on the processing of personal data

of users of the advbukhov.by website

as of January 1, 2026

1. GENERAL PROVISIONS

1.1. This Policy on the processing of personal data (hereinafter, the Policy) regulates legal relations concerning personal data processing between Georgy Igorevich Bukhov (hereinafter, the Operator) and a user of the advbukhov.by website (hereinafter, the User).

1.2. The issuance of this Policy is one of the mandatory measures taken by the Operator to ensure personal data protection, as provided by Article 17 of the Law of the Republic of Belarus dated May 7, 2021 No. 99-Z On Personal Data Protection (hereinafter, the Law).

1.3. This Policy is developed in accordance with the Law and explains to Users how, for what purposes, and on what legal basis personal data is collected, used, or otherwise processed, and also reflects the rights that personal data subjects have in this regard and the mechanism for exercising those rights.

1.4. Operator contact details:

Full name: Georgy Igorevich Bukhov

Status: attorney at the Minsk City Bar Association

Location: Minsk, 40/1 Gazety Pravda Ave., 220116, Minsk

Email address: georgebukhov@gmail.com

Phone number: +375 29 343 17 24

1.5. This Policy uses the terms and definitions provided by the Law, as well as the following terms and definitions:

1.5.1. User means a legally capable individual over eighteen years of age who wishes to review information posted on the Operator website, submit a request for services (legal assistance) from the Operator, or perform other actions provided by the website functionality.

1.5.2. Website means the website with the domain name advbukhov.by, including all domain levels owned by the Operator.

1.6. This Policy applies to all personal data that the Operator receives from Users.

2. PROCEDURE AND CONDITIONS FOR PERSONAL DATA PROCESSING

2.1. Personal data is processed both with and without automation tools through collection, storage, systematization, modification, use, provision, and deletion of personal data.

2.2. The User agrees to this Policy by entering their name, email address (if required), and phone number in a dedicated field on the Website with an offer to submit a consultation request (online inquiry), request a call, or perform other actions provided by the Website functionality, and by subsequently clicking the Send button. Expression of consent is also confirmed by a corresponding checkbox indicating that the User gives consent to personal data processing.

If the User disagrees with the terms of this Policy, the User must immediately stop any use of the Website and also refrain from submitting the corresponding request (not providing personal data) via the Website functionality.

2.3. Categories of personal data subjects whose data is processed: clients (individuals, including individual entrepreneurs), authorized representatives of legal entities, and other Users.

2.4. The legal basis for processing is the User consent, and if a civil law contract is subsequently concluded between the Operator and the User, such contract is also a legal basis.

2.5. The purposes of personal data processing are:

• 2.5.1. providing the User with access to website resources;
• 2.5.2. further communication regarding the User request to fulfill obligations under that request and to provide consultations on the Operator legal assistance services;
• 2.5.3. sending informational messages;
• 2.5.4. advertising and promotion of services, including based on information about the User individual preferences and settings;
• 2.5.5. evaluating and analyzing the operation of the Operator website;
• 2.5.6. analytics of advertising placement effectiveness and statistical research based on anonymized information provided by the User;
• 2.5.7. informing the User about promotions, discounts, and other special offers via email and telephone communications;
• 2.5.8. conducting marketing research, including with involvement of third parties as contractors;
• 2.5.9. providing the User with advertising and reference information and services in accordance with the Website functional capabilities.

2.6. List of processed personal dаta: name, email address, phone number, and other personal data specified in correspondence (including in an application, feedback form, online chat on the Website, or in the Operator social networks).

2.7. Consent to personal data processing is valid from the date such consent is provided until the personal data processing purposes are achieved or until the User withdraws such consent, unless otherwise provided by law.

2.8. User personal data is stored on electronic media, and for the purposes of fulfilling obligations to Users it may also be stored on physical media after extraction of personal data.

2.9. The User may withdraw the consent provided to the Operator at any time in the manner established by this Policy.

2.10. The Operator does not verify data provided or specified by the User.

In this regard, the Operator assumes that when providing personal data, the User:

• is a fully legally capable person (otherwise, consent to personal data processing is provided by a legal representative);
• provides accurate information about themselves (or about the partially capable person they represent);
• independently keeps the provided personal data up to date.

2.11. When processing personal data, the Operator takes necessary legal, organizational, and technical measures to ensure personal data protection from unauthorized or accidental access, alteration, blocking, copying, distribution, provision, deletion, and other unlawful actions with respect to personal data.

2.12. It is not considered a breach of obligations under this Policy to transfer information in accordance with justified and applicable requirements of the legislation of the Republic of Belarus, as well as to provide information to partners acting under an agreement with the Operator to fulfill obligations to the User; or to transfer anonymized User data to third parties for evaluating and analyzing the operation of the Operator website, providing personalized recommendations, displaying advertisements based on User personal preferences and settings, and conducting marketing, analytical, and or statistical research.

2.13. The Operator is entitled to use cookies technology. Cookies are data automatically transmitted to the Operator when using the Website through software installed on the User device, including IP address, geolocation, information about the browser and operating system type, technical characteristics of hardware and software used by the User, and date and time of Website access.

Cookies files do not contain confidential information. Cookies files are used to remember User preferences and settings, as well as to collect analytical data about Website visits. Use of the Website means that the User agrees to the use of all cookies files and analytical data about Website visits, and to their transfer to third parties.

2.14. The Operator receives information about the User IP address and information about the website from which the User came via link. This information is not used to identify the visitor.

2.15. Continued use of the Website or its services after publication of a new version of the Policy means acceptance of the Policy and its terms by the User.

If the User disagrees with the Policy terms, the User must immediately stop using the Website and its services.

3. CROSS-BORDER TRANSFER OF PERSONAL DATA

3.1. The Operator may carry out cross-border transfer of personal data to ensure continuous communication with users of social networks and messengers (Instagram, TikTok, Telegram, Viber, WhatsApp, MAX, Facebook, Linkedin, YouTube).

3.2. Cross-border transfer of personal data to the territory of a foreign state may be carried out by the Operator if:

3.2.1. the foreign state ensures an adequate level of protection of personal data subject rights, without restrictions where legal grounds provided by the Law exist. The list of foreign states whose territories ensure an adequate level of protection of personal data subject rights is determined by Order No. 14 of the National Center for Personal Data Protection of the Republic of Belarus dated November 15, 2021 On Cross-Border Transfer of Personal Data.

3.2.2. the foreign state does not ensure an adequate level of protection of personal data subject rights, in cases provided by Article 9 of the Law, including:

• where consent of the personal data subject is given provided that the subject is informed about risks arising due to the absence of an adequate level of protection;
• when information about activities is posted on the global computer network Internet;
• when personal data processing is necessary for performance of duties (powers) provided by legislative acts.

4. RIGHTS OF PERSONAL DATA SUBJECTS

5. USER RIGHTS

5.1. The User has the right:

5.1.1. to withdraw their consent.

The User may withdraw their consent at any time without giving reasons in the manner established by Article 14 of the Law, or in the form through which consent was obtained.

The Operator undertakes, within fifteen days after withdrawal of consent, to stop processing personal data, delete it, and notify the User.

The Operator refuses to stop personal data processing if such processing is carried out on another legal basis (for example, in accordance with legal requirements or on the basis of a contract).

5.1.2. to receive information regarding processing of their personal data by the Operator, including:

• location of the operator (name of the operator);
• confirmation of the fact of processing of the User personal data;
• personal data and the source of its receipt;
• legal grounds and purposes of personal data processing;
• the period for which consent is given (if personal data processing is based on consent);
• name and location of the authorized person (authorized persons);
• other information provided by law.

The personal data subject is not required to justify their interest in the requested information.

The Operator refuses to provide the requested information in cases provided by law.

5.1.3. to require the Operator to amend their personal data if the personal data is incomplete, outdated, or inaccurate.

5.1.4. to receive from the Operator information about provision of their personal data to third parties.

5.1.5. to require the Operator to stop processing their personal data free of charge, including deletion of such data.

5.1.6. to appeal actions (inaction) and decisions of the Operator.

5.2. To exercise these rights, the User must send the Operator an application in written form to the postal address specified in subparagraph 1.4 of paragraph 1 of this Policy, or in the form of an electronic document signed with a digital signature.

5.3. All questions regarding the Policy and or personal data processing are sent to the Operator email address specified in subparagraph 1.4 of paragraph 1 of the Policy.