Personal Data Processing Policy

This Personal Data Processing Policy (the "Policy") has been drawn up in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and sets out the procedure for processing personal data and the measures for ensuring their security at Общество с ограниченной ответственностью «Профит» (the "Operator").

The Policy applies to all processes of collection, storage, use, transfer, depersonalisation and destruction of personal data carried out by the Operator in connection with the operation of the website anhelspb.com.

Full name

Общество с ограниченной ответственностью «Профит»

Short name

ООО «Профит»

Tax ID (INN)

7802825464

Registration number (OGRN)

1137847188357

Registered address

194021, г. Санкт-Петербург, вн.тер.г. Муниципальный Округ Светлановское, ул. Политехническая, д. 6, стр. 1, помещ. Н-7

Email for requests

info@anhelspb.com

The Operator processes the personal data of website users for the following purposes:

• responding to enquiries, requests and quotation requests;
• preparing technical proposals and calculations based on specification sheets submitted via the website;
• concluding, performing and administering equipment supply, installation and service contracts;
• notifying users of request status, order updates and service notices;
• fulfilling obligations under the legislation of the Russian Federation (accounting and tax records, responding to enquiries from public authorities).

The Operator processes the following categories of personal data, which the data subject provides voluntarily through forms on the website:

• surname, first name and patronymic;
• contact phone number;
• email address;
• organisation name and job title (when submitting requests on behalf of a legal entity);
• organisation Tax ID / INN (when preparing a commercial offer);
• message content, equipment site parameters, task description — information voluntarily provided by the data subject in free-form text.

The Operator does not process special categories of personal data (race, political views, health status, intimate life) or biometric personal data.

The Operator processes personal data on the basis of the data subject's consent, given by ticking the "I consent to the processing of my personal data" checkbox when submitting any form on the website, and on the grounds set out in paragraphs 2 and 5 of part 1 of Article 6 of Federal Law No. 152-FZ.

Personal data is processed both with and without the use of automation tools. The Operator stores personal data on servers located in the Russian Federation.

The personal data processing period is 5 (five) years from the date of receipt, unless otherwise required by Russian Federation legislation or by a contract with the data subject. Upon expiry of the processing period the personal data is destroyed or depersonalised.

The data subject may withdraw consent at any time by sending a request to info@anhelspb.com. Withdrawal of consent does not prevent processing carried out on grounds that do not require consent.

The Operator does not transfer personal data to third parties except where such transfer is necessary in order to:

• perform contractual obligations towards the data subject (equipment delivery, installation and service work);
• comply with the legislation of the Russian Federation, including requests from public authorities in the manner prescribed by law;
• handle correspondence through email and mailing services that ensure data confidentiality in accordance with their terms of service.

The Operator does not carry out cross-border transfer of personal data to foreign jurisdictions.

The Operator takes the legal, organisational and technical measures necessary to protect personal data from unauthorised access, destruction, modification, blocking, copying, distribution and other unlawful acts, including:

• appointment of staff responsible for organising personal data processing;
• limiting access of the Operator's employees to personal data on a need-to-know basis;
• use of secure data transmission channels (HTTPS);
• back-up and integrity control of databases;
• regular assessment of the effectiveness of the security measures in place.

The data subject has the right to:

• obtain information about the processing of their personal data by the Operator;
• request the correction, blocking or destruction of their personal data if it is incomplete, outdated, inaccurate or has been obtained unlawfully;
• withdraw previously given consent to the processing of personal data;
• lodge a complaint about the Operator's acts or omissions with the supervisory authority for data subjects' rights (Roskomnadzor) or in court.

Requests to exercise these rights must be submitted in writing to: info@anhelspb.com. The response time is 30 days from receipt of the request.

The Operator may amend this Policy. The current version of the Policy is published at anhelspb.com/privacy-policy. The date of the current version is shown at the top of the document.