Personal Data Processing Policy



1. General Provisions


This Personal Data Processing Policy has been prepared in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data implemented by Jupiter Pro Pte Limited, Singapore, 202446982H (hereinafter referred to as the Operator).

1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of their personal data, including the protection of the rights to privacy, personal and family secrets, as its most important goal and condition for carrying out its activities.

1.2. This Operator’s policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website https://juppiter.io.


2. Basic Terms Used in the Policy


2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary suspension of personal data processing (except when processing is necessary to clarify personal data).
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases ensuring their availability on the Internet at https://juppiter.io.
2.4. Personal data information system — a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
2.5. Depersonalization of personal data — actions that make it impossible to determine, without additional information, the affiliation of personal data to a specific User or other subject of personal data.
2.6. Personal data processing — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator — a state body, municipal body, legal entity, or individual, independently or jointly with others, organizing and/or carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal data — any information relating directly or indirectly to a specific or identifiable User of the website https://juppiter.io.
2.9. Personal data permitted by the subject of personal data for distribution — personal data to which an unlimited number of persons have access provided by the subject of personal data by giving consent to the processing of such personal data in accordance with the Personal Data Law (hereinafter referred to as personal data permitted for distribution).
2.10. User — any visitor to the website https://juppiter.io.
2.11. Provision of personal data — actions aimed at disclosing personal data to a certain person or a certain group of persons.
2.12. Distribution of personal data — any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at familiarizing an unlimited number of persons with personal data, including publishing personal data in the media, posting in information and telecommunication networks, or providing access to personal data in any other way.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state, to an authority of a foreign state, a foreign individual, or a foreign legal entity.
2.14. Destruction of personal data — any actions resulting in the irreversible destruction of personal data with no possibility of further restoration in the personal data information system and/or destruction of physical media containing personal data.


3. Basic Rights and Obligations of the Operator


3.1. The Operator has the right to:

  • receive from the personal data subject reliable information and/or documents containing personal data;
  • continue processing personal data without the consent of the subject in cases provided by the Personal Data Law, including withdrawal of consent by the subject or in response to a request to cease processing;
  • independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations provided for by the Personal Data Law, unless otherwise provided by law.


3.2. The Operator is obliged to:

  • provide the personal data subject, upon request, with information regarding the processing of their personal data;
  • organize the processing of personal data in accordance with the legislation of the Russian Federation;
  • respond to requests and inquiries from personal data subjects and their legal representatives in accordance with the Personal Data Law;
  • provide, upon request, the necessary information to the authorized body for the protection of the rights of personal data subjects within 10 days from the date of receipt of such a request;
  • publish or otherwise ensure unrestricted access to this Policy on the processing of personal data;
  • take legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, distribution, as well as from other unlawful actions;
  • cease transfer (distribution, provision, access), processing, and destroy personal data in the manner and cases provided by the Personal Data Law;
  • fulfill other obligations provided by the Personal Data Law.

4. Basic Rights and Obligations of Personal Data Subjects


4.1. Personal data subjects have the right to:

  • obtain information regarding the processing of their personal data, except in cases provided for by federal law. Such information is provided to the subject by the Operator in an accessible form and must not contain personal data relating to other subjects, unless there are legal grounds for disclosure;
  • request clarification, blocking, or destruction of their personal data if such data are incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing, and to take legal measures to protect their rights;
  • require prior consent for the processing of personal data for the purpose of promoting goods, works, or services on the market;
  • withdraw consent to the processing of personal data and demand cessation of processing;
  • appeal unlawful actions or inaction of the Operator to the authorized supervisory body or in court;
  • exercise other rights provided by the laws of the Russian Federation.


4.2. Personal data subjects must:

  • provide the Operator with accurate personal data;
  • notify the Operator of updates (changes) to their personal data.


4.3. Persons who provide inaccurate information about themselves or about another personal data subject without that person’s consent bear responsibility in accordance with Russian law.



5. Principles of Personal Data Processing


5.1. Processing of personal data is carried out on a lawful and fair basis.
5.2. Processing is limited to the achievement of specific, predetermined, and legitimate purposes. Processing incompatible with the purposes of data collection is not permitted.
5.3. It is not permitted to merge databases containing personal data if they are processed for incompatible purposes.
5.4. Only personal data relevant to the purposes of processing shall be processed.
5.5. The scope and content of processed personal data must correspond to the declared purposes. Excessive processing is not permitted.
5.6. Accuracy, sufficiency, and, where necessary, relevance of personal data to the purposes of processing must be ensured. The Operator shall take necessary measures to delete or update incomplete or inaccurate data.
5.7. Personal data shall be stored in a form that allows identification of the subject no longer than required for processing purposes, unless a longer period is established by federal law or contract. Upon achievement of processing purposes, personal data shall be destroyed or depersonalized.



6. Purposes of Personal Data Processing


Purpose: Providing the User with access to services, information, and/or materials on the website.
Personal data: full name, contact details.
Legal grounds: Federal Law No. 149-FZ of July 27, 2006 “On Information, Information Technologies, and Information Protection.”
Types of processing: collection, recording, systematization, accumulation, storage, destruction, and depersonalization of personal data.



7. Conditions of Personal Data Processing


7.1. Processing of personal data is carried out with the consent of the personal data subject.
7.2. Processing is necessary to fulfill obligations under international treaties or Russian law.
7.3. Processing is necessary for justice, enforcement of judicial acts, or acts of other bodies in accordance with Russian law on enforcement proceedings.
7.4. Processing is necessary for the performance of a contract to which the subject is a party, beneficiary, or guarantor, or for the conclusion of a contract at the initiative of the subject.
7.5. Processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, or to achieve socially significant goals, provided this does not violate the rights and freedoms of the subject.
7.6. Processing of personal data made publicly available by the subject or upon their request (publicly available personal data).
7.7. Processing of personal data subject to publication or mandatory disclosure under federal law.



8. Procedure for Collection, Storage, Transfer, and Other Processing of Personal Data


The security of personal data processed by the Operator is ensured by legal, organizational, and technical measures required to fully comply with current legislation.

8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access.
8.2. Personal data will never be transferred to third parties except in cases provided by law or with the subject’s consent to fulfill contractual obligations.
8.3. In case of inaccuracies, the User may update personal data by sending an email to the Operator at [email protected] marked “Update of Personal Data.”
8.4. The period of data processing is determined by the purposes for which personal data were collected, unless otherwise established by law or contract. The User may withdraw consent at any time by sending an email to [email protected] marked “Withdrawal of Consent.”
8.5. All information collected by third-party services, including payment systems, communication tools, and service providers, is stored and processed by those parties in accordance with their own User Agreements and Privacy Policies. The Operator is not responsible for the actions of third parties.
8.6. Restrictions imposed by the subject on transfer or conditions of processing of publicly available personal data do not apply when processing for state, public, or other legal interests as defined by Russian law.
8.7. The Operator ensures confidentiality of personal data during processing.
8.8. Personal data are stored in a form permitting identification no longer than required for processing purposes unless otherwise required by law or contract.
8.9. Grounds for termination of processing may include achieving processing purposes, expiration of consent, withdrawal of consent, request for termination, or detection of unlawful processing.



9. List of Actions Performed with Personal Data


9.1. The Operator performs collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
9.2. Automated processing with or without transmission via information and telecommunication networks is carried out.



10. Cross-Border Transfer of Personal Data


10.1. Before beginning cross-border transfer, the Operator must notify the authorized supervisory body of its intention (such notification is separate from the notification of processing activities).
10.2. Before sending such notification, the Operator must obtain the necessary information from the foreign state authority, foreign individuals, or foreign legal entities to whom the transfer is planned.



11. Confidentiality of Personal Data


The Operator and other persons who have gained access to personal data are obliged not to disclose or distribute them to third parties without the consent of the subject, unless otherwise provided by federal law.



12. Final Provisions


12.1. The User may obtain any clarifications regarding the processing of their personal data by contacting the Operator via email at [email protected].
12.2. Any changes to this Policy will be reflected in this document. The Policy remains valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available on the Internet at: https://juppiter.io/privacy.