Personal Data Processing Policy
Version dated 16 October 2026.
This translation is provided for convenience only. The Russian version is the legally binding one: open the Russian version.
1. General provisions
1.1. This policy defines how the operator processes and protects the personal data of visitors to the website zapal.su and of customers (hereinafter “you”). The policy has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and applies to all personal data that the operator receives through the website.
1.2. The personal data operator is Индивидуальный предприниматель Родионов Николай Александрович, INN 773574986850, OGRNIP 325774600892241 (hereinafter the “operator”).Address for enquiries: Московская обл., г. Мытищи, ул. Веры Волошиной, 56.Email for personal data enquiries: ip.rodionov.na@yandex.ru.Phone: +7 (977) 634-77-88.
1.3. The policy is published openly at zapal.su/privacy. The operator may amend the policy; a new version takes effect upon publication unless it states otherwise.
2. What data is processed and why
| Purpose | Data | Legal basis |
|---|---|---|
| Placing, confirming and fulfilling an order, delivery, returns | First and last name, phone, email, city and address of delivery or pickup point, order contents, comment | Conclusion and performance of a sales contract at your initiative (Art. 6(1)(5) of Law 152-FZ); consent |
| Sales to companies and sole proprietors: invoice, accounting documents | Contact person’s name, phone, email; company name, INN, KPP | Performance of the contract; tax and accounting obligations (Art. 6(1)(2) of Law 152-FZ) |
| Accepting payment and issuing receipts | Phone or email for the receipt, amount and contents of the purchase. The operator does not receive or store bank card details — they are entered on the bank’s page | Performance of the contract; Federal Law No. 54-FZ on the use of cash registers |
| Replying to enquiries, matching a part to a sample or equipment model | Name, phone, email, text of the enquiry, photos and descriptions of equipment that you have sent | Consent |
| Operation and security of the website, cart, visit statistics | Cookies and browser local storage, IP address, browser and device information, addresses of visited pages | Consent (continued use of the website); legitimate interest in keeping the website working |
The operator does not process special categories of personal data (health, beliefs, etc.) or biometric data, and does not make decisions with legal consequences based solely on automated processing.
3. How data is processed
3.1. Processing is carried out with and without the use of automated tools and includes collection, recording, organization, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), blocking, deletion and destruction.
3.2. The recording, organization, accumulation, storage, clarification and retrieval of personal data of citizens of the Russian Federation are carried out using databases located in the Russian Federation. No cross-border transfer of personal data takes place.
3.3. The operator passes data on only to the extent necessary for the purpose:
- to delivery services (CDEK, Ozon Delivery) — name, phone, address or pickup point, shipment details;
- to the bank accepting payment on the website and to the fiscal data operator — data for processing the payment and issuing the receipt;
- to the company that provides the operator with servers to host the website — for storing data on its equipment, without the right to use it for its own purposes;
- to government authorities — in cases provided for by law.
3.4. Personal data is not sold and is not passed to third parties for advertising.
4. Retention periods
4.1. Data is kept no longer than the purposes of processing require: order data — for the term of performance of the contract and warranty obligations, and for the limitation period (3 years); accounting and tax documents — 5 years in accordance with the law; enquiries — 1 year from the date of the reply; visit statistics — no more than 1 year.
4.2. Once the purposes are achieved, when consent is withdrawn (if there is no other legal basis) or when unlawful processing is discovered, the data is destroyed within the time limits set by Article 21 of Law 152-FZ.
5. Your rights
You have the right to: obtain information about the processing of your personal data; demand that data be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose; withdraw your consent to processing; appeal against the operator’s actions to Roskomnadzor or in court.
Send your request to the operator’s email or postal address given in clause 1.2. In the request, state your name and the contact you gave on the website (phone or email), and the order number, if any, so that the operator can find your data. The operator replies within 10 working days of receiving the request; this period may be extended by no more than 5 working days, with notice of the reasons.
6. Data protection
The operator takes legal, organizational and technical protection measures: only employees who need access for their work have it, and only to the extent needed; the connection to the website is encrypted (HTTPS); servers are accessible by keys only; backups are made; actions on data in the accounting system are logged.
7. Cookies
The website uses cookies and the browser’s local storage so that the cart and checkout work, and for visit statistics. You can block cookies in your browser settings; the cart and checkout may then not work properly.
8. Contacts
Questions about this policy and the processing of your data — ИП Родионов Н.А., ip.rodionov.na@yandex.ru, +7 (977) 634-77-88.