Personal Data Processing Policy
1. General Provisions
This personal data processing policy (hereinafter referred to as the Policy) has been compiled in accordance with the requirements of Federal Law No. 152-FZ of the Russian Federation dated July 27, 2006, "On Personal Data" and defines the processing procedures and measures to ensure the security of personal data carried out by The Ninth (hereinafter referred to as the Operator).
1.1. The Operator considers respecting the rights and freedoms of individuals when processing their personal data one of the key objectives of its activities. This includes protecting the right to privacy, personal and family confidentiality.
1.2. This Policy applies to all information that the Operator may receive about visitors to the website https://theninth.ae.
Basic Concepts
2.1. Automated processing of personal data — processing using computer technology.
2.2. Blocking of personal data — temporary cessation of processing (except in cases of data clarification).
2.3. Website — a collection of graphic and informational materials, programs, and databases accessible at https://theninth.ae.
2.4. Personal data information system — databases containing personal data and technical means for processing them.
2.5. Anonymization of personal data — actions that make it impossible to determine the data's ownership by a specific user.
2.6. Processing of personal data — any action with personal data: collection, recording, storage, transfer, destruction, etc.
2.7. Operator — an organization that organizes and/or carries out the processing of personal data and determines the purposes, composition, and actions with it.
2.8. Personal data — any information related to a user of the website https://theninth.ae.
2.9. Personal data permitted for distribution by the subject means data access to which the user has granted consent.
2.10. User means any visitor to the website https://theninth.ae.
2.11. Provision of personal data means disclosure of data to a specific person or group of persons.
2.12. Dissemination of personal data means disclosure of data to an unspecified group of persons.
2.13. Cross-border transfer of personal data means transferring data to foreign persons or organizations.
2.14. Destruction of personal data means actions resulting in the destruction of data without the possibility of restoration.
3. Basic Rights and Obligations of the Operator
The Operator has the right to:
receive reliable information and documents containing personal data from the data subject;
if the data subject revokes consent, continue processing the data, if permitted by law;
determine the measures necessary to comply with personal data legislation.
The Operator is obligated to:
provide the data subject with information about their processing upon request;
organize processing in accordance with Russian Federation legislation;
respond to inquiries from personal data subjects;
notify authorized bodies for the protection of the rights of personal data subjects upon request;
publish this Policy publicly;
protect data from unauthorized access, modification, distribution, or destruction;
terminate data processing upon achieving the objectives or at the request of the data subject.
4. Basic Rights and Obligations of Personal Data Subjects
Rights:
receive information about the processing of their data;
require clarification, blocking, or deletion of inaccurate or outdated data;
revoke consent to data processing;
appeal the Operator's actions to authorized bodies or the court;
Set forth the terms and conditions for processing personal data for marketing purposes.
Responsibilities:
Provide accurate data;
Notify the Operator of any changes to your data.
5. Principles of Personal Data Processing
Processing is carried out lawfully, fairly, and for specific purposes.
Processing data that is inconsistent with the stated purposes is prohibited.
The volume and content of data correspond to the purposes for which it is used.
Data storage is limited to the period necessary to achieve the processing purposes.
After achieving the purposes, the data is destroyed or anonymized.
Personal data is not transferred when participating in promotions, coupons, or promo codes on third-party resources.
6. Conditions for Processing Personal Data
Processing is carried out with the consent of the data subject.
Data may be processed for the performance of contracts, court decisions, or the Operator's legal obligations.
Processing of publicly available data is permitted.
Processing for socially significant purposes is permitted, provided the rights of data subjects are not violated.
7. Procedure for the Collection, Storage, and Transfer of Personal Data
7.1. The Operator ensures data protection using technical and organizational measures.
7.2. Personal data is not transferred to third parties, except as required by law or with the consent of the data subject.
7.3. Data updates are performed upon the user's request by email to info@theninth.ae with the subject "Personal data update."
7.4. The processing period is determined by the purposes for which the data is collected. The user may revoke consent by sending an email to info@theninth.ae with the subject "Withdrawal of consent to the processing of personal data."
7.5. Data collected by third-party services (payment systems, delivery services, etc.) is processed in accordance with their privacy policies. The Operator is not responsible for their actions.
7.6. Data transfer restrictions imposed by the user do not apply to processing in the national or public interest.
7.7. The Operator adheres to the principle of confidentiality when processing data.
7.8. When delivering goods, information about the recipient and delivery address may be collected. Transportation is carried out through courier and transport companies at their rates.
7.9. Data storage is carried out no longer than necessary to achieve the processing purposes.
7.10. Processing is terminated upon achievement of the purposes, withdrawal of consent, or detection of unlawful processing.
8. List of actions with personal data
The Operator collects, records, systematizes, stores, clarifies, uses, transfers, anonymizes, blocks, deletes, and destroys personal data, both automatically and without the use of computing equipment.
9. Cross-border transfer of personal data
9.1. The Operator notifies the authorized body of its intent to transfer personal data abroad.
9.2. Before transferring data, the Operator obtains confirmation of the security of processing from the foreign recipient.
10. Confidentiality of personal data
The Operator and persons with access to the data are obligated not to disclose or distribute it without the consent of the data subject, unless otherwise provided by law. 11. Final Provisions
11.1. The User may ask any questions regarding the processing of personal data by writing to info@theninth.ae.
11.2. Any changes to the Policy will be made as necessary. The new version will take effect upon publication.
11.3. The current version of this document is always available at https://theninth.ae/privacy_policy/.