Your data is protected

1.1. This Privacy Policy (hereinafter referred to as the Policy) defines the procedures for the collection, processing, storage, use, and protection of personal data of users of the website located at monisensa.com (hereinafter referred to as the Website), the Monisensa mobile application (hereinafter referred to as the App), and the Monisensa energy monitoring device (hereinafter referred to as the Device).

1.2. The personal data operator is Limited Liability Company "Monisensa Development" (hereinafter referred to as the Operator), INN 5262393830, OGRN 1235200038182, registered address: 111677, Moscow, Nekrasovka Municipal District, Maresyeva St., bldg. 7, block 4, apt. 116.

1.3. This Policy has been developed in accordance with:

• The Constitution of the Russian Federation (Articles 23, 24);
• Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter referred to as FZ-152), as amended by Federal Law No. 266-FZ dated July 14, 2022;
• Federal Law No. 149-FZ dated July 27, 2006 "On Information, Information Technologies, and Protection of Information";
• Government Decree of the Russian Federation No. 1119 dated November 1, 2012 "On Approval of Requirements for the Protection of Personal Data During Their Processing in Personal Data Information Systems";
• Order of FSTEC of Russia No. 21 dated February 18, 2013 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure Personal Data Security";
• other regulatory legal acts of the Russian Federation in the field of personal data.

1.4. This Policy applies to all personal data that the Operator may obtain from a person using the Website, the App, and/or the Device (hereinafter referred to as the User, Personal Data Subject).

1.5. By using the Website, the App, or the Device, the User freely, voluntarily, and in their own interest provides specific, informed, and conscious consent to the processing of their personal data in accordance with the terms of this Policy. If the User disagrees with the terms of the Policy, the User must cease using the Website, the App, and the Device.

1.6. The Operator has the right to establish requirements for the composition of the User's personal data that must be provided when using the Website, the App, or the Device. If certain information is not marked by the Operator as mandatory, its provision or disclosure is at the User's discretion.

5.1. Data provided by the User:

• last name, first name, patronymic;
• email address;
• contact phone number;
• delivery address (mailing address);
• App login credentials (login, password in encrypted form);
• content of inquiries and requests sent to the Operator.

5.2. Data collected automatically when using the Website:

• IP address;
• browser information (type, version, language);
• operating system information;
• date and time of access to the Website;
• addresses of requested pages;
• referral source (referrer);
• cookie data (in accordance with Section 11 of the Policy).

5.3. Data collected automatically when using the App:

• mobile device identifier;
• device model and manufacturer;
• operating system version;
• App version;
• App crash and error data (crash logs);
• push token for sending notifications (with the User's permission).

5.4. Data collected by the Device:

• electromagnetic field readings;
• energy consumption data (power, voltage, current, consumption by phase);
• measurement timestamps;
• Device identifier;
• Wi-Fi network parameters to which the Device is connected (network name only, for connectivity purposes).

5.5. The Operator does not process special categories of personal data relating to race, ethnicity, political views, religious or philosophical beliefs, health status, intimate life, or biometric personal data.

9.1. The Operator has the right to transfer the User's personal data to third parties exclusively in the following cases:

• the User has given explicit, specific, and informed consent to such transfer;
• transfer is necessary for the performance of a contract with the User (including for order delivery — to courier services and transportation companies);
• transfer is required by federal laws of the Russian Federation (including upon requests of authorized government agencies in the manner prescribed by law);
• transfer is necessary for making payments with the User through payment systems and credit institutions;
• transfer is necessary to protect the rights and legitimate interests of the Operator or third parties in cases where the User violates the terms of use of the Website, the App, or the contract.

9.2. When engaging third parties to process personal data on behalf of the Operator (Part 3, Article 6 of FZ-152), the Operator bears responsibility to the User for the actions of such parties. Third parties processing personal data on behalf of the Operator are required to comply with the principles and rules of processing provided for by FZ-152.

9.3. The Operator does not sell, rent, or transfer the User's personal data to third parties for advertising, marketing, or other commercial purposes without the User's explicit consent.

13.1. Personal data is processed and stored for the period necessary to achieve the processing purposes, unless a different retention period is established by the legislation of the Russian Federation or a contract with the User.

13.2. Specific retention periods:

• Account Data — until the Account is deleted by the User or the Operator, but no less than the periods established by applicable legislation;
• Order Data — 5 (five) years from the date of order completion in accordance with tax and accounting legislation requirements;
• Inquiries and Correspondence — 3 (three) years from the date of completion of the inquiry processing;
• Device Technical Data — for the duration of the User's Account or until the User's deletion request is received;
• Anonymized (Aggregated) Data — indefinitely;
• Cookies — in accordance with their type and the User's browser settings, but no more than 1 (one) year.

13.3. Upon expiration of the retention period or achievement of the processing purposes, as well as in the event of the User's withdrawal of consent to processing, personal data shall be destroyed or anonymized within a period not exceeding 30 (thirty) business days, unless otherwise provided by the legislation of the Russian Federation.

13.4. In the event that unlawful processing of personal data is identified, the Operator is obligated to cease the unlawful processing within a period not exceeding 3 (three) business days. If it is impossible to ensure the lawfulness of processing, the Operator is obligated to destroy the personal data within a period not exceeding 10 (ten) business days.

17.1. Before filing a court claim in disputes arising from the relationship between the User and the Operator, a mandatory claim (pre-trial settlement) must be submitted.

17.2. The claim shall be sent to the Operator in writing by email or to the mailing address specified in Section 19 of the Policy. The claim review period is 30 (thirty) calendar days from the date of its receipt by the Operator.

17.3. The User has the right to file a complaint about the actions (inactions) of the Operator with the authorized body for the protection of personal data subjects' rights — the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor).

17.4. If an agreement is not reached, the dispute shall be referred to a court at the location of the Operator in accordance with the applicable legislation of the Russian Federation.