Privacy Policy

1. General Provisions
This Privacy Policy has been drafted in accordance with the requirements of the Federal Law of the Russian Federation No. 152-FZ "On Personal Data" dated July 27, 2006, and the General Data Protection Regulation (GDPR). It defines the procedure for processing personal data and the measures taken to ensure the security of personal data by LLC "Vigbo" (hereinafter referred to as the "Operator").

1.1.The Operator considers the protection of human and civil rights and freedoms, including the right to privacy, personal and family secrets, as its highest priority and a fundamental condition for conducting its activities when processing personal data.

1.2. This Privacy Policy (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the websites hosted on the domains **shop.ecokedrum.com**, **ecokedrum.com**, **ecokedrum.ru**, as well as any of their subdomains.

2. Definitions
2.1. The following key terms are used in this Policy:

- Automated Processing of Personal Data – processing of personal data using computer technology;
- Blocking of Personal Data – temporary suspension of personal data processing (except in cases where processing is necessary to clarify personal data);
- Website – a collection of graphical and informational materials, as well as computer programs and databases, made available on the Internet at the network addresses (domains) **shop.ecokedrum.com**, **ecokedrum.com**, **ecokedrum.ru**, and their subdomains;
- Administration** – authorized employees managing the Website on behalf of LLC "Vigbo," who organize and/or process personal data and determine the purposes, content, and actions related to personal data processing;
- Personal Data Information System** – a set of personal data contained in databases and the information technologies and technical means enabling their processing;
- Depersonalization of Personal Data** – actions that make it impossible to determine the affiliation of personal data to a specific User or other data subject without additional information;
- Processing of Personal Data** – any action (operation) or set of actions performed with personal data, including collection, recording, systematization, storage, updating, retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction;
- Operator – a state or municipal authority, legal entity, or individual organizing and/or processing personal data, either independently or jointly with others, and determining the purposes and means of processing;
- Personal Data** – any information relating to a directly or indirectly identified or identifiable User of the Website;
- User** – any visitor to the Website;
- Provision of Personal Data** – actions aimed at disclosing personal data to a specific person or group of persons;
- Dissemination of Personal Data** – actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or making personal data publicly available, including publication in media or online;
- Destruction of Personal Data** – actions resulting in the irreversible destruction of personal data, making it impossible to restore the data in the information system or physical carriers.

3. Categories of Processed Personal Data
3.1.The Operator may process the following personal data:
- User’s email address;
- User’s first and last name;
- User’s phone number;
- User’s IP address;
- Photos uploaded by the User;
- Depersonalized data about visitors (including cookies) collected via internet statistics services (e.g., Yandex Metrica).

The above data is collectively referred to as Personal Data in this Policy.

4. Purposes of Personal Data Processing
4.1. The purpose of processing the User’s personal data is to provide access to the Website’s services, information, and materials. The Operator may also send notifications about new products, services, promotions, and special offers. The User may opt out of such communications by emailing hello@ecokedrum.ru.

Additionally, personal data is processed for:
- 4.1.1. Identifying registered Users;
- 4.1.2. Providing access to personalized Website features;
- 4.1.3. Communicating with the User (notifications, requests, service-related messages);
- 4.1.4. Ensuring security and fraud prevention;
- 4.1.5. Verifying the accuracy of provided data;
- 4.1.6. Processing payments and tax-related matters;
- 4.1.7. Providing customer and technical support;
- 4.1.8. Granting access to partner sites/services.

4.2. Depersonalized data is used to analyze User behavior and improve the Website.

5. Legal Basis for Processing
5.1. The Operator processes personal data only if the User voluntarily provides it via Website forms. By submitting data, the User consents to this Policy.

5.2. Depersonalized data is processed if allowed by the User’s browser settings (cookies/JavaScript enabled).

6. Data Collection, Storage, and Transfer
The Operator ensures security through legal, organizational, and technical measures.

6.1. The Operator protects personal data from unauthorized access.

6.2. Data is not shared with third parties unless required by law.

6.3. Users may update their data by emailing hello@ecokedrum.ru with the subject "Update Personal Data."

6.4. Data is processed only as long as necessary for the purposes stated in Section 4.

6.5. Users may withdraw consent by emailing **hello@ecokedrum.ru** with the subject "Withdraw Consent."

6.6. Data is collected via:
- Direct User input (e.g., registration, payments);
- Automated means (e.g., cookies).

Cookies are used for:
- Authentication** (recognizing logged-in Users);
- Analytics** (tracking page visits).

Disabling cookies may limit Website functionality.

6.7. The Operator may disclose data if required by law, to protect rights, or prevent fraud (e.g., in response to government requests). Data may also be shared with third parties for targeted advertising.

7. Cross-Border Data Transfers**
7.1. The Operator does not transfer personal data across borders.

8. Final Provisions
8.1. Users may contact the Operator at **hello@ecokedrum.ru** for clarifications.

8.2. Users may update or delete their data via their account or by email. Note: Some data may be retained for legal compliance.

8.3. This Policy may be updated. The current version is available at:
https://ecokedrum.com/confidential-policy

8.4. The Policy remains effective until replaced by a new version.