Personal Data Processing Policy
This Personal Data Processing Policy (hereinafter referred to as the Policy):
- applies to all information posted on the website in on the Internet at: (hereinafter referred to as the Site) during the use of the Site, its services, programs and products;
- defines the conditions of personal data processing, rights and obligations. responsibilities of the User and Operator, information about the implemented measures to protect the personal data being processed.
In case of disagreement with the terms of the Policy, the User must immediately stop any use of the Site and its services, programs and products.
Terms and definitions
Personal data — information related to directly or indirectly to a specific or identifiable physical person to the person (the subject of personal data).
Personal information — information that The user provides information about himself during registration (creating an account) or in the process of using the Services, including the User's personal data. — data that They are automatically transferred to the Site's services during their operation. for use with the User's device installed software, including IP address, file data cookies, information about the User's browser (or other program, with which is used to access the services), technical hardware and software specifications, used by the User, date and time of access to the services, the addresses of the requested pages and other similar information.
The subject of personal data —The Site User, its services, programs, and products.
Personal Data Operator (operator) — Individual entrepreneur Kraichik Georgy Ilyich (IP Kraichik Geogiy Ilyich), registered in the unified register of individual entrepreneurs under the number 319784700137132, who processes personal data, as well as determining the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data.
Processing of personal data — any action (operation) or a set of actions (operations) with personal data data transactions carried out with or without automation tools. The processing of personal data includes self, including: collection; recording; systematization; accumulation; storage; refinement (updating, modification); extraction; use; transfer (distribution, provision, access); depersonalization; blocking; deletion; destruction.
Automated processing of personal data — processing of personal data by means of computing techniques.
Dissemination of personal data — actions, aimed at the disclosure of personal data to an unspecified a circle of people .
Provision of personal data — actions, aimed at disclosing personal data to a specific person or a certain circle of people.
Blocking of personal data — temporary termination of personal data processing (except in the following cases, if the processing is necessary to clarify personal data).
Destruction of personal data — actions that make it impossible to restore the content personal data in the personal data information system and (or) as a result of which the material media is destroyed personal data.
Depersonalization of personal data — actions that make it impossible without using additional information to determine the ownership of personal data personal data to a specific personal data subject.
Personal Data Information System — the totality of personal data contained in the databases and information technologies and technical means that ensure their processing.
Legal grounds for personal data processing
- Federal Law of the Russian Federation dated 27.07.2006 No. 149-FZ "On Information, information technology and information security".
- Other Federal laws and regulations adopted on their basis legal acts regulating the Operator's activities.
- Contracts concluded between the Operator and the subject of personal data data.
- Local legal acts of the Operator.
- Consent to the processing of personal data (in cases not explicitly stated provided for by the legislation of the Russian Federation, but relevant operator's authority).
Rights and obligations of the parties
The User has the right to:
- Independently, freely, and in your own interests, make a decision about using the Website and providing personal data.
- Get information from the Operator about the processing methods personal data
- Notify the Operator of the need for clarification or additions personal data
- Revoke consent to the processing of personal data
- Request the deletion of personal data, except for personal data that the Operator is required to process in accordance with the Legislation of the Russian Federation.
The operator has the right to:
- Assign the processing of personal data to another person with the consent of the subject of personal data, unless otherwise provided by federal law, on the basis of a contract concluded with this person the agreement. The person who processes personal data based on on behalf of the Operator, it is obliged to comply with the principles and rules processing of personal data provided for by the Federal Law the Law "On Personal Data".
- The Company has the right to make changes to this Policy at any time in accordance with in accordance with the changing requirements of the Legislation of the Russian Federation Federation, with prior notification to the User.
The user must:
- Provide complete and reliable information about personal data required to use the Website.
- Update and supplement the information provided about personal data data in case of a change in this information.
- In the case of providing the Operator with personal data of another the person and the use of the Site on his behalf, bear full responsibility for responsibility for the fact that the person or persons whose personal data the User provided the data, is aware of it, understands and agree with how the Operator uses their data (in accordance with this Policy).
The operator must:
- To use the information received solely for the purposes of, specified in this Policy.
- To provide the personal data subject, upon his request , with information regarding the processing of his personal data.
- Ensure that confidential information is kept confidential and not disclosed without prior written permission The User, not to sell, exchange, publish or disclosure of transferred personal data in other possible ways User data, except as provided by this Policy. Politics.
- Take all necessary precautions to protect yourself confidentiality of the User's personal data.
- To block and destroy personal data, related to the corresponding User, from the moment of the request or a User request.
Purposes of personal data processing
Personal data | Personal data category | Category of personal data subjects | Purpose of personal data processing |
|---|---|---|---|
Full name, Phone number, Email address, Location, Data social media accounts | General | Clients and counterparties (individuals), Representatives or employees of clients and counterparties | Establishing feedback with the User, including sending notifications and requests regarding usage Website, provision of educational services and information and consulting services, request processing and requests from the User. |
IP address, Cookies, Information about the User's browser | General | Clients and counterparties (individuals), Representatives or employees of clients and counterparties | Ensuring Website performance |
Cookies | General | Clients and counterparties (individuals), Representatives or employees of clients and counterparties | Statistical and other studies based on depersonalized information |
FULL name, Phone number, Email address | General | Clients and counterparties (individuals), Representatives or employees of clients and counterparties | Conducting promotional and informational newsletters with the consent of The user |
Name, email address, phone number, all details, which are listed in the VKontakte social network account (if registration is carried out by authorization via social network or other electronic service) | General | Clients and customer representatives | Registration on the Website |
Voice recording during phone conversations | Biometric | Clients and counterparties (individuals), Representatives or employees of clients and counterparties | User consultation, as well as quality improvement customer service, subject to the User's consent |
Name, Image, User Information specified in section “About me” | General | Clients | Displaying a User's profile and achievements for others registered Users of the Site |
Consent to the processing of personal data
Terms of Consent:
- The User is a legally capable and adult person and provides complete and reliable personal data.
- If the User is not legally capable and as an adult, consent to the processing of Personal data the data is provided by the User's legal representative.
- The operator does not verify the authenticity of the provided data. By the user of personal data.
- The user is responsible for updating personal data. data, if it is changed.
- The User's consent is specific, substantive, informed, conscious, and unambiguous.
Выражением согласия на обработку персональных данных является:
- Filling out the feedback form, including the application for training, requests for the use of other Site services. Consent to processing of your personal data entered in the fields of the form feedback is considered provided at the time of clicking the button confirming the submission of the application (the buttons may be called “Get a consultation“, ”Waiting for a call“ and other similar in this way), as well as putting a check mark in the checkbox “I agree for the processing of personal data.”
- Making a call to the Operator and continuing the conversation with representatives of the Operator.
Procedure and conditions of personal data processing
- Consent to the processing of personal data begins to take effect from the date of such consent and during the term, necessary to achieve the purposes of personal data processing, including the fulfillment of obligations or until the time of withdrawal By the User of the specified consent, unless otherwise provided The legislation of the Russian Federation.
- The Operator processes personal data using automated systems, except in cases where non-automated processing of personal data is necessary in in connection with the fulfillment of legal requirements.
- The Operator uses databases to process personal data., which are located only on the territory of the Russian Federation.
- The processing of personal data by the Operator includes: collection, recording, systematization, accumulation, storage, refinement (update, change), extraction, use, transfer (provision to third parties), depersonalization, blocking, deletion, destruction.
- In relation to the User's personal data, their confidentiality, except in cases of voluntary provision By the user of information about himself for general access an unlimited number of people.
- The operator takes the necessary organizational and technical measures. measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties. Personal data includes only employees who have the appropriate access rights education in the field of personal data.
- The operator ensures control over the measures taken to ensuring the security of personal data and the level of security of personal data information systems.
- Personal data is stored for a period of, established by the legislation of the Russian Federation on education and archival business.
Provided by the User in accordance with this Politics consent to the processing of personal data may be given at any time. the moment was revoked by the User. The operator stops processing personal data in cases where:
- The user sent a corresponding statement about the review. consent to the processing of personal data and the requirement to when sent to an e-mail address: . with the subject of the letter “Personal data processing”.
- The storage period for personal data has expired.
- The goals of personal data processing have been achieved.
Transfer of personal data to third parties
The Operator has the right to transfer the User's personal data from his consent to third parties (Partners) for the purpose of:
- ensuring the fulfillment of obligations to Users, including including within the framework of the concluded agreement for the provision of educational services services. The amount of data transmitted is determined by the conditions contracts;
- providing simple and convenient User access to all Operator's events;
- timely information about innovations and opportunities in in the field of education;
- optimization of newsletters of informational and advertising nature;
- compliance with the requirements of the current legislation of the Russian Federation.
The transfer of personal data to Partners is carried out only if the following conditions are met:
- Relevant Agreements have been concluded between the Partner and the Operator for the transfer of personal data;
- The Partner processes personal data using databases on the territory of the Russian Federation;
- The partner ensures complete confidentiality of personal data. processing of personal data and has no right to their further transfer and distribution;
- The Partner guarantees compliance with the following security measures security of personal data during their processing: use information security tools; detection and recording of facts unauthorized access to personal data and acceptance measures to restore personal data; restriction of access to personal data; registration and accounting of actions with personal data data; monitoring and evaluation of the effectiveness of measures applied to ensuring the security of personal data.
Updating, correction, deletion and destruction of personal data data
The Operator undertakes to:
- Provide at the request of the User in accordance with the procedure established in Article 14 of Federal Law No. 152 “On Personal Data” information about the availability of personal data related to this To the user, as well as to provide an opportunity to get acquainted with with this personal data within 10 (ten) days from the date of receiving the request. The specified period may be extended, but not for more than 5 (five) business days after being sent to the User's address is a reasoned notification indicating the reasons extension of the term.
- Make necessary changes to the User's personal data within a period not exceeding 7 (seven) business days from the date of providing the User with information confirming that personal data is incomplete, inaccurate, or outdated.
- Destroy the User's personal data within a period not exceeding 7 (seven) business days from the date of submission By the User of information confirming that such personal data is the data illegally obtained or is it not necessary for the stated purpose of processing.
- Notify the User about the changes made and the actions taken take appropriate measures and take reasonable steps to notify third parties, to whom this User's personal data has been transferred.
- To clarify personal data, or to ensure their clarification in in case of confirmation of the inaccuracy of personal data based on information provided by the User, or the authorized body for the protection of the rights of personal data subjects data or other necessary documents within 7 (seven) days working days from the date of submission of such information and withdraw blocking of personal data.
- Inform the authorized body for the protection of the rights of subjects personal data at the request of this authority. information within 10 (ten) business days from the date of receipt such a request. The specified period may be extended, but no more for less than 5 (five) business days in case of referral by the operator to address of the authorized body for the protection of the rights of subjects personal data of a reasoned notification indicating the reasons for extending the deadline for providing the requested information.
- Terminate the processing of personal data or provide termination of processing of personal data by Partners in case of:
- identification of unlawful processing of personal data in a period not exceeding 3 (three) business days from the date of this identifications;
- withdrawal of the User's consent to the processing of his personal data data
- destroy or ensure the destruction of personal data in a period not exceeding 30 (thirty) days from the date of receipt the specified review, unless otherwise agreed between the operator and the subject of personal data , or if the operator does not have the right to process personal data without consent the subject of personal data on the grounds provided for by federal laws;
- appeals of the personal data subject to the operator with the requirement to terminate the processing of personal data The operator is obliged to work within a period not exceeding 10 (ten) working days. days from the date of receipt by the operator of the corresponding requirements, stop processing them, or provide termination of such processing (if such processing is carried out by the person who processes personal data. data);
- to achieve the purpose of processing, destroy or provide destruction of personal data within a period not exceeding 30 (thirty) days from the date of achievement of the purpose of processing personal data.
- Block or enforce the blocking of personal data The User, in the absence of the possibility of their destruction, and ensures the destruction of personal data within a period of no more than 6 (six) months, unless another period is established by federal laws. laws.
- Notify Roskomnadzor if the fact is established unlawful or accidental transfer (provision, dissemination, access) of personal data, resulting in violation of the rights of personal data subjects:
- within 24 hours, about the incident that occurred, about the alleged causes that led to the violation of the rights of the subjects personal data, and the alleged harm caused the rights of personal data subjects, on the measures taken to elimination of the consequences of the relevant incident.
- Within 72 hours of the results of the internal investigation the identified incident, as well as provides information about the persons whose actions caused the identified incident (if available).
User requests
If the User has any questions, requirements, or requests. regarding the processing of personal data, including recall consent to their processing, or for any other issue is necessary send your request by e-mail: .
The request must be sent from an email address., provided by the User to the Operator on the website or in the contract in as an authorized email address.
Change of personal data processing policy
- The Operator has the right to make changes to the Policy at any time from the purpose of compliance with the requirements of the legislation of the Russian Federation.
- The Operator undertakes not to make changes to the Policy aimed at to restrict User rights.
- The new version of the Policy comes into force from the moment it is posted. on the website . Continued use of the Site or its services after The publication of a new version of the Policy means its full acceptance. conditions By the user.
- In case of disagreement with the new version of the Policy, the User must immediately stop using the Site and its services.