Privacy Policy on Personal Data Processing

1. General ProvisionsThis Personal Data Processing Policy is drafted in accordance with Federal Law No. 152‑FZ “On Personal Data” dated July 27, 2006 (the “Personal Data Law”) and defines the procedures for processing personal data and security measures implemented by American Tech Drive (the “Operator”).
1.1. The Operator considers as its foremost objective—and a mandatory condition for its operations—the protection of individuals’ rights and freedoms, including the right to privacy, personal and family confidentiality.
1.2. This Policy applies to all information that the Operator may obtain about visitors to the website https://amdriveusa.com/.
2. Key Terms Used in this Policy2.1. “Automated processing of personal data” means using computing tools to process personal data.
2.2. “Blocking of personal data” means temporarily suspending data processing (except when necessary to clarify the data).
2.3. “Website” means the set of graphical and informational materials, software, and databases accessible via https://amdriveusa.com/.
2.4. “Personal Data Information System” means the IT systems and technical means used to store and process personal data.
2.5. “Anonymization of personal data” means processing that makes it impossible to identify the data subject without additional information.
2.6. “Processing of personal data” means any action or operations performed on personal data—automated or manual—including collection, recording, systematization, accumulation, storage, updating, extraction, use, transmission, anonymization, blocking, deletion, or destruction.
2.7. “Operator” is a state body, municipal authority, legal or physical person who independently or jointly with others organizes or carries out data processing and determines purposes, scope, and operations of processing.
2.8. “Personal data” means any information that directly or indirectly relates to a specific or identifiable visitor of https://amdriveusa.com/.
2.9. “Personal data permitted for distribution” means data that the subject has consented to make publicly accessible.
2.10. “User” means any visitor to https://amdriveusa.com/.
2.11. “Provision of personal data” means disclosing data to a specific individual or limited group.
2.12. “Distribution of personal data” means making data accessible to an unspecified or unlimited audience, including publication in media or access via the internet.
2.13. “Cross‑border transfer of personal data” means transferring data to foreign governments, individuals, or legal entities.
2.14. “Destruction of personal data” means irreversible deletion or physical destruction of data making further recovery impossible.
3. Operator’s Rights and Obligations3.1. The Operator has the right to:
  • obtain accurate personal data and/or documents from the data subject;
  • continue processing data without consent if legal grounds exist after withdrawal;
  • determine the necessary organizational, technical, and legal measures to comply with applicable data protection laws.
3.2. The Operator must:
  • provide information about data processing at the subject’s request;
  • ensure processing complies with applicable Russian legislation;
  • respond to inquiries from subjects or their representatives as required (e.g., providing information within 10 days to the supervisory authority);
  • publish or otherwise ensure unlimited access to this Policy;
  • implement legal, organizational, and technical measures to protect personal data;
  • cease processing or destroy data as required by law or after consent withdrawal;
  • perform other obligations under the Personal Data Law.
4. Rights and Obligations of Data Subjects4.1. Data subjects have the right to:
  • access information about the processing of their personal data (except as restricted by law);
  • demand correction, blocking, or destruction of data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary;
  • set conditions for consent in marketing purposes;
  • withdraw content or request cessation of processing at any time;
  • appeal Operator’s actions or inactions to supervisory authorities or courts;
  • exercise other rights under Russian law.
4.2. Data subjects must:
  • provide accurate personal data;
  • inform the Operator of any updates or changes.
4.3. Persons providing false or unauthorized personal data about themselves or others bear liability under Russian law.
5. Principles of Personal Data Processing5.1. Processing is lawful and fair.
5.2. Data processing is limited to specific, explicit, and lawful purposes.
5.3. Separate databases are not merged if purposes are incompatible.
5.4. Only data strictly necessary for the processing purpose is processed.
5.5. Data volume and content correspond to the purposes—no excess data.
5.6. Data accuracy, sufficiency, and relevance are maintained; incomplete or outdated data must be clarified or deleted.
5.7. Data is stored in an identifiable form only as long as necessary; thereafter anonymized or destroyed as applicable.
6. Purposes of Data ProcessingPurpose: Informing the User via email
Personal Data Collected: Full name, email address, phone number
Legal Basis: Operator’s charter documents
Processing Operations: Collection, recording, systematization, accumulation, storage, anonymization, destruction
7. Conditions for Data Processing7.1. Processing is permitted with the subject’s consent.
7.2. Required under international agreements, law, or legally mandated functions.
7.3. Necessary for execution of justice, court orders, or enforcement proceedings.
7.4. Required for performing a contract with the subject or on their behalf.
7.5. Allowed for the operator’s or third parties’ legitimate interests, provided rights are not violated.
7.6. Applies to publicly available personal data with consent.
7.7. Applies when Russian federal law mandates publication.
8. Procedures for Data Collection, Storage, Transfer, and Other Processing8.1. The Operator ensures legal, organizational, and technical safeguards to protect data from unauthorized access, destruction, alteration, copying, or disclosure.
8.2. Personal data will never be transferred to third parties except as required by law or with the user’s consent for contract fulfillment.
8.3. For data inaccuracies, the User may update their information by emailing americandrivetech@gmail.com with the subject line “Personal Data Update.”
8.4. The processing duration is defined by the purpose unless specified by contract or law. Consent may be withdrawn at any time by emailing the Operator at americandrivetech@gmail.com with the subject “Withdrawal of Consent to Personal Data Processing.”
8.5. Data collected by third‑party services (e.g., payment systems, communication tools) is stored and processed under those providers’ agreements and policies; the Operator is not liable for third‑party actions.
8.6. Restrictions by the subject on transfer or processing of publicly available data do not apply when processing is required in the public or governmental interest under Russian law.
8.7. The Operator maintains confidentiality during data processing.
8.8. Data is stored in identifiable form only as long as it serves the purpose; otherwise anonymized or destroyed according to law.
8.9. Processing ceases upon purpose fulfillment, consent expiration, withdrawal, request cessation, or unlawful processing detection.
9. Types of Operations Performed by the Operator9.1. The Operator carries out collection, recording, systematization, accumulation, storage, updating, extraction, use, transfer, anonymization, blocking, deletion, and destruction of personal data.
9.2. Processing may be automated and include data transmission via information and telecommunications networks.
10. Cross‑Border Transfer of Personal Data10.1. Before transferring data abroad, the Operator must notify the Russian data protection authority.
10.2. The Operator must obtain necessary information from foreign entities or individuals before conducting such transfers.
11. Confidentiality of Personal DataThe Operator and any persons with access must not disclose or distribute personal data without the subject’s consent, unless required by law.
12. Final Provisions12.1. Users may request clarifications about data processing by emailing the Operator at americandrivetech@gmail.com.
12.2. Any changes to this Policy will be reflected in updated versions. This Policy remains valid until replaced.
12.3. The current version of the Policy is publicly available at https://amdriveusa.com/privacypolicy.