Privacy Policy regarding the processing of personal data

1 General Provisions
This Privacy Policy for the processing of personal data is prepared in accordance with the
requirements of the Law "On Personal Data" (hereinafter – the Personal Data Law) and
determines the procedure for processing personal data and measures to ensure the security of
personal data undertaken by FILINA PROSPERITY MANAGEMENT - FZCO (hereinafter –
the Operator).
1.1. The Operator sets as its most important goal and condition for the implementation of its
activities the observance of human and citizen's rights and freedoms when processing their
personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter – the
Policy) applies to all information that the Operator can obtain about visitors to the
website https://allafilinaprosperity.com/woh6_af_uae .
2 Basic Concepts Used in the Policy
2.1. Automated processing of personal data – processing of personal data using computer
technology.
2.2. Blocking of personal data – temporary cessation of processing of personal data (except for
cases where processing is necessary to clarify personal data).
2.3. Website – a set of graphical and informational materials, as well as computer programs and
databases that ensure their availability on the Internet at the network
address https://allafilinaprosperity.com/woh6_af_uae.
2.4. Information system of personal data — a set of personal data contained in databases and
information technologies and technical means ensuring their processing.
2.5. Depersonalization of personal data — actions as a result of which it is impossible to
determine, without the use of additional information, the belonging of personal data to a specific
User or other subject of personal data.
2.6. Processing of personal data – any action (operation) or a set of actions (operations)
performed with or without the use of automation tools with personal data, including collection,
recording, systematization, accumulation, storage, clarification (updating, modification),
extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion,
destruction of personal data.
2.7. Operator – a state body, municipal body, legal entity, or individual, independently or jointly
with other persons, organizing and/or carrying out the processing of personal data, as well as
determining the purposes of processing personal data, the composition of personal data to be
processed, actions (operations) performed with personal data.
2.8. Personal data – any information relating directly or indirectly to a specific or identifiable
User of the website https://allafilinaprosperity.com/woh6_af_uae.
2.9. Personal data permitted by the subject of personal data for dissemination - personal data,
access to which has been provided to an unlimited number of persons by the subject of personal
data by giving consent to the processing of personal data permitted for dissemination in the
manner prescribed by the Personal Data Law (hereinafter - personal data permitted for
dissemination).
2.10. User – any visitor to the website https://allafilinaprosperity.com/woh6_af_uae.
2.11. Provision of personal data – actions aimed at disclosing personal data to a specific person
or a specific circle of persons.
2.12. Dissemination of personal data – any actions aimed at disclosing personal data to an
indefinite circle of persons (transfer of personal data) or familiarizing an unlimited circle of
persons with personal data, including the publication of personal data in the mass media, posting
in information and telecommunication networks, or providing access to personal data in any
other way.
2.13. Cross-border transfer of personal data – transfer of personal data to the territory of a
foreign state to an authority of a foreign state, a foreign individual, or a foreign legal entity.

2.14. Destruction of personal data – any actions as a result of which personal data are destroyed
irrevocably with the impossibility of further restoring the content of personal data in the
information system of personal data and/or material carriers of personal data are destroyed.
3 Basic Rights and Obligations of the Operator
3.1. The Operator has the right to:
Receive from the subject of personal data reliable information and/or documents containing
personal data;
In case of withdrawal by the subject of personal data of consent to the processing of personal
data, continue processing without the subject's consent if there are grounds specified in the
Personal Data Law;
Independently determine the composition and list of measures necessary and sufficient to ensure
the fulfillment of obligations provided by the Personal Data Law and regulatory legal acts
adopted in accordance with it, unless otherwise provided by the Personal Data Law or other
laws.
3.2. The Operator is obliged to:
Provide the subject of personal data, upon request, with information concerning the processing of
their personal data;
Organize the processing of personal data in the manner established by current legislation;
Respond to appeals and requests from personal data subjects and their legal representatives in
accordance with the requirements of the Personal Data Law;
Publish or otherwise provide unrestricted access to this Policy regarding the processing of
personal data;
Take legal, organizational, and technical measures to protect personal data from unlawful or
accidental access, destruction, modification, blocking, copying, provision, dissemination, as well
as from other unlawful actions regarding personal data;
Cease the transfer (distribution, provision, access) of personal data, cease processing, and
destroy personal data in the manner and cases provided by the Personal Data Law;
Perform other duties provided by the Personal Data Law.
4 Basic Rights and Obligations of Personal Data Subjects
4.1. Subjects of personal data have the right to:
Receive information regarding the processing of their personal data, except in cases provided by
law. The information is provided to the subject by the Operator in an accessible form and shall
not contain personal data relating to other subjects, except in cases where there are legal grounds
for disclosing such personal data. The list of information and the procedure for obtaining it are
established by the Personal Data Law;
Require the operator to clarify, block, or destroy their personal data if the data is incomplete,
outdated, inaccurate, illegally obtained, or not necessary for the stated purpose of processing, and
take legal measures to protect their rights;
Impose a condition of prior consent when processing personal data for the purpose of promoting
goods, works, and services on the market;
Withdraw consent to the processing of personal data;
Appeal to the authorized body for the protection of the rights of personal data subjects or in court
against unlawful actions or inaction of the Operator during the processing of their personal data;
Exercise other rights provided by law.
4.2. Subjects of personal data are obliged to:
Provide the Operator with accurate data about themselves;
Inform the Operator about the clarification (update, change) of their personal data.
5 The Operator may process the following Personal Data of the User
5.1. Last name, first name, patronymic.
5.2. Email address.
5.3. Phone numbers.
5.4. The site also collects and processes anonymized data about visitors (including "cookies")