Operator's Personal Data Processing Policy
Edition dated August 25, 2025

1. General Provisions

1.1. The Operator's Policy on Personal Data Processing (hereinafter referred to as the "Policy") has been developed for the purpose of ensuring the protection of the rights and freedoms of the personal data subject during the processing of their personal data, including the protection of the rights to inviolability of private life, personal and family secrets.
1.2. Key concepts used in the Policy:
personal data — any information relating directly or indirectly to an identified or identifiable natural person (personal data subject);
processing of personal data — any action (operation) or set of actions (operations) performed using automation tools or without the use of such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data;
mixed processing of personal data — processing of personal data by a person using computing equipment;
distribution of personal data — actions aimed at disclosing personal data to an indefinite circle of persons;
provision of personal data — actions aimed at disclosing personal data to a specific person or a specific circle of persons;
blocking of personal data — temporary suspension of the processing of personal data (except in cases where processing is necessary for clarifying personal data);
destruction of personal data — actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and/or as a result of which the material carriers of personal data are destroyed;
anonymization of personal data — actions as a result of which it becomes impossible, without the use of additional information, to determine the affiliation of personal data with a specific personal data subject;
personal data operator (operator) — Limited Liability Company «K-BRO» («K-BRO»),
Address: 121059, Russia, Moscow, Bolshaya Dorogomilovskaya St., 14, bld. 2, basement, room 1
Phone: +7 495 012-52-76
E-mail: order@k-bro.ru
OKPO: 50215065
OGRN: 1217700285065 
INN/KPP: 7730265676/773001001
Website — k-bro.ru
1.3. The Operator that has gained access to personal data is obliged to maintain the confidentiality of personal data — not to disclose personal data to third parties and not to distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.
2. Purposes of Personal Data Collection
2.1. The processing of personal data is limited to achieving specific, predetermined, and lawful purposes. Processing of personal data that is incompatible with the purposes of its collection is not permitted.
2.2. The purposes of the Operator's processing of personal data include:
establishing feedback with the personal data subject, including sending notifications and requests;
preparation, conclusion, and execution of civil contracts.
3. Legal Grounds for Processing Personal Data
3.1. The legal grounds for processing personal data are: consent to the processing of personal data.
3.2. Consent to the processing of personal data is expressed by the subject by placing a "V" mark next to the field "I agree to the terms of the personal data processing policy" and "I express consent to the processing of personal data" or another field of similar content on the Operator's Website.
4. Categories and List of Processed Personal Data, Categories of Personal Data Subjects
4.1. The content and scope of processed personal data correspond to the stated purposes of processing. Processed personal data must not be excessive in relation to the stated purposes of their processing.
4.2. Category of processed personal data: general.
4.3. List of processed personal data:
Phone number;
Full name (FIO);
Email address.
4.4. Categories of personal data subjects include:
Website Users;
Clients.
4.5. For the purpose of obtaining general information about how the Operator's website is used by visitors, the Operator uses tracking technologies (cookie files) to collect data such as browser type, operating system, site path, Internet provider domain, etc. The information is stored in a format that does not imply personal identification and is not transferred to third parties.
5. Rights and Obligations of the Parties
(Leaving unchanged in meaning, as they are not tied to specific details)
6. Procedure and Conditions for Processing Personal Data
(Leaving unchanged, except for mentions of the operator and the website)