Privacy Policy and Personal Data
Processing

1. General Provisions

This Privacy Policy sets out how personal data is processed and protected by L5 LLC (ООО «Эль пять»). The Policy has been developed to comply with the personal data legislation of the Russian Federation and to ensure the protection of personal data, as well as to maintain the Company's strong business reputation.

This document establishes the categories of personal data, the purposes, methods, and principles of their processing, the rights and obligations of the Company and of data subjects, and the measures taken to protect personal data. The Policy is a publicly available document.

2. Information About the Operator, Legal Grounds, and Purposes of Processing

Name: Limited Liability Company "El Five" (L5 LLC).

Address: 16A Shepelyuginskaya St., Premises 1N, Moscow, 111024, Russia.

INN/KPP: 9723238499 / 772201001.

OGRN: 1247700588860.

Phone: +7 (985) 214-48-44.

Email: info@LL5.space.

Personal data is processed on the basis of the Constitution of the Russian Federation, the Labor Code of the Russian Federation, the Civil Code of the Russian Federation, the Tax Code of the Russian Federation, Federal Law No. 152-FZ of July 27, 2006 "On Personal Data," Federal Law No. 149-FZ of July 27, 2006 "On Information, Information Technologies, and Information Protection," and other applicable regulations of the Russian Federation.

Purposes of processing: compliance with legislation, recruitment and employment of staff, conclusion and performance of contracts, fulfillment of social insurance obligations, and maintaining site access control.

3. Categories of Personal Data and Sources of Collection

L5 LLC processes the personal data of employees, counterparties and their representatives, visitors, and job candidates. Data is collected from the data subjects themselves, from counterparties, from tax authorities, and from publicly available sources.

4. Principles of Processing, Transfer, and Storage of Personal Data

The Operator complies with the principles set out in Article 5 of Federal Law No. 152-FZ "On Personal Data." The Company does not process biometric personal data, meaning information characterizing a person's physiological and biological features that could be used to establish their identity and that the Operator uses for that purpose. Photographs (images) are processed only in cases provided for by Russian law or with the consent of the data subject.

5. Parties Involved in Personal Data Processing

Personal data may be disclosed to third parties without the data subject's consent in cases provided for by the legislation of the Russian Federation (including for the provision of state and municipal services), as well as for the performance of contracts to which the data subject is a party, beneficiary, or guarantor.

In all other cases, personal data is disclosed to third parties only with the consent of the data subject.

6. Personal Data Security Measures

L5 LLC takes legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, alteration, blocking, copying, and distribution. To ensure security, the Company appoints responsible personnel, conducts internal audits and staff training, analyzes threats, and reviews the effectiveness of its protective measures.

7. Rights of Data Subjects

A data subject has the right to:

• receive information regarding the processing of their personal data;
• request correction, blocking, or deletion of their personal data if the data is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
• withdraw consent to the processing of personal data;
• appeal any unlawful action or inaction by the Operator in processing their personal data to the authorized body for the protection of data subjects' rights, or through the courts.

To exercise these rights, a data subject may contact L5 LLC using the contact details provided in Section 2.

8. Procedure for Exercising Data Subjects' Rights

Requests from data subjects to exercise their rights (correction, blocking, deletion) are reviewed by the Operator within 10 (ten) business days from the date of receipt. If more time is needed, the Operator will notify the data subject of the reasons for the extension and the new deadline.