1. GENERAL PROVISIONS1.1. This privacy policy (the "Policy") governing the processing of personal data has been drawn up in accordance with the requirements of Federal Law No. 152-FZ of the Russian Federation "On Personal Data" dated 27 July 2006 (the "Personal Data Law") and sets out the procedure for the processing of personal data and the measures taken by Individual Entrepreneur Oleg Vladimirovich Sharabanov (the "Operator") to ensure the security of personal data.
1.2. Ensuring the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy and personal and family confidentiality, is a core objective and prerequisite of the Operator's business activities.
1.3. This Policy applies to all information the Operator may obtain about visitors to the website
http://postscript.team.
2. INFORMATION ABOUT THE OPERATOR2.1. The operator of personal data is Individual Entrepreneur Oleg Vladimirovich Sharabanov, engaged in post-production activities, the production and processing of audiovisual materials, and the provision of color grading, editing, media project development, art direction, consulting and information services, workshops, and proprietary courses. Contact email address:
hello@postscript.team.
3. KEY TERMS USED IN THIS POLICY3.1. Automated processing of personal data means the processing of personal data by means of computer technology.
3.2. Blocking of personal data means the temporary suspension of the processing of personal data (except where processing is necessary to clarify the personal data).
3.3. Website means the collection of graphic and informational materials, as well as computer programs and databases, that ensure their availability on the internet at
http://postscript.team.
3.4. Personal data information system means a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
3.5. De-identification of personal data means actions that make it impossible, without the use of additional information, to determine that specific personal data belongs to a particular User or other data subject.
3.6. Processing of personal data means any action (operation) or set of actions (operations) performed on personal data, whether or not by automated means, including collection, recording, systematization, accumulation, storage, clarification (updating, amendment), retrieval, use, transfer (distribution, provision, access), de-identification, blocking, deletion, and destruction of personal data.
3.7. Operator means a state authority, municipal authority, legal entity, or individual that organizes and/or carries out the processing of personal data, whether alone or jointly with other parties, and determines the purposes of processing, the scope of personal data to be processed, and the actions (operations) performed with personal data.
3.8. Personal data means any information relating directly or indirectly to an identified or identifiable User of the website
http://postscript.team.
3.9. Personal data permitted by the data subject for distribution means personal data to which the data subject has granted access to an unlimited number of persons by providing consent to the processing of personal data permitted for distribution, in the manner prescribed by the Personal Data Law ("personal data permitted for distribution").
3.10. User means any visitor to the website
http://postscript.team.
3.11. Provision of personal data means actions aimed at disclosing personal data to a specific person or a specific group of persons.
3.12. Distribution of personal data means any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at enabling an unlimited group of persons to become acquainted with personal data, including the publication of personal data in the media, posting on information and telecommunications networks, or otherwise providing access to personal data.
3.13. Cross-border transfer of personal data means the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual, or a foreign legal entity.
3.14. Destruction of personal data means any actions that result in personal data being irretrievably destroyed such that its content can no longer be restored in the personal data information system and/or that result in the destruction of physical media containing personal data.
4. RIGHTS AND OBLIGATIONS OF THE OPERATOR4.1. The Operator has the right to:
- request from the data subject reliable information and/or documents containing personal data;
- continue processing personal data without the data subject's consent, where the data subject has withdrawn consent to the processing of personal data or has sent a request to cease processing, provided grounds for such continued processing exist under the Personal Data Law;
- independently determine the scope and list of measures necessary and sufficient to ensure compliance with the obligations set out in the Personal Data Law and the regulatory legal acts adopted pursuant thereto, unless otherwise provided by the Personal Data Law or other federal laws.
4.2. The Operator shall:
- provide the data subject, upon request, with information concerning the processing of their personal data;
- organize the processing of personal data in accordance with the procedure established by applicable Russian law;
- respond to inquiries and requests from data subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
- provide the authorized body for the protection of the rights of data subjects with the necessary information within 10 days of receiving such a request;
- publish this Policy or otherwise ensure unrestricted access to it;
- take legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, or distribution, as well as from other unlawful actions in respect of personal data;
- cease the transfer (distribution, provision, access), cease the processing, and destroy personal data in the manner and in the cases prescribed by the Personal Data Law;
- perform other obligations prescribed by the Personal Data Law.
5. RIGHTS AND OBLIGATIONS OF DATA SUBJECTS5.1. Data subjects have the right to:
- obtain information concerning the processing of their personal data, except as otherwise provided by federal law. Such information shall be provided to the data subject by the Operator in an accessible form and shall not contain personal data relating to other data subjects, unless there are lawful grounds for disclosing such personal data. The list of information and the procedure for obtaining it are established by the Personal Data Law;
- require the Operator to clarify, block, or destroy their personal data where such personal data is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing, and to take other measures provided by law to protect their rights;
- impose a condition of prior consent for the processing of personal data for purposes of promoting goods, works, and services in the market;
- withdraw consent to the processing of personal data and to submit a request for cessation of processing;
- lodge a complaint with the authorized body for the protection of the rights of data subjects, or file a claim in court, regarding unlawful actions or omissions of the Operator in the processing of their personal data;
- exercise other rights provided under Russian law.
5.2. Data subjects shall:
- provide the Operator with accurate information about themselves and any materials submitted;
- notify the Operator of any clarification (updating or amendment) of their personal data.
5.3. Persons who provide the Operator with inaccurate information about themselves, or with information about another data subject without that person's consent, shall bear liability in accordance with Russian law.
6. PRINCIPLES OF PERSONAL DATA PROCESSING6.1. The processing of personal data is carried out on a lawful and fair basis.
6.2. The processing of personal data is limited to the achievement of specific, predetermined, and lawful purposes. Processing of personal data incompatible with the purposes of its collection is not permitted.
6.3. The consolidation of databases containing personal data processed for mutually incompatible purposes is not permitted.
6.4. Only personal data that meets the purposes of its processing is subject to processing.
6.5. The content and scope of the personal data processed correspond to the stated purposes of processing. Excessive processing of personal data relative to the stated purposes is not permitted.
6.6. In processing personal data, the Operator ensures the accuracy and sufficiency of personal data and, where necessary, its relevance to the purposes of processing. The Operator takes the necessary measures, and/or ensures that such measures are taken, to delete or clarify incomplete or inaccurate data.
6.7. Personal data is stored in a form that permits identification of the data subject for no longer than is required by the purposes of processing, unless a different retention period is established by federal law or by an agreement to which the data subject is a party, beneficiary, or guarantor. Processed personal data is destroyed or de-identified once the purposes of processing have been achieved or the need to achieve them has ceased, unless otherwise provided by federal law.
7. PURPOSES OF PERSONAL DATA PROCESSING7.1. The purpose of processing and storing personal data is to ensure interaction with prospective and existing customers and clients; to review inquiries and requests received through the website and other communication channels; to conduct negotiations regarding cooperation; to prepare, conclude, and perform agreements for the provision of services in post-production, color grading, editing, full-cycle media project development, art direction, the creation of graphic materials, consulting and information services, workshops, and proprietary courses; to maintain the necessary records; to inform customers and clients of work progress; and to fulfill obligations required under Russian law.
7.2. The processing of personal data may also be carried out in connection with the receipt, processing, and storage of materials provided by customers within the framework of project execution, including audiovisual works, source materials, technical specifications, documents, and other files containing the personal data of third parties, where such data has been included by the customer in the materials provided.
7.3. In the course of its business activities, the Operator may process the following categories of personal data:
- the data subject's surname, first name, and patronymic;
- contact information: telephone number, email address, and accounts in messengers and other means of communication provided by the data subject;
- information about the company, organization, or project represented by the data subject, including the organization's name, position, field of activity, and other information necessary for business interaction;
- the content of inquiries, requests, correspondence, and other messages sent to the Operator via the website, email, messengers, and other communication channels;
- information necessary for the conclusion and performance of service agreements, including details required for drawing up contractual and settlement documents in cases prescribed by Russian law;
- information about ordered services, technical specifications, parameters, and stages of project implementation;
- data contained in materials and documents provided to the Operator by customers or their representatives for the evaluation and performance of work, including audiovisual materials, scripts, presentations, technical specifications, source files, and other documents, where such materials contain the personal data of individuals;
- data of participants in proprietary courses, consulting programs, and training events, including contact information and details necessary for organizing and conducting training;
- technical data automatically transmitted by the User's device when visiting the website, including IP address, browser and operating system information, on-site activity, and cookie files (where such technologies are used).
7.4. The legal bases for the processing of personal data are Federal Law No. 152-FZ "On Personal Data" dated 27 July 2006; the consent of data subjects to the processing of their personal data, provided when submitting inquiries and requests through the website and other communication channels; the necessity of processing personal data for the conclusion and performance of service agreements; and the fulfillment of the Operator's obligations as a personal data operator under Russian law.
7.5. In certain cases, where the party performing services under an agreement is a self-employed individual cooperating with the studio, personal data may be transferred to such individual solely to the extent necessary for the preparation, conclusion, and performance of the agreement, subject to compliance with the requirements of Russian personal data protection law.
7.6. The processing of personal data includes receipt, collection, recording, systematization, accumulation, storage, clarification (updating, amendment), retrieval, use, transfer (distribution, provision, access) in cases prescribed by Russian law and as necessary for the performance of contractual obligations, de-identification, blocking, deletion, and destruction of personal data.
8. CONDITIONS FOR THE PROCESSING OF PERSONAL DATA8.1. Personal data is processed with the consent of the data subject to the processing of their personal data.
8.2. The processing of personal data is necessary for the achievement of purposes provided for by an international treaty of the Russian Federation or by law, and for the exercise of functions, powers, and duties assigned to the Operator by Russian law.
8.3. The processing of personal data is necessary for the administration of justice, or for the enforcement of a judicial act or an act of another body or official subject to enforcement in accordance with Russian enforcement proceedings law.
8.4. The processing of personal data is necessary for the performance of an agreement to which the data subject is a party, beneficiary, or guarantor, as well as for concluding an agreement at the initiative of the data subject or an agreement under which the data subject will be a beneficiary or guarantor.
8.5. The processing of personal data is necessary for the exercise of the rights and legitimate interests of the Operator or third parties, or for the achievement of socially significant purposes, provided that the rights and freedoms of the data subject are not thereby violated.
8.6. Processing is carried out in respect of personal data to which the data subject has granted access to an unlimited number of persons, or has requested that such access be granted (publicly available personal data).
8.7. Processing is carried out in respect of personal data subject to publication or mandatory disclosure in accordance with federal law.
9. PROCEDURE FOR THE COLLECTION, STORAGE, TRANSFER, AND OTHER FORMS OF PROCESSING OF PERSONAL DATA9.1. The security of personal data processed by the Operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of applicable law in the field of personal data protection.
9.2. The Operator ensures the safekeeping of personal data and takes all reasonably available measures to prevent access to personal data by unauthorized persons.
9.3. The Operator does not transfer personal data to third parties, except in cases prescribed by Russian law, where necessary for the performance of contractual obligations, or where third parties are engaged to process personal data on the Operator's behalf. In certain cases, personal data may be transferred to persons involved in project implementation, including self-employed specialists and contractors, solely to the extent necessary for the performance of contractual obligations, subject to compliance with the requirements of Russian personal data protection law.
9.4. If inaccuracies in personal data are identified, the User may update such data independently by sending the Operator a notice to
hello@postscript.team marked "Personal Data Update."
9.5. The period for processing personal data is determined by the achievement of the purposes for which the personal data was collected, unless a different period is provided by agreement or applicable law. The User may withdraw consent to the processing of personal data at any time by sending the Operator a notice by email to
hello@postscript.team marked "Withdrawal of Consent to Personal Data Processing."
9.6. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by such persons (operators) in accordance with their own terms of use and privacy policy. The Operator bears no responsibility for the actions of third parties, including the service providers referred to in this clause.
9.7. Restrictions established by the data subject on the transfer (other than the granting of access) or on the processing or conditions of processing (other than the obtaining of access) of personal data permitted for distribution shall not apply where processing is carried out in the state, public, or other public interests defined by Russian law.
9.8. The Operator ensures the confidentiality of personal data in the course of its processing.
9.9. The Operator stores personal data in a form that permits identification of the data subject for no longer than is required by the purposes of processing, unless a different retention period is established by federal law or by an agreement to which the data subject is a party, beneficiary, or guarantor.
9.10. The processing of personal data may be terminated upon the achievement of the purposes of processing, the expiration of the data subject's consent, the withdrawal of consent by the data subject, a request to cease processing, or the identification of unlawful processing.
9.11. To support its operations, the Operator may engage third parties in the processing of personal data, including specialists, contractors, self-employed individuals, data storage services, and communication and technical services. Such persons are granted access only to the personal data necessary for the performance of their respective tasks and are required to comply with the requirements of Russian law on the protection of personal data and confidentiality of information.
9.12. Materials provided by customers for review, evaluation, or performance of work, including video, audio, graphic, and other files, may be stored by the Operator for the period necessary to perform the work, deliver the result, fulfill contractual obligations, and resolve any potential claims. Upon achievement of the purposes of processing, such materials may be deleted, de-identified, or retained pursuant to agreement with the customer.
9.13. Where information systems and services located outside the Russian Federation are used, the Operator processes and transfers personal data in compliance with the requirements of Russian law on the cross-border transfer of personal data.
10. LIST OF ACTIONS PERFORMED BY THE OPERATOR WITH PERSONAL DATA RECEIVED10.1. The Operator carries out the collection, recording, systematization, accumulation, storage, clarification (updating, amendment), retrieval, use, transfer (distribution, provision, access), de-identification, blocking, deletion, and destruction of personal data.
10.2. The Operator carries out automated processing of personal data, with or without the receipt and/or transfer of the information obtained via information and telecommunications networks.
10.3. Where information systems and services located outside the Russian Federation are used, the Operator processes and transfers personal data in compliance with the requirements of Russian law on the cross-border transfer of personal data.
11. CONFIDENTIALITY OF PERSONAL DATA11.1. The Operator and any other persons who have gained access to personal data shall not disclose such data to third parties or distribute it without the consent of the data subject, unless otherwise provided by federal law.
12. FINAL PROVISIONS12.1. The User may obtain any clarification on matters relating to the processing of their personal data by contacting the Operator at
hello@postscript.team.
12.2. This document will reflect any changes made by the Operator to its personal data processing policy. The Policy is valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available online at
http://postscript.team/en/privacy.
Publication date of the current version: 13 July 2026
Document version: 1.0