Privacy Policy for Personal Data Processing

1. General Provisions on the Personal Data Processing Policy
1.1. This Personal Data Processing Policy (hereinafter referred to as the "Policy") is based on the legislation of the Russian Federation on personal data, adopted concerning the processing of personal data of data subjects on the website www.p-lb.com (hereinafter referred to as the "Site"), and describes the main principles applied regarding the processing of such personal data. The Site belongs to LLC "Legal Bureau Palladium" (117418, Moscow, intra-city municipal district of Cheryomushki, Tsuryupy Street, 11, building 3, apartment 61) (hereinafter referred to as the "Operator").
1.2. This Policy applies to personal data that the Operator may receive from the data subject from any device and when communicating with the Operator using the Site.
1.3. In case of disagreement with the terms of personal data processing, the data subject must immediately stop using the Site.
1.4. Since this Policy describes the main principles applied by the Operator in processing the personal data of data subjects on the Site, it does not apply to the processing of personal data by other entities, including partners and contractors of the Operator, even if the data subject accesses their websites via links from the Site or provides them with information in any other way. Visiting other websites or providing personal data to other parties is the responsibility of the data subject and is not governed by this Policy (the Operator is not responsible for the content of third-party websites or actions of third parties), even if the websites are marked with trademarks owned by the Operator or those parties reference the Operator. To learn about the security measures implemented by other parties regarding personal data, the data subject should refer to the relevant documents of those parties, not this Policy.
1.5. Definitions Used in the Policy
- Personal data – any information relating directly or indirectly to a specific or identifiable individual (data subject);
- Processing of personal data – any action (operation) or set of actions (operations) performed with or without the use of automation means with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transmission (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
- Automated processing of personal data – processing of personal data using computing means;
- Distribution of personal data – actions aimed at revealing personal data to an unspecified group of persons.
- Provision of personal data – actions aimed at revealing personal data to a specified person or a specified group of persons.
- Special categories of personal data – information concerning racial or ethnic origin, political views, religious or philosophical beliefs, health status, sexual life, criminal convictions.
- Biometric personal data – information that characterizes the physiological and biological features of a person, based on which their identity can be established.
- Cookies – a set of technical data transmitted between the web server and the browser used for personalized use and collecting information about the actions taken by the data subject on the Site.

2. Principles and Conditions of Personal Data Processing
2.1. The Operator processes personal data on a lawful and fair basis.
2.2. The content, scope, and duration of personal data processing correspond to the purposes of processing personal data.
2.3. When processing personal data, the Operator ensures its accuracy, adequacy, and, where necessary, relevance in relation to the purposes of processing personal data. The Operator reserves the right to verify the completeness and accuracy of the provided personal data.
2.4. When processing personal data, the Operator does not make decisions solely based on automated processing of personal data that produce legal consequences for the data subject or otherwise affect their rights or legal interests.
2.5. The Operator does not disclose personal data to third parties or distribute it without the consent of the data subject, unless otherwise provided by the legislation of the Russian Federation or the contract to which the data subject is a party or a beneficiary.
2.6. The Operator has the right to transfer personal data to third parties, unless otherwise stipulated by federal law, and to entrust the processing of personal data to third parties with the consent of the data subject, in accordance with the procedure and timelines established by the legislation of the Russian Federation and the contract concluded between the Operator and such third parties. The specific list of personal data to be transferred, the processing period, and the actions that third parties may perform are determined by the specific purpose for which the personal data is transferred for processing to third parties and by the contract with such third parties.
2.7. When processing personal data for the purposes outlined in this Policy, the Operator does not process biometric and special categories of personal data.
2.8. No cross-border transfer of personal data is carried out for the purposes set out in this Policy.

3. Purposes of Personal Data Processing
3.1. The Operator processes personal data of the following categories of data subjects on the Site:
- Site visitors;
- Event participants;
- Job applicants;
- Employees;
- Representatives of partners;
- Representatives of Clients (customers).
3.2. The personal data of website visitors may be processed for the following purposes:
A) Ensuring the operation of the website (collecting and analyzing information about website visitors and their actions).
Legal basis for processing personal data - the consent of the data subject to process their personal data.
List of personal data consented to - data collected through metric programs; IP address; cookies;
Actions with personal data consented to – automated processing, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transmission (provision, access), depersonalization, blocking, deletion, destruction of personal data;
Duration of consent - until the purpose of processing personal data is achieved (for the duration of the website's operation);
Entities with access to and to whom personal data may be transferred - owners of metric programs (services).
B) Conducting business communication within the organization and with other persons (responses to requests).
Legal basis for processing personal data - the consent of the data subject.
List of personal data consented to - surname, first name, patronymic; phone number; email address;
Actions with personal data consented to – automated processing, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transmission (provision, access), depersonalization, blocking, deletion, destruction of personal data;
Duration of consent - until the purpose of processing personal data is achieved (for the duration of the website's operation);
Entities with access to and to whom personal data may be transferred - companies affiliated with the Operator.
C) Sending informational and advertising messages;
Legal basis for processing personal data - the consent of the data subject.
List of personal data consented to - email address;
Actions with personal data consented to – automated processing, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transmission (provision, access), depersonalization, blocking, deletion, destruction of personal data;
Duration of consent - until the purpose of processing personal data is achieved (during the advertising mailings);
Entities with access to and to whom personal data may be transferred - those responsible for the functioning of the mailing system and conducting marketing and other research.
This document continues with the same format for each section related to processing personal data for event participants, job applicants, employees, representatives of partners, and clients.

4. Rights of the Data Subject
4.1. The data subject has the right to exercise their rights provided by the legislation of the Russian Federation on personal data, including, but not limited to:
- Clarifying, updating their personal data, requesting its blocking or destruction;
- Requesting information from the Operator regarding the processing of their personal data;
- Exercising other rights provided by the legislation of the Russian Federation.
4.2. The data subject has the right to withdraw their consent to the processing of personal data by sending a written request to the address: 117418, Moscow, intra-city municipal district of Cheryomushki, Tsuryupy Street, 11, building 3, apartment 61. The data subject is informed that the Operator may continue processing personal data after the withdrawal of consent if there is another legal basis.
The rest of the document continues in the same format as sections 5 and 6 regarding obligations, amendments, and dispute resolution procedures.

March 21, 2025