Privacy Policy
City of Saint Petersburg
June 1. 2022
This policy, in accordance with Part 2 of Article 18.1 of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data," defines the Operator's (hereinafter referred to as the "Operator") policy regarding the processing of personal data and contains information about the Operator's personal data protection requirements.
This policy applies to all personal data posted or posted through the Service that the Operator receives or may receive from the User.
This policy is an integral part of the Operator's internal document defining the Operator's general policy regarding the processing of personal data and disclosing general information about the Operator's personal data protection requirements.
2.1. The Operator processes only the personal data necessary for using the Service or fulfilling agreements and contracts
with the User, except in cases where Russian Federation law requires mandatory storage of personal information for a period specified by law.

2.2. When processing personal data, the Operator does not combine databases containing personal data processed
for incompatible purposes.

2.3. The Operator processes the User's personal data for the following purposes:
2.3.1. Using the User's personal data for the operation of the Service;
2.3.2. Identifying the User when using the Service, including when registering with the Service and creating an account;
2.3.3. Providing the User with personalized information when using the Service, including in the form of news and information about new services offered by the Operator;
2.3.4. Communicating with the User, including by sending notifications, requests, and information regarding the use of the Service, as well as processing requests from the User;
2.3.5. Determining the User's location to ensure security, prevent fraud, and provide the User with the Service functionality
and services appropriate to their location;
2.3.6. Confirming the accuracy and completeness of the personal data provided by the User;
2.3.7. Improving the quality of the Service, its usability, and the development of new services and offers for the User;
2.3.8. Conducting statistical and other studies of Service use based on anonymized data;
2.3.9. Compliance with mandatory requirements of Russian Federation legislation.
Purposes of collecting personal data / Purposes of collecting personal data / Purposes of collecting personal data
02
3.1. The Operator processes the User's personal data in accordance with the Constitution of the Russian Federation, Article 6 (paragraphs 1, 5, 10, and 11 of Part 1) of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data," and other regulatory legal acts in the established field of activity.

3.2. The User's personal data is processed on the basis of and in pursuance of the User Agreement governing the use of the Service and other agreements concluded between the User and the Operator with respect to the Service.

3.3. The User's personal data may also be processed based on their separate consent to such processing, expressed directly when using the Service by clicking the appropriate button or by checking the appropriate checkbox. The validity period of such consent is specified in the text of the User's consent.
Legal grounds for processing personal data / Legal grounds for processing personal data / Legal grounds for processing personal data
03
4.1. Personal data permitted for processing in accordance with this policy and provided by Users by filling in the appropriate input fields while using the Service may include the following information:
4.1.1. Mobile phone number;
4.1.2. Email address.

4.2. Personal data permitted for processing in accordance with this policy and automatically transferred to the Operator during the use of the Service via the software installed on the User's device may include the following information:
4.2.1. IP address of the User's device;
4.2.2. Cookie data;
4.2.3. Information about the User's browser;
4.2.4. Technical specifications of the device and software;
4.2.5. Date and time of access to the Service;
4.2.6. Addresses of the requested pages of the Service website;
4.2.7. Geographical coordinates of the User's location.

4.3. In accordance with this policy, the Operator processes the personal data of Users belonging to the following categories of personal data subjects:
4.3.1. Individuals using the Service without registration in accordance with the User Agreement;
4.3.2. Individuals using the Service with registration in accordance with the User Agreement.
The volume and categories of personal data processed, categories of personal data subjects / The volume and categories of personal data processed, categories of personal data subjects
04
5.1. The Operator processes the User's personal data without notifying the authorized body for the protection of the rights of personal data subjects in accordance with Part 2 of Article 22 (paragraphs 2 and 8) of Federal Law No. 152-FZ "On Personal Data" of July 27, 2006.

5.2. The Operator processes the User's personal data using a personal data information system without the use of automation tools, in accordance with federal laws or other regulatory legal acts of the Russian Federation establishing requirements for ensuring the security of personal data during its processing and for respecting the rights of personal data subjects. Such actions with personal data, such as the use, clarification, distribution, and destruction of personal data in relation to the User, are carried out with the direct participation of the Operator's employees in accordance with the regulations approved by Decree of the Government of the Russian Federation No. 687 of September 15, 2008.

5.3. The Operator processes and stores the User's personal data for the period determined in accordance with the Service's user agreement.

5.4. The User's personal data is kept confidential, except in cases where the User voluntarily makes their personal information publicly available to an unlimited number of people. By using the Service, the User agrees that a certain portion of their personal data will become publicly available.

5.5. The Operator has the right to transfer the User's personal data to third parties in the following cases:
5.5.1. the User consents to such actions, expressed in accordance with the Service's User Agreement;
5.5.2. the transfer is necessary for the User to use certain functionality of the Service (e.g., for authorization via social media accounts) or for the performance of a specific agreement, contract, or transaction with the User; 5.5.3. the transfer is required by the legislation of the Russian Federation or other applicable legislation within the framework of the procedure established by law; 5.5.4. in the event of a transfer of rights to the Service, the transfer of personal data to the acquirer is required simultaneously with the transfer of all obligations to comply with the terms of this policy with respect to the personal data received by the acquirer;
5.5.5. If it is necessary to protect the rights and legitimate interests of the Operator or third parties in the event of a violation of this policy or the Service's User Agreement by the User;

5.5.6. In other cases stipulated by law.

5.6. In the event of loss or unauthorized disclosure of personal data, the Operator will inform the User of this fact.

5.7. The Operator will take the necessary organizational and technical measures to protect the User's personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other illegal actions by third parties.

5.8. The Operator, together with the User, will take all necessary measures to prevent losses or other negative consequences caused by the loss or unauthorized disclosure of the User's personal data.

5.9. The Operator has the right to transfer personal data to inquiry and investigative bodies and other authorized bodies on the grounds stipulated by the current legislation of the Russian Federation.

5.10. When collecting personal data, the Operator records, systematizes, accumulates, stores, clarifies (updates, amends), and extracts the personal data of Users who are citizens of the Russian Federation using databases located within the Russian Federation.

5.11. The Operator ceases processing the User's personal data, which is processed with their consent, upon expiration of the User's consent to such processing, or upon the User's withdrawal of consent, or in the event of detection of unlawful processing of personal data or the liquidation of the Operator.
Procedure and conditions for processing personal data / Procedure and conditions for processing personal data / Procedure and conditions for processing personal data
05
6.1. Cookies transmitted from the Operator to the User's device and from the User to the Operator may be used by the Operator to achieve the purposes of processing personal data in accordance with this policy.

6.2. The User agrees that their devices and software used to access the Services may have the ability to prohibit cookie operations for all or specific websites and applications, as well as the ability to delete previously received cookies (e.g., private browsing mode).

6.3. The Operator reserves the right to require the User's device to accept and receive cookies.

6.4. The structure of a cookie, its content, and technical parameters are determined by the Operator and are subject to change without prior notice to the User.

6.5. Counters placed by the Operator in the Service may be used by the Operator to analyze cookies and collect personal data about Service usage in order to improve the quality of the Service, its usability, and the Service itself. The technical parameters of the counters are determined by the Operator and are subject to change without prior notice to the User.
The procedure for collecting personal data using cookies and counters / The procedure for collecting personal data using cookies and counters
06
7.1. Only those employees of the Operator authorized to work with the User's personal data by virtue of their job responsibilities may access the User's personal data, based on the list of persons authorized to work with personal data, which is approved by the Operator.

7.2. The list of employees authorized to work with personal data is maintained by the Operator up to date.

7.3. Access to the User's personal data by third parties who are not employees of the Operator is prohibited without the User's consent, except in cases established by the legislation of the Russian Federation.

7.4. Access by an Operator employee to the User's personal data ceases on the date of termination of the employment relationship or on the date the employee loses the right to access the User's personal data due to a change in job responsibilities, position, or other circumstances, in accordance with the procedure established by the Operator. In the event of termination of employment, all media containing the User's personal data that were in the possession of the dismissed Operator employee shall be transferred to a superior employee in accordance with the procedure established by the Operator.
Access to personal data / Access to personal data / Access to personal data / Access to personal data
07
8.1. The User may change, update, supplement, or delete the personal data they have provided, or any portion thereof, at any time using the Service interface.

8.2. If the Operator independently discovers that the User's personal data is incomplete or inaccurate, the Operator will take all possible measures to update the personal data and make the appropriate corrections.

8.3. If it is impossible to update incomplete or inaccurate personal data of the User, the Operator will take measures to delete it.

8.4. If the Operator discovers that the processing of the User's personal data is unlawful, such processing by the Operator will be terminated and the personal data will be deleted.

8.5. If the Service interface is inoperable or the Service does not provide the ability to change, update, supplement, or delete personal data by the User, or in any other cases, the User has the right to request in writing that the Operator clarify, block, or destroy their personal data if such personal data is incomplete, outdated, inaccurate, illegally obtained, or not necessary for the stated processing purpose.

8.6. The Operator will make the necessary changes to personal data that is incomplete, inaccurate, or outdated within seven business days from the date the User provides information confirming that the personal data is incomplete, inaccurate, or outdated.

8.7. The Operator will destroy the User's personal data that was illegally obtained or is not necessary for the stated processing purpose within seven business days from the date the User provides information confirming that such personal data was illegally obtained or is not necessary for the stated processing purpose.

8.8. The Operator notifies the User of any changes made and any measures taken and takes reasonable steps to notify third parties to whom the User's personal data has been transferred.

8.9. The User's rights to change, update, supplement, or delete personal data may be limited in accordance with legal requirements. Such restrictions may, in particular, include the Operator's obligation to retain personal data changed, updated, supplemented, or deleted by the User for a period specified by law and to transfer such personal data to government agencies in accordance with established procedures.
Updating, correcting, deleting and destroying personal data / Updating, correcting, deleting and destroying personal data
08
9.1. The User has the right to receive information from the Operator regarding the processing of their personal data, including:
9.1.1. Confirmation of the processing of personal data by the Operator;
9.1.2. Legal grounds and purposes of processing personal data;
9.1.3. The purposes and methods of processing personal data used by the Operator;
9.1.4. The name and location of the Operator, information about persons (except for the Operator's employees) who have access to personal data or to whom personal data may be disclosed under an agreement with the Operator or under federal law;
9.1.5. The personal data being processed relating to the relevant User, the source thereof, unless another procedure for submitting such data is provided for by federal law;
9.1.6. The processing timeframes for personal data, including the storage timeframes;
9.1.7. The procedure for the User to exercise the rights provided for by Federal Law No. 152-FZ of July 27, 2006, "On Personal Data";
9.1.8. Information on completed or proposed cross-border data transfers;
9.1.9. The name or last name, first name, patronymic, and address of the person processing the personal data on behalf of the Operator, if the processing has been or will be entrusted to such person;
9.1.10. Other information required by law.

9.2. The Operator provides access to personal data processed and stored in the Operator's information system free of charge upon the User's request or within thirty days of receipt of the User's written request.

9.3. In the event of the Operator's refusal to provide information on the availability of personal data about the User or personal data to the User upon his/her request or upon receipt of the User's request, the Operator shall provide a reasoned response in writing, which shall be the basis for such refusal, within a period not exceeding thirty days from the date of the User's request or from the date of receipt of the User's request.
Responses to user requests for access to personal data / Responses to user requests for access to personal data
09
10.1. The security of personal data during its processing in the information system is ensured by a personal data protection system that neutralizes current threats identified in accordance with Part 5 of Article 19 of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data."

10.2. The personal data protection system applied by the Operator includes legal, organizational, technical, and other measures to ensure the security of personal data, determined taking into account current threats to the security of personal data and the information technologies used in information systems.

10.3. With respect to personal data for which the User has provided consent for their processing by third parties, the Operator has the right to engage, under an agreement, another party to ensure the security of the personal data during its processing in the information system.

10.4. When processing personal data in the Operator's information system, the latter ensures:
10.4.1. Implementing measures aimed at preventing unauthorized access to the User's personal data and/or its transfer to persons not authorized to access such information;
10.4.2. Timely detection of unauthorized access to personal data;
10.4.3. Preventing any interference with the technical means used for processing personal data that could result in their malfunction;
10.4.4. The ability to immediately restore personal data modified or destroyed due to unauthorized access;
10.4.5. Continuous monitoring of the level of security of personal data.
Information on the implemented requirements for the protection of personal data / Information on the implemented requirements for the protection of personal data
10
11.1. The User decides to provide their personal data and consents to its processing voluntarily, of their own free will, and in their own interests.

11.2. The User's consent to the processing of personal data is specific, informed, and conscious.

11.3. Consent to the processing of personal data must be provided in accordance with applicable law. In particular, in accordance with the US Children's Online Privacy Protection Act (COPPA), consent to the processing of personal data of a child under 13 years of age must be provided by their parent or guardian.

11.4. If the User's personal data is processed based on and pursuant to the User Agreement governing the use of the Service, or other agreements concluded between the User and the Operator using the Service, such processing of the User's personal data is carried out in accordance with Clause 5 of Article 6 of Federal Law No. 152-FZ "On Personal Data" of July 27, 2006, and does not require separate consent.

11.5. If the User's personal data is processed based on their separate consent to such processing, expressed directly while using the Service by clicking the appropriate button or by checking the appropriate checkbox, such consent to the processing of personal data is provided by the User in the form of an electronic document signed with a simple electronic signature in accordance with the User Agreement governing the use of the Service.

11.6. Consent to the processing of personal data may be revoked by the User in accordance with the procedure established by law.
Consent to the processing of personal data / Consent to the processing of personal data / Consent to the processing of personal data
11
12.1. By using the Service, the User agrees to the terms of this policy. If the User disagrees with the terms of this policy, use of the Service must be immediately discontinued.

12.2. This policy and the relationship between the User and the Operator arising from the application of this policy shall be governed by the laws of the Russian Federation.

12.3. This policy is permanently publicly available on the Operator's website at the following link: www.coffeezone.ru.

12.4. The User may send any suggestions or questions regarding this policy to the Operator's User Support Service by sending an email to: info@coffeezone.ru.
Final Provisions / Final Provisions / Final Provisions / Final Provisions / Final Provisions
12
OOO "YELLOW DUCK ELECTRONICS", INN: 7806620605
195279, St. Petersburg, internal territory of the city, Rzhevka Municipal District,
highway Revolution Highway, Building 69, Building A, Unit 64N

Tel.: +7 (921) 935-44-49
e-mail: info@yellowduckelectronics.com
Bank Details / Bank Details / Bank Details / Bank Details / Bank Details / Bank Details / Bank Details
13
Yellow Duck Electronics Yellow Duck Electronics
© Yellow Duck Electronics [2026]