This Privacy Policy ("Policy") describes how Helix Air JSC ("Company," "Operator," "we," "our," or "us") collects, uses, discloses, stores, and protects Personal Information of individuals who visit our website https://gelixairlines.ru/ ("Website"). This Policy is intended to comply with applicable U.S. privacy laws, including but not limited to the Federal Trade Commission Act, the California Consumer Privacy Act (CCPA/CPRA), and other relevant state privacy regulations.

1. General Provisions
1.1. The Operator is committed to protecting the privacy, rights, and freedoms of all individuals whose Personal Information is processed, including the rights to privacy, confidentiality, and security of personal and family life.
1.2. This Policy applies to all Personal Information that the Operator may collect from users ("Users") when they visit or interact with the Website.

2. Definitions
For purposes of this Policy:
— "Personal Information" means any information that identifies, relates to, describes, or can reasonably be linked, directly or indirectly, with a particular individual, as defined under U.S. privacy laws (including CCPA).
— "Processing" means any operation or set of operations performed on Personal Information, whether automated or not.
— "Anonymization" means processing Personal Information in a manner that renders the individual no longer identifiable.
— "Automated Processing" means processing carried out by automated systems or software.
— "User" means any individual who accesses or uses the Website.
— "Cross-border Data Transfer" means transferring Personal Information to a foreign jurisdiction.
— "Publicly Available Information" means information made lawfully available to the general public.

3. Rights and Responsibilities of the Operator
3.1. The Operator may:
— Request accurate information and/or documents from the User.
— Continue processing information where legally permitted.
— Determine internal measures necessary for compliance.

3.2. The Operator shall:
— Provide Users with information regarding processing.
— Process data in compliance with U.S. laws.
— Respond within the timeframes required by law.
— Implement safeguards to protect data.
— Ensure confidentiality.
— Discontinue processing when purposes are met.
— Fulfill all other legal obligations.

4. Rights and Responsibilities of Users
4.1. Users have the right to:
— Request access, correction, or deletion.
— Request processing restrictions.
— Withdraw consent.
— Opt out of sale or sharing.
— File complaints with authorities.

4.2. Users must:
— Provide accurate information.
— Notify the Operator of updates.

5. Principles of Processing
— Lawfulness, fairness, transparency.
— Specific and legitimate purposes.
— Data minimization.
— Accuracy.
— Storage limitation.
— Security and confidentiality.

6. Purposes of Processing
Purpose: Sending informational and marketing emails.
Personal Information: Email address.
Legal Basis: Consent; legitimate interest.
Processing: Collection, storage, use, anonymization, deletion, email sending.

7. Legal Bases
Processing may occur based on:
— Consent.
— Contract performance.
— Legal obligations.
— Legitimate interests.
— Publicly available information.

8. Collection, Storage, Transfer, and Protection
— Safeguards implemented.
— No disclosure unless legally required or consented.
— Updates via web@gelixairlines.ru.
— Retention only as necessary.
— Third-party services operate under their own policies.
— Operator not responsible for third-party behavior.

9. Actions with Personal Information
Includes collection, storage, updating, retrieval, use, disclosure, anonymization, blocking, deletion, destruction.

10. Cross-Border Transfers
— Appropriate safeguards will be ensured.
— Assurances may be required from foreign recipients.

11. Confidentiality
All persons with access must maintain confidentiality unless required by law.

12. Final Provisions
Contact: web@gelixairlines.ru
Policy may be updated. Current version available at https://gelixairlines.ru/en/privacy.