1. General provisions
This privacy policy on personal data processing by sole proprietor Chernyakova V.P. (hereinafter — the Operator, SP Chernyakova V.P., TIN 774256639968, PSRNSP 321771324297249), operating under the Viki Studio brand, defines how personal data are processed and the measures taken to protect them.
Using the website https://viki-studio.com and submitting a request form means the user agrees to this policy. If the user does not agree, they must not submit a request or transfer personal data. A notice about a limited set of data may be sent to hello.viki.studio@gmail.com or by phone at +7 926 326-2000.
1.1. This Policy is prepared in accordance with the laws of the Russian Federation, including Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (hereinafter — the Personal Data Law), to protect human rights and freedoms in the processing of personal data, including the right to privacy and personal and family secrecy.
1.2. The Policy applies to personal data that the Operator processes when running the website and communicating with clients, including data from the request form.
1.3. The Policy applies to processing carried out both before and after it is published on the website.
1.4. Pursuant to Part 2 of Article 18.1 of the Personal Data Law, the Policy is freely available on the Operator’s website.
1.5. The Policy uses the concepts of the Personal Data Law:
- personal data — any information relating to a directly or indirectly identified or identifiable natural person (data subject);
- personal data processing — any action or set of actions performed with personal data, with or without automation: collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction;
- confidentiality of personal data — the duty not to disclose personal data to third parties and not to distribute them without the data subject’s consent, unless otherwise provided by law;
- user — a website visitor, client, or other person who submits a request, or whose data appear in a request or in correspondence with the Operator;
- website — the Viki Studio website at https://viki-studio.com.
1.6. The Operator may determine the measures needed to fulfil its duties under the Personal Data Law, entrust processing to another person under a contract where the law allows it, and continue processing after consent is withdrawn when the law provides grounds to do so.
1.7. The Operator must process personal data under the Personal Data Law, respond to requests from data subjects and their representatives, and provide Roskomnadzor with the required information within 10 business days of receiving its request. This period may be extended by no more than five business days if Roskomnadzor is given a reasoned notice.
1.8. A data subject may obtain information about the processing of their data; request that the data be updated, blocked, or destroyed if they are incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose; give consent to processing for promoting services; and appeal the Operator’s actions to Roskomnadzor or in court.
1.9. The user provides the data needed to respond to a request and updates them if they change. If a request or an attachment contains another person’s personal data, the user confirms they have a lawful basis to transfer them. Claims arising from the lack of such a basis are resolved by the user independently.
1.10. Liability for violating personal data processing laws is determined by the laws of the Russian Federation.
2. Purposes of personal data processing
2.1. The Operator processes personal data only for specific, predetermined, and lawful purposes. Processing incompatible with those purposes is not allowed. The scope of data must not be excessive.
2.2. The Operator processes personal data in order to:
- receive and review a request submitted through the website form;
- contact the user about the request and send service messages about it;
- prepare, conclude, and perform a contract for studio services: design, development, branding, motion, and related work;
- confirm that the data are sufficient for a response and provide support for the request and project;
- keep records of inquiries and contract documents to the extent required by law.
2.3. The Operator sends marketing messages only with the user’s separate consent. Agreeing to this Policy is not such consent.
3. Scope and categories of personal data processed
3.1. The Operator processes data of website users, clients, counterparties, and persons whose data the user themselves provided in a request or attached to it.
3.2. Through the request form, the user may submit a name, phone number, email address, company name, project type, budget, project description, and files, including a brief. When visiting the website, the browser may transmit technical data needed for the site to work: IP address and browser information.
3.3. The Operator does not process special categories of personal data, including information about health, political views, religious beliefs, and intimate life, except where expressly required by law.
3.4. Processing is carried out with the data subject’s consent and, without consent, in cases expressly stated by law. Consent to process form data is confirmed by the checkbox in the request form.
3.5. The Operator stores personal data until the processing purpose is achieved or until the user withdraws consent, unless a longer period is required by law for keeping the contract and accounting records. After that, the data are deleted or depersonalized.
4. Procedure and conditions of personal data processing
4.1. Processing is carried out lawfully, with the data subject’s consent or on another basis provided by law. Confidentiality of the data is maintained. An exception is information that the user themselves made publicly available.
4.2. The Operator may transfer personal data to third parties only if:
- the user consented to the transfer;
- the transfer is needed to respond to a request or perform a contract with the user, including hosting and email providers that process data on the Operator’s instructions and only within those limits;
- the transfer is required by the laws of the Russian Federation.
4.3. Processing includes collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction. It may be automated, non-automated, or mixed.
4.4. The Operator takes legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions.
5. Legal grounds for personal data processing
5.1. The Operator processes personal data on the basis of:
- the Constitution of the Russian Federation;
- the Civil Code of the Russian Federation;
- the Tax Code of the Russian Federation;
- the Personal Data Law;
- contracts the Operator enters into with clients;
- the data subject’s consent, including the checkbox in the website request form.
6. Additional terms
6.1. Disputes under this Policy are resolved under the contract between the parties or, if there is no contract, under the laws of the Russian Federation.
6.2. The Operator may adopt other documents that clarify this Policy and may amend the Policy without the user’s separate consent. The new version takes effect when published on the website, unless it states another date.
6.3. To learn about the processing of their data, update them, restrict processing, withdraw consent, or request deletion, the user writes to hello.viki.studio@gmail.com or calls +7 926 326-2000. The request must identify the user and state the demand. The Operator responds within the time limits of the Personal Data Law.
6.4. Operator: SP Chernyakova V.P., TIN 774256639968, PSRNSP 321771324297249, Moscow. Website: https://viki-studio.com. Email: hello.viki.studio@gmail.com. Phone: +7 926 326-2000.