Personal Data Security Measures

1. Purpose

This information is published in accordance with Article 18.1(2) of Russian Federal Law No. 152-FZ. The personal-data operator is E.N. Kubrakov, individual entrepreneur.

2. Organisational measures

• Processing purposes, categories, and legal grounds are determined.
• Access is limited on a need-to-know basis.
• Procedures are maintained for data-subject requests, access management, and retention control.
• Internal documents and measures are reviewed as processes and legislation change.

3. Technical measures

• Authentication, access controls, and protected connections are used as provided by the Service architecture.
• Significant events are logged, components are updated, and measures are applied against unauthorized access.
• Backup and recovery procedures are provided to an extent appropriate to the infrastructure and risks.

4. Incidents and retention

When an incident is identified, the Operator takes steps to contain, investigate, and remediate it, and makes notifications where required by law.

Personal data are retained only for the processing purposes and periods required by law or the selected plan, then deleted or depersonalized unless another legal basis applies.