Regulation on the personal data of site users
1. Terms and definitions
1.1. Processing personal data – any action (operation) or set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
1.2. Operator – an organization that independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.
The operator is the Joint-Stock Company ECOS-1 – 107023, Moscow, ul. Elektrozavodskaya, d. 24, p. 3.
1.3. Personal data – any information relating directly or indirectly to a specific or determined individual (the subject of personal data).
1.4. User – an individual who accesses the services of the Site via the Internet.
1.5. Website – a set of programs for electronic computers and other information contained in an information system, access to which is provided through the information and telecommunications network Internet.
The Site in these Regulations means the Site located on the Internet at: http://www.ekos-1.ru .
1.6. Federal Law – Federal Law of July 27 , 2006 N 152-ФЗ “On Personal Data”.
2. General Provisions
2.1. The Regulation on the personal data of the Users of the Site (hereinafter – the Regulation) is developed in accordance with the current legislation of the Russian Federation in the field of protection of personal data and establishes the procedure for processing personal data of Users, the rights and obligations of Users and the Operator.
2.2. The Regulation has been developed in order to comply with the requirements of the current legislation of the Russian Federation on personal data and the identification of Users.
2.3. The objectives of this Regulation are:
– ensuring the protection of the rights and freedoms of man and citizen in the processing of his personal data, including the protection of rights to privacy, personal and family secrets;
– the exclusion of unauthorized actions of the Operator’s employees and any third parties to collect, systematize, accumulate, store, clarify (update, change), personal data, other forms of unlawful interference with the Operator’s information resources and local computer network, and ensure the privacy of users’s personal data.
2.4. Processing of Users personal data is carried out in compliance with the principles and rules provided for by this Regulation and the current legislation of the Russian Federation.
The processing of personal data is allowed in the following cases:
– the processing of personal data is carried out with the consent of the User to the processing of his personal data;
– the processing of personal data is necessary for the use of the Site by the User;
– the processing of personal data is necessary to protect the life, health or other vital interests of Users, if obtaining consent is not possible;
– the processing of personal data is necessary to exercise the rights and legitimate interests of the Operator or third parties or to achieve socially significant goals, provided that this does not violate the rights and freedoms of Users;
– personal data is being processed, access to an unlimited number of persons to which is provided by the User or at his request (personal data made publicly available by the User).
3. Processing of personal data
3.1. The processing of Users personal data is carried out in order to establish feedback with the User, including sending notifications, requests regarding the use of the Site, the provision of services, processing requests and applications from the User.
3.2. The Operator receives the User’s personal data directly from the User. The user decides to provide his personal data and agrees to their processing freely, by his own will and in his interest.
3.3. The processing of Users personal data can be carried out by the Operator in any legal way, including in personal data information systems using automation tools or without using such tools.
3.4. The list of processed personal data of Users:
- Surname,
- Name,
- Middle name,
- Position,
- Company,
- Mobile phone,
- E-mail address.
The specified data is provided by the User when adding a message to the Site.
3.5. The processing of personal data in order to promote goods, works, services on the market through direct contacts with a potential consumer using the means of communication is allowed only with the prior consent of the User.
3.6. The right to access the personal data of Users is possessed by persons vested with appropriate authority in accordance with their official duties. The list of persons having access to the personal data of Users is approved by the head of the Operator.
3.7. The Operator does not transfer personal data to third parties without the consent of the User, with the exception of cases provided for by the current legislation of the Russian Federation, and does not entrust the processing of personal data to third parties.
3.8. The confidentiality mode also applies to data that is automatically transferred to the Site services in the course of their use using the software installed on the User’s device, including the IP address, cookie data, information about the User’s browser (or other program through which access is made to services), technical specifications of equipment and software used by the User, date and time of access to services, addresses of requested pages and other similar information.
4. Rights and obligations of the User
4.1. The User has the right to receive from the Operator, when he personally addresses him or when the Operator receives a written request from the User, the following information regarding the processing of his personal data, including containing:
– confirmation of the fact of processing personal data by the Operator;
– legal grounds and goals for the processing of personal data;
– goals and methods used by the Operator to process personal data;
– the name and location of the Operator, information about persons (with the exception of the operator’s employees) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Operator or on the basis of federal law;
– processed personal data related to the relevant subject of personal data, the source of their receipt, unless otherwise provided for by federal law;
– terms for processing personal data, including periods for their storage;
– the procedure for the exercise by the subject of personal data of the rights provided for by the Federal Law;
– information on completed or proposed cross-border data transfer;
– name or surname, name, patronymic and address of the person who processes personal data on behalf of the Operator, if processing is or will be entrusted to such a person;
– other information provided for by the Federal Law or other federal laws.
4.2. The user has the right to receive the information specified in clause 4.1. of these Regulations, with the exception of cases provided for by Part 8 of Art. 14 of the Federal Law.
4.3. The User has the right to require the Operator to clarify his personal data, block it or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take measures prescribed by law to protect their rights.
4.4. If the User considers that the Operator is processing his personal data in violation of the requirements of the Federal Law or otherwise violates his rights and freedoms, the User has the right to appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects or in court.
4.5. The user of personal data has the right to protect his rights and legitimate interests, including compensation for losses and (or) compensation for non-pecuniary damage in court.
4.6. The user is obliged to provide information about personal data necessary to use the services of the Site.
5. Rights and obligations of the Operator.
5.1. When processing personal data of the User, the Operator is obliged to take the necessary legal, organizational and technical measures or to ensure their adoption to protect personal data from unlawful or accidental access to it, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other illegal actions regarding personal data.
5.2. The operator must inform in the manner prescribed by Art. 14 of the Federal Law, to the User information on the availability of personal data related to him, as well as to provide the opportunity to familiarize themselves with these personal data when contacting the User or within thirty days from the date of receipt of the request.
5.3. In case of refusal to provide information on the availability of personal data about the relevant User or personal data to the User when they are contacted or upon receipt of the User’s request, the Operator must give a reasoned response in writing containing a reference to the provision of part 8 of Art. 14 of the Federal Law or other federal law, which is the basis for such a refusal, within a period not exceeding thirty days from the date the Users contacted or from the date of receipt of the request.
5.4. The operator is obliged to provide the User with the opportunity to familiarize themselves with the personal data related to this User.
In a period not exceeding seven business days from the date the User submits information confirming that the personal data is incomplete, inaccurate or irrelevant, the Operator is obliged to make the necessary changes to them.
Within a period not exceeding seven business days from the date the User submits information confirming that such personal data is illegally obtained or is not necessary for the stated processing purpose, the Operator is obligated to destroy such personal data. The Operator is obliged to notify the User of the changes and measures taken and take reasonable measures to notify third parties to whom the personal data of this User was transferred.
5.5. In the event that unlawful processing of personal data is detected upon the User’s appeal, either at the request of the User or the authorized body for the protection of the rights of personal data subjects, the Operator is obliged to block the illegally processed personal data relating to this User from the moment of such treatment or upon receipt of the specified request for a period checks. In the event that inaccurate personal data is detected during the User’s request, either at their request or at the request of the authorized body for the protection of the rights of personal data subjects, the Operator is obliged to block personal data related to this User from the moment of such treatment or when the request is received for the verification period, if blocking personal data does not violate the rights and legitimate interests of the User or third parties.
5.6. In case of confirmation of the inaccuracy of personal data, the Operator, on the basis of information provided by the User or the authorized body for the protection of the rights of subjects of personal data, or other necessary documents, is obliged to clarify personal data within seven business days from the date of submission of such information and to remove the blocking of personal data.
5.7. In the event that unlawful processing of personal data is carried out by the Operator, the Operator shall, within a period not exceeding three business days from the date of this identification, be obliged to stop the unlawful processing of personal data. In the event that it is impossible to ensure the legitimacy of the processing of personal data, the Operator shall be obligated to destroy such personal data within a period not exceeding ten business days from the date of detection of the illegal processing of personal data. The Operator is obliged to notify the User about the elimination of the violations committed or about the destruction of personal data, and if the user’s request or the request of the authorized body for the protection of the rights of personal data subjects was sent by the authorized body for the protection of the rights of personal data subjects, the specified body also.
5.8. If the goal of processing personal data is achieved, the Operator must stop processing personal data and destroy personal data within the time period established by the current legislation of the Russian Federation.
5.9. If the User withdraws consent to the processing of his personal data, the Operator is obliged to stop processing it and, if personal data is no longer required for the processing of personal data, destroy personal data within the time period established by the current legislation of the Russian Federation.
5.10. The operator is obliged to ensure the confidentiality and security of personal data during their processing in accordance with the requirements of the current legislation of the Russian Federation.
5.11. The operator is obliged not to disclose to third parties and not to distribute personal data without the consent of the User, unless otherwise provided by federal law.
6. Final Provisions
6.1. Persons guilty of violating the requirements of this Regulation shall be liable under the applicable laws of the Russian Federation.
6.2. In the event of a change in the current legislation of the Russian Federation, this Regulation shall apply in so far as it does not contradict the current legislation.
6.3. The conditions of this Regulation are established, changed and canceled by the Operator unilaterally without prior notice to the User. From the moment of posting on the Website of the new version of the Regulation, the previous version is considered to have lost its force. In the event of a significant change in the terms of this Agreement, the Operator shall notify the Users of this by posting a corresponding message on the Site.