Privacy Policy Regarding the Processing of Personal DataGeneral Provisions.
This personal data processing policy has been developed in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and measures for ensuring the security of personal data taken by LLC "GORCHAKOVO" (hereinafter referred to as the Operator).
1.1. The Operator's primary goal and condition for conducting its activities is to ensure the rights and freedoms of individuals and citizens in the processing of their personal data, including the protection of rights to privacy, personal, and family secrets.
1.2. This policy of the Operator regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may obtain about visitors to the website
https://gorchakov-grib.ru/en.
Basic Concepts Used in the Policy.
2.1. Automated Processing of Personal Data — processing of personal data using computing facilities.
2.2. Blocking of Personal Data — temporary cessation of personal data processing (except in cases where processing is necessary for clarifying personal data).
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases, ensuring their accessibility on the Internet at the network address
https://gorchakov-grib.ru/en.
2.4. Information System of Personal Data — a set of personal data contained in databases and ensuring their processing with information technologies and technical means.
2.5. Anonymization of Personal Data — actions resulting in the inability to identify the personal data without using additional information.
2.6. Processing of Personal Data — any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transmission (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
2.7. Operator — a government body, municipal body, legal entity, or individual that independently or jointly with others organizes and/or carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal Data — any information related directly or indirectly to a specific or identifiable User of the website
https://gorchakov-grib.ru/en.
2.9.
Personal Data Permitted by the Personal Data Subject for Distribution — personal data for which access has been granted to an unlimited circle of persons by the personal data subject through consent to the processing of personal data permitted for distribution in the manner provided for by the Personal Data Law (hereinafter referred to as personal data permitted for distribution).
2.10.
User — any visitor to the website
https://gorchakov-grib.ru/en.
2.11.
Provision of Personal Data — actions aimed at disclosing personal data to a specific person or a specific circle of persons.
2.12.
Distribution of Personal Data — any actions aimed at disclosing personal data to an indefinite circle of persons (transmission of personal data) or at making personal data available to an unlimited number of persons, including publication of personal data in mass media, placement in information and telecommunications networks, or providing access to personal data by any other means.
2.13.
Cross-Border Transfer of Personal Data — transfer of personal data to the territory of a foreign state to an authority of a foreign state, foreign individual, or foreign legal entity.
2.14.
Destruction of Personal Data — any actions resulting in the irreversible destruction of personal data with no possibility of further restoration of the content of personal data in the information system of personal data and/or destruction of material carriers of personal data.
Basic Rights and Responsibilities of the Operator.3.1. The Operator has the right to:
— receive from the personal data subject reliable information and/or documents containing personal data;
— continue processing personal data without the consent of the personal data subject if there are grounds specified in the Personal Data Law in case the personal data subject withdraws consent for processing personal data or sends a request for the cessation of processing personal data;
— independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations established by the Personal Data Law and normative legal acts adopted in accordance with it, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator is obliged to:
— provide the personal data subject with information regarding the processing of his/her personal data upon request;
— organize the processing of personal data in accordance with the current legislation of the Russian Federation;
— respond to appeals and requests of personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Law;
— provide the authorized body for the protection of the rights of personal data subjects with the necessary information at the request of this body within 10 days from the date of receipt of such a request;
— publish or otherwise ensure unrestricted access to this Policy regarding the processing of personal data;
— take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data;
— cease the transmission (distribution, provision, access) of personal data, stop processing, and destroy personal data in the manner and cases provided for by the Personal Data Law;
— fulfill other obligations provided for by the Personal Data Law.
Basic Rights and Responsibilities of Personal Data Subjects.4.1. Personal data subjects have the right to:
— receive information regarding the processing of their personal data, except in cases provided for by federal laws. The information is provided to the personal data subject by the Operator in an accessible form and should not contain personal data related to other personal data subjects unless there are legal grounds for disclosing such personal data. The list of information and the procedure for obtaining it are established by the Personal Data Law;
— require the Operator to clarify their personal data, block, or destroy it in case the personal data is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the stated purpose of processing, as well as take legal measures to protect their rights;
— demand prior consent for the processing of personal data for the purposes of promoting goods, works, and services in the market;
— withdraw consent for the processing of personal data and send a request for the cessation of processing personal data;
— appeal to the authorized body for the protection of the rights of personal data subjects or in court against unlawful actions or inaction of the Operator in processing their personal data;
— exercise other rights provided for by the legislation of the Russian Federation.
4.2. Personal data subjects are obliged to:
— provide the Operator with reliable information about themselves;
— inform the Operator of any updates (changes) to their personal data.
4.3. Individuals who provided the Operator with unreliable information about themselves or information about another personal data subject without their consent are liable in accordance with the legislation of the Russian Federation.
Principles of Personal Data Processing.5.1. Personal data processing is carried out on a lawful and fair basis.
5.2. Personal data processing is limited to achieving specific, predetermined, and legitimate purposes. Processing of personal data incompatible with the purposes of personal data collection is not permitted.
5.3. Combining databases containing personal data, the processing of which is carried out for incompatible purposes, is not permitted.
5.4. Only personal data that meets the purposes of its processing is subject to processing.
5.5. The content and scope of personal data processed correspond to the stated purposes of processing. The processing of personal data exceeding the stated purposes is not permitted.
5.6. When processing personal data, the accuracy, sufficiency, and, in necessary cases, relevance of the personal data concerning the purposes of personal data processing are ensured. The Operator takes necessary measures and/or ensures their adoption for the removal or clarification of incomplete or inaccurate data.
5.7. Personal data is stored in a form that allows identification of the personal data subject for no longer than is necessary for the purposes of personal data processing unless a longer storage period is established by federal law, a contract, of which the personal data subject is a party, beneficiary, or guarantor. Processed personal data is destroyed or anonymized upon achieving the purposes of processing or in case of loss of necessity for achieving these purposes unless otherwise provided by federal law.
Purposes of Personal Data Processing.Purpose of ProcessingPersonal DataLegal GroundsTypes of Personal Data Processing
Providing access to Users to services, information, and/or materials contained on the website. Informing Users by sending emails
surname, first name, patronymic
Federal Law "On Information, Information Technologies, and Information Protection" dated July 27, 2006 N 149-FZ
Collection, recording, systematization, accumulation, storage, destruction, and anonymization of personal data, sending informational emails to the email address
Conditions for Processing Personal Data.7.1. Personal data processing is carried out with the consent of the personal data subject for the processing of his/her personal data.
7.2. Personal data processing is necessary to achieve the purposes provided for by international treaties of the Russian Federation or by law, for the exercise of functions, powers, and duties imposed on the Operator by the legislation of the Russian Federation.
7.3. Personal data processing is carried out in accordance with the contract, the party to which, or the beneficiary of which, or the guarantor of which is the personal data subject.
7.4. Personal data processing is necessary for the protection of the rights and legitimate interests of the Operator or third parties, or for achieving socially significant purposes, provided that the rights and freedoms of the personal data subject are not violated.
7.5. Personal data processing is carried out for statistical or other research purposes, provided that the personal data is anonymized.
Procedures for Cross-Border Transfer of Personal Data.8.1. Before carrying out cross-border transfer of personal data, the Operator is obliged to ensure that the foreign state to which the personal data is planned to be transferred provides reliable protection of the rights of personal data subjects.
8.2. Cross-border transfer of personal data without such protection is permitted only if there is consent of the personal data subject for the cross-border transfer of his/her personal data and/or performance of the contract to which the personal data subject is a party.
Measures to Ensure the Security of Personal Data.The Operator takes the necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data.
Final Provisions.10.1. This Policy is subject to review and approval by the Operator in order to ensure compliance with the current legislation of the Russian Federation.
10.2. This Policy is available to the public in the manner determined by the Operator.
10.3. This Policy is effective from the date of its approval and is valid until the new version of the Policy is approved.
Confidentiality of Personal Data.The Operator and other persons who have gained access to personal data are obliged not to disclose it to third parties and not to distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.
Final Provisions.12.1. The User can obtain any clarifications regarding the processing of their personal data by contacting the Operator via email at
8985256@gmail.com.
12.2. This document will reflect any changes in the Operator's personal data processing policy. The policy is valid indefinitely until it is replaced by a new version.
12.3. The current version of the Policy is freely accessible on the Internet at
https://thismywebsite.com/privacy/.