Personal data privacy policy. Personal data processing policy constructor. We highlight general provisions, where we describe

1. General Provisions

1. The operator sets as its most important goal and condition for the implementation of its activities the observance of human and civil rights and freedoms when processing their personal data, including the protection of the rights to privacy, personal and family secrets.
2. This Operator's policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator can obtain about visitors to the website https://mysite.ru.

2. Basic concepts used in the Policy

1. Automated processing of personal data - processing of personal data using computer technology;
2. Blocking of personal data - temporary termination of the processing of personal data (except for cases where processing is necessary to clarify personal data);
3. Website - a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://mysite.ru;
4. Information system of personal data - a set of personal data contained in databases, and providing their processing of information technologies and technical means;
5. Depersonalization of personal data - actions, as a result of which it is impossible to determine, without using additional information, the belonging of personal data to a specific User or other subject of personal data;
6. Processing of personal data - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
7. Operator - a state body, a municipal body, a legal entity or an individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;
8. Personal data - any information relating directly or indirectly to a specific or identifiable User of the website https://mysite.ru;
9. User - any visitor to the website https://mysite.ru;
10. Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons;
11. Dissemination of personal data - any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at acquaintance with the personal data of an unlimited number of persons, including the disclosure of personal data in the media, posting on information and telecommunication networks or providing access to personal data in any other way;
12. Cross-border transfer of personal data - the transfer of personal data to the territory of a foreign state to the authority of a foreign state, to a foreign individual or foreign legal entity;
13. Destruction of personal data - any actions as a result of which personal data are destroyed irrevocably with the impossibility of further restoring the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed.

3. The operator can process the following personal data of the User

1. Full Name;
2. Phone number;
3. E-mail address;
4. The site also collects and processes anonymized data about visitors (including cookies) using Internet statistics services (Yandex Metrica and Google Analytics and others).
5. The above data hereinafter in the text of the Policy are united by the general concept of Personal data.

4. Purposes of personal data processing

1. The purpose of processing the User's personal data is the conclusion, execution and termination of civil contracts; providing the User with access to services, information and / or materials contained on the website https://mysite.ru; clarification of order details.
2. Also, the Operator has the right to send the User notifications about new products and services, special offers and various events. The user can always refuse to receive informational messages by sending an email to the Operator [email protected] marked "Disclaimer of notifications of new products and services and special offers."
3. Anonymized User data collected using Internet statistics services are used to collect information about the actions of Users on the site, improve the quality of the site and its content.

5. Legal basis for the processing of personal data

1. The Operator processes the User's personal data only if it is filled in and / or sent by the User independently through special forms located on the website https://mysite.ru. By filling out the appropriate forms and / or sending his personal data to the Operator, the User agrees with this Policy.
2. The Operator processes anonymized data about the User if it is allowed in the settings of the User's browser (the storage of cookies and the use of JavaScript technology are enabled).

6. The procedure for collecting, storing, transferring and other types of processing of personal data

1. The operator ensures the safety of personal data and takes all possible measures to exclude access to personal data of unauthorized persons.
2. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the implementation of the current legislation.
3. In case of revealing inaccuracies in personal data, the User can update them independently by sending a notification to the Operator to the Operator's e-mail address. [email protected] marked "Updating personal data".
4. The period for processing personal data is unlimited. The user can revoke his consent to the processing of personal data at any time by sending a notification to the Operator via e-mail to the Operator's email address. [email protected] marked "Withdrawal of consent to the processing of personal data."

7. Cross-border transfer of personal data

1. Before starting the cross-border transfer of personal data, the operator is obliged to make sure that the foreign state, to whose territory it is supposed to transfer personal data, provides reliable protection of the rights of subjects of personal data.
2. Cross-border transfer of personal data on the territory of foreign states that do not meet the above requirements can be carried out only if there is a written consent of the subject of personal data to the cross-border transfer of his personal data and / or the execution of an agreement to which the subject of personal data is a party.

8. Final provisions

1. The user can receive any clarifications on issues of interest regarding the processing of his personal data by contacting the Operator via e-mail [email protected].
2. This document will reflect any changes in the personal data processing policy by the Operator. The policy is valid indefinitely until it is replaced by a new version.
3. The current version of the Policy is freely available on the Internet at https://mysite.ru/policy/.

This Privacy Policy(hereinafter referred to as the Privacy Policy) applies to all information that this site, on which the text of this Privacy Policy is posted, can receive about the User, as well as any programs and products posted on it.

1. Definition of terms

1.1 The following terms are used in this Privacy Policy:

1.1.1. "Site administration" - authorized employees to manage the site, acting on its behalf, who organize and (or) process personal data, and also determine the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data data.

1.1.2. "Personal data" - any information relating directly or indirectly to a specific or identifiable individual (subject of personal data).

1.1.3. "Processing of personal data" - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

1.1.4. "Confidentiality of personal data" is a mandatory requirement for the Site Administration to prevent their deliberate dissemination without the consent of the subject of personal data or other legal grounds.

1.1.6. "Cookies" is a small piece of data sent by a web server and stored on a user's computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open the page of the corresponding site.

1.1.7. "IP -address" is a unique network address of a node in a computer network built using the IP protocol.

2. General provisions

2.1. The use of the site by the User means acceptance of this Privacy Policy and the terms of processing of the User's personal data.

2.2. In case of disagreement with the terms of the Privacy Policy, the User must stop using the site.

2.3 This Privacy Policy applies only to this website. The site administration does not control and is not responsible for third-party sites to which the User can click on the links available on this site.

2.4. The site administration does not verify the accuracy of the personal data provided by the Site User.

3. Subject of the privacy policy

3.1. This Privacy Policy establishes the obligations of the Site Administration to deliberately not disclose personal data that the User provides upon various requests of the Site Administration (for example, when registering on the site, placing an order, subscribing to notifications, etc.).

3.2. Personal data permitted for processing under this Privacy Policy is provided by the User by filling out special forms on the Site and usually includes the following information:

3.2.1. surname, name, patronymic of the User;

3.2.2. User's contact phone number;

3.2.3. e-mail address (e-mail);

3.2.4. place of residence of the User and other data.

3.3. The site administration also takes efforts to protect Personal data, which are automatically transmitted during the visit to the site pages:

• IP address;
• information from cookies;
• information about the browser (or other program that accesses the site);
• access time;
• visited page addresses;
• referrer (address of the previous page), etc.

3.3.1. Disabling cookies may result in the inability to access the site.

3.3.2. The site collects statistics on the IP addresses of its visitors. This information is used to identify and solve technical problems, to control the correctness of operations.

3.4. Any other personal information not specified above (used browsers and operating systems, etc.) is not subject to deliberate disclosure, with the exception of cases provided for in paragraphs. 5.2. and 5.3. of this Privacy Policy.

4. Purpose of collecting personal information of the user

4.1. The User's personal data may be used by the Site Administration for the following purposes:

4.1.1. Identification of the User registered on the site.

4.1.2. Providing the User with access to personalized website resources.

4.1.3. Establishing feedback with the User, including sending notifications, requests regarding the use of the site, the provision of services, processing requests and applications from the User.

4.1.4. Determining the location of the User to ensure security, prevent fraud.

4.1.5. Confirmation of the accuracy and completeness of personal data provided by the User.

4.1.6. Providing the User with effective customer and technical support in case of problems related to the use of the site.

5. Methods and terms of processing personal information

5.1. The processing of the User's personal data is carried out without any time limit, in any legal way, including in personal data information systems using automation tools or without using such tools.

5.2. The User's personal data can be transferred to the authorized state authorities only on the grounds and in the manner prescribed by the current legislation.

6. Obligations of the parties

6.1. The user undertakes:

6.1.1. Provide correct and truthful information about personal data necessary to use the site.

6.1.2. Update or supplement the provided information about personal data in case of changes in this information.

6.1.3. Take measures to protect access to your confidential data stored on the site.

6.2. The site administration undertakes:

6.2.1. Use the information received solely for the purposes specified in clause 4 of this Privacy Policy.

6.2.2. Do not disclose the User's personal data, with the exception of clause 5.2. of this Privacy Policy.

6.2.3. Block personal data related to the relevant User from the moment the User or his legal representative or the authorized body for the protection of the rights of subjects of personal data apply or request for the verification period, in case of revealing inaccurate personal data or illegal actions.

7. Responsibilities of the parties

7.1. The site administration is responsible for the deliberate disclosure of the User's Personal Data in accordance with the current legislation, with the exception of cases provided for in cl. 5.2., And 7.2. of this Privacy Policy.

7.2. In case of loss or disclosure of Personal Data, the Site Administration is not responsible if this confidential information:

7.2.1. Became public domain before its loss or disclosure.

7.2.2. Was received from a third party before it was received by the Site Administration.

7.2.3. Was obtained by third parties through unauthorized access to site files.

7.2.4. Was disclosed with the consent of the User.

7.3. The User is responsible for the legality, correctness and veracity of the provided Personal Data in accordance with applicable law.

8. Dispute Resolution

8.1. Before going to court with a claim for disputes arising from the relationship between the Site User and the Site Administration, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).

8.2. The recipient of the claim, within 30 calendar days from the date of receipt of the claim, notifies the applicant of the claim in writing about the results of the consideration of the claim.

8.3. If an agreement is not reached, the dispute will be referred to a judicial authority in accordance with applicable law.

8.4. The current legislation applies to this Privacy Policy and the relationship between the User and the Site Administration.

9. Additional terms

9.1. The site administration has the right to make changes to this Privacy Policy without the consent of the User.

9.2. The new Privacy Policy comes into force from the moment it is posted on the Site, unless otherwise provided by the new edition of the Privacy Policy.

Politics
confidentiality of personal data

1. GENERAL PROVISIONS

1.1. Limited Liability Company PharmPak (hereinafter referred to as the Company), within the framework of its activities, processes personal data and is a personal data operator with the corresponding rights and obligations determined by the current legislation of the Russian Federation on the procedure for processing personal data.

1.2. The privacy policy of personal data (hereinafter referred to as the Policy) is a local regulatory act of the Company that defines the basic principles, conditions and procedure for processing personal data of subjects of circulation of medicines sold by the Company and other users of the Site (hereinafter referred to as subjects of personal data or Subjects), establishing the rights and obligations of the subjects of personal data and the Company in the processing of personal data, as well as the requirements and measures for the protection of personal data implemented in the Company.

1.3. This Policy has been drawn up in accordance with the requirements of the Federal Law No. 152-ФЗ dated July 27, 2006 "On Personal Data" and is subject to placement on the website - (hereinafter referred to as the Website).

1.4. This Policy applies to all information that the Company receives through the Site, its programs and products. This Policy is also applicable to information received by the Company from subjects of personal data by phone, e-mail, telegrams, postal items, etc., as well as by filling in the subjects of personal data web forms posted on the Site of the Company.

1.5. This Policy applies to all personal data processing processes, regardless of the form of providing personal data.

1.6. The use of the Site by the subject of personal data, as well as the provision of his personal data by the Subject to the Company in any way, including as provided for in clause 1.4. of this Policy means that the Subject agrees with this Policy and the terms of processing of his personal data.

1.7. In case of disagreement with the terms of this Policy, the Subject must stop using the Site.

1.8. The company does not verify the accuracy of personal data provided by personal data subjects.

1.9. The Company does not control the observance of the confidentiality conditions and the processing of personal data of Subjects by the owners or users of other sites to which the subject of personal data can click on the links available on the Site of the Company, and is not responsible for the actions / inaction of the owners or users of such sites in the field of personal data processing and confidentiality.

1.10. This Policy establishes the obligations of the Company for non-disclosure and ensuring the protection of the confidentiality of personal data that the Subject provides to the Company independently or at the request of the Company, including by filling out the corresponding web-forms posted on the Site of the Company.

2. CONCEPTS AND DEFINITIONS

2.1. Basic concepts and definitions used in this Policy:

Personal data - any information relating directly or indirectly to a specific or identifiable individual (subject of personal data);

Processing of personal data - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

Automated processing of personal data - processing of personal data using computer technology;

Dissemination of personal data - actions aimed at disclosing personal data to an indefinite circle of persons;

Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons;

Blocking of personal data - temporary termination of the processing of personal data (except for cases where processing is necessary to clarify personal data);

Destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed;

Depersonalization of personal data - actions, as a result of which it becomes impossible to determine the belonging of personal data to a specific subject of personal data without using additional information;

Personal data information system - a set of personal data contained in databases and technical means providing their processing;

Site user - a visitor to the Site who views it, and also uses it to perform specific tasks and functions;

Pharmacovigilance is an activity to monitor the effectiveness and safety of medicinal products aimed at identifying, assessing and preventing unwanted consequences of the use of medicinal products;

Adverse reaction is an unintentional adverse reaction of the body that may be associated with the use of a drug, or a serious adverse reaction of the body associated with the use of a drug and resulting in death, congenital anomalies or malformations, or posing a threat to life, requiring hospitalization or resulting in persistence disability and (or) disability;

An official is an employee of the Company who, in the course of fulfilling his official duties, processes the personal data of the Subjects and is responsible in accordance with the legislation of the Russian Federation.

3. PRINCIPLES OF PERSONAL DATA PROCESSING

3.1. The processing of personal data of Subjects in the Company is based on the following principles:

The legality of the purposes and methods of processing personal data of the Subjects;

Compliance of the purposes of processing personal data of the Subjects with the goals predetermined and declared when collecting personal data;

Compliance of the content and volume of processed personal data with the purposes of processing personal data;

Reliability, sufficiency and relevance of personal data for the purposes of their processing, inadmissibility of processing excessive personal data in relation to the purposes of their collection and processing.

4. LEGAL BASIS FOR PROCESSING PERSONAL DATA

4.1. The legal basis for the processing of personal data is a set of legal acts, in pursuance of which and in accordance with which the Company processes personal data.

4.2. This Company Policy is determined in accordance with the following regulations:

The Constitution of the Russian Federation;

Federal Law No. 152-FZ of July 27, 2006 "On Personal Data";

Federal Law No. 61-FZ of July 27, 2006 "On the Circulation of Medicines";

Order of Roszdravnadzor dated 15.02.2017 N 1071 "On approval of the Procedure for the implementation of pharmacovigilance";

The rules of good practice for pharmacovigilance of the Eurasian Economic Union, approved by the Decision of the Council of the Eurasian Economic Commission N 87 dated 03.11.2016;

Other legal acts of the Russian Federation.

5. PURPOSES OF PERSONAL DATA PROCESSING

5.1. The processing of personal data of the Subjects is carried out by the Company in order to ensure the quality and integrity of the pharmacovigilance system in terms of the organization by the Company of work with information on adverse reactions to medicinal products sold by the Company, including in the process of acceptance, ordering, consideration and transmission of messages about side effects, adverse reactions , serious adverse and unforeseen adverse reactions when using medicinal products, about the peculiarities of their interaction with other medicinal products, individual intolerance, as well as other facts and circumstances that pose a threat to human life or health or affect the change in the ratio of the expected benefit to the possible risk of using medicinal products preparations (hereinafter - Messages).

5.2. The Company processes personal data of Subjects also for the following purposes:

Identification of subjects of personal data;

Monitoring of the effectiveness and safety of medicinal products by the Company within the framework of pharmacovigilance activities based on information received from the Subjects;

Carrying out activities in accordance with the charter of the Company;

Providing information support to the Subjects;

Establishing feedback with the subjects of personal data, including to confirm the accuracy and completeness of personal data provided by them when contacting the Company.

In order for the Company to comply with Good Distribution Practices. For these purposes, claims received by the Company will be registered with the following information: the date of receipt of the claim, the name of the organization or the name of the person, their contact details (telephone / fax number, e-mail address, address for sending correspondence), the name of the medicinal product, dosage form, dosage, batch (batch) number, volume, reason for the claim, and more. At the same time, the processing of personal data can be carried out both upon receipt of claims regarding the quality of medicines, and claims regarding compliance with the requirements and conditions of distribution.

5.3. To achieve the purposes of processing personal data, the Company may process personal data in the following volume:

Date and place of birth;

E-mail address;

Phone number;

Address of the place of registration, actual residence, address for sending correspondence;

Health information;

Information about identified or suspected inconsistencies in the quality of medicinal products (claims for the quality of medicinal products or claims regarding compliance with the requirements and conditions of distribution);

Information about the side effect or adverse reaction to the medicinal product;

Information about the place of work and the position occupied.

6. PROCEDURE AND TERMS OF PROCESSING OF PERSONAL DATA

6.1. The terms for processing personal data are determined by the Company in accordance with the purposes of processing personal data.

6.2. The condition for the termination of the processing of personal data is the achievement of the goals of processing personal data, the expiration of the consent of the Subject or the withdrawal of consent by the Subject to the processing of his personal data, as well as the identification of illegal processing of personal data.

6.3. The Company does not disclose to third parties and does not distribute personal data without the consent of the subject of personal data, unless otherwise provided by the legislation of the Russian Federation.

6.4. In case of loss or disclosure of personal data, the Company has the right not to inform the Subject about the loss or disclosure of his personal data.

6.5. The Company does not carry out cross-border transfers of personal data.

6.6. The Company transfers the processed personal data to state bodies, including Roszdravnadzor, to legal entities with which the Company has entered into contracts and agreements for the purposes specified in clause 5.1. and 5.2. of this Policy.

6.7. Personal data of subjects of personal data are stored in the manner determined by the Company.

6.8. The processing of personal data of the Subjects is entitled to be carried out by the officials of the Company on the basis of the rights granted to them, formalized in the prescribed manner, or by virtue of their official duties.

6.9. Officials who are allowed access to the personal data of the Subjects in accordance with this Policy receive and use only those personal data of the Subjects that they need to perform specific functions.

6.10. When processing personal data, officials of the Company must comply with the following requirements:

Not to disclose the personal data of the Subjects to a third party without the written consent of the subject of personal data, except for cases when it is necessary in order to prevent a threat to the life and health of the subject of personal data, as well as in other cases provided for by the legislation of the Russian Federation and this Policy;

To warn the persons receiving the personal data of the personal data subject in accordance with this Policy that these data can be used only for the purposes for which they were communicated. Persons receiving personal data are required to comply with the secrecy (confidentiality) regime;

Not to communicate for commercial purposes the personal data of the Subject without his consent.

6.11. The secrecy (confidentiality) regime applies to both paper and electronic (automated) information carriers.

6.12. The Company also collects information using session and permanent cookies. Session cookies are stored on the User's computer for a certain period of time after he leaves the Site. Session cookies are used by the Company to count the number of visitors to the Site. In addition, the Company uses persistent cookies that allow you to find out how the User navigates through the pages of the Site, what content is most interesting to him and how long the User stays on a separate page of the Site.

6.13. The Company processes the data collected using cookies only for statistical purposes, to diagnose problems with the server and for the purposes of administering the Company's Site. At the same time, the collection and processing of such data is carried out only in an impersonal form.

6.14. The Site user has the ability to delete or cancel cookies at any time, for this it is necessary to change the settings of the web browser. At the same time, if the User deletes or cancels cookies, then the User will not be able to use all the functionality of the browser software, as well as the Site.

7. PROTECTION OF PERSONAL DATA

7.1. The protection of personal data must be carried out in accordance with the requirements of the current legislation of the Russian Federation on the protection of personal data.

7.2. When processing personal data, the Company takes all the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access to them, destruction, alteration, blocking, copying, provision, distribution.

7.3. Ensuring the security of the personal data of the Subjects received by the Company is achieved, in particular:

Appointment of officials responsible for organizing the processing of personal data of Subjects in the Company;

The publication of this Policy, the adoption of other local acts on the processing and security of the personal data of the Subjects received by the Company;

Implementation in the Company of internal control over the compliance of personal data processing processes with the requirements provided for by the current legislation of the Russian Federation, this Policy and other local acts of the Company;

Application in the Company of organizational and technical measures to ensure the security of personal data received from Subjects during their processing;

Familiarization of the Company's employees who directly process the personal data of the Subjects with local acts on the processing of personal data of the Subjects.

8. RIGHTS AND OBLIGATIONS OF THE COMPANY

8.1. When processing personal data, the company is obliged to:

Carry out the processing of personal data of the Subjects in strict accordance with the legislation of the Russian Federation, this Policy and other local acts of the Company;

Stop processing personal data at the request of the Subject, as well as in cases provided for by the current legislation of the Russian Federation;

Provide the Subject, upon his written request, with information on the processing of his personal data;

For automated processing of personal data, use databases located on the territory of the Russian Federation.

8.2. When processing personal data of Subjects, the Company has the right to:

Receive personal data from Subjects;

Check the completeness, accuracy and reliability of the personal data provided by the Subject, request additional personal data from the Subjects;

Process personal data;

Acquire and exercise other rights.

9. RIGHTS OF PERSONAL DATA SUBJECTS

9.1. The subject of personal data has the right:

Receive information regarding the processing of his personal data, including information containing: confirmation of the fact of processing of personal data by the Company; legal grounds and purposes of personal data processing; the purposes and methods of processing personal data used by the Company; name and location of the Company, information about persons (except for employees of the Company) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Company or on the basis of federal law; processed personal data relating to the relevant subject of personal data, the source of their receipt, unless another procedure for submitting such data is provided for by federal law; terms of processing personal data, including the terms of their storage; information about the carried out or about the intended cross-border data transfer; name or surname, first name, patronymic and address of the person who processes personal data on behalf of the Company, if the processing is entrusted or will be entrusted to such a person;

Require the Company to clarify the Subject's personal data processed by the Company, to block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained, inaccurate or not necessary for the stated purpose of processing;

9.2. To exercise his rights and protect legitimate interests, the subject of personal data has the right to apply to the Company in writing. The Company considers any written requests and complaints from the subjects of personal data, thoroughly investigates the facts of violations and takes all necessary measures to immediately eliminate them, punish the perpetrators and resolve disputes in a pre-trial manner.

9.3. A written request from the subject of personal data for the provision of information regarding the processing of his personal data must contain the following mandatory details established by Part 3 of Art. 14 of the Federal Law No. 152-FZ of July 27, 2006 "On Personal Data", including: the number of the main document proving the identity of the subject of personal data or his representative, information on the date of issue of the said document and the issuing authority, information confirming participation of the subject of personal data in relations with the operator (contract number, date of conclusion of the contract, conventional verbal designation and (or) other information), or information otherwise confirming the fact of processing of personal data by the operator, signature of the subject of personal data or his representative. The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.

9.4. Requests of the subject of personal data to receive information about their personal data, familiarize themselves with them, to clarify them, block or destroy, revoke consent to their processing can be sent to the e-mail address [email protected] or at the address: 105318, Moscow, st. Mironovskaya, 33, bldg. 28 (PharmPak LLC).

10. FINAL PROVISIONS

10.1. This Policy is a public document of the Company and is subject to placement on the public information resource of the Company - the Site.

10.2. This Policy is subject to change, addition in case of changes in the legislation of the Russian Federation, local regulations of the Company in the field of processing and protection of personal data of the Company.

10.3. The responsibility of the Company, as well as its officials for non-compliance with the requirements of the rules governing the processing and protection of personal data, is established by the legislation of the Russian Federation and local regulations of the Company.

This personal data processing policy has been drawn up in accordance with the requirements of the Federal Law of July 27, 2006. № 152-ФЗ "On personal data" and determines the procedure for processing personal data and measures to ensure the security of personal data Sergey Mineev (hereinafter referred to as the Operator).

1. The operator sets as its most important goal and condition for the implementation of its activities the observance of human and civil rights and freedoms when processing their personal data, including the protection of the rights to privacy, personal and family secrets.
2. This Operator's policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator can obtain about visitors to the website https: // site /.

2. Basic concepts used in the Policy

1. Automated processing of personal data - processing of personal data using computer technology;
2. Blocking of personal data - temporary termination of the processing of personal data (except for cases where processing is necessary to clarify personal data);
3. Website - a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https: // site /;
4. Information system of personal data - a set of personal data contained in databases, and providing their processing of information technologies and technical means;
5. Depersonalization of personal data - actions, as a result of which it is impossible to determine, without using additional information, the belonging of personal data to a specific User or other subject of personal data;
6. Processing of personal data - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
7. Operator - a state body, a municipal body, a legal entity or an individual, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;
8. Personal data - any information relating directly or indirectly to a specific or identifiable User of the website https: // site /;
9. User - any visitor to the website https: // site /;
10. Provision of personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons;
11. Dissemination of personal data - any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at acquaintance with the personal data of an unlimited number of persons, including the disclosure of personal data in the media, posting on information and telecommunication networks or providing access to personal data in any other way;
12. Cross-border transfer of personal data - the transfer of personal data to the territory of a foreign state to the authority of a foreign state, to a foreign individual or foreign legal entity;
13. Destruction of personal data - any actions as a result of which personal data are destroyed irrevocably with the impossibility of further restoring the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed.

3. The operator can process the following personal data of the User

1. Full Name;
2. Email address;
3. Photos;
4. The site also collects and processes anonymized data about visitors (including cookies) using Internet statistics services (Yandex Metrica and Google Analytics and others).
5. The above data hereinafter in the text of the Policy are united by the general concept of Personal data.

4. Purposes of personal data processing

1. The purpose of processing the User's personal data is to provide the User with access to services, information and / or materials contained on the website.
2. Also, the Operator has the right to send the User notifications about new products and services, special offers and various events. The user can always refuse to receive informational messages by sending an email to the Operator [email protected] marked "Disclaimer of notifications of new products and services and special offers."
3. Anonymized User data collected using Internet statistics services are used to collect information about the actions of Users on the site, improve the quality of the site and its content.

5. Legal basis for the processing of personal data

1. The Operator processes the User's personal data only if it is filled in and / or sent by the User independently through special forms located on the website https: // site /. By filling out the appropriate forms and / or sending his personal data to the Operator, the User agrees with this Policy.
2. The operator processes anonymized data about the User if it is allowed in the settings of the User's browser (the storage of cookies and the use of javascript technology are enabled).

6. The procedure for collecting, storing, transferring and other types of processing of personal data

The security of personal data processed by the Operator is ensured through the implementation of legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.

1. The operator ensures the safety of personal data and takes all possible measures to exclude access to personal data of unauthorized persons.
2. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the implementation of the current legislation.
3. In case of revealing inaccuracies in personal data, the User can update them independently by sending a notification to the Operator to the Operator's e-mail address. [email protected] marked "Updating personal data".
4. The period for processing personal data is unlimited. The user can revoke his consent to the processing of personal data at any time by sending a notification to the Operator via e-mail to the Operator's email address. [email protected] marked "Withdrawal of consent to the processing of personal data."

7. Cross-border transfer of personal data

1. Before starting the cross-border transfer of personal data, the operator is obliged to make sure that the foreign state, to whose territory it is supposed to transfer personal data, provides reliable protection of the rights of subjects of personal data.
2. Cross-border transfer of personal data on the territory of foreign states that do not meet the above requirements can be carried out only if there is a written consent of the subject of personal data to the cross-border transfer of his personal data and / or the execution of an agreement to which the subject of personal data is a party.

8. Final provisions

1. The user can receive any clarifications on issues of interest regarding the processing of his personal data by contacting the Operator via e-mail [email protected]
2. This document will reflect any changes in the personal data processing policy by the Operator. The policy is valid indefinitely until it is replaced by a new version.