Privacy Policy for Personal Data Processing

Privacy & Cookie Policy 1. Data ControllerThe data controller responsible for personal data processing on this website is:
Tatyana Valerievna Galichkina
Email: info@nicolescastle.ru
Website: https://nicolescastle.ru
For any questions regarding personal data or cookies, you can contact us at the email above.
2. ScopeThis Policy explains how we collect and process personal data when you use this website and how we use cookies and similar technologies in accordance with:

• Regulation (EU) 2016/679 (GDPR)
• Directive 2002/58/EC (ePrivacy Directive)

3. Personal Data We CollectWe collect only data that is necessary for the purposes described in this Policy.

• 3.1 Data you provide directly:Name
• Email address
• Phone number (if provided)
• 3.2 Technical data (automatically collected):IP address (may be anonymized depending on provider settings)
• Browser type and version
• Device and operating system
• Language settings
• Referring URL
• 3.3 Usage data:Pages viewed
• Interactions with content
• Session duration
• Navigation path

4. Legal Basis for Processing (GDPR Art. 6)We process personal data under the following legal bases:

• Consent (Art. 6(1)(a)) – for cookies and marketing or analytics tools
• Contract (Art. 6(1)(b)) – when processing is necessary to respond to your request or provide services
• Legitimate interests (Art. 6(1)(f)) – to ensure website security and improve functionality
• Legal obligation (Art. 6(1)(c)) – where required by applicable law

5. Purposes of ProcessingWe process personal data for the following purposes:

• providing website functionality
• responding to user inquiries
• communication initiated by the user
• analytics and website performance measurement
• improving user experience
• ensuring security and preventing misuse

We do not sell or rent personal data.
6. Cookies and Similar Technologies (ePrivacy Compliance)We use cookies and similar technologies only where legally permitted.
6.1 Types of cookies(A) Strictly Necessary Cookies
These cookies are essential for website operation and cannot be disabled.
Examples:

• form submission functionality
• session management
• security features

These cookies are set without consent as they are necessary for service provision.
(B) Analytics Cookies (Consent required)
Used to measure website traffic and performance.
Examples:

• Yandex Metrica (if enabled)
• Google Analytics (if enabled)

These cookies are only activated after explicit consent.
(C) Functional Cookies (Consent required)
Used to remember preferences such as language or user settings.
7. Cookie Consent Mechanism (IMPORTANT)When you first visit this website, a cookie banner is displayed.
No non-essential cookies are set before you make a choice.
You may choose:

• Accept all cookies
• Reject all non-essential cookies
• Customize preferences

Your choice is stored and can be changed at any time via cookie settings.
8. Withdrawal of ConsentYou may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Withdrawal options:

• cookie settings panel on the website (if implemented)
• browser settings
• contacting us at info@nicolescastle.ru

9. Data RetentionWe retain personal data only as long as necessary:

• Contact form data: up to 12 months after last contact
• Analytics data: up to 14–26 months depending on provider settings
• Legal obligations: as required by applicable law

10. Data SharingWe do not sell personal data.
We may share data only with:

• hosting providers
• website platform provider (e.g. Tilda)
• analytics providers (only after consent)
• email/communication services

All third-party providers act as data processors under GDPR-compliant agreements where applicable.
11. International Data TransfersSome providers may process data outside the European Economic Area (EEA).
In such cases, we ensure appropriate safeguards, such as:

• Standard Contractual Clauses (SCC) approved by the European Commission
• adequacy decisions (if applicable)

12. Your Rights Under GDPRYou have the right to:

• access your personal data
• rectify inaccurate data
• request deletion (“right to be forgotten”)
• restrict processing
• object to processing
• data portability
• withdraw consent at any time
• lodge a complaint with a supervisory authority in your country

13. SecurityWe apply appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse.
14. Changes to This PolicyWe may update this Policy from time to time. The latest version is always available on this page.
15. ContactFor any questions regarding this Policy:
Email: info@nicolescastle.ru