Privacy Policy
IP Gorbachev Ilya Andreevich (Data Controller) · Current Version
1. General Provisions
This Privacy Policy (hereinafter — the Policy) establishes the rules for processing personal data and measures to ensure the security of personal data undertaken by Individual Entrepreneur Gorbachev Ilya Andreevich (hereinafter — the Controller). The Policy is designed to comply with the principles of internationally recognized data protection standards, including the EU General Data Protection Regulation (GDPR) and analogous laws.
1.1. The Controller's primary objective is to respect the rights and freedoms of individuals when processing their personal data, including the right to privacy, personal, and family secrecy.
1.2. This Policy applies to all information that the Controller may obtain about visitors of the website https://rocket-tools.pro (hereinafter — the Website) and users of the ROCKET TOOLS service.
2. Key Definitions Used in This Policy
- Personal Data — any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
- Processing — any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, restriction, erasure, or destruction.
- Controller — IP Gorbachev Ilya Andreevich, the natural or legal person which determines the purposes and means of the processing of personal data.
- User — any visitor of the Website https://rocket-tools.pro or any registered customer of the ROCKET TOOLS service.
- Website — a set of graphical and informational materials, as well as computer programs and databases, ensuring their availability on the internet at https://rocket-tools.pro.
- ROCKET TOOLS Service — a set of tools providing information services, accessible via the Website.
- Third Parties — any natural or legal person, public authority, agency, or body other than the data subject, the Controller, or the processor.
3. Rights and Obligations of the Controller
3.1. The Controller has the right to:
- obtain accurate information and/or documents containing personal data from the data subject;
- continue processing personal data without the data subject's consent if there are legal grounds specified in applicable data protection laws (e.g., compliance with a legal obligation, performance of a contract, legitimate interests);
- determine independently the composition and list of measures necessary and sufficient to fulfill obligations under data protection legislation.
3.2. The Controller is obliged to:
- provide the data subject, upon request, with information regarding the processing of their personal data;
- organize the processing of personal data in accordance with applicable data protection laws;
- respond to requests and inquiries from data subjects and their legal representatives in accordance with data protection laws;
- publish or otherwise ensure unrestricted access to this Policy;
- implement legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure, and other unlawful actions;
- cease processing and delete personal data in cases and in accordance with the procedure provided by applicable law;
- notify the competent supervisory authority of data breaches when required by applicable law.
4. Rights of Data Subjects
4.1. Data subjects have the right to:
- obtain confirmation from the Controller as to whether or not personal data concerning them is being processed, and, where that is the case, access to the personal data and the following information: purposes of processing, categories of personal data, recipients to whom the data have been or will be disclosed, the envisaged storage period, and the existence of the right to request rectification or erasure;
- request from the Controller rectification of inaccurate personal data concerning them;
- request from the Controller erasure of personal data concerning them ("right to be forgotten") without undue delay where the personal data are no longer necessary for the purposes for which they were collected, or where the data subject withdraws consent;
- request restriction of processing of their personal data;
- object to processing of their personal data, including for direct marketing purposes;
- data portability — receive personal data concerning them in a structured, commonly used, and machine-readable format and transmit that data to another controller;
- withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with a supervisory authority (e.g., in the EU — the competent Data Protection Authority).
4.2. Data subjects are obliged to:
- provide the Controller with accurate data about themselves;
- inform the Controller of any updates, changes, or corrections to their personal data.
4.3. Persons who provide the Controller with inaccurate information about themselves, or information about another data subject without their consent, shall be liable in accordance with applicable law.
5. Principles of Personal Data Processing
- Processing is carried out lawfully, fairly, and transparently.
- Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
- Processing is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (data minimization).
- Personal data is accurate and, where necessary, kept up to date; every reasonable step is taken to ensure that inaccurate data is erased or rectified without delay.
- Personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
- Processing is conducted in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
6. Purposes of Personal Data Processing
| Purpose of Processing |
Categories of Personal Data |
Legal Basis (GDPR Art. 6) |
Types of Processing |
| Providing access to the ROCKET TOOLS service, information, and materials on the Website; registration and account management |
Name, email address, password (hashed), payment information, user activity logs, input data for tools |
Performance of a contract (Art. 6(1)(b)); Consent (Art. 6(1)(a)); Legitimate interests (Art. 6(1)(f)) — ensuring service functionality and security |
Collection, recording, systematization, accumulation, storage, use, transfer (to payment processors and hosting providers), deletion, anonymization |
| Marketing communications and service updates |
Email address, name |
Consent (Art. 6(1)(a)); Legitimate interests (Art. 6(1)(f)) — for existing customers (soft opt-in) |
Sending email newsletters, notifications about promotions and new features |
| Improving service quality and analytics |
Aggregated and anonymized usage data |
Legitimate interests (Art. 6(1)(f)) — service improvement and development |
Anonymization, analysis, statistical research, reporting |
| Compliance with legal obligations (tax, accounting, fraud prevention) |
Payment data, transaction history, identification data |
Legal obligation (Art. 6(1)(c)) |
Storage, transfer to tax authorities and payment processors as required by law |
7. Conditions for Personal Data Processing
- 7.1. Processing is based on the consent of the data subject, unless other legal grounds apply.
- 7.2. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- 7.3. Processing is necessary for compliance with a legal obligation to which the Controller is subject.
- 7.4. Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
- 7.5. Processing relates to personal data which are manifestly made public by the data subject.
- 7.6. Processing is necessary for the establishment, exercise, or defense of legal claims.
8. Procedure for Collection, Storage, Transfer, and Other Types of Processing
The security of personal data processed by the Controller is ensured through the implementation of legal, organizational, and technical measures necessary to meet the requirements of applicable data protection laws.
- 8.1. The Controller ensures the confidentiality and security of personal data and takes all possible measures to prevent unauthorized access.
- 8.2. Personal data is not transferred to third parties except as provided by applicable law, for the performance of the contract (e.g., payment processors, hosting providers), or with the explicit consent of the data subject. All third-party processors are contractually obligated to maintain the security and confidentiality of personal data.
- 8.3. In case of inaccuracies, Users may update their personal data independently through their personal account or by sending a notice to info@rocket-tools.pro with the subject "Personal Data Update".
- 8.4. Personal data is retained for no longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law or permitted by contract. After the retention period expires, personal data is deleted or anonymized.
- 8.5. Information collected by third-party services (payment systems, communication tools, analytics providers) is processed by those entities in accordance with their own privacy policies. The Controller is not responsible for the actions of such third parties.
- 8.6. The Controller ensures that any international transfer of personal data is carried out in compliance with applicable data protection laws, including ensuring adequate safeguards (such as Standard Contractual Clauses) when transferring data to countries without an adequacy decision.
- 8.7. Processing is terminated and personal data is deleted upon achievement of processing purposes, expiration of the retention period, withdrawal of consent, or detection of unlawful processing.
9. List of Actions Performed with Personal Data
- 9.1. The Controller performs collection, recording, systematization, accumulation, storage, rectification (updating, changing), retrieval, use, transfer (provision, access), anonymization, blocking, and deletion of personal data.
- 9.2. The Controller performs automated processing of personal data, including through information and telecommunication networks.
10. Cross-Border Transfer of Personal Data
- 10.1. The Controller ensures that any transfer of personal data to countries outside the jurisdiction where the data was collected is carried out in accordance with applicable data protection laws.
- 10.2. When transferring personal data to countries that do not provide an adequate level of protection, the Controller relies on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent mechanisms, binding corporate rules, or derogations for specific situations (e.g., explicit consent, performance of a contract).
- 10.3. Data subjects may obtain information about the safeguards implemented for cross-border transfers by contacting the Controller at info@rocket-tools.pro.
11. Confidentiality of Personal Data
The Controller and any other persons who gain access to personal data are obliged not to disclose such data to third parties or distribute personal data without the consent of the data subject, unless otherwise provided by applicable law.
12. Cookies and Similar Technologies
The Website uses cookies and similar tracking technologies to enhance user experience, analyze trends, and administer the service. Users may manage cookie preferences through their browser settings. Essential cookies required for the functioning of the service are used on the basis of legitimate interests; non-essential cookies are used only with the user's consent.
13. Final Provisions
- 13.1. Users may obtain any clarifications regarding the processing of their personal data by contacting the Controller via email at info@rocket-tools.pro.
- 13.2. This Policy may be updated from time to time. Any changes will be reflected in this document. The current version is always available at https://rocket-tools.pro/docs/privacy.html.
- 13.3. This Policy is effective indefinitely until replaced by a new version.
- 13.4. For data subjects located in the European Union, the Controller is committed to complying with the General Data Protection Regulation (GDPR). Data subjects have the right to lodge a complaint with their local Data Protection Authority.