Data processing policy on the demo site
1. General provisions
This Policy applies to all information that this website (hereinafter – the Site) may obtain about the User during interface testing. The Site is not a commercial project; it operates in a closed authorization mode and was created solely as an element of the web developer’s portfolio to demonstrate the programming skills of an online store plugin, catalog, cart, and personal account.
Operator (Developer): Ivan Voytkov, contact email address: voitkov.ne@yandex.ru.
Due to its non-commercial status, the project is run by an individual and has no legal details of its own.
2. Use of cookies
2.1. The Site uses cookies solely to ensure the technical operability of the demonstration functionality.
2.2. Cookies are processed for the following purposes:
-
ensuring the authorization session in the Personal account;
-
preserving the state and contents of the self-written user Cart between page reloads;
-
technical simulation of the product viewing history in the catalog.
2.3. The Site uses two types of cookies:
-
session cookies – are deleted automatically when the browser is closed;
-
persistent cookies – are stored in the browser for no longer than 30 days from the moment of the last visit.
All cookies do not contain personal data in explicit form (they do not transmit name, phone, email) and serve only to identify the current session and interface settings.
2.4. The User can delete all cookies at any time through browser settings, as well as disable their saving. However, disabling cookies may disrupt the demonstration of the Cart and Personal account (login will become impossible).
2.5. In accordance with Russian legislation, a separate detailed listing of each cookie is not required; however, for your convenience we indicate the general categories and their lifetimes.
3. Purposes of processing and data composition
3.1. The Developer processes data solely for the purpose of demonstrating and testing the technical operability of the web interface.
3.2. In simulations of the contact form, personal account, and order checkout, the following may be subject to processing: name, email, contact phone, delivery address, as well as test organization details entered by the user (INN, KPP, legal address, and company name).
All these fields are voluntary and are filled in solely for the purpose of testing the plugin functionality.
4. Retention periods and data deletion procedure
4.1. Data entered into the cart and personal account forms is stored in an isolated database of the Site only if the user registers. The maximum data retention period is 3 (three) years from the moment of the user’s last activity. After this period, the data is automatically deleted.
4.1.1. Data entered into the contact forms (“Contact form”, the form in contacts) or into order checkout forms without registration is not stored and is deleted immediately after sending.
4.2. The User can request full deletion of their data at any time by sending an email to voitkov.ne@yandex.ru with the subject “Delete my data”. Such a request is fulfilled within 30 calendar days.
4.3. All data except login and password can be edited or deleted by the user independently through the personal account at any time. The user can change email and password independently through the personal account interface.
5. User rights regarding their data
5.1. The User has the right to:
-
access their data stored on the Site;
-
demand its correction or deletion;
-
withdraw consent to data processing at any time.
5.2. To exercise any of these rights, it is enough to send a request to the email voitkov.ne@yandex.ru. All requests are reviewed within up to 30 days.
6. Processing conditions and security
6.1. The User is strongly recommended to use exclusively fictitious (test) name, phone, email, address, INN, KPP, and other data when testing the forms. Real data is excessive and not required for the demonstration functionality.
6.2. The database and Site files are hosted on the infrastructure of the Russian hosting provider Beget LLC (Russian Federation). The data is isolated, is not transferred to third parties, is not checked against government registries, and is not used for marketing mailings, issuing real invoices, or other commercial purposes.
6.3. The following measures are applied to protect information at the technological level:
-
transmission of all entered data via the secure HTTPS protocol with traffic encryption;
-
hosting the infrastructure in specialized Tier III data centers in the Russian Federation;
-
regular automatic database backup to prevent information loss;
-
use of hardware and software systems for protection against DDoS attacks and unauthorized access.
7. User consent
7.1. Before submitting any form containing test data, the User must check a checkbox with the text: “I have read the Data processing policy on the demo site and give my consent to the processing of the test data I have entered for the purpose of demonstrating and testing the interface. I understand that the site is a simulation and I do not enter my real personal data.” A link to the full text of this Policy is placed next to the checkbox.
7.2. Checking the checkbox and the subsequent submission of the form are considered direct and full consent of the User to the processing of all test data entered by them (including the details of legal entities, if specified) under the terms set out in this document.
7.3. The consent is valid until it is withdrawn or until the data is automatically deleted upon expiration of the retention period.
8. Changes to the Policy
The Developer reserves the right to make changes to this Policy. The new version comes into force from the moment of its publication on the Site. Users are notified of changes through an update of the version date at the beginning of the document.