PERSONAL DATA PROCESSING POLICY

Dmitry Andreevich Irishkin, Individual Entrepreneur Version dated 28 July 2026

1. GENERAL PROVISIONS

1.1. This policy describes how Dmitry Andreevich Irishkin, Individual Entrepreneur (the Operator), processes personal data in connection with this website and electronic subscriptions to Mental Health journal.

1.2. The policy is governed by Russian law, including Federal Law No. 152-FZ On Personal Data. The Russian-language policy controls if this translation differs from it.

2. DATA SUBJECTS AND DATA CATEGORIES

2.1. For subscribers, the Operator processes the email address supplied during payment and information about the fact, date, and amount of payment.

2.2. The web server automatically records technical request data such as IP address, date and time, requested page, and browser user-agent. These records are used only for operation and security.

2.3. The website has no data collection forms, personal account, advertising analytics, or advertising information systems. The website does not use cookies.

3. PURPOSES OF PROCESSING

3.1. Subscriber data is used to perform the subscription agreement: deliver issues and receipts, answer enquiries, and process refunds.

3.2. Technical server logs are processed to keep the website operational and secure.

4. LEGAL GROUNDS

4.1. Subscriber data is processed where necessary to perform an agreement to which the data subject is a party.

4.2. Technical request data is processed for the Operator's legitimate interests in operating and protecting the website, provided that the rights of visitors are not overridden.

5. PROCESSING AND DISCLOSURE

5.1. YooKassa collects payment-related subscriber data. The Operator receives the subscriber email address and payment information after payment. Bank card details are not transferred to or stored by the Operator.

5.2. The Operator uses hosting, payment, and email service providers only as needed to operate the website and perform subscriptions. Data is otherwise disclosed only where required by Russian law.

5.3. Processing may use automated and non-automated means. The Operator does not make decisions producing legal effects solely by automated processing.

6. RETENTION

6.1. Subscriber data is retained during the subscription period and for statutory accounting and tax retention periods. Technical server logs are retained only for operational and security needs and are deleted automatically.

7. RIGHTS OF DATA SUBJECTS

7.1. Data subjects may request access, correction, blocking, or deletion where provided by law, and may complain to the competent authority or a court.

7.2. Requests may be sent to genius-media@mail.ru or to the Operator's postal address.

8. SECURITY

8.1. The Operator applies legal, organizational, and technical measures to protect personal data against unauthorized access, alteration, destruction, copying, or disclosure.

9. FINAL PROVISIONS

9.1. The Operator may update this policy. The current Russian-language version is published on the website.

9.2. Operator details: