Personal Data Policy

1. General provisions

This Policy defines how personal data of website users is processed on https://languages.vastny.ru and applies to all data received when using Vastnylanguages.

Personal data operator: ИП Иванова Виктория Викторовна, address: Партийный переулок, 1к11, Москва, 115093, INN: 772034411359, OGRN/OGRNIP: 321774600141142, email: info@zapomnienglish.ru.

The Policy is prepared in accordance with the legislation of the Russian Federation, including Federal Law No. 152-FZ "On Personal Data", and applies to processing on the website, in the account, during payments, support requests, third-party authorization, and related digital products.

2. Data processing principles

• processing is carried out on a lawful and fair basis;
• only data needed for a specific purpose is processed;
• databases with incompatible processing purposes are not combined;
• the content and scope of processed data correspond to the declared purposes;
• where necessary, the operator updates, clarifies, or deletes data;
• storage is limited to the period needed to achieve the purposes and comply with law.

3. Data subjects and data categories

The operator may process data of registered users, visitors, payers, people who contact support, and representatives of contractors where needed for a contract or request.

• identification data: email, phone, name, nickname, and other data provided by the user;
• account data: user ID, registration date, settings, login and activity history;
• service usage data: learning lists, progress, answers, statistics, analytics events, and feature interactions;
• technical data: IP address, cookies, localStorage, browser, device, operating system, timezone, logs, and diagnostic events;
• payment and contract data: selected plan, payment status, refunds, promo codes, receipts, requests, and performance of obligations;
• communication data: support requests, correspondence, and complaint handling results;
• data received from third-party authorization services if the user chooses that login method.

4. Processing purposes

• user registration and account access;
• performance of the offer and provision of the digital service, including trial and paid plans;
• learning personalization, progress saving, lists, settings, and activity history;
• usage statistics, product improvement, interface testing, and error diagnostics;
• security, fraud prevention, and abuse prevention;
• handling support requests, claims, refunds, and legally significant requests;
• compliance with legal, accounting, and tax requirements;
• service notifications and, with separate consent, advertising messages.

5. Legal bases for processing

• consent of the personal data subject;
• conclusion and performance of a contract accepted through the offer;
• fulfillment of obligations imposed on the operator by Russian Federation law;
• the operator's legitimate interest in website security and stable operation within the limits allowed by law.

6. Processing methods and operations

The operator processes data with and without automation while observing confidentiality and reasonable necessity.

Within the declared purposes, the operator may collect, record, systematize, accumulate, store, clarify, retrieve, use, transfer, provide, access, depersonalize, block, delete, and destroy personal data.

7. Data transfer and delegated processing

Data may be transferred to third parties only where there is a legal basis and only to the extent necessary for the website: hosting, cloud infrastructure, analytics, email and verification code delivery, payment infrastructure, and external authorization services.

If specific operations are performed on the operator's behalf, such parties process data only within the assigned task, under contract, and with confidentiality and security requirements.

The operator may also transfer data upon request of authorized public authorities where such obligation is provided by Russian Federation law.

8. Cross-border data transfer

When using certain technology providers, data may be processed or stored using infrastructure located outside the Russian Federation. In such cases, the operator evaluates the legal basis and applicable protection measures in advance and proceeds from the need to ensure an appropriate level of data security.

9. Cookies, analytics, and local storage

The site uses cookies, localStorage, and similar technologies for authorization, session continuity, analytics, page performance measurement, abuse prevention, A/B tests, and marketing scenarios. Details are provided in the Cookies Policy.

10. Retention and deletion

Data is stored no longer than required by processing purposes, contractual relations, limitation periods, and mandatory Russian Federation legal requirements.

After the purposes are achieved, consent is withdrawn, or data is no longer needed, the operator deletes, depersonalizes, or blocks the data unless longer storage is required by law, to protect the operator's rights, or to fulfill obligations to the user.

11. User rights

• receive information about processing of their personal data;
• request clarification, blocking, or destruction of inaccurate or unlawfully processed data;
• withdraw consent to personal data processing;
• object to processing based on legitimate interest where there are lawful grounds;
• request termination of processing in cases provided by law;
• appeal the operator's actions to Roskomnadzor or in court.

12. Request handling

Requests concerning personal data processing, withdrawal of consent, data updates, or deletion are sent to info@zapomnienglish.ru. The operator may request additional information to identify the applicant and protect data from unlawful disclosure.

13. Security measures

The operator applies reasonable legal, organizational, and technical measures to protect data from unlawful or accidental access, destruction, modification, blocking, copying, distribution, and other unlawful actions.

14. Minors' data

If minors use the service under applicable law, the legal representative must independently assess whether data provision and paid features are permitted. If unlawful data provision is detected, the operator may restrict processing and request confirmation of lawful grounds.

15. Requests and policy changes

Personal data requests are sent to info@zapomnienglish.ru.

The operator may update the Policy. The new version applies from publication on this page unless otherwise stated.