7. Storage, security and cross-border transfer of personal data
The Company undertakes to take all reasonable measures to protect personal data from unauthorized
access, modification, disclosure, misuse or deletion. The Site is equipped with the necessary
security tools to protect users' personal data. To ensure the safety and protection of personal
data, corporate security systems and procedures are used, including technical and physical
restrictions on the use of and access to personal data stored on the Company's servers.
Access to personal data is provided exclusively to authorized employees of the Company and
persons involved in the technical maintenance of the Site, who undertake to maintain
confidentiality and take measures to prevent unauthorized access by third parties. The Site
servers may be located outside the User's country of residence. By providing personal data, the
User agrees to their transfer, storage and processing outside their country in accordance with
applicable law. In the event of unauthorized access to personal data, the Company is not
responsible for the actions of third parties, including hackers and other violators of the law
who may attempt to use personal data for personal purposes.
In accordance with the legislation of the European Union, the data storage period may be from 6
to 10 years from the moment of the User’s last action on the Site or from the moment of
termination of relations with the Company, depending on the nature of the documentation
(contracts, notifications, business correspondence, etc.). In cases where deletion of data is
impossible or undesirable, data processing may be limited (for example, access to them may be
blocked) until the expiration of the relevant storage period or limitation period. This period
is due to the need to comply with legal requirements, resolve disputes and fulfill contractual
obligations.
Personal data is stored in the volume and under the conditions stipulated by this Policy and
applicable legislation. After the specified period, the data will be deleted or depersonalized,
except in cases where otherwise provided by law, for example, for tax and accounting purposes,
auditing, or other legal requirements.