PRIVACY POLICY
Edition dated 1 June 2026.
Operator: Individual Entrepreneur (Individualny predprinimatel) Kovaleva Ekaterina Aleksandrovna
TIN (INN) 781425543703
PSRNIE (OGRNIP) 316784700212436
e-mail: vesnaweddingspb@gmail.com / Vesnaweddingmsk@gmail.com
What is this Policy about?
The Policy sets out information on how the Operator processes your personal data and ensures their security and confidentiality.
In fulfilment of the requirements of Part 2 of Article 18.1 of the Federal Law “On Personal Data” (Federalny zakon “O personalnykh dannykh”), this Policy is published in the public domain on the Internet on the Operator’s Resources.
Resources – electronic resources, including social networks, services, platforms, messengers, channels of the Operator registered in its name, and the website.
From the Policy, you will learn what personal data the Operator receives and how it uses them.
What is personal data?
Personal data is any information about a person (a personal data subject) by which they can be identified.
The Operator processes only the personal data listed in the Policy, which characterise you as a user of the Resources.
You may give consent to the processing of personal data when using the Resources, filling in feedback forms on the Resources and in other ways provided for by the Policy.
On what grounds does the Operator process personal data?
The Operator processes personal data on the following legal grounds:
- Consent of the personal data subject (Clause 1, Article 6 of the Federal Law “On Personal Data”) – applies to the processing of data transmitted when using the Resources, filling in feedback forms, publishing reviews, using cookie files and other similar cases.
- Performance of a contract (Clause 5, Article 6 of the Federal Law “On Personal Data”) – applies to the processing of data necessary for the preparation, conclusion and performance of contracts, as well as the provision of services requested by the user.
- Performance of obligations imposed by the legislation of the Russian Federation (Clause 2, Article 6 of the Federal Law “On Personal Data”) – applies to the processing of personal data necessary to comply with legislative requirements, including tax accounting, accounting reporting, and execution of orders of state authorities.
- Pursuit of the legitimate interests of the Operator (Clause 7, Article 6 of the Federal Law “On Personal Data”) – applies to the processing of data to ensure website security, prevent fraud, protect the rights of the Operator in the event of disputes, as well as when transferring data to third parties for the provision of necessary services.
What rights do you have?
At any time when the Operator holds your personal data, you may exercise the following rights:
| Right | Description |
|---|---|
| Right of access | You have the right to request a copy of the personal data held by the Operator |
| Right to rectification | You may ask the Operator to correct inaccurate or incomplete personal data |
| Right to blocking and erasure of personal data | You may request the erasure of data held by the Operator about you, except in cases where the Operator is required to store such data by law |
| Right to appeal against actions/inaction of the Operator | If you believe that the Operator is processing your personal data in breach of legislative requirements or otherwise violating your rights, you are entitled to appeal against the actions/inaction of the Operator with Roskomnadzor (Federal Service for Supervision of Communications, Information Technology and Mass Media) |
| Right to appeal against decisions made solely on the basis of automated processing of personal data | You have the right to object to decisions made solely on the basis of automated processing of your personal data |
| Right to withdraw consent | At any time you may withdraw your consent to the processing of your data |
You may contact the Operator if you wish to clarify the procedure for exercising other rights provided for by the Federal Law “On Personal Data”.
How does the Operator process personal data?
The Operator processes personal data both in digital form (automated) and manually (without the use of automated means). In doing so, the Operator limits itself to the following actions:
- collection
- recording
- systematisation
- accumulation
- storage
- clarification (updating, modification)
- retrieval
- use
- transfer (provision, access)
- blocking
- erasure
- destruction of personal data
For what purposes does the Operator process your personal data?
| Purpose | Personal Data | Category | Processing Period | Destruction Procedure |
|---|---|---|---|---|
| Ensuring website operation | IP address, location data, cookie files | general | until the purpose is achieved or consent is withdrawn | deletion from the Operator’s database |
| Processing of a service request and the service provision period | Full name, e-mail, mobile phone number, messenger ID | general | until the purpose is achieved or consent is withdrawn | deletion from the Operator’s database |
| Preparation, conclusion and performance of a contract | Full name, e-mail, mobile phone number, account details, passport data, registered address | general | until the purpose is achieved or consent is withdrawn | deletion from the Operator’s database |
| Publication of reviews | Full name, messenger ID, photo and video images, voice audio recording | general | until the purpose is achieved or consent is withdrawn | deletion from the Operator’s database |
What are cookie files?
The website uses cookie files – small text files that are saved in the user’s browser when visiting the website. Cookie files allow the user’s device to be recognised, ensure the correct operation of the website and improve the functionality of the services.
Categories of cookie files used:
- Functional cookies – necessary for the basic operation of the website, including saving user settings.
- Analytical cookies – used to collect statistics and analyse user behaviour on the website. This allows the structure and content of the website to be improved. Web analytics systems with localised data storage are used (e.g., Yandex.Metrica (Yandeks.Metrika), Yandex.Webmaster (Yandeks.Vebmaster)).
- Marketing cookies – used to personalise content and display advertisements on third-party platforms (where applicable). Used only with the separate consent of the user.
Legal basis for processing
Functional cookie files are processed on the basis of the legitimate interests of the Operator (ensuring technical accessibility of the website).
Analytical and marketing cookie files are processed on the basis of the consent of the personal data subject, expressed by checking the corresponding box (checkbox) or by continuing to use the website with the cookie banner activated.
Cookie file management
The user has the right to disable cookie files in the browser settings. This may affect the correct display of certain elements of the website and restrict access to the functionality of the personal account.
Further information can be found at the following links:
Does the Operator transfer your personal data to third parties?
The Operator may transfer personal data to third parties to the extent necessary to achieve the purposes specified in this Policy. Such transfer is carried out only in cases provided for by law or where it is necessary for the provision of services to the user.
The Operator uses the services of third parties that process personal data on its behalf, on the basis of concluded confidentiality and personal data processing agreements. This is permissible if such persons:
- ensure adequate data protection,
- do not use them for their own purposes,
- act strictly within the scope of the instructions.
Such recipients may include:
- hosting providers and persons providing technical support for the website and applications;
- online appointment and customer management platforms (YCLIENTS);
- platforms ensuring the operation of services, including call tracking and analytics (MCN Telecom, MANGO OFFICE, Roistat);
- contractors involved in the delivery process, processing of returns and other order-related operations;
- persons providing access to the Resources or supporting the user interface;
- persons providing legal protection for the Operator or third parties in the event of violations or threatened violations of their rights, including violations of laws or regulatory documents;
- persons ensuring user access to the Resources.
How does the Operator ensure the security of personal data?
The Operator protects the personal data it holds from disclosure, full or partial loss, and unauthorised access by third parties.
To this end, the Operator uses all necessary technical and organisational security and confidentiality measures and continuously updates them in line with the latest technical developments. Such measures include:
- appointment of a person responsible for organising the processing of personal data;
- familiarisation of employees directly engaged in the processing of personal data with the provisions of the legislation of the Russian Federation on personal data, including the requirements for personal data protection;
- data backup;
- use of information protection tools that have undergone conformity assessment procedures.
The set of security measures applied is determined based on the current threats to the security of personal data and the approved level of their protection in accordance with the legislation of the Russian Federation.
In the event of a personal data breach, the Operator:
- notifies Roskomnadzor of the breach within 24 hours;
- conducts its own investigation within 72 hours and notifies Roskomnadzor of its results.
What does the Operator not verify?
The Operator cannot verify and therefore trusts you that you:
- have full legal capacity;
- have provided your own accurate personal data.
How to contact the Operator?
For any questions regarding the processing of personal data, you may contact the Operator by e-mail at vesnaweddingspb@gmail.com / Vesnaweddingmsk@gmail.com.
When contacting us, please provide your name and contact details for feedback. The Operator will respond to your request no later than 10 business days from the date of its receipt.
Amendment of the Policy
The Operator may update the terms of the Policy on the following grounds:
- changes in legislation;
- introduction of new technologies or methods of personal data processing;
- changes in the structure or business processes of the Operator;
- introduction of new products or services that require an update of the approaches to personal data processing;
- feedback from users or changes in the privacy policy of the Operator’s partners.
The Operator will send notifications of changes to the Policy, where such changes are material, by available means.