Privacy Policy
1. General Provisions
This Personal Data Processing Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and determines the procedure for processing personal data and measures to ensure the security of personal data implemented by AVANTA PERFUMES & COSMETICS TRADING LLC (hereinafter referred to as the Operator).
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family confidentiality, as its most important goal and condition for carrying out its activities.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website https://avanta.ae/
2. Basic Terms Used in the Policy
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of the processing of personal data (except when processing is necessary to clarify personal data).
2.3. Website — a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at https://avanta.ae/
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing.
2.5. Depersonalization of personal data — actions that make it impossible, without additional information, to determine the ownership of personal data by a specific User or another personal data subject.
2.6. Processing of personal data — any action (operation) or a set of actions performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator — a state body, municipal body, legal or natural person that, independently or jointly with others, organizes and/or carries out the processing of personal data, as well as determines the purposes of personal data processing, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal data — any information directly or indirectly related to an identified or identifiable User of the website https://avanta.ae/.
2.9. Personal data permitted by the subject for distribution — personal data to which access is granted to an unlimited number of persons by the personal data subject by giving consent for processing in accordance with the Personal Data Law (hereinafter — personal data permitted for distribution).
2.10. User — any visitor to the website https://avanta.ae/
2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12. Distribution of personal data — any actions aimed at disclosing personal data to an indefinite number of persons or making personal data accessible to an indefinite number of persons, including publication in mass media, posting in information and telecommunication networks, or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign government authority, foreign individual, or foreign legal entity.
2.14. Destruction of personal data — any actions that result in the irreversible destruction of personal data without the possibility of further recovery in the personal data information system and/or the destruction of physical media containing personal data.
3. Basic Rights and Obligations of the Operator
3.1. The Operator has the right to:
- receive accurate information and/or documents containing personal data from the personal data subject;
- continue processing personal data without the consent of the subject in cases specified by the Personal Data Law, even if the subject revokes consent or requests termination of processing;
- independently determine the composition and list of measures necessary and sufficient to fulfill the obligations under the Personal Data Law, unless otherwise provided by law.
3.2. The Operator is obliged to:
- provide the subject with information regarding the processing of their personal data upon request;
- organize the processing of personal data in accordance with the legislation of the Russian Federation;
- respond to requests from subjects and their legal representatives in accordance with the Personal Data Law;
- provide information to the authorized data protection authority within 10 days upon request;
- publish or otherwise ensure unrestricted access to this Policy;
- take legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, distribution, and other unlawful actions;
- stop the transfer (distribution, provision, access) of personal data, stop processing, and destroy personal data in cases established by law;
- fulfill other obligations provided by the Personal Data Law.
4. Basic Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
- receive information regarding the processing of their personal data, except in cases provided by federal law;
- demand clarification, blocking, or destruction of personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing;
- request prior consent for the processing of personal data for the purpose of marketing goods, works, and services;
- withdraw consent to personal data processing;
- appeal unlawful actions or inaction of the Operator to the authorized data protection authority or in court;
- exercise other rights provided by the legislation of the Russian Federation.
4.2. Personal data subjects are obliged to:
- provide accurate information about themselves;
- notify the Operator of updates or changes to their personal data.
4.3. Persons who provide inaccurate information about themselves or about another subject without consent bear responsibility under Russian law.
5. Principles of Personal Data Processing
5.1. Processing of personal data is carried out on a lawful and fair basis.
5.2. Processing is limited to achieving specific, predetermined, and lawful purposes. Processing incompatible with the purposes of data collection is not allowed.
5.3. Combining databases containing personal data processed for incompatible purposes is not allowed.
5.4. Only personal data that meets the purposes of processing is subject to processing.
5.5. The content and volume of processed personal data must correspond to the stated purposes. Excessive processing is not allowed.
5.6. Accuracy, sufficiency, and relevance of personal data must be ensured. The Operator shall take measures to delete or clarify incomplete or inaccurate data.
5.7. Personal data is stored no longer than necessary to achieve the purposes of processing, unless otherwise required by law or contract. Upon reaching the goals, data must be destroyed or depersonalized.
6. Purposes of Personal Data Processing
Purpose: informing the User by sending emails
Personal Data: full name, email address, phone numbers
Legal Grounds: Operator’s statutory (founding) documents
Types of Processing: collection, recording, systematization, accumulation, storage, destruction, depersonalization, sending informational emails to the User’s email address
7. Conditions for Personal Data Processing
7.1. Processing is carried out with the subject’s consent.
7.2. Processing is necessary for the purposes provided by international treaties, laws, or obligations imposed by law.
7.3. Processing is necessary for justice, enforcement of court or government orders.
7.4. Processing is necessary for performance of a contract to which the subject is a party or beneficiary, or for conclusion of a contract at the subject’s initiative.
7.5. Processing is necessary for the exercise of rights and legitimate interests of the Operator or third parties, provided it does not infringe on the subject’s rights and freedoms.
7.6. Processing is carried out if the data is made publicly available by the subject.
7.7. Processing is carried out if publication or disclosure is required by law.
8. Procedure for Collection, Storage, Transfer, and Other Processing of Personal Data
The Operator ensures the security of personal data through legal, organizational, and technical measures required by law.
8.1. The Operator ensures the confidentiality and protection of personal data from unauthorized access.
8.2. User data will never be transferred to third parties, except as required by law or with the subject’s consent.
8.3. Users may update their personal data by sending an email to: management@avanta.ae with the subject line "Update of personal data."
8.4. Personal data is processed until the purposes are achieved, unless otherwise required by law or contract. Users may withdraw consent at any time by emailing management@avanta.ae with the subject line “Withdrawal of consent for personal data processing.”
8.5. Information collected by third-party services (e.g., payment systems, communication tools, service providers) is stored and processed by those parties under their own agreements and privacy policies. The Operator is not responsible for their actions.
8.6. Restrictions set by the subject regarding transfer or conditions of processing of personal data permitted for distribution do not apply when processing is carried out in state, public, or other public interests established by Russian law.
8.7. The Operator ensures confidentiality of processed personal data.
8.8. Personal data is stored only as long as necessary for the purposes of processing, unless otherwise required by law or contract.
8.9. Grounds for termination of processing include achievement of processing purposes, expiration or withdrawal of consent, or unlawful processing.
9. List of Actions with Personal Data
9.1. The Operator carries out collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer, depersonalization, blocking, deletion, and destruction of personal data.
9.2. The Operator may perform automated processing of personal data, including transmission via information and telecommunication networks or without such transmission.
10. Cross-Border Transfer of Personal Data
10.1. Before beginning cross-border transfer of personal data, the Operator must notify the authorized data protection authority (separately from the general processing notification).
10.2. Before submitting the above notification, the Operator must obtain the necessary information from foreign government bodies, individuals, or legal entities to which personal data will be transferred.
11. Confidentiality of Personal Data
The Operator and any other persons who have access to personal data are obliged not to disclose or distribute it without the subject’s consent, unless otherwise required by law.
12. Final Provisions
12.1. The User may request clarifications regarding the processing of their personal data by emailing management@avanta.ae.
12.2. Any changes to this Policy will be reflected in this document. The Policy remains valid until replaced by a new version.
12.3. The current version of the Policy is publicly available online at https://avanta.ae/policy