Purpose of Processing
Informing the user via email.
Personal Data

• Last name, first name, patronymic
• Phone numbers

Legal Grounds
Federal Law "On Information, Information Technologies and Information Protection" No. 149-FZ dated July 27, 2006
Types of Personal Data Processing

• Sending informational emails to the email address.

Conditions for Processing Personal Data

1. Personal data is processed with the consent of the data subject for processing their personal data.
2. Processing of personal data is necessary to achieve the goals provided by international treaties of the Russian Federation or law, to carry out functions, powers, and duties assigned to the operator by Russian Federation legislation.
3. Processing of personal data is necessary for the administration of justice, enforcement of a judicial act, act of another authority or official, enforceable under the laws of the Russian Federation on enforcement proceedings.
4. Processing of personal data is necessary for the performance of a contract, to which the data subject is either a party or a beneficiary, or for the conclusion of a contract initiated by the data subject, or a contract under which the data subject will be a beneficiary.
5. Processing of personal data is necessary to exercise the rights and legitimate interests of the operator or third parties, or for the achievement of socially significant purposes, provided that the rights and freedoms of the data subject are not violated.
6. Processing of personal data, to which the data subject has provided access or requested its dissemination (hereinafter referred to as public personal data).
7. Processing of personal data that is subject to publication or mandatory disclosure under federal law.

Procedure for Collecting, Storing, Transmitting, and Other Processing of Personal Data
The security of personal data processed by the operator is ensured by implementing legal, organizational, and technical measures necessary to fully comply with the requirements of current legislation on personal data protection.

1. The operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access to personal data.
2. Personal data will never be transferred to third parties under any circumstances, except when required by applicable law or if the data subject gives consent to the operator for the transfer of data to a third party to fulfill obligations under a civil contract.
3. If inaccuracies in personal data are identified, the user can update them independently by sending a notification to the operator at the email address privateagency@duck.com with the subject "Personal Data Update."
4. The period of personal data processing is determined by the achievement of the purposes for which the personal data was collected, unless otherwise specified in the contract or by applicable law.
5. The user can withdraw consent to process personal data at any time by sending a notification to the operator via email at privateagency@duck.com with the subject "Withdrawal of Consent for Processing Personal Data."
6. All information collected by third-party services, including payment systems, communication services, and other service providers, is stored and processed by these parties (operators) in accordance with their User Agreement and Privacy Policy. The data subject and/or specified documents. The operator is not responsible for the actions of third parties, including the service providers mentioned in this section.
7. Restrictions established by the data subject on the transfer (except for providing access) or processing conditions (except for access) of personal data allowed for distribution do not apply to cases of processing personal data for government, public, and other public interests defined by Russian Federation law.
8. The operator ensures confidentiality when processing personal data.
9. The operator stores personal data in a form that allows identification of the data subject for no longer than is necessary to achieve the goals of processing personal data, unless the storage period is defined by federal law, a contract, or a contract to which the data subject is a party.
10. The processing of personal data may cease when the goals of processing personal data are achieved, the consent of the data subject expires, consent is withdrawn by the data subject, or the processing of personal data is required to stop, or if unlawful processing of personal data is detected.

List of Actions Performed by the Operator with Personal Data

1. The operator collects, records, organizes, accumulates, stores, updates (amends), extracts, uses, transmits (distributes, provides, grants access), anonymizes, blocks, deletes, and destroys personal data.
2. The operator performs automated processing of personal data with or without transmission of the received information via information and telecommunication networks.

Cross-Border Transfer of Personal Data

1. The operator must notify the authorized body for protection of data subjects' rights before starting cross-border transfer of personal data (such notification is sent separately from the notification on the intent to process personal data).
2. Before submitting the above notification, the operator must obtain relevant information from the authorities of the foreign state, foreign individuals, or foreign legal entities to whom personal data will be transferred.

Confidentiality of Personal Data
The operator and other individuals who have access to personal data are required not to disclose or distribute personal data to third parties without the consent of the data subject, unless otherwise stipulated by federal law.
Final Provisions

1. The user can obtain any clarification on questions regarding the processing of their personal data by contacting the operator via email at privateagency@duck.com.
2. Any changes to the personal data processing policy by the operator will be reflected in this document. The policy is valid indefinitely until replaced by a new version.
3. The current version of the policy is freely available on the Internet.