Personal Data Processing Policy

1. General ProvisionsThis Personal Data Processing Policy (hereinafter referred to as the “Policy”) is developed in accordance with Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter — the “Personal Data Law”) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by Jeffery Katarzyna (hereinafter — the “Operator”).
1.1. The Operator regards the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family secrets, as a primary objective and condition for conducting its activities.
1.2. This Policy applies to all information that the Operator may receive about visitors to the website https://the-fitnutrition.com/.

2. Key Definitions
2.1. Automated processing of personal data — processing using computer technology.
2.2. Blocking of personal data — temporary suspension of processing (except when processing is required for data clarification).
2.3. Website — a combination of graphic and informational materials, as well as computer programs and databases accessible at https://the-fitnutrition.com/.
2.4. Personal data information system — a set of personal data contained in databases and technologies used for their processing.
2.5. Depersonalization of personal data — actions that render it impossible to identify the subject without additional information.
2.6. Processing of personal data — any operation or series of operations with or without automation, including collection, recording, systematization, accumulation, storage, updating, extraction, usage, transfer (distribution, access), depersonalization, blocking, deletion, and destruction.
2.7. Operator — a public authority, municipal body, or private individual/legal entity that organizes and/or performs personal data processing and determines the purposes and scope of such processing.
2.8. Personal data — any information relating directly or indirectly to a specific or identifiable User of the website https://the-fitnutrition.com/.
2.9. Personal data allowed by the subject for distribution — data made available to an unlimited number of persons by the subject via consent under the terms set by the Personal Data Law.
2.10. User — any visitor to the website https://the-fitnutrition.com/.
2.11. Provision of personal data — disclosure to a specific person or group.
2.12. Dissemination of personal data — any actions aimed at making data available to an indefinite number of people, including publication in media, online, or otherwise.
2.13. Cross-border transfer of personal data — transfer to a foreign country’s authorities or individuals/legal entities.
2.14. Destruction of personal data — actions resulting in irreversible deletion and inability to restore the data or its physical carriers.

3. Rights and Obligations of the Operator
3.1. The Operator has the right to:
  • Obtain accurate personal data and supporting documents from the subject.
  • Continue processing without renewed consent when justified under the Personal Data Law.
  • Independently determine the scope of necessary legal, organizational, and technical measures to meet legal obligations, unless otherwise required by federal law.
3.2. The Operator must:
  • Provide information on data processing upon request.
  • Process data in accordance with current Russian legislation.
  • Respond to inquiries and requests from data subjects or their legal representatives.
  • Submit necessary information to the authorized data protection body within 10 days upon request.
  • Publish or otherwise provide unrestricted access to this Policy.
  • Take appropriate legal, organizational, and technical measures to protect data.
  • Cease dissemination and destroy data as required by law.
  • Fulfill other legal obligations under the Personal Data Law.
4. Rights and Obligations of Data Subjects4.1. Data subjects have the right to:
  • Receive information regarding the processing of their personal data.
  • Request correction, blocking, or destruction of incomplete, outdated, inaccurate, illegally obtained, or unnecessary data.
  • Demand prior consent for marketing use.
  • Withdraw consent and request cessation of data processing.
  • Appeal unlawful actions/inactions of the Operator to authorities or courts.
  • Exercise other rights under Russian law.
4.2. Data subjects must:
  • Provide accurate personal information.
  • Notify the Operator of any updates to their personal data.
4.3. Persons who provide false or unauthorized data are liable under Russian law.

5. Principles of Personal Data Processing
5.1. Processing must be lawful and fair.
5.2. Processing is limited to achieving specific, legitimate purposes.
5.3. Combining databases with incompatible processing purposes is prohibited.
5.4. Only data relevant to processing purposes may be processed.
5.5. The data must be sufficient and not excessive.
5.6. Data must be accurate and updated as needed.
5.7. Data is stored only as long as necessary for its processing purpose unless otherwise required by law.

6. Purpose of Personal Data Processing
  • Purpose: Provide access to services, information, and materials on the website.
  • Personal data: Full name, email, phone numbers, date and place of birth.
  • Legal basis: Contracts between Operator and data subject.
  • Processing activities: Collection, recording, systematization, accumulation, storage, destruction, depersonalization.
7. Conditions for Processing Personal Data7.1. With the subject’s consent.
7.2. Required by international treaty or law.
7.3. Necessary for legal proceedings or enforcement.
7.4. Required to perform or enter a contract.
7.5. For legitimate interests, provided no violation of the subject’s rights occurs.
7.6. Publicly accessible data with the subject’s consent.
7.7. Data mandated to be disclosed by federal law.

8. Procedures for Collecting, Storing, and Transferring Personal DataLegal, organizational, and technical safeguards are applied.
9. Actions Performed with Personal Data9.1. The Operator performs collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, depersonalization, blocking, deletion, and destruction.
9.2. Automated processing may include transmission via telecommunication networks.
10. Cross-Border Transfer of Personal Data10.1. The Operator must notify the authorized agency before any cross-border transfer.
10.2. The Operator must verify the foreign recipients' compliance before transfer.
11. Confidentiality of Personal DataThe Operator and all persons granted access to data must not disclose it without the subject’s consent unless otherwise required by law.
12. Final Provisions12.1. Users may request clarification on data processing matters by contacting the Operator at thefitnutrition@mail.com.