 days;
• Publish or otherwise provide unrestricted access to this Policy;
• Implement legal, organizational, and technical measures to protect personal data;
• Cease processing and destroy personal data as required by law.

4. Rights and Obligations of Personal Data Subjects
4.1. Subjects of personal data may:

• Obtain information about the processing of their personal data;
• Demand the Operator to clarify, block, or destroy inaccurate or unlawfully obtained data;
• Withdraw consent for processing;
• Appeal unlawful actions of the Operator.

4.2. Subjects of personal data must:

• Provide accurate data about themselves;
• Notify the Operator of updates to their personal data.

4.3. Persons providing false data or data about others without consent bear liability under Russian law.
5. Principles of Personal Data Processing
5.1. Processing is lawful and fair.
5.2. Processing is limited to specific, predefined, and legitimate purposes.
5.3. Merging databases with incompatible processing purposes is prohibited.
5.4. Only data relevant to the processing purposes is processed.
5.5. The scope and content of processed data correspond to the stated purposes.
5.6. Accuracy and sufficiency of data are ensured; outdated or incomplete data is updated or deleted.
5.7. Storage duration does not exceed the purposes of processing unless required by law.
6. Purposes of Personal Data Processing

• Full name
• Email address
• Phone numbers
• Company name
• Legal documents of the Operator
• Contracts between the Operator and the subject of personal data

Processing activities include:
Collection, recording, systematization, storage, destruction, depersonalization, and sending informational emails.
7. Conditions of Processing
7.1. Processing requires the subject’s consent, except where otherwise provided by law.
7.2. Processing is permitted for legal obligations, contract performance, or public interests.
8. Procedure for Collection, Storage, and Transfer
8.1. The Operator implements legal, organizational, and technical measures to protect data.
8.2. Data is not transferred to third parties except as required by law or with the subject’s consent.
8.3. Users may update their data by emailing info@shuttle-space.ru with the subject "Personal Data Update."
8.4. Processing ceases upon achieving its purposes, withdrawal of consent, or lawful request.
9. Operator’s Actions with Personal Data
The Operator performs collection, recording, systematization, storage, clarification, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction of data.
10. Cross-Border Data Transfer
10.1. The Operator must notify the authorized body before cross-border transfers.
10.2. Relevant information must be obtained from foreign recipients prior to transfer.
11. Confidentiality
The Operator and authorized persons must not disclose personal data without consent, unless required by law.
12. Final Provisions
12.1. Users may contact the Operator at info@shuttle-space.ru for clarifications.
12.2. This Policy is effective indefinitely and may be updated. The current version is available at https://shuttle-space.ru.