1. General Provisions

1.1 This Policy regarding the processing of personal data (hereinafter - the Policy) is prepared in accordance with paragraph 2, part 1, article 18.1 of the Federal Law of the Russian Federation "On Personal Data" № 152-FZ of July 27, 2006 (hereinafter - the Law) and defines the position of the Site Administration (hereinafter - the Site Administration) in the field of processing and protection of personal data (hereinafter - Data), respect for the rights and freedoms of every person and, in particular, the right to privacy, personal and family secrecy.

2. Scope of application

2.1 This Policy applies to Data received both before and after this Policy is put into effect.

2.2 Realizing the importance and value of Data, as well as taking care to respect the constitutional rights of citizens of the Russian Federation and citizens of other states, the Site Administration ensures reliable protection of Data.

3. Definitions

3.1 Data means any information related directly or indirectly to a directly or indirectly defined or identifiable natural person, i.e. such information, in particular, includes: surname, first name, patronymic, e-mail, location, link to personal website or social networks, ip address.

3.2 Data processing means any action (operation) or set of actions (operations) with Data performed with the use of automation tools and/or without the use of such tools. Such actions (operations) include: collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of Data.

3.3 Data security means the protection of Data from unlawful and/or unauthorized access, destruction, modification, blocking, copying, provision, distribution of Data, as well as from other unlawful actions in relation to Data.

4. Legal basis and purposes of Data processing

4.1. Processing and security of Data by the Website Administration is carried out in accordance with the requirements of the Constitution of the Russian Federation, the Law, the Labor Code of the Russian Federation, by-laws, other federal laws of the Russian Federation defining the cases and peculiarities of Data processing, guiding and methodological documents of the FSTEC of Russia and the Federal Security Service of Russia.

4.2. The subjects of the Data processed by the Administration of the website are:

4.2.1. Users and visitors of the website https://cheatsmonster.com/ owned by the Website Administration, including for the purpose of placing an order on the Website https://cheatsmonster.com/.

4.3. The administration of the website processes the Data of the Data Subjects for the following purposes:

4.3.1. implementation of functions, powers and duties assigned to the Site Administration by the legislation of the Russian Federation in accordance with federal laws.

4.3.2. Users for the purposes of:

4.3.2.1.- providing information on goods/services, ongoing promotions and special offers;

4.3.2.2.- analyzing the quality of the service provided and improving the quality of customer service;

4.3.2.3.- informing you about the status of your order;

4.3.2.4.- fulfillment of a contract, including a sales contract, including those concluded remotely on the Website, provision of services on a paid basis; provision of services, as well as accounting of services rendered to consumers for mutual settlements;

4.3.2.5.- delivery of the ordered Goods to the User who has placed an order on the Website, return of the goods.

5. Principles and conditions for the processing of Data.

5.1. When processing Data, the Site Administration adheres to the following principles: Data processing is carried out on a lawful and fair basis; Data is not disclosed to third parties and is not distributed without the consent of the Data subject, except in cases requiring disclosure of Data at the request of authorized state authorities, legal proceedings; specific legitimate purposes are defined prior to the beginning of processing (including collection) of Data; only those Data are collected that are necessary and sufficient for the stated purpose of processing; Data are combined with the Data subject's personal data.

5.2. The site administration may include the Data of subjects in publicly available Data sources, in this case the site administration takes the written consent of the subject to the processing of his Data, or by expressing consent through the site form (checkbox), by clicking which the subject of personal data expresses his consent.

5.3. The website administration does not process Data concerning race, nationality, political views, religious, philosophical and other beliefs, intimate life, membership in public associations, including trade unions.

5.4. Biometric Data (information that characterizes the physiological and biological features of a person, on the basis of which it is possible to establish his/her identity and which is used by the operator to establish the identity of the Data subject) is not processed by the Administration of the site.

5.5. The website administration performs cross-border data transfer. The Administration of the site confirms that the foreign state, to the territory of which the transfer of personal data is carried out, provides adequate protection of the rights of personal data subjects in accordance with the level of security defined by the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

5.6. In cases stipulated by the legislation of the Russian Federation, the Website Administration has the right to transfer Data to third parties (federal tax service, state pension fund and other state bodies) in cases stipulated by the legislation of the Russian Federation.

5.7 The website administration has the right to entrust the processing of Data of Data subjects to third parties with the consent of the Data subject, on the basis of an agreement concluded with such parties, including consent to the user agreement and the policy of personal data processing posted on the website.

5.8. Persons processing Data on the basis of a contract (operator's order) concluded with the Administration of the website, undertake to comply with the principles and rules of data processing and protection provided by the Law. For each third party, the contract defines the list of actions (operations) with Data to be performed by the third party processing the Data, the purposes of processing, establishes the obligation of the third party to maintain confidentiality and ensure the security of Data during their processing, and specifies the requirements for the protection of processed Data in accordance with the Law.

5.9. In order to fulfill the requirements of its contractual obligations, Data processing in the Administration of the site is carried out both with and without the use of automation tools. The totality of processing operations includes collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of Data.

5.10. The site administration is prohibited to make decisions based solely on automated processing of Data, which generate legal consequences in relation to the Data subject or otherwise affect his/her rights and legitimate interests.

6. Rights and obligations of Data subjects, as well as of the website Administration with regard to Data processing

6.1. The subject whose Data is processed by the Administration of the website has the right:

6.1.1. receive from the Site Administration:

6.1.1.1. confirmation of the fact of Data processing and information on the availability of Data relating to the Data subject concerned;

6.1.1.2. information about the legal basis and purposes of Data processing;

6.1.1.3. information about the Data processing methods used by the Website Administration;

6.1.1.4. a list of the Data processed relating to the Data subject and information on the source of their acquisition;

6.1.1.5. information on the timeframe for processing Data, including the timeframe for its storage;

6.1.1.6. information on how the Data Subject shall exercise the Data Subject's rights;

6.1.1.7. other information stipulated by the Law or other regulatory legal acts of the Russian Federation;

6.1.2. demand from the Site Administration:

6.1.2.1. clarification of their Data, blocking or destruction if the Data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing;

6.1.2.2. revoke his/her consent to the processing of Data at any time; demand the elimination of unlawful actions of the Website Administration in relation to his/her Data;

6.1.3. to protect their rights and legitimate interests, including compensation for losses and/or compensation for moral damage in court.

6.2. The website administration in the process of Data processing is obliged to:

6.2.1. to provide the Data subject, upon his/her request, with information concerning the processing of his/her personal data or, on legitimate grounds, to provide a refusal within thirty days from the date of receipt of the Data subject's or his/her representative's request;

6.2.2. explain to the Data Subject the legal consequences of refusal to provide Data, if the provision of Data is mandatory under federal law;

6.2.3. take the necessary legal, organizational and technical measures or ensure their adoption to protect Data from unlawful or accidental access to it, destruction, modification, blocking, copying, provision, dissemination of Data, as well as from other unlawful actions in relation to Data;

6.2.4. publish on the Internet and provide unrestricted access via the Internet to the document defining its policy on Data processing, to the information on the Data protection requirements implemented;

6.2.5. provide Data subjects and/or their representatives with the opportunity to familiarize themselves with the Data free of charge if requested within 30 days from the date of receipt of such request;

6.2.6. block unlawfully processed Data related to the Data subject or ensure their blocking (if the Data is processed by another person acting on behalf of the Site Administration) from the moment of request or receipt of a request for the period of verification, in case of detection of unlawful processing of Data at the request of the Data subject or his/her representative or at the request of the Data subject or his/her representative or the authorized body for the protection of the rights of personal data subjects;

6.2.7. clarify the Data or ensure their clarification within 7 working days from the date of submission of the data and lift the blocking of the Data, in case of confirmation of the fact of inaccuracy of the Data on the basis of the information provided by the Data subject or his/her representative;

6.2.8. stop unauthorized processing of Data or ensure that unauthorized processing of Data is stopped;

6.2.9. to stop processing of Data or ensure its termination and to destroy Data or ensure its destruction once the purpose of Data processing has been achieved, unless otherwise provided for in the contract to which the Data subject is a party, beneficiary or guarantor, if the purpose of Data processing has been achieved;

6.2.10. stop processing Data or ensure its termination and destroy Data or ensure its destruction in case the Data subject revokes his/her consent to Data processing, if the Website Administration is not entitled to process Data without the Data subject's consent;

7. Data protection requirements

7.1. When processing Data, the website administration takes the necessary legal, organizational and technical measures to protect Data from unlawful and/or unauthorized access to it, destruction, modification, blocking, copying, provision, distribution of Data, as well as from other unlawful actions in relation to Data.

7.2. Such measures under the Act include, inter alia:

7.2.1. appointment of a person responsible for organizing the processing of Data and a person responsible for ensuring Data security;

7.2.2. development and approval of local acts on data processing and protection;

7.2.3. application of legal, organizational and technical measures to ensure Data security:

7.2.4. identification of threats to the security of Data during their processing in personal data information systems;

7.2.5. application of organizational and technical measures to ensure the security of Data during their processing in personal data information systems, necessary to meet the requirements for the protection of Data;

7.2.6. application of information protection means that have passed the conformity assessment procedure in accordance with the established procedure;

7.2.7. assessment of the effectiveness of the measures taken to ensure the security of Data prior to the commissioning of the personal data information system;

7.2.8. accounting of the machine-readable Data carriers, if the Data is stored on machine-readable carriers;

7.2.9. detection of unauthorized access to Data and taking measures to prevent such incidents in the future;

7.2.10. recovery of Data modified or destroyed due to unauthorized access to it;

7.2.11. establishing the rules of access to Data processed in the personal data information system, as well as ensuring the registration and recording of all actions performed with Data in the personal data information system.

7.2.12. control over the measures taken to ensure Data security and the level of protection of personal data information systems;

7.2.13. assessment of the harm that may be caused to Data subjects in case of violation of the requirements of the Law, the correlation between the said harm and the measures taken by the Website Administration to ensure fulfillment of the obligations stipulated by the Law;

7.2.14. observance of conditions excluding unauthorized access to the material carriers of the Data and ensuring the safety of the Data;

8. Data processing (storage) periods.

8.1. Data processing (storage) periods are determined based on the purposes of data processing, in accordance with the data subject's agreement term, requirements of federal laws, requirements of data controllers, on behalf of whom the Website Administration processes data, primary rules of organizational archives, and statutes of limitations.

8.2. Data, the processing (storage) period of which has expired, must be destroyed. Data storage after the cessation of their processing is permitted only after anonymization.

9. Procedure for obtaining explanations regarding data processing.

9.1. Individuals whose data is processed by the Website Administration can obtain explanations regarding the processing of their data by contacting the Website Administration through the feedback form.

10. Features of data processing and protection for data collected by the Website Administration using the Internet.

10.1. The Website Administration processes data received from users of the website: https://cheatsmonster.com/ (hereinafter collectively referred to as the "Website") and when proceeding directly to placing an order.

10.2. Data collection.

There are two main methods by which the Website Administration obtains data through the Internet:

10.2.1. Data submission (manual data entry):

10.2.1.1. surname

10.2.1.1. name

10.2.1.1. e-mail

10.2.1.1. Link to a personal website or social media.

10.3. Automatically collected information.

The Website Administration may collect and process non-personal information.

10.3.1. Location determination.

10.3.2. ip adress

10.3.3. Information about users' interests on the Website based on the search queries entered by users of the Website regarding the products available for sale, with the aim of providing users with relevant information when using the Website, as well as for summarizing and analyzing information about which sections of the Website and products are most in demand among Website users.

10.3.4. Processing and storing search queries of Website users for the purpose of summarizing and creating customer statistics on the use of Website sections. The Website Administration automatically obtains certain types of information obtained during user interactions with the Website, email correspondence, and similar processes. This includes technologies and services such as web protocols, cookies, web beacons, as well as applications and tools provided by third parties. However, web beacons, cookies, and other tracking technologies do not allow for the automatic acquisition of data. If a Website user voluntarily provides their data, such as when filling out a feedback form or sending an email, then and only then are processes initiated for the automatic collection of detailed information to enhance Website usability and/or improve interactions with users.

10.4. Use of data.

The Website Administration is entitled to use the provided data in accordance with the stated purposes of their collection, with the consent of the data subject, if such consent is required. Data that has been obtained in aggregated and anonymized form may be used for better understanding the needs of customers of the products and services offered by the Website Administration and for improving the quality of service.

10.5. Data transfer.

The Website Administration may assign data processing to third parties exclusively with the consent of the data subject. Additionally, data may be disclosed to third parties in the following cases: a) In response to legitimate requests from authorized government agencies, in accordance with laws, court decisions, etc. b) Data cannot be disclosed to third parties for marketing, commercial, or similar purposes, except in cases where the prior consent of the data subject has been obtained.

10.6. The website contains links to other web resources where users may find useful and interesting information. However, this Privacy Policy does not apply to such other websites. Users who navigate to other websites through links are advised to review the data processing policies posted on those websites.

10.7 A Website user may, at any time, withdraw their consent for data processing by sending a message to the email address: admin@cheatsmonster.com. Upon receipt of such a message, the processing of the user's data will be terminated, and their data will be deleted, except in cases where processing may continue in accordance with the law.

11. Final provisions.

11.1. This Policy is a local regulatory act of the Website Administration. This Policy is publicly accessible and is made available through publication on the Website. This Policy may be revised in any of the following cases:

11.1.1. In the event of changes in the legislation of the Russian Federation regarding the processing and protection of personal data;

11.1.2. In cases of receiving instructions from competent government authorities to rectify discrepancies affecting the scope of the Policy;

11.1.3. At the discretion of the Website Administration;

11.1.4. In the event of changes in the purposes and processing periods of data;

11.1.5. When there are changes in the organizational structure, the structure of information and/or telecommunication systems (or the introduction of new ones);

11.1.6. When new data processing and protection technologies are applied (including transmission and storage);

11.1.7. In case there is a need to change the data processing process related to the activities of the Website.

11.2. An integral part of this Policy is the Consent to the Processing of Personal Data, which is posted on the Website.

11.3. This Policy is effective directly and is interrelated with the User Agreement posted on the Website.

Our website is not responsible for the ban of your gaming account.