Back to the site

PERSONAL DATA PROCESSING POLICY

1. GENERAL PROVISIONS

1.1. This Personal Data Processing Policy (hereinafter — the Policy) has been drafted in accordance with the requirements of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data” and defines the procedure for processing personal data and measures to ensure the security of personal data obtained by Ryzhova Ksenia Leonidovna, a payer of the professional income tax, [1] Taxpayer Identification Number (TIN) — 352801827759 [2] (hereinafter — the Operator).

The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of privacy, personal and family secrets, to be its paramount goal and condition for carrying out its activities.

1.2. Key terms used in this Policy:

  • Personal Data — any information relating directly or indirectly to a specific or identifiable individual (personal data subject).
  • User — an individual, a personal data subject.
  • Cookies  — small pieces of data related to personal data that are stored in the browser of a computer, mobile phone or other device after the User visits the Site.
  • Automated processing of personal data — processing of personal data using computer technology.
  • Blocking of personal data — temporary suspension of the processing of personal data (except where processing is necessary to clarify personal data).
  • Site  — a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address kseniya-galatea.com [3].
  • Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
  • Depersonalization of personal data  — actions that make it impossible to determine, without using additional information, the ownership of personal data to a specific User or other personal data subject.
  • Processing of personal data  — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
  • Provision of personal data — actions aimed at disclosing personal data to a specific person or an indefinite circle of persons.
  • Dissemination of personal data  — any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or making personal data available to an unlimited number of persons, including publication of personal data in the media, posting in information and telecommunications networks or providing access to personal data in any other way.
  • Destruction of personal data  — any actions as a result of which personal data are destroyed irretrievably with the impossibility of further restoration of the content of personal data in the personal data information system and (or) as a result of which the physical media of personal data are destroyed.

1.3. The personal data subjects whose data are processed by the Operator in accordance with this Policy include:

  1. Clients and counterparties of the Operator (individuals);
  2. Representatives/employees of clients and counterparties of the Operator (legal entities);
  3. Visitors of the Site.

2. PURPOSES AND CONDITIONS FOR PROCESSING PERSONAL DATA AND CORRESPONDING LISTS OF PROCESSED PERSONAL DATA

2.1. Personal data permitted for processing under this Policy are provided by the User voluntarily by filling out the User data form on the Site or by submitting information directly to the Operator via electronic correspondence.

2.2. Personal data of persons specified in subparagraphs 1–2 of paragraph 1.3 of this Policy are processed for the following purposes:

  • Identification of the party within agreements and contracts concluded with the Operator;
  • Provision of services to the User, access to the Site and services;
  • Communication with the User, sending letters to the User at the time of receipt of payment from the User, sending notifications and requests to the User;
  • Settlements with the User within the framework of contracts concluded with him/her;
  • Transfer of the results of contract performance — photographs and/or other works created under contracts concluded between the User and the Operator.

2.3. For the purposes specified in paragraph 2.2 of this Policy, the following personal data of persons specified in subparagraphs 1–2 of paragraph 1.3 of this Policy are processed:

  1. Surname, first name, patronymic (if any);
  2. Contact phone number;
  3. Email address [4];
  4. Residential address;
  5. Taxpayer Identification Number (TIN);
  6. Date of birth;
  7. Passport details;
  8. Position (when processing personal data of employees/representatives of counterparties — legal entities) [5].

2.4. The processing of personal data specified in paragraph 2.3 of this Policy is carried out with the consent of the personal data subject to the processing of his/her personal data, except in cases where the processing of personal data is necessary for the performance of a contract to which the User is a party, beneficiary or guarantor, as well as for the conclusion of a contract on the initiative of the User or a contract under which the User will be a beneficiary or guarantor, and also in cases where the processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or law, to exercise and perform the functions, powers and duties assigned to the Operator by the legislation of the Russian Federation.

2.5. Processing of personal data of persons specified in subparagraph 3 of paragraph 1.3 of this Policy (Site visitors) is carried out for the following purposes:

  • Organizing access to information about the Operator’s activities posted on the Internet;
  • Communication with the User, sending letters to the User at the time of registration on the Site;
  • Promotion of the Operator’s services and informing new clients about the quality of services — providing information about previous work experience when the User posts a review of working with the Operator on the Site;
  • Research and analysis of data to maintain and improve the services and sections of the Site, as well as to develop new services and sections of the Site;
  • Conducting statistical and other research based on anonymized data.

2.6. For the purposes specified in paragraph 2.5 of this Policy, the following personal data of persons specified in subparagraph 3 of paragraph 1.3 of this Policy are processed:

  1. Surname, first name;
  2. Email address;
  3. Phone number;
  4. Cookies. The collection and processing of Cookies is governed by Section 7 of this Policy.

2.7. The processing of personal data specified in paragraph 2.6 of this Policy is carried out with the consent of the personal data subject.

2.8. Consent to the processing of Personal Data is the User’s action of placing a flag (checkmark) next to the field: “I give my consent to the processing of my personal data in accordance with the Personal Data Processing Policy”.

2.9. Consent to the processing of Personal Data, including Cookies, for Users using the Site to obtain information about the Operator’s activities, is the use of the Site and clicking the “OK” button or a similar button in the Cookie collection notice in accordance with this Privacy Policy.

2.10. The personal data specified in paragraphs 2.3 and 2.6 of this Policy are hereinafter collectively referred to as Personal Data.

2.11. Special categories of personal data are not processed.

3. PROCEDURE FOR PROCESSING PERSONAL DATA

3.1. Processing of personal data is performed using automation tools or without the use of such tools. Processing of personal data without the use of automation tools may be carried out in the form of documents on paper and in electronic form (files, databases) on electronic storage media.

3.2. The Operator does not carry out cross-border transfer of personal data.

3.3. The Operator does not transfer personal data to third parties, except for:

  • Cases where transfer is necessary for the performance of a contract with the subject;
  • Cases provided for by law (at the request of state bodies, courts, bodies of inquiry and investigation, other authorized bodies on the grounds provided for by the current legislation of the Russian Federation).

3.4. The Operator and other persons who have obtained access to personal data are obliged not to disclose to third parties or distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.

3.5. The Operator has the right to store (archive storage) and complete documents and personal data.

3.6. The processing period for personal data is until the purposes of processing personal data are achieved. The User may at any time withdraw his/her consent to the processing of personal data by sending a notification to the Operator via email to the Operator’s email address kseniya-75@mail.ru with the subject line “Withdrawal of consent to the processing of personal data”.

3.7. The Operator is obliged to stop processing personal data:

  • In the event of detection of unlawful processing of personal data carried out by the Operator, within a period not exceeding three business days from the date of such detection;
  • In the event of withdrawal by the personal data subject of consent to the processing of his/her personal data;
  • Upon achieving the purpose of processing personal data, and to destroy the personal data within a period not exceeding thirty days from the date of achieving the purpose of processing personal data. If it is impossible to destroy personal data within the specified period, the Operator blocks such personal data and ensures their destruction within a period not exceeding six months, unless another period is established by federal laws.

4. RIGHTS AND OBLIGATIONS OF THE PARTIES

4.1. The Operator has the right to:

  • Receive from the User reliable information containing personal data.

4.2. The Operator is obliged to:

  • Process personal data in accordance with the procedure established by the current legislation of the Russian Federation;
  • Consider the User’s requests regarding the processing of personal data and provide reasoned responses;
  • Take measures to clarify, destroy the User’s personal data in connection with his/her (his/her legal representative’s) request with lawful and reasonable requirements;
  • Organize the protection of personal data in accordance with the requirements of the legislation of the Russian Federation.

4.3. The User has the right to:

  • Receive complete information about his/her personal data processed by the Operator;
  • Request clarification of his/her personal data, their blocking or destruction in cases where the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing;
  • Withdraw consent to the processing of personal data;
  • If the User believes that the Operator processes his/her personal data in violation of the requirements of current legislation or otherwise violates his/her rights and freedoms, the personal data subject has the right to appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects or in court;
  • The User has the right to protect his/her rights and legitimate interests, including compensation for damages and/or compensation for moral damage in court;
  • Exercise other rights provided for by the legislation of the Russian Federation.

4.4. The User is obliged to:

  • Provide the Operator only with reliable information about himself/herself.

5. PROCEDURE FOR HANDLING REQUESTS FROM PERSONAL DATA SUBJECTS

5.1. Persons specified in paragraph 1.3 of this Policy have the right to receive information concerning the processing of their personal data, including:

  1. Confirmation of the fact of processing of personal data by the Operator;
  2. The legal basis and purposes of processing personal data;
  3. The purposes and methods of processing personal data used by the Operator;
  4. The personal data being processed relating to the relevant personal data subject, and the source of their receipt;
  5. The processing periods of personal data, including storage periods;
  6. Information on how the Operator fulfills its obligations established by Article 18.1 of the Federal Law “On Personal Data”;
  7. Other information provided for by the Federal Law “On Personal Data” or other federal laws.

The Operator is obliged to provide the personal data subject or his/her representative with the opportunity to review the personal data relating to that personal data subject free of charge.

5.2. Persons specified in paragraph 1.3 of this Policy have the right to demand from the Operator the clarification of their personal data, their blocking or destruction if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing, as well as to take measures provided for by law to protect their rights.

5.3. The information specified in paragraph 5.1 of this Policy must be provided by the Operator to the personal data subject in an accessible form, and must not contain personal data relating to other personal data subjects, unless there are legal grounds for disclosing such personal data.

5.4. The information specified in paragraph 5.1 of this Policy is provided to the personal data subject or his/her representative within ten business days from the date of the request or receipt by the Operator of the request from the personal data subject or his/her representative. The request must contain:

  1. The number of the main identity document of the personal data subject or his/her representative, information on the date of issue of the specified document and the issuing authority;
  2. Information confirming the participation of the personal data subject in relations with the Operator (contract number, date of conclusion of the contract, conventional verbal designation and/or other information), or information otherwise confirming the fact of processing of personal data by the Operator;
  3. The signature of the personal data subject or his/her representative. The request may be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.

5.5. If inaccuracies are found in the personal data, the User may update them independently by sending a notification to the Operator’s email address kseniya-75@mail.ru with the subject line “Updating personal data”. Within a period not exceeding seven business days from the date the personal data subject or his/her representative provides information confirming that the personal data are incomplete, inaccurate or outdated, the Operator is obliged to make the necessary changes to them.

5.6. Within a period not exceeding seven business days from the date the personal data subject or his/her representative provides information confirming that such personal data were illegally obtained or are not necessary for the stated purpose of processing, the Operator is obliged to destroy such personal data. The Operator is obliged to notify the personal data subject or his/her representative of the changes made and the measures taken.

6. MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA DURING THEIR PROCESSING

6.1. The security of personal data processed by the Operator is ensured by implementing the legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.

Such protective measures include, in particular:

  • Use of antivirus information protection tools;
  • Identification and authentication of the user when entering the information system by password;
  • Restriction of access of unauthorized persons to premises intended for processing personal data;
  • Storage of personal data on protected media;
  • Detection of unauthorized access to personal data and taking measures, including measures to detect, prevent and eliminate the consequences of cyberattacks on personal data information systems and to respond to computer incidents in them;
  • Restoration of personal data modified or destroyed as a result of unauthorized access to them.

6.2. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized persons from accessing personal data.

7. COOKIES

7.1. The following cookies are collected on the Site:

7.1.1. Technical cookies  — collection of these files cannot be prohibited when visiting, as they are necessary for the proper operation and provision of the full functionality of the Site;

7.1.2. Analytical cookies  — collected through web analytics tools for the purpose of general analysis of the use of the Site and obtaining data on User actions on the Site to improve its functionality:

  • IP address;
  • Browser information;
  • Time of access;
  • Referrer (address of the previous page) [6].

7.2. Purposes of collecting cookies:

  • Authentication of Site Users;
  • As an element of security measures used to protect user accounts, including preventing fraudulent use of login credentials, as well as protecting the Site as a whole;
  • For data analytics purposes [7].

7.3. How to block the collection of cookies on the Site:

7.3.1. If the User does not want cookies to be stored on his/her device, this option can be disabled in the browser settings. Stored cookies can also be deleted at any time in the system settings of the browser. The User may change the browser settings to accept or reject all cookies or cookies from the Site by default.

7.3.2. PLEASE NOTE THAT BY DISABLING COOKIES, THE USER WILL NOT BE ABLE TO USE SOME FUNCTIONS AND TOOLS OF THE SITE.

The processing of Cookies is carried out for statistical or other research purposes, provided that personal data is necessarily anonymized.

8. FINAL PROVISIONS

The User may obtain any clarification on issues of interest regarding the processing of his/her personal data by contacting the Operator via email at kseniya-75@mail.ru.

This document will reflect any changes to the Operator’s personal data processing policy. The Policy is valid indefinitely until replaced by a new version.

The current version of the Policy is freely available on the Internet at kseniya-galatea.com.


Privacy policy
Site by wfolio
This site uses cookies for site functionality and traffic analysis. Privacy policy