PRIVACY POLICY

1. General Provisions

1.1. This Privacy Policy (hereinafter referred to as the "Policy") is established to protect the rights and freedoms of individuals and citizens in the processing of their personal data, including the protection of the right to privacy, personal and family secrets. Our privacy policy is based on the General Data Protection Regulation (GDPR) of the European Union and other applicable international privacy laws.
1.2. This Policy applies to all personal data being processed by the Website (hereinafter referred to as the "Controller").
1.3. This Policy applies to relationships in the field of personal data processing that the Controller has established both before and after this Policy was approved.
1.4. This Policy is published to provide free information on the Internet on the Controller's website - https://simmain.com.
1.5. Basic concepts used in this Policy:
- Automated processing of personal data - processing of personal data with the assistance of computer equipment;
- Blocking of personal data - temporary suspension of personal data processing (except where processing is necessary to clarify personal data);
- Personal data information system - a set of personal data located in databases and information technologies and technical means ensuring data processing;
- Depersonalization of personal data - actions resulting in the inability to determine personal data belonging to a specific subject of personal data without using additional information;
- Personal data controller (Controller) - An organization that independently processes personal data, and also determines the purpose of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data;
- Personal data processing - any action (operation) or set of actions (operations) with personal data performed using automated equipment or without using them. Personal data processing includes, among other actions:

+ Collection;
+ Recording;
+ Systematization;
+ Accumulation;
+ Storage;
+ Clarification (updating, modification);
+ Extraction;
+ Use;
+ Transfer (distribution, provision, access);
+ Depersonalization;
+ Blocking;
+ Deletion;
+ Destruction;

- Personal data - any information relating directly or indirectly to a specific individual or identifiable (subject of personal data);
- Distribution of personal data - actions aimed at disclosing personal data to an indefinite number of persons;
- Provision of personal data - actions aimed at disclosing personal data to a specific person or specific group of persons;
- Website - a website on the Internet, located on the domain https://simmain.com;
- Personal data subject (user) - customers of the Controller (individuals) on the Website simmain.com;
- Destruction of personal data - actions resulting in the impossibility of restoring the content of personal data in the personal data information system.
1.6. Basic rights and obligations of the Controller.
1.6.1. The Controller has the right to:
1) Independently determine the composition and list of necessary and sufficient measures to ensure the fulfillment of obligations;
2) In case the personal data subject withdraws consent for the processing of personal data, the Controller will cease processing personal data.
1.6.2. The Controller is obligated to:
1) Organize the processing of personal data;
2) Respond to requests and queries from users;

1.7. Basic rights of users. Users have the right to:
1) Receive information related to the processing of their personal data within 30 (thirty) calendar days from the date of request. Data is provided to the user by the Controller in an accessible form and must not contain personal data related to personal data of other subjects, except where there is a legal basis for disclosing such personal data;
2) Request from the Controller clarification of their personal data, blocking or destruction if such personal data is incomplete, outdated, inaccurate, illegally collected or unnecessary for the stated processing purpose, within 7 (seven) business days from the date of request, as well as implement measures prescribed by law to protect their rights.
1.8. Control over the implementation of the requirements of this Policy is carried out by the Controller.

2. Purpose of Personal Data Collection

2.1. Personal data processing is limited to achieving specific, predetermined, and legitimate purposes. Processing of personal data incompatible with the purposes of personal data collection is not permitted.
2.2. Only personal data that meets the purpose of their processing is subject to processing.
2.3. Personal data processing by the Controller is carried out for the following purposes:
• Ensuring compliance with applicable laws and regulations;
• Conducting the Controller's business activities on the Website, to prepare, conclude, execute and terminate contracts with customers (users);
• Fulfilling legal acts, acts of government agencies and officials;
• Other legitimate purposes.

2.4. The Controller also has the right to send notifications to users about new services, special offers and other events. Users can always refuse to receive informational notifications by sending a message to the Controller at: [email protected].

3. Scope and Categories of Personal Data Processed, Categories of Personal Data Subjects

3.1. The content and scope of personal data processed must comply with the processing purposes stated in Section 2 of this Policy. Personal data processed must not be excessive in relation to the stated purposes for processing. We collect and process your personal data only with your voluntary consent.
3.2. With your permission, we may collect and process the following data:
• Contact information (user's Email address);
• First and last name;
• Phone number;
• Bank card information;
• User data (location information; operating system type and version; browser type and version; device type and screen resolution; source from which the user came to the Website; from which website or advertisement; operating system and browser language; which pages the user opens and which buttons the user clicks; IP address);
• Other personal data provided by customers (individuals) necessary for preparing, concluding, executing and terminating contracts with the Controller on the Website.
3.2.1. The Website also collects and processes depersonalized personal data about the Controller's customers (cookies) using online statistics services (Yandex.Metrica, Google Analytics and other services).
3.3. The Controller does not process biometric personal data (data describing physiological and biological characteristics of a person, based on which a person's identity can be determined).
3.4. The Controller does not process special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, health status, private life.

4. Procedure and Terms of Personal Data Processing

4.1. Personal data processing is carried out by the Controller in accordance with the requirements of applicable data protection laws and regulations, including GDPR where applicable.
4.2. Personal data processing is carried out after obtaining consent from personal data subjects for the processing of their personal data.
4.3. The Controller performs automated personal data processing.
4.4. Personal data processing is carried out by:
• Entering personal data into the Controller's information system;
• Using other methods of personal data processing.

4.5. Disclosure of personal data to third parties and its dissemination without the consent of the personal data subject is not permitted.
4.6. Transfer of personal data to investigative and inquiry bodies, to tax authorities and other government agencies and organizations is carried out in accordance with legal requirements.
4.7. The Controller implements necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, dissemination and other unauthorized actions.

5. Updating, Modifying, Deleting and Destroying Personal Data, Responding to Subject Requests Regarding Access to Personal Data

5.1. Confirmation of personal data processing by the Controller will be provided by the Controller to the user after receiving the user's request sent to the Controller's Email address [email protected] within 30 (thirty) calendar days after receiving the request. The provided data does not include personal data related to other personal data subjects, except where there is a legal basis for disclosing such personal data. The request must contain:
• Data confirming the user's relationship with the Controller (contract signing date and/or other data), or other data confirming the processing of personal data by the Controller;
• User's signature.
The request is sent as an electronic document and signed with an electronic signature. By agreement of the parties, an electronic signature will be considered as sending a request from the user's contact Email address specified by that user during registration on the Website. If the personal data subject's request cannot fully present the necessary information required by Personal Data Law or the subject does not have the right to access the requested information, a reasoned refusal will be sent to them.
5.2. Your personal data storage period: is the time that personal data is used and necessary for the main operation of the Website. Users may withdraw their consent to personal data processing at any time by sending notification to the Controller via Email to the Controller's Email address: [email protected].
5.3. In case of withdrawal of consent for personal data processing by the user, personal data will be destroyed.
5.4. Users can receive any clarification on issues related to the processing of their personal data by contacting the Controller via Email: [email protected].
5.5. Modifications to the personal data processing Policy by the Controller will be reflected in this document. In case of significant modifications, users may receive information at the Email address they specified during registration on the Website.