Emotional response
analysis

1. General Provisions
This Personal Data Processing Policy has been drawn up in accordance with the requirements of Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006, and defines the procedure for processing personal data and the measures for the safeguarding of personal data by Candy Flip Robots LLC(hereinafter referred to as the “Operator”).
1. The Operator’s most important goal and condition for carrying out its activities is to observe the rights and freedoms of a person and a citizen in the processing of his/her Personal Data, including protecting the rights to privacy, personal, and family secrets.
2. This Operator's Policy regarding Personal Data Processing (hereinafter referred to as the “Policy”) applies to all information that the Operator can receive about visitors to the website https://sensemachine.net

2. Basic Concepts of the Policy
1. Automated Personal Data Processing — processing personal data using computer technology;
2. Blocking of Personal Data — a temporary suspension of the processing of personal data (unless processing the personal data is necessary to clarify it);
3. Website — the totality of the graphical and informational materials, as well as the computer programs and databases that ensure their availability on the Internet at the following network address: https://sensemachine.net
4. Personal Data Information System — the totality of Personal Data contained in databases, and the information technologies and technical means that facilitate its processing;
5. Personal Data Anonymization — actions that make it impossible to identify, without the use of additional information, whether Personal Data belongs to a specific User or other subject of Personal Data;
6. Personal Data Processing — any action (operation) or a set of actions (operations) performed on Personal Data with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and Personal Data Destruction;
7. Operator — a state body, municipal body, legal entity or individual, independently or jointly with other persons, which organizes and (or) carries out Personal Data Processing, and determines the purposes of Personal Data Processing, the composition of Personal Data to be processed, and the actions (operations) performed with Personal Data;
8. Personal Data — any information relating directly or indirectly to a specific or identifiable User of the website https://sensemachine.net;
9. User — any visitor to the website https://sensemachine.net;
10. Personal Data Provision — actions aimed at disclosing Personal Data to a certain person or a certain group of persons;
11. Personal Data Distribution — any actions aimed at disclosing Personal Data to an undefined group of persons (Personal Data Transfer) or familiarizing an unlimited group of persons with Personal Data, including disclosing Personal Data in the media, posting in information and telecommunication networks, or providing access to Personal Data in any other way;
12. Cross-Border Personal Data Transfer — transfer of Personal Data into the territory of a foreign state to an authority of a foreign state, to a foreign individual, or to a foreign legal entity;
13. Destruction of Personal Data — any actions that cause Personal Data to be irretrievably destroyed with the inability to subsequently restore the content of the Personal Data in the Personal Data Information System and (or) that cause the destruction of the physical media of Personal Data.

3. The Operator may process the following Personal Data of the User
1. Last name, first name, patronymic;
2. Email address;
3. Phone numbers;
4. Year, month, day and place of birth;
5. Use of an image of a citizen, including his/her photograph, as well as videos, recorded on the Website and in which he/she participated, for in-depth analytics.
6. Each entry is anonymized. No data, except for virtual points on the User's face, is stored or processed.
7. The User hereby agrees to use the image of a citizen (including his/her photograph, as well as video recordings within the meaning of Article 152.1 of the Civil Code of the Russian Federation).
8. The Website also collects and processes anonymous data (including cookies) about visitors using Internet statistics services (Yandex Metrika and Google Analytics, etc.).
9. Hereinafter, the aforementioned data is united by the general concept of Personal Data.

4. Purposes of Personal Data Processing
1. The purpose of processing the User's Personal Data is to obtain an analytical report on users’ emotional response to displayed materials.
2. The Operator also has the right to send notifications to the User about new products and services, special offers and various events. The User can always opt out of receiving informational messages by sending an email to the Operator at legal@sensemachine.net with the tag "Opt out of notifications about new products and services, and special offers."
3. Users’ anonymized data collected from Internet statistics services is used to collect information about Users’ actions on the Website, and to improve the quality of the Website and its content.

5. Legal Grounds for Personal Data Processing
1. The Operator processes the User's Personal Data only if it is filled in and/or sent by the User independently through special forms located on the website https://sensemachine.net. By filling out the relevant forms and/or sending Personal Data to the Operator, the User expresses his/her consent with this Policy.
2. The Operator processes anonymized data about the User if doing so is allowed in the User's browser settings (storing cookies and using JavaScript are enabled).

6. Procedure for collecting, storing, transferring and other types of processing of Personal Data
The safety of the Personal Data processed by the Operator is ensured through the implementation of legal, organizational and technical measures necessary to comply with the requirements of the current legislation in the field of personal data protection.
1. The Operator ensures the safety of Personal Data and takes all possible measures to prevent access to Personal Data by unauthorized persons.
2. The User's Personal Data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with applicable law.
3. In case of inaccuracies in Personal Data, the User can update them independently by sending a notice to the Operator at the Operator's e-mail address legal@sensemachine.net with the tag "Updating Personal Data".
4. The term for Personal Data Processing is unlimited. The User may at any time withdraw his/her consent to Personal Data Processing by sending a notice to the Operator by e-mail at the Operator's email address legal@sensemachine.net with the tag "Withdrawal of Consent to Personal Data Processing".

7. Cross-Border Personal Data Transfer
1. Prior to Cross-Border Personal Data Transfer, the Operator must make sure that the foreign state to which Personal Data is supposed to be transferred provides reliable protection of the rights of Personal Data subjects.
2. Cross-Border Personal Data Transfer into the territory of foreign states that do not meet the above requirements can be carried out only with the written consent of the Personal Data subject to the cross-border transfer of his/her Personal Data and/or to perform an agreement to which the Personal Data subject is a party.

8. Final Provisions
1. The User can receive any clarifications on issues of interest regarding the processing of his/her Personal Data by contacting the Operator via e-mail at legal@sensemachine.net.
2. This document will be updated in the event that the Operator makes any changes to the Personal Data Processing Policy. This Policy remains in effect indefinitely until it is replaced by a new version.
3. The current version of the Policy is publicly available on the Internet at https://sensemachine.net.