PRIVACY POLICY FOR THE WEBSITE
BY MUTAFORM LLC

Privacy Policy

This Privacy Policy (hereinafter referred to as the “Policy”) applies to all information, including personal data, that LLC “MUTAFORM” (OGRN 1253900009395, registered address: 9a Polkovnika
Nesterova St., Ilyushino village, Nesterovsky municipal district, Kaliningrad region, 238020, RF) (hereinafter referred to as the “Company” or the “Operator”) may receive about the personal data subject during the use of the website, as well as during the execution of any agreements and contracts concluded with the personal data subject.

1. Terms and Definitions

1.1. Personal Data (PD) – any information relating directly or indirectly to an identified or identifiable natural person.
1.2. Personal Data Operator (Operator) – a state or municipal authority, legal entity, or individual that organizes and/or carries out the processing of personal data, determines the purposes and scope of personal data processing, as well as the actions (operations) performed with personal data.
1.3. Personal Data Subject (User) – an individual whose personal data is processed and who can be identified directly or indirectly.
1.4. Processing of Personal Data – any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, or destruction of personal data.
1.5. Automated Processing – processing of personal data using computer technology.
1.6. Non-Automated Processing – processing of personal data with the direct participation of a person.
1.7. Cross-Border Transfer – the transfer of personal data to the territory of a foreign country, to a foreign government body, foreign individual, or foreign legal entity.
1.8. Dissemination of Personal Data – actions aimed at disclosing personal data to an indefinite circle of persons.
1.9. Provision of Personal Data – actions aimed at disclosing personal data to a specific person or a specific group of persons.
1.10. Blocking of Personal Data – temporary suspension of personal data processing (except when processing is required to clarify personal data).
1.11. Destruction of Personal Data – actions resulting in the impossibility of restoring the content of personal data in personal data information systems and/or the destruction of physical media containing personal data.
1.12. Anonymization of Personal Data – actions that make it impossible to determine the ownership of personal data without the use of additional information.
1.13. Personal Data Information System – a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
1.14. Website – the web page located at https://mutaform.com/


2. General Provisions and Legal Grounds for Personal Data Processing

2.1. The Company ensures confidentiality and security of personal data processing in accordance with the legislation of the Russian Federation.
2.2. In compliance with part 2, article 18.1 of the Federal Law on Personal Data, this Policy is published on the Website and is publicly available.
2.3. The legal grounds for personal data processing include:

The Constitution of the Russian Federation;
Federal Law No. 149-FZ of July 27, 2006 “On Information, Information Technologies and Information Protection”;
Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”;
Government Decree No. 1119 of November 1, 2012 “On Approval of Requirements for the Protection of Personal Data during Processing in Personal Data Information Systems”;
Government Decree No. 687 of September 15, 2008 “On the Approval of Regulations on the Specifics of Personal Data Processing without the Use of Automation Tools”;
Order of FSTEC of Russia No. 21 of February 18, 2013 “On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data when Processed in Personal Data Information Systems”;
The Charter and local regulations of the Operator;
Contracts concluded between the Operator and the User;

The User’s consent to the processing of personal data under this Policy.
2.4. The processing of personal data is based on the following principles:

Legality and fairness;

Alignment of processing purposes with the purposes declared during data collection;

Adequacy and relevance of processed data;

Accuracy, sufficiency, and timeliness of personal data;

Legality of organizational and technical measures ensuring data security;

Continuous improvement of personal data protection systems.

3. Rights and Obligations of the Parties
3.1. Operator’s Rights

The Operator has the right to:

Determine the necessary and sufficient measures for compliance with personal data protection laws;

Entrust data processing to another person based on a contract and subject consent;

Continue processing personal data without consent if permitted by law;

Amend this Policy at any time without prior notice to the User.

3.2. Operator’s Obligations

The Operator must:

Organize data processing in accordance with applicable law;

Respond to inquiries from data subjects and their legal representatives as required by law.

3.3. Data Subject’s Rights

The User has the right to:

Receive information on the processing of their personal data;

Request clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, or unlawfully obtained;

Appeal unlawful actions or omissions of the Operator to Roskomnadzor or through the courts.

4. Purposes of Personal Data Processing

The Operator processes personal data for:

Website functionality and communication purposes;

Feedback and inquiries;

Technical and customer support;

Sending updates, special offers, price information, newsletters, and marketing communications.

Processed data categories: full name, phone number, and email address.
Data subjects: individuals or representatives of legal entities entering into contracts with the Operator.
Data storage, processing duration, and destruction are governed by Sections 6 and 7 of this Policy.

5. Consent to Personal Data Processing

5.1. By using the Website, the User accepts this Policy and consents to the automated and non-automated processing of their personal data in accordance with Federal Law No. 152-FZ “On Personal Data”. Consent is confirmed by any active action on the Website, such as completing a contact form or checking a consent box.
5.2. The Operator does not collect or process biometric or special categories of personal data. Cross-border data transfer is not carried out.
5.3. If consent is not granted, the Operator cannot conclude a contract with the User, and certain Website functionalities may be unavailable.
5.4. Cookies:
The Website uses cookies — small text files stored on a device when visiting a site. Cookies help remember preferences, enhance user experience, and customize content and ads. By continuing to use the site, the User consents to the use of cookies. The User may disable cookies through browser settings. Analytical systems such as Yandex.Metrica may process anonymized cookie data.
5.5. The User consents to receive service messages via SMS or email necessary for Website operation (e.g., authorization or registration). The User may withdraw consent anytime by sending an email to contacts@mutaform.com
or unsubscribing via the mailing system.

6. Procedure and Conditions of Personal Data Processing

Both automated and non-automated processing are performed.

Data is collected through the Website and other lawful means.

Processing duration: until the Operator’s liquidation or withdrawal of consent by the User.

Disclosure to third parties is not permitted without consent, except as required by law.

Data may be transferred to authorized state bodies as required by Russian legislation.

Data is stored within the territory of the Russian Federation.

The Operator implements legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, alteration, or destruction.

Access to personal data is granted only to employees whose duties require such access.

7. Updating, Correction, Deletion, and Destruction of Personal Data

The User may withdraw consent to processing at any time by emailing contacts@mutaform.com
with the subject “Withdrawal of Consent to Personal Data Processing.” Withdrawal results in deletion of the User’s account and related personal data.
The Operator must cease processing within ten business days of receiving the withdrawal notice.
Upon achieving processing purposes or withdrawal of consent, personal data shall be destroyed according to internal procedures.
Requests for data access or correction must include identification details and a signature (or a verified electronic signature).

8. Liability

The Company is liable for damages caused by unlawful use of personal data in accordance with Russian law, except as provided by this Policy.
The Company is not liable if:

The data subject disclosed their data independently;

The data was obtained from third parties before receipt by the Company;

Disclosure occurred with the User’s consent.
In the event of unauthorized access or disclosure of personal data, the Operator shall notify the authorized data protection body within 24 hours and provide investigation results within 72 hours.

9. Contact Information

For any questions or suggestions regarding this Policy, please contact us at: contacts@mutaform.com