PRIVACY POLICY REGARDING PERSONAL DATA PROCESSING

1. General ProvisionsThis Personal Data Processing Policy is prepared in accordance with applicable data protection legislation, including the Russian Federal Law No. 152-FZ “On Personal Data”, and defines the procedure for processing personal data and measures to ensure their protection taken by an individual registered as an Individual Entrepreneur (hereinafter referred to as the “Data Controller”).
1.1. The Data Controller considers the protection of human rights and freedoms during personal data processing, including the right to privacy, as its highest priority.
1.2. This Policy applies to all information that the Data Controller may receive from visitors of the website https://cartoonfest.mobi/.

2. Key Definitions
2.1. Automated processing of personal data – processing using computer technologies.
2.2. Blocking of personal data – temporary suspension of processing (except when necessary to clarify data).
2.3. Website – a collection of graphical and informational materials, software, and databases available at https://cartoonfest.mobi/.
2.4. Personal data information system – databases and technologies used for processing personal data.
2.5. Anonymization of personal data – actions making it impossible to identify the data subject without additional information.
2.6. Processing of personal data – any action performed with personal data, including collection, recording, systematization, accumulation, storage, clarification, use, transfer, anonymization, blocking, deletion, or destruction.
2.7. Data Controller – a person who determines the purposes and means of processing personal data.
2.8. Personal data – any information relating directly or indirectly to an identified or identifiable website user.
2.9. User – any visitor of the website https://cartoonfest.mobi/.
2.10. Disclosure of personal data – actions aimed at making personal data available to a specific person or group of persons.
2.11. Dissemination of personal data – actions aimed at making personal data available to an indefinite circle of persons.
2.12. Cross-border data transfer – transfer of personal data to a foreign country or foreign entity.
2.13. Destruction of personal data – irreversible deletion of personal data.

3. Rights and Obligations of the Data ControllerThe Data Controller has the right to:

• request accurate information from the data subject;
• continue processing personal data after withdrawal of consent if there are legal grounds;
• independently determine necessary and sufficient measures for compliance with data protection laws.

The Data Controller is obliged to:

• provide information regarding personal data processing upon request;
• ensure lawful processing of personal data;
• respond to data subject requests;
• implement appropriate security measures;
• stop processing and delete personal data when required by law;
• comply with applicable legislation.

4. Rights and Obligations of Data SubjectsData subjects have the right to:

• obtain information about their personal data processing;
• request correction, blocking, or deletion of their personal data;
• withdraw consent at any time;
• object to processing where applicable;
• lodge complaints with supervisory authorities or courts.

Data subjects must:

• provide accurate personal data;
• update their data when necessary

5. Principles of Data Processing

• Lawfulness and fairness
• Limitation to specific purposes
• Data minimization
• Accuracy and relevance
• Storage limitation
• Integrity and confidentiality

6. Purposes of Personal Data Processing
The Data Controller processes personal data for the following purposes:

• informing users via email;
• registration of competition participants;
• organization and execution of the Street Animation Festival “MultFilin”;
• processing applications and submitted materials;
• publication of participants’ works on the website and social media;
• ensuring festival operations and communication;
• protection of participants’ copyright.

Categories of personal data processed:phone number;

• full name;
• address of residence or place of study;
• email address;
• date of birth;
• website and social media links.

Legal basis:
Applicable legislation on personal data protection, including Federal Law No. 152-FZ and other regulatory acts.

• Processing operations:collection;
• recording;
• systematization;
• accumulation;
• storage;
• updating;
• use;
• anonymization;
• blocking;
• deletion;
• email communication.

7. Conditions of ProcessingPersonal data is processed:

• based on user consent;
• for legal obligations;
• for contract execution;
• for legitimate interests of the controller (provided rights are not violated);
• where data is publicly available;
• where required by law.

For minors, processing is carried out only with consent of their legal representatives (parents or guardians).

8. Data Processing, Storage and Security
The Data Controller ensures protection of personal data through legal, organizational, and technical measures.

• Data is protected against unauthorized access;
• data is not transferred to third parties except as required by law or with consent;
• users may update or delete their data upon request;
• data is stored only as long as necessary for processing purposes;
• consent may be withdrawn at any time.

The Controller may process personal data of minors only with consent of their legal representatives.

9. Processing OperationsThe Data Controller may perform:
collection, recording, systematization, storage, use, transfer, anonymization, blocking, and deletion of personal data.

10. Cross-border Data TransferThe Data Controller may transfer personal data outside the Russian Federation when using hosting, analytics, email, or other digital services required for website and festival operations.
Cross-border transfers are carried out only when adequate protection of personal data rights is ensured.
Where required by law, explicit consent is obtained.

11. ConfidentialityThe Data Controller and any authorized persons must not disclose personal data to third parties without consent, unless required by law.

12. Final ProvisionsThe Data Controller may update this Policy at any time.

• The Policy remains valid until replaced by a new version.
• The current version is available at: https://cartoonfest.mobi/privacy