Data Processing Policy

1. General Processing Principles

Processing of personal data is carried out in accordance with the principles of legality, fairness, and transparency. We process data only to the extent necessary to achieve the stated purposes and do not use it for other purposes without the consent of the data subject.

All data is processed using appropriate technical and organizational security measures to protect against unauthorized access, loss or destruction.

2. Legal Basis for Processing

Processing of personal data is carried out on the following legal grounds:

• Consent of the data subject to process their personal data
• Performance of a contract to which the data subject is a party
• Compliance with legal obligations of the operator
• Protection of vital interests of the data subject or other persons
• Performance of tasks in the public interest

3. Categories of Processed Data

3.1. Identification Data

First Name, last name, contact information, including email address and phone number.

3.2. Technical Data

IP address, browser type, operating system, device information and its settings.

3.3. Interaction Data

Information about website visits, pages viewed, visit time, and user actions.

4. Data Processing Methods

Data processing includes the following operations:

1. Collection and recording of personal data
2. Systematization and storage of data
3. Clarification and updating of information
4. Use of data to provide services
5. Analysis and statistical processing
6. Deletion or anonymization of data after the storage period expires

5. Data Storage Periods

Personal data is stored for the period necessary to achieve the purposes of processing, or for the period established by law. After the storage period expires, data is subject to deletion or anonymization.

Specific storage periods for different categories of data are determined depending on processing purposes and legal requirements.

6. Security Measures

The following measures are applied to protect personal data:

• Data encryption during transmission and storage
• Restricting data access based on the principle of necessity
• Regular security system updates
• Monitoring and auditing data access
• Data backup
• Training staff on rules for working with personal data

7. Data Transfer to Third Parties

Personal data may be transferred to third parties only in the following cases:

• When transfer is necessary to provide requested services
• When required by law or by request of government agencies
• When the data subject has given explicit consent to transfer
• When transfer is carried out as part of a merger, acquisition, or other corporate transaction

When transferring data to third parties, we ensure that they comply with the same data protection standards as we do.

8. Data Subject Rights

Personal data subjects have the following rights:

• Right to receive information about processing of their data
• Right to access their personal data
• Right to correction of inaccurate or incomplete data
• Right to deletion of data under certain conditions
• Right to restriction of data processing
• Right to data portability
• Right to object to data processing
• Right to withdraw consent to processing

9. Processing of Minors' Data

We do not intentionally collect personal data of persons who have not reached the age established by law. If we become aware that we have received data of a minor without the consent of legal representatives, we will take measures to delete such information.

10. Policy Changes

We may periodically update this Data Processing Policy. All changes will be reflected on this page with the date of the last update. We recommend periodically reviewing this policy to stay informed of current information.

11. Contact

For all questions related to personal data processing, including the exercise of your rights, you can contact us at: info@aifinstrategyhub.com