Privacy Policy and Personal Data Processing Policy
Last updated: [02.08.2026]
1. General ProvisionsThis Privacy Policy and Personal Data Processing Policy (hereinafter, the “Policy”) sets out the procedure for the collection, use, storage, transfer, and protection of personal data of users of the website:
https://eramalore.com/savilla_application
The data controller (Operator) of personal data is:
Anastasia Nikolaevna Savila
Contact e-mail address:
eramalore@gmail.com
This Policy applies to all visitors and users of the website regardless of their citizenship, country of residence, or location.
The Operator respects every individual’s right to privacy and takes reasonable technical and organizational measures to protect personal data.
This Policy has been developed with due regard to applicable international and national personal data protection requirements, including:
• General Data Protection Regulation (EU) 2016/679 (GDPR);
• Federal Law of the Russian Federation No. 152-FZ “On Personal Data” (where applicable);
• California Consumer Privacy Act (CCPA/CPRA) (where applicable);
• other applicable personal data protection requirements that may apply to website users.
2. Data ControllerFor the purposes of the GDPR, the Operator may be regarded as the Data Controller — the party that determines the purposes and means of the processing of personal data.
Controller:
Anastasia Nikolaevna Savila
Website:
https://eramalore.com/savilla_application
E-mail:
eramalore@gmail.com
For matters relating to the processing of personal data, users may contact the Operator at the e-mail address indicated above.
3. Scope of the PolicyThis Policy applies where the user:
• visits the website;
• submits a request via a form;
• contacts the Operator by e-mail;
• contacts the Operator via messaging applications;
• places an order;
• enters into an agreement;
• uses the Operator’s services or products.
Where the law of the user’s country provides for additional rights or requirements, the Operator shall take such requirements into account to the extent applicable.
4. Personal Data We CollectThe Operator may process the following categories of personal data.
4.1. Identification Data• first name;
• last name;
• patronymic (if provided).
4.2. Contact Data• e-mail address;
• telephone number;
• username on messaging applications.
4.3. Communication DataInformation contained in:
• requests;
• messages;
• inquiries;
• correspondence with the user.
4.4. Data for the Performance of AgreementsWhere necessary:
• information required for the preparation of documents;
• data required for the performance of obligations under an agreement.
4.5. Technical DataThe following may be collected automatically:
• IP address;
• device type;
• browser;
• operating system;
• browser language;
• date and time of visit;
• webpages visited;
• technical information regarding interaction with the website.
4.6. Cookies and Similar DataInformation obtained through cookies and similar technologies.
5. Purposes of Processing Personal DataPersonal data are used for the following purposes:
6. Legal Bases for ProcessingThe processing of personal data is carried out on the basis of:
• the user’s consent;
• the necessity to conclude or perform an agreement;
• compliance with legal requirements;
• the Operator’s legitimate interests, provided they do not infringe the user’s rights;
• other grounds provided for by applicable law.
For users in the European Union, processing is based on the grounds set out in Article 6 GDPR:
• consent;
• contractual necessity;
• legal obligation;
• legitimate interests.
7. Use of CookiesThe website may use cookies and similar technologies. Cookies may be used for the following purposes:
7.1. Necessary CookiesUsed for:
• the proper functioning of the website;
• ensuring security;
• the operation of the website’s core features.
7.2. Analytical CookiesUsed for:
• analyzing website traffic;
• understanding user behavior;
• improving the structure and content of the website.
7.3. Marketing CookiesMay be used for:
• evaluating the effectiveness of advertising campaigns;
• personalizing offers.
Users may manage the use of cookies through their browser settings or, where available, dedicated consent-management settings.
Disabling cookies may affect the functioning of certain website features.
8. Disclosure of Personal Data to Third PartiesThe Operator may use third-party service providers to operate the website and provide its services.
Such providers may include:
• hosting providers;
• website-building platforms;
• e-mail services;
• payment systems;
• CRM systems;
• analytics services;
• communication services.
Data are disclosed only to the extent necessary for the performance of the relevant function.
The Operator:
• does not sell personal data;
• does not disclose data to third parties for their own independent marketing purposes without an appropriate legal basis.
9. International Data TransfersAs the website is accessible to users from various countries and may use international service providers, personal data may be processed outside the user’s country of residence.
When transferring data, the Operator takes reasonable protective measures.
For users in the European Union, the safeguards provided for under the GDPR apply, including:
• Standard Contractual Clauses (SCC);
• other safeguards provided for by law.
10. Retention of Personal DataPersonal data are retained only for the period necessary to achieve the purposes of processing.
Indicative retention periods:
• user inquiries — until the request has been resolved;
• customer data — for the term of the contractual relationship and the period necessary to fulfill legal obligations;
• marketing data — until consent is withdrawn;
• cookies — in accordance with the settings of the relevant service.
Once the purposes of processing have been achieved, data are deleted, destroyed, or anonymized.
11. User RightsDepending on applicable law, the user has the right to:
• obtain information about their data;
• obtain a copy of their personal data;
• correct inaccurate data;
• request deletion of data;
• restrict processing;
• object to processing;
• withdraw consent;
• receive data in a portable format, where required by law.
12. Additional Rights of EU Users (GDPR)A user located in the European Union has the right to:
• request access to their data;
• request rectification of their data;
• request erasure of their data (“right to be forgotten”);
• restrict processing;
• object to processing;
• lodge a complaint with a competent data protection authority.
13. Users in the Russian FederationWhere processing falls within the scope of the legislation of the Russian Federation, the user has the rights provided for under Federal Law No. 152-FZ “On Personal Data.”
14. Users in the United StatesWhere the CCPA/CPRA applies, users may have the right to:
• know which categories of personal data are collected;
• request deletion of their data;
• opt out of the sale of their personal data;
• exercise their rights without discrimination.
15. Security of Personal DataThe Operator takes necessary measures to protect personal data, including:
• restricting access;
• protecting user accounts;
• using secure technologies;
• preventing unauthorized access;
• monitoring the processing of information.
Notwithstanding the measures taken, no method of data transmission over the internet can guarantee absolute security.
16. Data of MinorsThe website is not intended for individuals below the age at which applicable law permits them to independently provide consent to the processing of personal data.
If the Operator becomes aware that it has obtained data from a minor without the requisite consent of a legal representative, such data may be deleted.
17. ConfidentialityThe Operator undertakes not to disclose users’ personal data to third parties without a lawful basis or the user’s consent, except as required by law.
18. Withdrawal of ConsentThe user may withdraw their consent to the processing of personal data by sending a request to:
E-mail:
eramalore@gmail.com
Subject line:
“Withdrawal of Consent to the Processing of Personal Data”
19. Amendments to the PolicyThe Operator reserves the right to amend this Policy.
The current version is published at:
https://eramalore.com/privacy3
20. Contact InformationOperator:
Anastasia Nikolaevna Savila
E-mail:
eramalore@gmail.com
Website:
https://eramalore.com/savilla_application
Last updated: [02.08.2026]
1. General ProvisionsThis Privacy Policy and Personal Data Processing Policy (hereinafter, the “Policy”) sets out the procedure for the collection, use, storage, transfer, and protection of personal data of users of the website:
https://eramalore.com/savilla_application
The data controller (Operator) of personal data is:
Anastasia Nikolaevna Savila
Contact e-mail address:
eramalore@gmail.com
This Policy applies to all visitors and users of the website regardless of their citizenship, country of residence, or location.
The Operator respects every individual’s right to privacy and takes reasonable technical and organizational measures to protect personal data.
This Policy has been developed with due regard to applicable international and national personal data protection requirements, including:
• General Data Protection Regulation (EU) 2016/679 (GDPR);
• Federal Law of the Russian Federation No. 152-FZ “On Personal Data” (where applicable);
• California Consumer Privacy Act (CCPA/CPRA) (where applicable);
• other applicable personal data protection requirements that may apply to website users.
2. Data ControllerFor the purposes of the GDPR, the Operator may be regarded as the Data Controller — the party that determines the purposes and means of the processing of personal data.
Controller:
Anastasia Nikolaevna Savila
Website:
https://eramalore.com/savilla_application
E-mail:
eramalore@gmail.com
For matters relating to the processing of personal data, users may contact the Operator at the e-mail address indicated above.
3. Scope of the PolicyThis Policy applies where the user:
• visits the website;
• submits a request via a form;
• contacts the Operator by e-mail;
• contacts the Operator via messaging applications;
• places an order;
• enters into an agreement;
• uses the Operator’s services or products.
Where the law of the user’s country provides for additional rights or requirements, the Operator shall take such requirements into account to the extent applicable.
4. Personal Data We CollectThe Operator may process the following categories of personal data.
4.1. Identification Data• first name;
• last name;
• patronymic (if provided).
4.2. Contact Data• e-mail address;
• telephone number;
• username on messaging applications.
4.3. Communication DataInformation contained in:
• requests;
• messages;
• inquiries;
• correspondence with the user.
4.4. Data for the Performance of AgreementsWhere necessary:
• information required for the preparation of documents;
• data required for the performance of obligations under an agreement.
4.5. Technical DataThe following may be collected automatically:
• IP address;
• device type;
• browser;
• operating system;
• browser language;
• date and time of visit;
• webpages visited;
• technical information regarding interaction with the website.
4.6. Cookies and Similar DataInformation obtained through cookies and similar technologies.
5. Purposes of Processing Personal DataPersonal data are used for the following purposes:
6. Legal Bases for ProcessingThe processing of personal data is carried out on the basis of:
• the user’s consent;
• the necessity to conclude or perform an agreement;
• compliance with legal requirements;
• the Operator’s legitimate interests, provided they do not infringe the user’s rights;
• other grounds provided for by applicable law.
For users in the European Union, processing is based on the grounds set out in Article 6 GDPR:
• consent;
• contractual necessity;
• legal obligation;
• legitimate interests.
7. Use of CookiesThe website may use cookies and similar technologies. Cookies may be used for the following purposes:
7.1. Necessary CookiesUsed for:
• the proper functioning of the website;
• ensuring security;
• the operation of the website’s core features.
7.2. Analytical CookiesUsed for:
• analyzing website traffic;
• understanding user behavior;
• improving the structure and content of the website.
7.3. Marketing CookiesMay be used for:
• evaluating the effectiveness of advertising campaigns;
• personalizing offers.
Users may manage the use of cookies through their browser settings or, where available, dedicated consent-management settings.
Disabling cookies may affect the functioning of certain website features.
8. Disclosure of Personal Data to Third PartiesThe Operator may use third-party service providers to operate the website and provide its services.
Such providers may include:
• hosting providers;
• website-building platforms;
• e-mail services;
• payment systems;
• CRM systems;
• analytics services;
• communication services.
Data are disclosed only to the extent necessary for the performance of the relevant function.
The Operator:
• does not sell personal data;
• does not disclose data to third parties for their own independent marketing purposes without an appropriate legal basis.
9. International Data TransfersAs the website is accessible to users from various countries and may use international service providers, personal data may be processed outside the user’s country of residence.
When transferring data, the Operator takes reasonable protective measures.
For users in the European Union, the safeguards provided for under the GDPR apply, including:
• Standard Contractual Clauses (SCC);
• other safeguards provided for by law.
10. Retention of Personal DataPersonal data are retained only for the period necessary to achieve the purposes of processing.
Indicative retention periods:
• user inquiries — until the request has been resolved;
• customer data — for the term of the contractual relationship and the period necessary to fulfill legal obligations;
• marketing data — until consent is withdrawn;
• cookies — in accordance with the settings of the relevant service.
Once the purposes of processing have been achieved, data are deleted, destroyed, or anonymized.
11. User RightsDepending on applicable law, the user has the right to:
• obtain information about their data;
• obtain a copy of their personal data;
• correct inaccurate data;
• request deletion of data;
• restrict processing;
• object to processing;
• withdraw consent;
• receive data in a portable format, where required by law.
12. Additional Rights of EU Users (GDPR)A user located in the European Union has the right to:
• request access to their data;
• request rectification of their data;
• request erasure of their data (“right to be forgotten”);
• restrict processing;
• object to processing;
• lodge a complaint with a competent data protection authority.
13. Users in the Russian FederationWhere processing falls within the scope of the legislation of the Russian Federation, the user has the rights provided for under Federal Law No. 152-FZ “On Personal Data.”
14. Users in the United StatesWhere the CCPA/CPRA applies, users may have the right to:
• know which categories of personal data are collected;
• request deletion of their data;
• opt out of the sale of their personal data;
• exercise their rights without discrimination.
15. Security of Personal DataThe Operator takes necessary measures to protect personal data, including:
• restricting access;
• protecting user accounts;
• using secure technologies;
• preventing unauthorized access;
• monitoring the processing of information.
Notwithstanding the measures taken, no method of data transmission over the internet can guarantee absolute security.
16. Data of MinorsThe website is not intended for individuals below the age at which applicable law permits them to independently provide consent to the processing of personal data.
If the Operator becomes aware that it has obtained data from a minor without the requisite consent of a legal representative, such data may be deleted.
17. ConfidentialityThe Operator undertakes not to disclose users’ personal data to third parties without a lawful basis or the user’s consent, except as required by law.
18. Withdrawal of ConsentThe user may withdraw their consent to the processing of personal data by sending a request to:
E-mail:
eramalore@gmail.com
Subject line:
“Withdrawal of Consent to the Processing of Personal Data”
19. Amendments to the PolicyThe Operator reserves the right to amend this Policy.
The current version is published at:
https://eramalore.com/privacy3
20. Contact InformationOperator:
Anastasia Nikolaevna Savila
E-mail:
eramalore@gmail.com
Website:
https://eramalore.com/savilla_application