Speedrent Privacy Policy

Rules for the Protection of Personal Data of SpeedRent.ru Website Users

1. General Provisions

1.1. These Rules constitute an official document of the "Integrations for Small Business" service (Individual Entrepreneur Nabirkina Tatyana Sergeevna, TIN 350501254510) (hereinafter referred to as the "Site Administration") and define the procedure for processing and protecting information about individuals (hereinafter referred to as "Users") using the services of the website www.speedrent.ru (hereinafter referred to as the "Site").

1.2. The purpose of these Rules is to ensure adequate protection of information about users, including their personal data, from unauthorized access and disclosure.

1.3. Relations related to the collection, storage, distribution, and protection of information about Site users are governed by these Rules, other official documents of the Site Administration, and the current legislation of the Russian Federation.

1.4. The current version of the Rules, which is a public document, is available to any Internet user at https://www.speedrent.ru/privacy-policy-speedrent. The Site Administration reserves the right to make changes to these Rules. When changes are made, the Site Administration shall notify users by posting the new version of the Rules on the Site at the permanent address https://www.speedrent.ru/privacy-policy-speedrent no later than 10 days before the corresponding changes take effect. Previous versions of the Rules are stored in the Site Administration's documentation archive.

1.5. These Rules are developed and used in accordance with the SpeedRent.ru Site Terms of Service, located at https://www.speedrent.ru/pravila-raboty-sluzhby-speedrent. In the event of a conflict between these Rules and other official documents of the Site Administration, these Rules shall prevail.

1.6. By registering and using the Site, the User expresses their consent to the terms of these Rules.

1.7. In case of the User's disagreement with the terms of these Rules, the use of the Site and its services must be terminated immediately.

2. Terms of Use of the Site

2.1. While providing services for the use of the Site and its services (hereinafter referred to as "Site Services"), the Site Administration, acting reasonably and in good faith, believes that the User:

• possesses all necessary rights allowing them to register and use this Site;

• provides accurate information about themselves to the extent necessary to use the Site Services;

• is aware that information posted by the User about themselves on the Site may become available to other Site Users and Internet users, and may be copied and distributed by such users;

• is aware that certain types of information transmitted by them to other Users cannot be deleted by the User themselves;

• is familiar with these Rules, expresses their consent to them, and assumes the rights and obligations specified therein.

• 2.2. The Site Administration does not verify the accuracy of the information received (collected) about users, except in cases where such verification is necessary for the Site Administration to fulfill its obligations to the user.

3. Purposes of Information Processing

The Site Administration processes information about Users, including their personal data, in order to fulfill the Site Administration's obligations to Users regarding the use of the Site and its services.

4. Scope of User Information

4.1. Personal Data of Users Personal data of Users includes:

• 4.1.1. Data provided by Users and minimally required for registration on the Site: first name, last name, mobile phone number, and email address.

• 4.1.2. Additional data provided by Users at the request of the Site Administration for the purpose of fulfilling the Site Administration's obligations to Users arising from the Site's rules of operation. The Site Administration is entitled, in particular, to request from the User a copy of an identity document or another document containing the User's first name, last name, and photo, as well as other additional information which, at the discretion of the Site Administration, will be necessary and sufficient to identify such User and prevent abuse and violations of the rights of third parties. 4.2. Other User Information Processed by the Site Administration The Site Administration may also process other information about Users, which includes:

• 4.2.1. Additional data obtained during access to the Site, including data about technical means (devices), technological interaction with the Site (including the host IP address, user's operating system type, browser type, geographic location, Internet service provider), and subsequent User actions on the Site. Information containing the user's browsing history on the Site.

• 4.2.2. Information automatically received during access to the Site using cookies.

• 4.2.3. Information created by users on the Site as a result of creating a booking or adding their venue to the Site.

• 4.2.4. Information obtained as a result of the User's actions on the Site (in particular, user reviews of venues selected and rented through the Site). This User information may be available to all Site users on the page of the corresponding venue.

• 4.2.5. Information obtained as a result of other users' actions on the Site (in particular, reviews from venue owners and administrators about interactions with the user during the venue rental process). This information may be available to venue owners in the "customer reviews" section.

5. Processing of User Information

5.1. Processing of personal data is carried out based on the principles of: a) legality of the purposes and methods of personal data processing; b) good faith; c) compliance of personal data processing purposes with the purposes pre-determined and declared during the collection of personal data, as well as with the authority of the Site Administration; d) compliance of the volume and nature of the processed personal data and methods of processing with the purposes of personal data processing; e) inadmissibility of merging databases containing personal data created for incompatible purposes.

• 5.1.1. Conditions and Purposes of Personal Data Processing The Site Administration processes the user's personal data for the purpose of performing the agreement between the Site Administration and the User for the provision of Site Services (clause 2.2 of the Site Terms of Use). By virtue of Article 6 of Federal Law No. 152-FZ dated July 27, 2006, "On Personal Data," a separate user consent to the processing of their personal data is not required. By virtue of subparagraph 2 of paragraph 2 of Article 22 of the specified law, the Site Administration is entitled to process personal data without notifying the authorized body for the protection of the rights of personal data subjects.

• 5.1.2. Collection of Personal Data The User's personal data is collected on the Site during registration, as well as during the subsequent creation of bookings, posting of information about rented venues, and writing reviews. Personal data provided for in clause 4.1.1. of these Rules is provided by the User and is minimally required for registration. Personal data provided for in clause 4.1.2. of these Rules is additionally provided by the User at the request of the Site Administration via email.

• 5.1.3. Storage and Use of Personal Data Users' personal data is stored exclusively on electronic media and processed using automated systems, except in cases where non-automated processing of personal data is necessary in connection with compliance with legal requirements.

• 5.1.4. Transfer of Personal Data Users' personal data is not transferred to any third parties, except in cases expressly provided for by these Rules. Upon the user's instruction or with the user's consent, personal data may be transferred to third-party contractors of the Site Administration, provided that such contractors assume obligations to ensure the confidentiality of the information received—specifically, when venue owners receive notifications about upcoming viewings and venue rentals. Provision of Users' personal data at the request of state authorities (local government authorities) is carried out in the manner prescribed by law. To fulfill the agreement between the User and the Site Administration and to provide the User with access to the Site's functionality, the Site Administration develops the provided services and products, creates and implements new ones, optimizes the quality of services and products, and improves the available functionality. To ensure the realization of these goals, the User agrees to the Site Administration's collection, storage, accumulation, systematization, extraction, comparison, use, and updating of their data in compliance with applicable law, as well as to the receipt and transfer to affiliates and partners of the results of automated processing of such data using various information evaluation models, in the form of integer and/or text values and identifiers corresponding to the evaluation criteria specified in the requests, for data processing by the Site Administration and/or the persons specified in this paragraph.

• 5.1.5. Destruction of Personal Data The user's personal data is destroyed when: – the User independently deletes data from their account page; – the User independently deletes their venue pages; – the Site Administration deletes information posted by the User, as well as the user's account page, upon a written request from the user. In the event of the deletion of the user's account page, the Site Administration stores the User's personal and other necessary data on its electronic media for the period required and established by the current legislation of the Russian Federation.

6. Rights and Obligations of Users

6.1. Users are entitled to:

• 6.1.1. exercise free access to information about themselves by loading their personal pages on the Site using a login and password;

• 6.1.2. independently make changes and corrections to information about themselves on the User's account page on the Site, provided that such changes and corrections contain current and accurate information;

• 6.1.3. delete information about themselves from their account page on the Site;

• 6.1.4. demand that the Site Administration clarify their personal data, block it, or destroy it if such data is incomplete, outdated, inaccurate, illegally obtained, or not necessary for the declared purpose of processing, and if it is impossible to independently perform the actions provided for in clauses 6.1.2. and 6.1.3. of these Rules;

• 6.1.5. receive information from the Site Administration regarding the processing of their personal data upon request.

7. Measures to Protect User Information

7.1. The Site Administration takes technical, organizational, and legal measures to ensure the protection of the User's personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.

7.2. A login (email address or mobile phone number) and the User's password are used for authorization to access the Site. The User is responsible for maintaining the confidentiality of this information. The User is not entitled to transfer their own login and password to third parties and is obliged to take measures to ensure their confidentiality.

7.3. To provide more reliable protection of User information, the Site Administration uses a system for linking the account to a mobile phone and email. To implement this system, the User must provide the Site Administration with their mobile phone number. Within the framework of the mobile phone and email linking system, in case of loss of login or password, the User can restore access to the page using a recovery code contained in an SMS message that the User receives on their mobile phone.

7.4. The User is entitled to receive information via email regarding the time and devices from which authorization to their account was performed.

8. User Inquiries

8.1. Users are entitled to send their requests to the Site Administration, including requests regarding the use of their personal data as provided for in clause 6.1.5 of these Rules, in writing to the address: 50 Bolshaya Tulskaya St., Moscow, 115191, Russia, or in the form of an electronic document signed with a qualified electronic signature in accordance with the legislation of the Russian Federation, as well as to the email address: admin@speedrent.ru.

8.2. A request sent by a user must contain the following information:

• the number of the primary identity document of the user or their representative;

• information about the date of issue of the specified document and the issuing authority;

• information confirming the user's participation in relations with the operator (phone number and email address specified in the user's account on the Site);

• the signature of the user or their representative.

• 8.3. The Site Administration undertakes to consider and send a response to the received user request within 30 days from the date of receipt of the inquiry.

• 8.4. All correspondence received by the Site Administration from users (inquiries in written or electronic form) constitutes restricted information and is not disclosed without the User's written consent. Personal data and other information about the User who sent the request cannot be used without the User's specific consent for any purpose other than responding to the topic of the received request or in cases expressly provided for by law.