Privacy Policy

Personal data processing policy

Personal data processing policy
Date of update: 22.04.2026 · Version: 1.2 · Website: mnrln.ru
Republic of Belarus Law No. 99-Z Personal data

1. General provisions

This Personal Data Processing Policy, hereinafter — Policy, defines the order of processing personal data of site users mnrln.ru and service Минеральная Мьюзик.
The Policy applies when using the website, personal account, registration forms, feedback forms, release upload functions, payment for services, receiving payouts, contacting support, and other Service functions.
The Policy is developed in accordance with the requirements of the Republic of Belarus legislation on personal data protection, including the Law of the Republic of Belarus of May 7, 2021 No. 99-Z "On Personal Data Protection".
Public offer Terms of use Support FAQ

2. Personal data operator

The personal data operator is Limited Liability Company «Минеральная Мьюзик».
Abbreviated name Mineralnaya Music LLC Full name Limited Liability Company «Минеральная Мьюзик» UNP 193782745 EGR registration date 14.08.2024 Registering authority Minsk City Executive Committee Location Republic of Belarus, Заводской район, г. Минск, ул. Мичурина, дом 3, пом. 1 Email regarding personal data 13sh@mnrln.ru Support e-mail 13sh@mnrln.ru
For inquiries regarding personal data processing, exercising data subject rights, withdrawing consent, or changing or terminating data processing, use e-mail: 13sh@mnrln.ru.

3. Key terms

  • Personal data — any information relating to an identified natural person or a natural person that can be identified.
  • Personal data subject — an individual to whom personal data relates.
  • Operator — a person who independently or jointly with others organizes and/or carries out the processing of personal data.
  • Personal data processing — any action or set of actions with personal data, including collection, storage, modification, use, provision, blocking, and deletion.
  • Authorized person — a person who processes personal data on behalf of the Operator.
  • User — a person using the site, personal dashboard, services, or feedback forms.
  • DSP — digital platforms, streaming services, social networks, UGC platforms, and other services involved in placing or monetizing Content.

4. Principles of personal data processing

  • processing is carried out lawfully, fairly, and transparently;
  • processing is limited to specific, pre-declared, and legitimate purposes;
  • only data necessary and proportionate to the stated purposes is processed;
  • The operator takes measures to keep data up to date;
  • data is stored no longer than required for processing purposes, unless a different period is provided by law;
  • The Operator takes organizational and technical measures to protect personal data.

5. Processing purposes, data categories, grounds, and retention periods

The Operator processes personal data only to the extent necessary for a specific purpose. The data list may vary depending on which Service features the User uses.
Registration, authorization, and dashboard operation
Data e-mail, phone if provided, login, password or password hash, account ID, registration date, profile settings, login history. Base conclusion and performance of the contract, User actions for registration and use of the Service. Storage period в течение срока использования аккаунта и 3 лет после его закрытия или последней активности, если больший срок не требуется для защиты прав Оператора, исполнения договора или требований законодательства.
Provision of digital distribution services
Data profile data, release information, artists, authors, rights holders, Content metadata, moderation statuses, delivery and release removal statuses. Base conclusion and execution of the contract, public offer, the need to deliver Content to DSPs and support releases. Storage period в течение срока действия договора и 3 лет после прекращения отношений с Пользователем, если больший срок не требуется для разрешения споров, отчётности, претензий DSP или исполнения законодательства.
Payment for services, payouts, reporting, and financial accounting
Data payment data, amount and date of operation, payment method, payout details, balance history, DSP reports, information on accruals and deductions. Base contract execution, financial accounting, requirements of banks, payment systems, legislation, and anti-fraud procedures. Storage period в течение сроков, установленных законодательством Республики Беларусь для бухгалтерского, налогового и финансового учета, а также правилами банков и платёжных систем.
Support, claims, and communication
Data e-mail, name or alias, content of the request, attachments, correspondence, support service notes, account and release information. Base performance of the agreement, handling inquiries, protection of the rights and legitimate interests of the Operator and the User. Storage period до 3 лет после завершения обращения, если больший срок не требуется для разрешения спора, исполнения договора или защиты прав Оператора.
Security, anti-fraud and Service protection
Data IP address, user-agent, date and time of actions, technical logs, security events, login attempts, signs of suspicious activity. Base account protection, abuse prevention, contract performance, legitimate interests of the Operator, and DSP/payment system requirements. Storage period до 12 месяцев с даты фиксации события, если больший срок не требуется для расследования инцидента безопасности, антифрод-проверки, исполнения закона или защиты прав Оператора.
Informational and service notifications
Data e-mail, account ID, release status, notifications about moderation, payouts, changes to terms, security, and Service operation. Base performance of the contract and the need to inform the User about the Service's operation. Storage period during the term of Service use and the period required to confirm the fact of sending the notification.
Marketing emails and promo communications
Data e-mail, name, or alias if provided, information about consent or refusal to receive newsletters. Base user consent, if such consent is required. Storage period до отзыва согласия или прекращения рассылки, если обработка осуществляется на основании согласия.
If a separate consent is required for a specific operation, the Operator requests such consent separately. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sources of personal data collection

The operator receives personal data:
  • directly from the User during registration, profile completion, release uploads, support requests, and use of the Service;
  • automatically when using the site and personal account: IP address, cookies, technical logs, device and browser information;
  • from DSPs, banks, payment systems, and technology partners — to the extent necessary for reporting, payouts, payment processing, moderation, anti-fraud, and release support;
  • from documents and materials provided by the User to confirm rights, identify payments, or review claims.

7. Transfer of personal data to third parties and authorized persons

The Operator may transfer personal data to third parties only to the extent necessary for the stated processing purposes, service provision, contract performance, and legal requirements.
  • DSP and delivery partners — for placing releases, processing metadata, reporting, and monetizing Content.
  • Banks and payment services — for accepting payments, refunds, payouts, anti-fraud checks, and financial accounting.
  • Hosting, cloud, and technical providers — to ensure the operation of the site, account, data storage, backup and security.
  • Communication services — for sending e-mail, notifications, service messages, and handling requests.
  • Lawyers, auditors, consultants — if necessary to protect rights, resolve disputes, prepare documents and fulfill obligations.
  • Government bodies, courts and other authorized persons — in cases provided for by law.
When entrusting the processing of personal data to an authorized person, the Operator takes measures to ensure that such person processes the data in accordance with the Operator's instructions, stated purposes, legal requirements, and contractual obligations.

8. Cross-border transfer of personal data

Due to the specifics of digital distribution, certain DSPs, payment services, communication services, analytics, hosting, and other technology partners may be located outside the Republic of Belarus.
Cross-border transfer of personal data may be carried out to the extent necessary for the performance of the contract, placement and maintenance of Content, processing of payments and payouts, ensuring the operation of the Service, user support, security, and compliance with legal requirements.
If a specific cross-border transfer requires separate consent from the personal data subject or additional information about risks, the Operator ensures obtaining such consent or informing in the manner prescribed by the legislation of the Republic of Belarus.

9. Cookies, analytics, and technical data

The site may use cookies and similar technologies for authorization, security, remembering settings, personal dashboard operation, analytics, and improving the Service.
  • Necessary cookies — ensure the site and dashboard work, authorization, and security.
  • Functional cookies — help remember settings and improve usability.
  • Analytical cookies — help understand how the site is used and improve the interface.
  • Marketing cookies — may only be used when there is a legal basis, including consent if required.
Cookie data retention period: в течение срока действия соответствующего cookie-файла, но не дольше срока, необходимого для заявленной цели. Пользователь может ограничить или удалить cookies в настройках браузера, однако это может повлиять на работу отдельных функций сайта и личного кабинета.

10. Rights of the personal data subject

As a data subject, the user has the right to exercise the rights provided by the legislation of the Republic of Belarus.
  • receive information regarding the processing of their personal data;
  • receive information about the provision of personal data to third parties in cases and in the manner provided by law;
  • demand changes to personal data if it is incomplete, outdated or inaccurate;
  • demand cessation of personal data processing when there are no grounds for processing;
  • demand deletion of personal data when there are no grounds for storing it;
  • withdraw consent if processing is based on consent;
  • appeal the Operator's actions or inaction to the authorized body or court.
Personal data inquiries should be sent to e-mail: 13sh@mnrln.ru. The Operator reviews requests within the timeframes provided by the legislation of the Republic of Belarus. In general, a response is provided within 15 calendar days, unless a different period is established by law.
To protect data from disclosure to third parties, the Operator may request information necessary to identify the applicant and confirm their connection to the relevant account or inquiry.

11. Personal data protection measures

The Operator takes necessary organizational and technical measures to protect personal data from unlawful or accidental access, alteration, blocking, copying, provision, distribution, deletion, destruction, and other unlawful actions.
  • restricting access to personal data only to persons who need such access;
  • use of technical protection measures, including HTTPS, access control, backup, and security event monitoring;
  • logging actions in information systems to the extent necessary for security and incident investigation;
  • verification of contractors and authorized persons if they are entrusted with personal data processing;
  • taking response measures when security incidents are detected.
Despite the measures taken, the User is obliged to independently ensure the security of their account: use a strong password, do not share access with third parties, and promptly notify the Operator of suspicions of unauthorized access.

12. Contacts, changes, and the current version of the Policy

The Operator may update this Policy when legislation, Service functionality, the list of processed data, processing purposes, technical infrastructure, or internal processes change.
Current version https://mnrln.ru/politics Date of update 22.04.2026 Document version 1.2 Personal data contact 13sh@mnrln.ru Support 13sh@mnrln.ru
If the User continues to use the Service after the updated version of the Policy is published, this means they have reviewed the current version as applicable to further use of the Service. When separate consent is required by law, the Operator requests it separately.

FAQ

To email: 13sh@mnrln.ru. In your request, specify which right you want to exercise: obtain information, change data, stop processing, delete data, or withdraw consent.
If there are no legal grounds for further processing — yes. If the data is needed for contract performance, financial accounting, reporting, handling claims, or protecting rights, processing may continue to the necessary extent and within the established time limits.
Yes, this is possible because DSPs, payment services, infrastructure providers and communication services may be located outside the Republic of Belarus. Transfer is carried out only to the extent necessary for processing purposes.
Public offer: https://mnrln.ru/oferta
Terms of use: https://mnrln.ru/uslovija
Support: https://mnrln.ru/support