NMF-EXPO 2025
PRIVACY POLICY

Personal Data Processing Policy

1. General Provisions
This Personal Data Processing Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (hereinafter referred to as the “Personal Data Law”) and defines the procedure for processing personal data and the measures taken by LLC "Online-Metalworking" (hereinafter – the “Operator”) to ensure the security of personal data.
1.1. The Operator considers respect for human and civil rights and freedoms, including the right to privacy, personal and family confidentiality, to be one of its most important goals and conditions for carrying out personal data processing activities.
1.2. This Operator’s Personal Data Processing Policy (hereinafter – the “Policy”) applies to all information that the Operator may receive about visitors to the website https://eng.nmf-expo.ru.

2. Key Terms Used in This Policy

2.1. Automated Processing of Personal Data – processing of personal data using computer technology.
2.2. Blocking of Personal Data – temporary suspension of the processing of personal data (except when processing is necessary to clarify such data).
2.3. Website – a set of graphic and informational materials, software, and databases accessible at the internet address https://eng.nmf-expo.ru.
2.4. Personal Data Information System – a set of databases containing personal data, and the information technologies and technical means that process them.
2.5. Depersonalization of Personal Data – actions that make it impossible to determine ownership of personal data without additional information.
2.6. Processing of Personal Data – any action (operation) or set of actions (operations), performed with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator – a state authority, municipal body, legal entity, or individual that independently or jointly organizes and/or carries out the processing of personal data, and determines the purposes of processing, the scope of personal data, and the actions performed with them.
2.8. Personal Data – any information directly or indirectly related to an identified or identifiable user of the website https://eng.nmf-expo.ru.
2.9. Personal Data Authorized for Distribution – personal data to which the subject of personal data has granted unrestricted access by providing consent in accordance with the Personal Data Law.
2.10. User – any visitor of the website https://eng.nmf-expo.ru.
2.11. Provision of Personal Data – actions aimed at disclosing personal data to a specific person or group of persons.
2.12. Distribution of Personal Data – any actions aimed at disclosing personal data to an indefinite group of persons, including publication in mass media, posting on information networks, or providing access to personal data by any other means.
2.13. Cross-Border Transfer of Personal Data – transfer of personal data to the territory of a foreign state, foreign government authority, foreign individual, or foreign legal entity.
2.14. Destruction of Personal Data – actions that result in the irreversible destruction of personal data without the possibility of further restoration.

3. Operator’s Rights and Obligations

3.1. The Operator has the right to:
  • receive accurate information and/or documents containing personal data from the data subject;
  • continue processing personal data after withdrawal of consent by the data subject if permitted by the Personal Data Law;
  • independently determine the necessary measures to ensure compliance with the Personal Data Law and relevant regulations.
3.2. The Operator is obliged to:
  • provide the data subject with information regarding the processing of their personal data upon request;
  • organize the processing of personal data in accordance with applicable Russian legislation;
  • respond to inquiries and requests from data subjects and their legal representatives;
  • report to the authorized authority for the protection of data subjects’ rights within 30 days of receiving a request;
  • publish or otherwise ensure unrestricted access to this Policy;
  • take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution, or other unlawful actions;
  • stop the transfer (distribution, provision, access), processing, and destruction of personal data in accordance with the Personal Data Law;
  • fulfill other obligations established by the Personal Data Law.

4. Rights and Obligations of Data Subjects

4.1. Data subjects have the right to:
  • receive information regarding the processing of their personal data, except in cases specified by law;
  • request the Operator to clarify, block, or delete their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
  • require prior consent for processing personal data for marketing purposes;
  • withdraw their consent to the processing of personal data;
  • lodge complaints with the authorized authority or in court regarding unlawful actions or inaction by the Operator;
  • exercise other rights provided by Russian law.
4.2. Data subjects are obliged to:
  • provide the Operator with accurate personal data;
  • notify the Operator of updates or changes to their personal data.
4.3. Persons who provide inaccurate information about themselves, or about another data subject without their consent, bear responsibility in accordance with Russian law.
5. Categories of Personal Data Processed
5.1. Last name, first name, patronymic.
5.2. Email address.
5.3. Telephone numbers.
5.4. Company details.
5.5. The website also collects and processes anonymized visitor data (including cookies) through web analytics services (such as Yandex.Metrica, Google Analytics, and others).
5.6. The data listed above are hereinafter referred to collectively as “Personal Data.”
5.7. The Operator does not process special categories of personal data relating to race, ethnicity, political opinions, religious or philosophical beliefs, or sexual life.
5.8. The processing of personal data authorized for dissemination from special categories of personal data (as defined in Article 10(1) of the Federal Law on Personal Data) is permitted only if the prohibitions and conditions specified in Article 10.1 of the Law are observed.
5.9. The User’s consent to the processing of personal data authorized for dissemination must be obtained separately from other consents. The content of such consent is established by the competent authority for the protection of personal data subjects’ rights.
5.9.1. The User provides such consent directly to the Operator.
5.9.2. Within three business days of receiving the User’s consent, the Operator must publish information regarding the processing conditions and any restrictions applicable to the dissemination of personal data.
5.9.3. The transfer (distribution, provision, access) of personal data authorized for dissemination must cease at any time upon the request of the data subject. Such a request must include the individual’s name, contact information (telephone number, email, or postal address), and a list of personal data to be withdrawn from processing. These data may thereafter be processed only by the Operator to whom the request was addressed.
5.9.4. Consent for the processing of personal data authorized for dissemination ceases to be valid once the Operator receives the withdrawal request specified in clause 5.9.3.

6. Principles of Personal Data Processing

6.1. Processing shall be carried out on a lawful and fair basis.
6.2. Processing shall be limited to specific, pre-defined, and legitimate purposes. Processing incompatible with these purposes is not permitted.
6.3. Databases containing personal data that are processed for incompatible purposes shall not be merged.
6.4. Only personal data relevant to the purposes of processing shall be subject to processing.
6.5. The scope and content of processed personal data shall correspond to the declared purposes. Excessive processing is not permitted.
6.6. Personal data must be accurate, sufficient, and, where necessary, kept up to date. The Operator shall take measures to delete or correct incomplete or inaccurate data.
6.7. Personal data shall be stored in a form that allows identification of the data subject, no longer than required for the purposes of processing, unless otherwise provided by law or contract. Once the purposes are achieved, or data are no longer required, personal data shall be destroyed or anonymized unless otherwise required by law.

7. Purposes of Personal Data Processing

7.1. The purposes of processing User’s personal data include:
– sending informational emails;
– concluding, executing, and terminating civil contracts;
– providing access to services, information, and/or materials available on the website https://nmf-expo.ru.
7.2. The Operator may also send the User notifications about new products, services, special offers, and events. The User may opt out at any time by sending an email to info@nmf-expo.ru marked “Unsubscribe from product updates and special offers.”
7.3. Anonymized user data collected via web analytics are used to analyze user activity, improve website quality, and optimize content.

8. Legal Grounds for Processing

8.1. Legal grounds for processing include:
– contracts between the Operator and the data subject;
– federal laws and other regulations on personal data protection;
– User consent for processing personal data, including data authorized for dissemination.
8.2. The Operator processes personal data only when submitted by the User via online forms on https://eng.nmf-expo.ru or by email. Submission constitutes acceptance of this Policy.
8.3. The Operator may process anonymized data if allowed by the User’s browser settings (cookies enabled, JavaScript active).
8.4. The data subject provides personal data voluntarily, in his/her own interest.

9. Conditions for Processing

9.1. Processing requires the subject’s consent.
9.2. Processing is necessary for compliance with international treaties, laws, or Operator’s legal obligations.
9.3. Processing is necessary for judicial proceedings or enforcement of legal acts.
9.4. Processing is necessary for contract performance or conclusion at the initiative of the data subject.
9.5. Processing is necessary to protect the rights and legitimate interests of the Operator or third parties, provided that rights and freedoms of the data subject are not violated.
9.6. Processing of publicly available personal data is permitted.
9.7. Processing is carried out where publication or disclosure is required by law.

10. Collection, Storage, Transfer, and Other Processing
Personal data security is ensured through legal, organizational, and technical measures in compliance with applicable legislation.

10.1. The Operator ensures confidentiality and prevents unauthorized access.
10.2. Personal data will not be transferred to third parties unless required by law or with User consent for contract execution.
10.3. Users may update their data by sending an email to info@nmf-expo.ru marked “Personal Data Update.”
10.4. Processing duration is limited to the time required for the declared purposes unless otherwise defined by law or contract. Users may withdraw consent at any time by emailing info@nmf-expo.ru with the subject “Withdrawal of Consent.”
10.5. Information collected by third-party services (e.g., payment systems, telecom operators, service providers) is stored and processed under their own Terms of Use and Privacy Policies. The Operator is not responsible for third-party actions.
10.6. Restrictions imposed by the User on dissemination do not apply when processing is required for public, governmental, or legal purposes under Russian law.
10.7. The Operator ensures confidentiality in all processing activities.
10.8. Personal data shall be stored no longer than necessary for the purposes of processing unless otherwise required by law or contract.
10.9. Processing may terminate upon achievement of purposes, consent expiration, withdrawal of consent, or unlawful processing.

11. Processing Activities

11.1. The Operator performs collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
11.2. Automated processing may involve data transfer over telecommunication networks.

12. Cross-Border Transfer

12.1. Prior to cross-border transfers, the Operator must ensure adequate protection of data subject rights in the recipient country.
12.2. Transfers to countries without adequate protection may only occur with the User’s written consent or for contract execution.

13. Confidentiality

The Operator and any third parties granted access to personal data must not disclose or disseminate such data without the subject’s consent, unless otherwise required by law.

14. Final Provisions

14.1. Users may request clarification regarding their personal data by contacting info@nmf-expo.ru.
14.2. Any changes to this Policy will be reflected in this document. The Policy remains in force until replaced by a new version.
14.3. The current version is available at https://eng.nmf-expo.ru/privacy-policy.