Moscow,
Version dated 12 August 2026

The administrator (the person performing the functions of administrator and bearing responsibility for the acts and/or omissions of the administrator) of the website https://standmark.ru (hereinafter the “website”) is the limited liability company STANDMARK LLC (INN: 7718696066, hereinafter the “Operator”), which hereby informs you, as a user of the website, of the principles of the Operator's policy on its processing of personal data.

Important: if the user does not agree with this Policy, including the subject matter of this Policy set out in this section, the user must immediately leave the website and cease any interaction with its functionality.

Important: the user may at any time withdraw their consent to the processing of personal data by sending the Operator a corresponding notice to the e-mail address specified in this Policy.

1.1. The Operator’s policy on its processing of personal data (hereinafter the "Policy") has been developed and published on the website in fulfilment of the requirements of Federal Law No. 152-FZ, and defines the procedure for processing personal data and the measures taken by the Operator to ensure the security of personal data.

1.2. The scope of this Policy is the website, including its functional capabilities, as well as all information that the Operator may obtain about visitors to the website.

1.3. The Policy does not extend to websites or other information and telecommunication resources of third parties to which (where applicable) hyperlinks available on the website lead. In such a case the Operator relies on the good faith and prudence of the user, who must independently review the equivalent documents on third-party websites and use third-party websites only if they agree with those documents.

1.4. Use of the website and any of its functional capabilities constitutes the user’s express and unconditional agreement with this Policy.

1.5. For the purposes of this Policy, the terms listed below shall be understood exclusively in the following meanings:

• website: the website standmark.ru;
• user: any visitor to the website referred to above;
• personal data of the user: any information relating, whether directly or indirectly, to a specific user of the website;
• operator: the limited liability company STANDMARK LLC, which is the administrator (the person performing the functions of administrator and bearing responsibility for the acts and/or omissions of the administrator) of the website, which independently organises and independently carries out the processing of personal data, and determines the purposes of processing personal data, the composition of the personal data to be processed, and all actions (operations) performed with personal data;
• processing of personal data: any action (operation) or set of actions (operations) performed with or without the use of automation means with personal data, including their collection, recording, systematisation, accumulation, storage, updating (renewal, alteration), extraction, use, transfer (dissemination, provision, access), depersonalisation, blocking, deletion and destruction of personal data;
• automated processing of personal data: the processing of personal data by means of computing technology;
• dissemination of personal data: actions aimed at disclosing personal data to an indefinite group of persons;
• provision of personal data: actions aimed at disclosing personal data to a specific person or a specific group of persons;
• blocking of personal data: the temporary suspension of the processing of personal data, except where processing is necessary to update the personal data;
• destruction of personal data: actions as a result of which it becomes impossible to restore the content of personal data in a personal data information system, and/or actions as a result of which the material carriers of personal data are destroyed;
• depersonalisation of personal data: actions as a result of which it becomes impossible, without the use of additional information and data, to determine that personal data belong to a specific personal data subject;
• personal data information system: the aggregate of personal data contained in databases together with the information technologies and technical means that ensure their processing;
• cross-border transfer of personal data: the transfer of personal data to the territory of a foreign state to an authority of a foreign state and/or to a foreign natural person and/or to a foreign legal entity.

2.1. The Operator has the right to:

• receive from the personal data subject accurate information and/or documents containing personal data;
• where the personal data subject withdraws consent to the processing of personal data, or sends a request demanding that the processing of personal data cease, the Operator has the right to continue processing the personal data without the personal data subject’s consent where the grounds specified in Federal Law No. 152-FZ are present;
• independently determine the composition and list of measures necessary and sufficient to ensure the performance of the obligations provided for by the Law on Personal Data and by the regulatory legal acts adopted in accordance with it, unless otherwise provided by Federal Law No. 152-FZ.

2.2. The Operator undertakes to:

• provide the personal data subject, at their request, with information concerning the processing of their personal data;
• organise the processing of personal data in the manner established by the applicable legislation of the Russian Federation;
• respond to enquiries and requests from personal data subjects and their legal representatives in accordance with the requirements of Federal Law No. 152-FZ;
• provide the authorised body for the protection of the rights of personal data subjects, at that body’s request, with the necessary information within 15 days from the date of receipt of such request;
• publish or otherwise ensure unrestricted access to this Policy on the processing of personal data;
• take legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, provision or dissemination of personal data, as well as against other unlawful actions in respect of personal data;
• cease the transfer (dissemination, provision, access) of personal data, cease processing and destroy personal data in the manner and in the cases provided for by Federal Law No. 152-FZ;
• perform other obligations provided for by Federal Law No. 152-FZ.

2.3. The user (personal data subject) has the right to:

• receive information concerning the processing of their personal data, except in the cases provided for by federal laws. Such information is provided to the personal data subject by the Operator in an accessible form and must not contain personal data relating to other personal data subjects, except where there are lawful grounds for disclosing such personal data. The list of such information and the procedure for obtaining it are established by Federal Law No. 152-FZ;
• require the Operator to update, block or destroy their personal data where the personal data are incomplete, out of date, inaccurate, unlawfully obtained or not necessary for the stated purpose of processing, and to take the measures provided for by law to protect their rights;
• impose a requirement of prior consent to the processing of personal data for the purposes of promoting goods, works and services on the market;
• withdraw consent to the processing of personal data, and also send a demand that the processing of personal data cease;
• appeal to the authorised body for the protection of the rights of personal data subjects, or bring court proceedings, against unlawful acts or omissions of the Operator in processing their personal data;
• exercise other rights provided for by Federal Law No. 152-FZ.

2.4. The user (personal data subject) undertakes to:

• provide the Operator with accurate data about themselves;
• notify the Operator of any updating (renewal, alteration) of their personal data.

2.5. Persons who have provided the Operator with inaccurate information about themselves, or with information about another personal data subject without that subject’s consent, bear liability in accordance with the applicable legislation of the Russian Federation.

3.1. The Operator has the right to process the following personal data of the user:

• surname, first name and patronymic;
• details of the identity document;
• mobile telephone number and e-mail address.

3.3. The data listed above are what the Operator means when it uses the term "personal data" - in accordance with the terms of this Policy and taking into account the provisions of the applicable legislation of the Russian Federation, including Federal Law No. 152-FZ.

3.4. The website collects and processes depersonalised data about users in accordance with the "Agreement | Notice on the Use of Cookies".

3.5. The Operator does not process special categories of personal data concerning racial or ethnic origin, political opinions, religious and/or philosophical beliefs, or circumstances of private or intimate life.

3.6. The processing of personal data permitted for dissemination that falls within the special categories of personal data specified in Part 1 of Article 10 of Federal Law No. 152-FZ may be carried out subject to compliance with the prohibitions and conditions set out in Article 10.1 of Federal Law No. 152-FZ.

3.7. The Operator does not verify the personal data provided by the user and does not assess the user’s legal capacity. Accordingly, the Operator proceeds on the basis that, when providing personal data on the website, the user states exclusively accurate information about themselves — to the extent set out in this Policy.

4.1. The Operator processes the user’s personal data for the purposes of:

• identifying the user in order to contact them, including sending notices, requests and information concerning the use of the website, as well as performing agreements and contracts and handling the user’s requests and applications (where applicable);
• informing the user by sending e-mail messages;
• concluding, performing and terminating civil law contracts;
• providing the user with access to the services, information and/or materials published on the website;
• improving the quality and usability of the website and developing services;
• conducting statistical and other research on the basis of depersonalised data.

4.2. The Operator has the right to send the user notices about new products and services, special offers and various events. The user may at any time opt out of receiving informational messages by sending the Operator a corresponding refusal to the e-mail address specified in this Policy.

5.1. The grounds on which the Operator processes personal data are:

• the Operator’s constitutional (founding) documents;
• contracts concluded between the Operator and the personal data subject;
• federal laws, including Federal Law No. 152-FZ, and other regulatory legal acts in the field of personal data protection that are current (in force);
• the user’s consent to the processing of their personal data.

5.2. The processing of personal data is carried out after the user has consented to the processing of their personal data. The user (personal data subject) themselves decides whether to provide their personal data and gives consent freely, of their own will and in their own interest. In giving consent, the user warrants to the Operator that they are aware of the provisions of the federal laws, including Federal Law No. 152-FZ, and of other regulatory legal acts in the field of personal data protection.

5.3. The Operator processes the user’s personal data only where the user has completed and/or submitted them independently via the special forms located on the website or has sent them to the Operator by other means. By completing the relevant forms and/or sending their personal data to the Operator, the user expresses their agreement with this Policy.

5.4. The Operator processes depersonalised data about the user where this is permitted in the user’s browser settings, on the basis of the "Agreement | Notice on the Use of Cookies" published on the website.

6.1. The Operator carries out the processing of personal data in strict accordance with the applicable legislation of the Russian Federation.

6.2. The processing of personal data is limited to the achievement of specific, predetermined and lawful purposes. The Operator does not carry out processing of personal data that is incompatible with the purposes of collection and processing of personal data it has declared.

6.3. The content and the volume of the personal data processed by the Operator correspond to the purposes of collection and processing it has declared. Processing personal data that are excessive in relation to the declared purposes of processing is not permitted.

6.4. When personal data are processed, their accuracy and sufficiency are ensured, and where necessary also their currency in relation to the purposes of processing the personal data. The Operator takes, and/or ensures that there are taken, all necessary measures to delete or update incomplete or inaccurate data.

6.5. The Operator stores personal data in a form that permits identification of the personal data subject for no longer than required by the purposes of processing the personal data, unless the storage period for personal data is established by federal law and/or by a contract to which the user (that is, the personal data subject) is a party, beneficiary or guarantor. The personal data processed are destroyed or depersonalised once the purposes of processing have been achieved, or where the need to achieve those purposes has been lost, unless otherwise provided by federal law.

7.1. The processing of personal data and the provision of the necessary security in all types of such processing are ensured by the Operator through the implementation of corporate (internal) organisational, technical and legal measures that are necessary and sufficient to comply with all requirements of the applicable legislation of the Russian Federation, including the provisions of Federal Law No. 152-FZ.

7.2. The Operator discloses the user’s personal data to third parties only where the corresponding consent has been obtained from the user.

7.3. The Operator disseminates personal data without the user’s consent only where this is expressly provided for by the applicable legislation of the Russian Federation. In all other cases the Operator does not disseminate personal data without the user’s consent.

7.4. If inaccuracies are identified in the personal data, the user may update them independently by sending the Operator a corresponding notice to the e-mail address specified in this Policy.

7.5. The period for processing personal data is determined by the achievement of the purposes for which the personal data were collected, unless another period is provided for by a contract, by other documents accepted by the user, or by the applicable legislation of the Russian Federation.

7.6. Grounds for terminating the processing of personal data may include, among others, the achievement of the purposes of processing the personal data, the expiry of the user’s (personal data subject’s) consent, the withdrawal by them of that consent, and/or the identification of unlawful processing of personal data.

7.7. The user may obtain any clarifications on questions of interest concerning the processing of their personal data by contacting the Operator at the e-mail address specified in this Policy.

7.8. This Policy is valid indefinitely until it is replaced by a new version.

8.1. Operator:
Limited liability company STANDMARK LLC.
INN: 7 718 696 066, KPP: 771 801 001, OGRN: 1 087 746 387 354.
21 Stromynka St., bldg. 2, Moscow 107076.
Contact telephone: +7 (916) 155-59-57.
E-mail: info@standmark.ru.