Policy on the processing of personal data
1. General provisions
1.1. This Policy defines how the Operator processes and protects personal data and applies to the site https://bafm.pro (hereinafter — the Site).
1.2. Operator: Sole Proprietor Yulia V. Skvortsova, OGRNIP 323774600603881, INN 772790894289, e-mail infobaf.ru@gmail.com.
1.3. By using the Site and submitting data through the forms, the user confirms their agreement with this Policy.
2. What data is processed
2.1. Data the user provides themselves: the parent’s (legal representative’s) full name, phone number, the child’s age, and other data voluntarily entered in the form.
2.2. Data obtained automatically: cookies, IP address, browser and device information, referral source, and actions on the Site — including via the Yandex.Metrica web-analytics system.
2.3. Special categories of data and biometric data are not processed.
2.4. Photos and videos from sessions and events may be published on the Site and on the Operator’s social media only with the separate consent of the child’s parent (legal representative) to the use and dissemination of the image (art. 152.1 of the Civil Code, art. 10.1 of 152-FZ). Such images are not used by the Operator as biometric personal data.
3. Purposes of processing
3.1. Processing enquiries and requests, contacting the user, enrolment in sessions, conclusion and performance of the contract, informing about services, improving the Site, and traffic analytics.
4. Legal grounds
4.1. The subject’s consent; conclusion and performance of a contract to which the subject is a party; requirements of the legislation of the Russian Federation.
5. Cookies and web analytics
5.1. The Site uses cookies and the Yandex.Metrica system to analyse traffic and improve the service. The user can disable cookies in their browser settings; this may affect how the Site works.
6. Transfer to third parties
6.1. Processing may be entrusted to: the hosting provider that hosts the Site in the Russian Federation, and YANDEX LLC (16 Lva Tolstogo St., Moscow, 119021) for the «Yandex Metrica» web analytics — on terms of confidentiality. Yandex Metrica servers are located in the Russian Federation; no cross-border transfer of personal data takes place. Data is transferred to other parties only with the subject’s consent or as required by law.
7. Storage and localisation
7.1. The recording, systematisation, accumulation, storage, refinement, and retrieval of the personal data of Russian citizens are carried out using databases located within the Russian Federation.
7.2. Data is stored no longer than required for the purposes of processing, or until consent is withdrawn, unless another period is established by law.
8. Data protection
8.1. The Operator takes the necessary legal, organisational, and technical measures to protect data from unlawful access, alteration, distribution, and destruction.
9. Rights of the subject
9.1. The subject has the right to obtain information about the processing of their data, to demand its refinement, blocking, or destruction, and to withdraw consent by sending a request to infobaf.ru@gmail.com or by another method that allows the sender to be identified.
9.2. The subject may also appeal the Operator’s actions (or inaction) to the authorised body for the protection of personal-data subjects’ rights (Roskomnadzor) or in court.
10. Minors
10.1. A child’s data is processed with the consent of their parent (legal representative), who is responsible for the accuracy of the data provided and for having the relevant authority.
11. Changes to the policy
11.1. The Operator may amend the Policy; the new version takes effect from the moment it is posted on the Site.
12. Contacts
12.1. For data-processing matters: infobaf.ru@gmail.com, phone +7 925 337-55-05.