Last updated: December 10, 2025
Personal Data Processing Policy1. General ProvisionsThis Personal Data Processing Policy (hereinafter referred to as the “Policy”) defines the procedures for the collection, use, storage, disclosure, and protection of personal data, as well as the measures implemented to ensure the security and confidentiality of such data, undertaken by
Takhir Abdurashitov (hereinafter referred to as the “Operator”).
The Operator processes personal data in accordance with generally accepted principles and requirements of international data protection regulations, including principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
1.1. The Operator considers respect for human rights and fundamental freedoms, including the right to privacy and the protection of personal and family life, to be a fundamental principle and an essential condition of its activities related to the processing of personal data.
1.2. This Policy applies to all information that the Operator may obtain about users and visitors of the website https://lab-ta.com, regardless of the user’s location or nationality, when such information qualifies as personal data under applicable data protection laws.
1.3. Where required, the processing of personal data is carried out in compliance with applicable data protection laws and regulations of the countries in which users are located, including but not limited to the General Data Protection Regulation (GDPR).
2. Basic Terms Used in the Policy
2.1.
Automated processing of personal data — processing of personal data using computer technology.
2.2.
Blocking of personal data — temporary suspension of the processing of personal data (except where processing is necessary to clarify personal data).
2.3.
Website — a set of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at https://lab-ta.com
2.4.
Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.5.
Depersonalization of personal data — actions as a result of which it becomes impossible, without the use of additional information, to determine the ownership of personal data by a specific User or another personal data subject.
2.6.
Processing of personal data — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7.
Operator — a state authority, municipal authority, legal entity, or individual that independently or jointly with others organizes and/or processes personal data, and also determines the purposes of processing personal data, the composition of personal data to be processed, and actions (operations) performed with personal data.
2.8.
Personal data — any information relating directly or indirectly to a specific or identifiable User of the website https://lab-ta.com
2.9.
Personal data permitted by the personal data subject for dissemination — personal data to which an unlimited number of persons is granted access by the personal data subject by giving consent to the processing of personal data permitted for dissemination in accordance with the procedure provided for by the Personal Data Law (hereinafter referred to as “personal data permitted for dissemination”).
2.10.
User — any visitor to the website https://lab-ta.com
2.11.
Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.
2.12.
Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at familiarizing an unlimited group of persons with personal data, including publication of personal data in mass media, placement in information and telecommunication networks, or providing access to personal data in any other way.
2.13.
Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign state authority, foreign individual, or foreign legal entity.
2.14.
Destruction of personal data — any actions as a result of which personal data are irreversibly destroyed with no possibility of further restoration of the content of personal data in the personal data information system and/or physical media containing personal data are destroyed.
3. Main Rights and Obligations of the Operator3.1. The Operator has the right to:
- receive reliable information and/or documents containing personal data from the personal data subject;
- in the event of withdrawal by the personal data subject of consent to the processing of personal data, as well as submission of a request to terminate the processing of personal data, continue processing personal data without the consent of the personal data subject if there are grounds specified in the Personal Data Law;
- independently determine the composition and list of measures necessary and sufficient to ensure compliance with obligations provided for by the Personal Data Law and regulatory legal acts adopted in accordance with it, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator is obliged to:
- provide the personal data subject, at their request, with information concerning the processing of their personal data;
- organize the processing of personal data in accordance with the procedure established by the current legislation of the Russian Federation;
- respond to requests and inquiries of personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
- inform the authorized body for the protection of the rights of personal data subjects, upon its request, of the necessary information within 10 days from the date of receipt of such request;
- publish or otherwise ensure unrestricted access to this Policy regarding the processing of personal data;
- take legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful actions;
- terminate the transfer (distribution, provision, access), processing, and destroy personal data in the manner and cases provided for by the Personal Data Law;
- fulfill other obligations provided for by the Personal Data Law.
4. Main Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
- receive information regarding the processing of their personal data, except in cases provided for by federal laws; such information shall be provided by the Operator in an accessible form and shall not contain personal data relating to other personal data subjects, unless there are lawful grounds for disclosure;
- demand clarification, blocking, or destruction of their personal data if such data are incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing, as well as take measures provided by law to protect their rights;
- require prior consent for the processing of personal data for the purpose of promoting goods, works, and services on the market;
- withdraw consent to the processing of personal data and submit a request to terminate such processing;
- appeal unlawful actions or inaction of the Operator in processing their personal data to the authorized body or in court;
- exercise other rights provided for by the legislation of the Russian Federation.
4.2. Personal data subjects are obliged to:
- provide the Operator with accurate information about themselves;
- inform the Operator about updates (changes) to their personal data.
4.3. Persons who provide the Operator with inaccurate information about themselves or about another personal data subject without the latter’s consent shall bear liability in accordance with the legislation of the Russian Federation.
5. Principles of Personal Data Processing
5.1. Personal data processing is carried out on a lawful and fair basis.
5.2. Processing is limited to achieving specific, predetermined, and lawful purposes.
5.3. Combination of databases containing personal data processed for incompatible purposes is not permitted.
5.4. Only personal data relevant to the purposes of processing are subject to processing.
5.5. The content and volume of processed personal data correspond to the stated purposes; excessive data processing is not allowed.
5.6. Accuracy, sufficiency, and relevance of personal data are ensured; necessary measures are taken to remove or clarify incomplete or inaccurate data.
5.7. Personal data are stored in a form allowing identification of the subject no longer than required by processing purposes, unless otherwise established by law or contract.
6. Purposes of Personal Data Processing
Purpose of processing:Providing the User with access to services, information, and/or materials available on the website.
Personal data:Last name, first name, patronymic
Email address
Phone numbers
Photographs
Legal grounds:Constituent (founding) documents of the Operator
Types of processing:Collection, recording, systematization, accumulation, storage, destruction, and depersonalization of personal data.
7. Conditions for Personal Data Processing
7.1. Processing is carried out with the consent of the personal data subject.
7.2. Processing is necessary to achieve purposes provided for by international treaties or laws of the Russian Federation.
7.3. Processing is necessary for the administration of justice and execution of judicial acts.
7.4. Processing is necessary for the performance or conclusion of a contract involving the personal data subject.
7.5. Processing is necessary to protect the rights and legitimate interests of the Operator or third parties, provided that rights and freedoms of the data subject are not violated.
7.6. Processing of publicly available personal data is carried out.
7.7. Processing of personal data subject to mandatory publication or disclosure under federal law is carried out.
8. Procedure for Collection, Storage, Transfer, and Other Processing of Personal DataThe security of personal data processed by the Operator is ensured through legal, organizational, and technical measures.
8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access.
8.2. Personal data shall not be transferred to third parties except as required by law or with the consent of the data subject.
8.3. Users may update their personal data by sending an email to
ceo@lab-ta.com with the subject “Personal Data Update”.
8.4. The processing period is determined by the achievement of processing purposes. Consent may be withdrawn at any time by sending an email with the subject “Withdrawal of Consent to Personal Data Processing”.
8.5. Data collected by third-party services are processed in accordance with their own policies; the Operator is not responsible for third-party actions.
8.6. Restrictions on dissemination do not apply in cases of public interest as defined by law.
8.7. Confidentiality of personal data is ensured.
8.8. Personal data are stored no longer than required by processing purposes.
8.9. Processing may be terminated upon achievement of purposes, expiration or withdrawal of consent, or detection of unlawful processing.
9. List of Actions Performed with Personal Data9.1. Collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, depersonalization, blocking, deletion, and destruction.
9.2. Automated processing with or without transmission via information and telecommunication networks.
10. Cross-Border Transfer of Personal Data10.1. The Operator shall notify the authorized body before commencing cross-border transfer.
10.2. Prior to notification, the Operator shall obtain relevant information from foreign recipients.
11. Confidentiality of Personal DataPersons with access to personal data shall not disclose or distribute such data without consent, unless otherwise provided by law.
12. Final Provisions12.1. Users may request clarifications by contacting
ceo@lab-ta.com.
12.2. Changes to this Policy will be reflected in this document.
12.3. The current version is available at https://lab-ta.com