Consent to the processing of cookies 

4. The consent is valid from the date of its provision until the purpose of personal data processing is achieved. The User has the right to withdraw their consent to the processing of personal data by notifying the Operator in writing.

Privacy policy of personal data of the website users

1. General provisions

1.1. This Privacy Policy for personal data of users of the website has been developed in compliance with the requirements of Article 18.1 of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data", as well as other regulatory legal acts of the Russian Federation in the field of personal data protection and processing.

1.2. AB Group LLC ensures the protection of the processed personal data from unauthorized access and disclosure, misuse or loss in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data". 

1.3. The Policy is a publicly available document that applies only to the website located on the Internet at:

www.ab-gr.com 1.4. The Policy does not apply to third-party websites that the personal data subject can access through the Website.

1.5. The Policy establishes general requirements and rules for working with all types of information carriers containing personal data of personal data subjects using the Site that are mandatory for the Operator's employees involved in the processing of personal data.

1.6. The Policy does not apply to issues of ensuring the security of personal data classified as a state secret of the Russian Federation.

1.7. The main objectives of the Policy are:

ensuring the protection of human and civil rights and freedoms when processing personal data, including the protection of the rights to privacy, personal and family secrets;

exclusion of unauthorized actions of the Operator's employees and third parties for the collection, systematization, accumulation, storage, clarification (updating, modification) of personal data, and other forms of illegal interference in information resources and the Operator's local computer network;

ensuring the legal and regulatory confidentiality of undocumented information of Website Users;

protection of citizens' constitutional rights to personal privacy, confidentiality of information constituting personal data, and prevention of possible threats to the security of Website Users.

1.8. The main concepts used in the Policy are:

website - a set of computer software and hardware that ensure the publication for public viewing of information and data united by a common purpose, through technical means used to communicate between computers on the Internet;

A user is a subject of personal data who has access to the Internet and uses the capabilities of the website.;

personal data - any information relating directly or indirectly to a specific or identifiable natural person (personal data subject);

The Head is the sole executive body of the Operator.;

personal data processing is any action (operation) or set of actions (operations) with personal data performed with or without automation tools. The processing of personal data includes, but is not limited to:

collection;

record;

systematization;

accumulation;

keeping;

clarification (update, change);

extraction;

usage;

transfer (provision, access);

depersonalization;

blocking;

removal;

destruction.

automated personal data processing is the processing of personal data using computer technology.

dissemination of personal data - actions aimed at disclosing personal data to an unspecified group of people;

providing personal data is an action aimed at disclosing personal data to a specific person or a specific group of people.;

blocking of personal data is the temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data);

destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed;

Depersonalization of personal data is an action that makes it impossible to determine whether personal data belongs to a specific personal data subject without using additional information.;

The personal data information system is a set of personal data contained in databases and information technologies and technical means that ensure their processing.

2. Principles of processing

2.1. Principles of personal data processing the Operator's employees are guided by the following:

personal data processing is carried out on a lawful and fair basis;

The processing of personal data should be limited to achieving specific, predetermined and legitimate goals. Processing of personal data incompatible with the purposes of personal data collection is not allowed.;

It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other.;

the content and volume of personal data processed must correspond to the stated purposes of processing. The personal data being processed should not be redundant in relation to the purposes of their processing.;

When processing personal data, the accuracy and sufficiency of personal data must be ensured.;

personal data should be stored no longer than the purposes of personal data processing require, unless the period of personal data storage is established by Federal Law or an agreement with the User.;

the processed personal data is subject to destruction or depersonalization upon achievement of the processing objectives or in case of loss of the need to achieve these objectives, unless otherwise provided by the requirements of the legislation.

2.2. Conditions of personal data processing:

the processing of personal data of Users of the Site is carried out in accordance with the requirements of current legislation in the field of personal data protection;

the processing of personal data on the Site is carried out in compliance with the principles and rules provided for by the Policy and legislation of the Russian Federation.

2.3. The processing of personal data of Website Users is carried out solely for the purposes of:

promoting goods, works, and services on the market;

proper operation of the website.

2.5. The personal data used on the Website is provided by the User independently by entering it in the appropriate form during account registration, is classified as confidential information and is processed exclusively using automation tools.

3. User Rights

3.1. The User has the right to:

to obtain information about the Operator, about his location, about the availability of personal data related to the User by the Operator, as well as to familiarize himself with such personal data, except in cases expressly provided for by law.;

to receive from the Operator the following information regarding the processing of his personal data:

confirmation of the fact of processing personal data by the Operator, as well as the purpose of such processing;

legal grounds and purposes of personal data processing;

purposes and methods of personal data processing used by the Operator;

the name and location of the Operator, information about persons who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Operator or on the basis of current legislation;

processed personal data related to the relevant User, the source of their receipt;

terms of personal data processing, including the terms of their storage;

the procedure for exercising the rights provided for by Federal Law by the subject of personal data;

information about a cross-border data transfer that has been carried out or is expected to be carried out;

the name or surname, first name, patronymic and address of the person who processes personal data on behalf of the Operator, if the processing is or will be entrusted to such a person;

other information provided by the current legislation of the Russian Federation;

to demand changes, clarifications, and destruction of information about oneself;

to appeal against unlawful actions or omissions in the processing of personal data and to demand appropriate compensation in court;

identify representatives to protect your personal data;

require the Operator to notify of any changes or exclusions made to them;

to appeal to the authorized body for the protection of the rights of personal data subjects or in court against the actions or omissions of the Operator if he believes that the latter is processing his personal data in violation of the requirements of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" or otherwise violates his rights and freedoms.; 

to protect their rights and legitimate interests, including compensation for damages or compensation for moral damage in court.

4. Duties of the Operator

4.1. In case of receiving a written request from the User, the Operator is obliged to process it and provide a response to it, in accordance with the procedure provided for by the Rules for Reviewing requests from personal data subjects and the current legislation of the Russian Federation.

4.2. In case of receiving a request from the authorized body for the protection of the rights of personal data subjects for the provision of information necessary for the implementation of the activities of the specified body, the Operator is obliged to provide such information within the time limits established by law.

4.3. In case of detection of unlawful processing of personal data, the Operator is obliged to block the unlawfully processed personal data related to the User from the moment such a fact is established.

4.4. If the purpose of personal data processing is achieved, the Operator is obliged to stop processing personal data and destroy personal data in accordance with the procedure provided for in the Regulation on the Procedure for the Destruction of Personal Data and the current legislation of the Russian Federation.

4.5. The Operator is prohibited from making decisions based solely on automated processing of personal data that give rise to legal consequences with respect to the personal data subject or otherwise affect his rights and legitimate interests.

5. Confidentiality of personal data

5.1. The Operator ensures the confidentiality and security of personal data when processing them in accordance with the requirements of the Operator's local regulations and the requirements of current legislation.

5.2. The Operator does not disclose or distribute personal data to third parties without the User's consent, unless otherwise provided by the requirements of the current legislation of the Russian Federation.

6. Processing of personal data

6.1. All personal data should be obtained from the User himself. In case of obtaining consent to the processing of personal data from the User's representative, his/her authority must be confirmed in accordance with the procedure established by law.

6.2. The list of persons entitled to access personal data is determined in accordance with the Operator's local regulations and is approved by the order of the Operator's Head. 

6.3. The Operator stores Users' personal data from the moment they are provided until the moment of revocation of consent to the processing of personal data, the achievement of the processing objectives or the expiration of the period for which consent was provided, as well as in other cases directly provided for by the current legislation of the Russian Federation.

6.4. The Operator does not process Users' personal data on paper.

6.5. The Operator does not transfer personal data to third parties, including for processing purposes. Users' personal data is processed exclusively by the Operator's employees.

6.6. The blocking and deletion of personal data on the Website is carried out on the basis of a written request from the User or an authorized body.

6.7. Personal data is destroyed by erasing information using certified software.

7. Protection of personal data

7.1. When processing personal data, the Operator takes the necessary legal, organizational and technical measures or ensures their adoption to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions with respect to personal data.

7.2. The security of personal data is achieved in the following ways:

identification of threats to the security of personal data during their processing in personal data information systems;

the application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to meet the requirements for personal data protection;

taking into account the machine storage of personal data;

detection of unauthorized access to personal data and taking measures;

recovery of personal data modified or destroyed due to unauthorized access to them;

establishing rules for access to personal data processed in the personal data information system, as well as ensuring registration and accounting of all actions performed with personal data in the personal data information system;

control over the measures taken to ensure the security of personal data and the level of security of personal data information systems;

appointment of a person responsible for personal data processing;

by setting individual passwords for employees' access to the information system in accordance with their job responsibilities;

using certified antivirus software;

by training the Operator's employees who directly process personal data in accordance with the provisions of the legislation of the Russian Federation on personal data, including requirements for personal data protection.

7.3. Protected information about the User on the Website includes data that allows identifying the User or obtaining additional information about him provided for by law and Policy.

7.4. Protected objects of personal data include:

objects of informatization and technical means of automated processing of information containing personal data;

information resources containing information about information and telecommunication systems that use personal data, events that have occurred with managed facilities, business continuity plans, and procedures for transition to emergency management.;

communication channels that are used to transmit personal data in the form of informative electrical signals and physical fields;

alienable machine media based on magnetic, magneto-optical and other materials used for processing personal data.

7.5. Technological information about information systems and elements of the personal data protection system to be protected includes:

information about the access control system for information facilities where personal data is processed.;

management information;

technological information of means of access to control systems;

characteristics of communication channels that are used to transmit personal data in the form of informative electrical signals and physical fields;

information about personal data protection tools, their composition and structure, principles and technical solutions of protection;

service data that appears during the operation of software, messages, and inter-network communication protocols, as a result of personal data processing.

7.6. The personal data protection system complies with the requirements of the Decree of the Government of the Russian Federation dated November 1, 2012 No. 1119 "On Approval of Requirements for the protection of personal data during their Processing in personal Data Information Systems" and ensures:

timely detection and prevention of unauthorized access to personal data or their transfer to persons who do not have the right to access such information;

preventing the impact on the technical means of automated personal data processing, as a result of which their functioning may be disrupted;

the possibility of immediate recovery of personal data modified or destroyed due to unauthorized access to them;

constant monitoring of ensuring the level of personal data security.

8. Responsibility

8.1. All employees of the Operator who process personal data are required to keep confidential information containing personal data.

8.2. Persons guilty of violating the requirements for the processing of personal data are responsible in accordance with the current legislation of the Russian Federation.

8.3. The Operator's employees responsible for processing personal data are responsible for compliance with the personal data regime in relation to the personal data stored in the databases of the Website.

9. Final provisions

9.1. The Policy was approved by the order of the Head of the Operator No. 1-PD dated 04/25/2025, and is valid indefinitely until the new version of the Policy comes into force.

9.2. In case of changes in the legislation of the Russian Federation in the field of personal data protection, the Operator accepts a new version of the Policy, taking into account the changes. Up to this point, the Policy is valid to the extent that it does not contradict the current legislation of the Russian Federation.

9.3. In order to contact the Operator, the following contact information may be used:

tel. +7(916) 349-66-67

e-mail: info@ab-gr.com

postal address: 121170, Moscow, Ext.Ter.G. Dorogomilovo Municipal District, Ul. 1812, 8, Room 1, Room. 1/2, Floor 2

Consent to the processing of personal data

1. This consent to the processing of personal data (hereinafter referred to as Consent) expresses the will of the user of the Internet information and telecommunication network (hereinafter referred to as the User), who transmits his personal data through the website located at www.ab-gr.com (hereinafter referred to as the Website) AB group LLC (OGRN: 1202300032725; TIN: 2310219830; KPP: 231001001, Location: 121170, Moscow, Ext.Ter.G. Dorogomilovo Municipal District, Ul. 1812, 8, Room 1, Room. 1/2, Floor 2; phone: +7(916) 349-66-67; e-mail: info@ab-gr.com)

2. In accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", the User gives the Contractor specific, substantive, informed, conscious and unambiguous consent to the processing of his personal data in order to:

- promote goods, works, services on the market.

3. The User gives the Contractor consent to the processing of the following personal data:

- last name, first name, patronymic; 

- email address; 

- phone number; 

- information collected through metric programs.

4. The User authorizes the Contractor to process personal data automatically, as well as without the use of automation tools, in the following forms::

- collection; 

- recording; 

- systematization; 

- accumulation; 

- storage; 

- clarification (update, change); 

- extraction; 

- use; 

- blocking; 

- removal; 

- destruction.

5. The consent is valid from the date of its provision until the achievement of the purpose of personal data processing. The User has the right to withdraw Consent to the processing of personal data by notifying the Operator in writing.