1. General Provisions

This personal data processing policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" and defines the procedure for processing personal data and the measures taken to ensure its security by Individual Entrepreneur Artem Anatolyevich Zaitsev, OGRNIP 316695200075747 (hereinafter — the Operator).

1.1. The Operator's primary goal is to uphold the rights and freedoms of individuals when processing their personal data, including the protection of the right to privacy and personal and family confidentiality.

1.2. This Policy applies to all information the Operator may obtain about visitors to the website https://WholeWorld.biz and any of its subdomains.

2. Key Definitions

• Automated processing — processing of personal data using computing equipment.
• Blocking — temporary suspension of personal data processing (except where processing is necessary to clarify the data).
• Website — the collection of materials and software accessible at https://WholeWorld.biz and any of its subdomains.
• Anonymization — actions that make it impossible to determine the ownership of personal data by a specific User without additional information.
• Processing of personal data — any action or set of actions performed on personal data, including collection, recording, organization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction.
• Operator — a person who organizes and/or carries out the processing of personal data and determines its purposes and scope.
• Personal data — any information directly or indirectly relating to an identified or identifiable User of the Website.
• User — a visitor to the Website.
• Cross-border transfer — transfer of personal data to the territory of a foreign state.
• Destruction — actions resulting in the irreversible elimination of personal data.

3. Rights and Obligations of the Operator

3.1. The Operator has the right to:

• receive accurate information and/or documents containing personal data from the data subject;
• continue processing personal data without the subject's consent where grounds exist under personal data law;
• independently determine the measures necessary to comply with legal requirements.

3.2. The Operator is obliged to:

• provide the data subject with information regarding the processing of their personal data;
• organize processing in accordance with applicable Russian law;
• respond to requests from data subjects in accordance with legal requirements;
• publish this Policy and ensure it is freely accessible;
• implement legal, organizational, and technical measures to protect personal data;
• cease processing and destroy personal data in the cases and manner prescribed by law.

4. Rights and Obligations of Data Subjects

4.1. Data subjects have the right to:

• receive information about the processing of their personal data;
• request correction, blocking, or deletion of data that is incomplete, outdated, inaccurate, or unlawfully obtained;
• withdraw consent to the processing of personal data;
• appeal the Operator's unlawful actions to a supervisory authority or through legal proceedings.

4.2. Data subjects are obliged to:

• provide the Operator with accurate personal data;
• notify the Operator of any changes to their personal data.

4.3. Persons who provide the Operator with inaccurate information shall be liable in accordance with Russian law.

5. Principles of Personal Data Processing

• Processing is carried out on a lawful and fair basis.
• Limited to achieving specific, predetermined, and lawful purposes.
• Combining databases with incompatible processing purposes is not permitted.
• Only data that meets the purposes of processing is processed.
• Accuracy, adequacy, and relevance of personal data are ensured.
• Data is stored no longer than required by the purposes of processing.

6. Purposes, Scope, Categories of Subjects, and Retention Periods

Purpose of processing: providing the User with access to services, information, and/or materials available on the Website.

Categories of data subjects:

• Website visitors;
• registered Website users;
• persons using Website functionality;
• persons who have submitted a contact or support form.

Personal data processed:

Legal basis: agreements between the Operator and the data subject, obtained consent, necessity of fulfilling the user agreement, and other grounds provided for by Russian law.

Retention periods: personal data is processed for the period necessary to achieve the purposes of processing and for the duration of the contractual relationship with the User. Upon achievement of the purposes or withdrawal of consent, data is deleted or anonymized unless otherwise required by law.

The User may withdraw consent at any time by sending a notice to support@wholeworld.biz with the subject "Withdrawal of Consent to Personal Data Processing", or by deleting their account.

Data destruction procedure: deletion from information systems with no possibility of recovery and/or destruction of physical media. Carried out upon achievement of processing purposes, withdrawal of consent, identification of unlawful processing, or expiry of retention periods.

7. Conditions for Personal Data Processing

• Processing is carried out with the consent of the data subject.
• Required to achieve purposes prescribed by Russian law or international treaty.
• Required to fulfill a contract to which the data subject is a party.
• Required to exercise the legitimate interests of the Operator or third parties, provided the rights of the subject are not violated.
• Carried out in relation to publicly available personal data.

8. Collection, Storage, Transfer, and Processing of Personal Data

The security of personal data processed by the Operator is ensured through legal, organizational, and technical measures in accordance with applicable law.

• 8.1. The Operator ensures the safety of personal data and takes measures to prevent unauthorized access.
• 8.2. Personal data is transferred to third parties only to the extent necessary for the operation of the service (hosting providers, payment systems, analytics services) and as required by law.
• 8.3. If inaccuracies are identified, the User may update their data in the Profile section, or by sending a notice to support@wholeworld.biz with the subject "Personal Data Update".
• 8.4. Information collected by third-party services (payment systems and other providers) is stored and processed by them in accordance with their own privacy policies.
• 8.5. The Operator ensures the confidentiality of personal data during processing.

9. Actions Performed with Personal Data

9.1. The Operator performs collection, recording, organization, accumulation, storage, clarification, extraction, use, transfer, anonymization, blocking, deletion, and destruction of personal data.

9.2. The Operator performs automated processing of personal data with or without transmission of information over telecommunications networks.

10. Cross-Border Transfer of Personal Data

10.1. Prior to initiating cross-border transfer of personal data, the Operator must notify the supervisory authority responsible for protecting the rights of personal data subjects.

10.2. Before filing such notification, the Operator must obtain relevant information from the foreign parties to whom the transfer is planned.

11. Confidentiality of Personal Data

The Operator and any other persons who have gained access to personal data are obliged not to disclose or distribute it without the consent of the data subject, unless otherwise provided by federal law.

12. Final Provisions

12.1. Users may obtain clarification on any questions related to the processing of their personal data by contacting the Operator at support@wholeworld.biz.

12.2. Any changes to the Operator's personal data processing policy will be reflected in this document. The Policy is valid indefinitely until replaced by a new version.

12.3. The current version of this Policy is available at: https://wholeworld.biz/en/privacy-policy.