Personal data processing policy

1. General

This policy (“Policy”) describes how Gravity Frontiers NPO (the “Operator”) processes personal data and protects individuals’ rights, including privacy and family life.

It is prepared in accordance with Federal Law No. 152-FZ “On personal data”.

2. Operator

The Operator is Gravity Frontiers NPO. Processing is lawful and fair for the purposes of the organisation’s activities.

3. Purposes and legal bases

Processing supports: handling requests and applications; registration and identification; communication on projects, events and programmes; information about our work; contracts; and compliance with Russian law.

Legal bases include consent, contract performance, and legal obligations on the Operator.

4. Categories of data

We may process name; email; message content from forms; technical data (IP, cookies, browser/device); and other data you voluntarily provide.

5. Methods and retention

Processing may be automated or manual and includes collection, storage, use, transfer where permitted, anonymisation, blocking and deletion.

Data is kept only as long as needed for the purposes or until consent is withdrawn, unless law requires otherwise, then destroyed or anonymised.

6. Data subject rights

You have the right to information about processing; to correct, block or delete inaccurate or unlawfully processed data; to withdraw consent; and to complain to the regulator or a court.

Send requests to the Operator’s contact email. We respond within 30 days of receipt.

7. Withdrawal of consent

Consent remains valid until withdrawn. You may withdraw by email. We stop processing within 30 days and delete data unless law or contract provides otherwise.

8. Security

We implement appropriate organisational and technical measures against unauthorised or accidental access, loss, alteration, or disclosure.

9. Transfers to third parties

We do not transfer data to third parties except with your consent, for contract performance, or where required by Russian law and competent authorities.

10. Final provisions

This Policy is effective from publication on the website until replaced. We may update it; continued use after updates means acceptance of the new version.

Consent to personal data processing

By submitting forms, registering, or otherwise providing data, you confirm that you have read this Policy and consent to Gravity Frontiers NPO processing your personal data under this Policy and applicable Russian law.