Personal Data processing policy

  • General provisions
    • This Personal Data Processing Policy (hereinafter referred to as the "Policy") has been compiled in accordance with the requirements of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" and defines the procedure and conditions for processing Personal Data and measures to ensure the security of Personal Data of Site Visitors.
    • The purpose of this Policy is to ensure the protection of human and civil rights and freedoms when processing Personal Data, including the protection of the rights to privacy, personal and family secrets, as well as ensuring that the Operator's activities in relation to the Visitor comply with the requirements of the legislation of the Russian Federation.
    • This Policy applies to all Personal Data that the Operator may receive about Site Visitors and is valid indefinitely.
    • The registration of a Visitor on the Site with the obligatory marking of agreement with the terms of this Policy, as well as the actual use of the Site and the functionality of the Site, means that the Visitor has read and agrees with this Policy, has undertaken to comply with its terms in full (accepted the public offer), and has also consented in writing to the processing of his Personal data of the Operator. The Visitor's consent to this Policy is also indicated by filling out the appropriate special forms on the Website and (or) sending their Personal Data to the Operator.
    • The Operator has the right to unilaterally change the terms of this Policy at any time. Such changes shall take effect after 3 (Three) days from the date of posting the new version of the Policy on the Website, unless another deadline for the entry into force of the new version of the Policy is determined by the Operator at the time of its publication. It is the Visitor's responsibility to regularly review the current version of the Policy. If the Visitor does not agree with the changes made, he is obliged to refuse access to the Site and stop using the services and services of the Site. Using the Site after the new version of the Policy comes into force means that the Visitor agrees with it and fully applies the provisions of the new version of the Policy.
    • The processing of Personal Data is based on the following principles:
  • TERMS AND DEFINITIONS
  • CONSENT TO THE PROCESSING OF PERSONAL DATA
    • The User's acceptance of the terms of this Policy (clause 1.4) indicates the following:
      • The User consents to the processing of Personal Data by the Operator;
      • personal data, as well as consent to their processing, are provided by the Visitor to the Operator consciously and voluntarily.;
      • The Visitor consents to the processing of Personal Data by the Operator for the purposes set out in this Policy.;
      • The Visitor consents to the Operator to use third parties to process his Personal Data.;
      • The Visitor acknowledges the publicly available nature of his Personal Data provided by him in the reviews and comments on the Site, and unconditionally agrees to their provision on the Site to an unlimited number of people.;
      • The Visitor is aware that third parties may gain access to Personal Data and process the Visitor's Personal Data as a result of Website failures, virus or hacker attacks, technical malfunctions and other circumstances, and therefore undertakes not to make claims to the Operator related to such circumstances.
      • The Visitor agrees to transfer Personal and other data to persons who have concluded contracts with the Operator, as well as to other third parties, including, but not limited to, for the purposes of their processing, to ensure the functioning of the Site.
    • The Visitor's consent to the processing of Personal Data by the Operator is valid indefinitely. The storage of Personal Data is carried out by the Operator indefinitely.
    • The Visitor can revoke his consent to the processing of Personal Data at any time by sending an e-mail notification to the Operator's postal address. info@eriskip.ru
    • When Personal Data is changed and/or supplemented, the consent to the processing of the Visitor's Personal Data also applies to the modified (supplemented) Personal Data of the Visitor.
    • The Visitor agrees that by providing them with information about themselves personally when using the Site, in particular when leaving information in reviews and comments, Personal Data is distributed and transmitted to an unlimited number of people.
    • The Site Visitor has the right, at his discretion, at any time to delete his personal information by deleting it using the interface of the personal cabinet of the Visitor's account.
    • The Visitor has the right to require the Operator to clarify his Personal Data, block or destroy them if the Personal Data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as to take other measures provided for by the legislation of the Russian Federation to protect their rights.
    • The Visitor has the right to send an e-mail to the Operator info@eriskip.ru request for information about the processing of Personal Data, including confirmation of the fact of processing Personal Data, the legal grounds for processing, the purposes and methods used for processing Personal Data, the sources of Personal Data, the timing of Personal Data processing, and the procedure for exercising rights provided for by the legislation of the Russian Federation on the protection of personal data, about persons to whom Personal Data may be disclosed on the basis of an agreement with the Operator or in accordance with the law, as well as other information provided for by the current legislation of the Russian Federation.
  • The Visitor's right to change, delete, or block personal information may be limited by the requirements of the legislation of the Russian Federation.
  • PROCEDURE, PURPOSES AND CONDITIONS OF PERSONAL DATA PROCESSING
    • The Visitor's personal data is processed by the Operator for the following purposes:
      • ensuring the Visitor's access to the Site and using the functionality of the Site, services and services of the Site, including the personal account;
      • processing requests for a commercial offer
      • collecting information that helps to improve the quality of the Site;
      • informing the Visitor about new products, services, changes, additions, and updates to the Site;
      • compliance with the requirements of the legislation of the Russian Federation
      • protecting the privacy of the User's account when working with the Website functionality;
      • implementation of actions aimed at preventing fraud, cyber-attacks and other abuses, as well as to investigate such cases.
    • The Operator processes the following Personal Data of the Visitor:
      • information provided by the Visitor during account registration and subsequent updating of registration data: last name, first name, patronymic (if any), email address, phone number;
      • data related to the Visitor's activity as an individual entrepreneur, which also makes it possible to identify the Visitor as an individual (OGRNIP, INN, etc.)
      • information provided by the Visitor when using the Site and its functionality, personal account, services and services of the Site, including by entering information into the application forms for a commercial offer, surveys, feedback forms, posting reviews, messages, during correspondence, telephone conversations with the support service and the Operator's staff, etc.;
      • data obtained as a result of the User's use of the Site, personal account, services and services of the Site: date and time of account registration; dates and times of Site visits; data on Site usage (about pages viewed, link clicks, search queries, orders sent, the Visitor's region and country, etc.); data on technologies used by the Visitor to access the Site (about the Internet service provider, IP address, characteristics and settings used to access the Site of electronic devices and software, cookies).
    • The Operator uses the Personal Data received from the Visitor to improve the quality of the Site's services and services, to enable the Visitor to interact with the Site, to create new services and services, to ensure the security of the Site and Visitors, and to improve the Site's functionality.
    • The Operator does not disclose the Visitor's Personal Data to third parties who are not affiliated with the Operator and are not Visitors to the Site, except in the following cases:
  • PERSONAL DATA PROTECTION.
    • The Operator is obliged to take measures necessary and sufficient to ensure the fulfillment of obligations stipulated by the legislation of the Russian Federation on the protection of personal data.
  • DISPUTE SETTLEMENT PROCEDURE.
    • In all matters not regulated by this Policy, the Parties are guided by the current legislation of the Russian Federation. The applicable law is the substantive and procedural law of the Russian Federation.
  • legality of the purposes and methods of Personal Data processing;
  • integrity of the subjects of Personal data processing;
  • compliance of the purposes of Personal Data processing with the purposes pre-defined and declared during the collection of Personal Data;
  • compliance of the volume and nature of Personal Data processed, methods of Personal Data processing with the purposes of Personal Data processing;
  • the reliability of Personal Data, their relevance and sufficiency for the purposes of processing, the inadmissibility of excessive processing in relation to the purposes of collection of personal data
  • the legitimacy of organizational and technical measures to ensure the security of Personal data;
  • continuous improvement of the level of knowledge in the field of ensuring the security of Personal Data during their processing;
  • destruction or depersonalization of Personal Data upon achievement of the purposes of processing or in case of loss of the need to achieve them, unless otherwise provided by the current legislation of the Russian Federation;
  • striving for continuous improvement of the personal data protection system.

A website is a complex of interconnected web pages representing a set of information expressed in text, graphic, audiovisual and other forms, providing interaction with it on the ITS "Internet" within the domain zone https://eriskip.com , as well as providing the Visitor with the opportunity to get acquainted with the Operator's activities, the characteristics of the goods and services they sell, and the terms of cooperation.

ITS "Internet" is an information and telecommunication network "Internet", which is a worldwide system of interconnected devices providing information storage and transmission.

The operator is the owner of the website https://eriskip.com , which is the Limited Liability Company Eris KIP (TIN 5920029909, OGRN 1085920001188, address: 617761, Perm Krai, Tchaikovsky, Promyshlennaya str., 8/31, e-mail: info@eriskip.ru ), which provides hosting services.

A visitor is any person who has gained access to the Site using ITS "Internet".

The parties are the Operator and the Visitor.

Personal data is any information related directly or indirectly to a specific or identifiable Site Visitor.

Personal data processing is any action (operation) or set of actions (operations) performed using automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion and destruction of personal data.

  • if the Visitor has expressly provided his consent to this to the Operator (the list of cases in respect of which the Operator has received the written consent of the Visitor is set out in clause 3.1. of this Policy) or has otherwise expressed his consent;
  • provision of the Visitor's personal data to legal entities and (or) individuals, government organizations, bodies and their representatives who are not contractors of the Operator, in cases where the receipt, use, storage, disclosure and other use of the Visitor's Personal Data by these persons is necessary in order to comply with the requirements of legislation, judicial or other decision of the authority;
  • providing personal data of the Visitor for the purpose of: ensuring that the Visitor enforces the rules, conditions, and obligations related to the User's use of the Site's functionality, as well as its services and services; resolving disputes and issues, claims made by both the Visitor and third parties against him; consideration by the Operator of the facts of violations by the Visitor of the terms of use of the Site, other regulatory documents of the Operator; prevention, detection, suppression or otherwise hindering fraud and other illegal actions; elimination of technical problems, security problems; protection of the rights, property or safety of the Operator, other Visitors to the Site; protection of the rights and safety of society as a whole, as required and allowed by the legislation of the Russian Federation.
    • The Operator collects Personal Data by providing such data to the Visitor (when filling out forms on the Website, using communication tools, etc.), as well as automatically (using technologies and services: web protocols, cookies, web tags, etc.).
    • The Operator stores Personal Data exclusively on properly protected electronic media, including electronic ones, using automated processing (on the Website), except in cases where non-automated Processing is necessary in connection with compliance with the requirements of the legislation of the Russian Federation, as well as using databases located on the territory of the Russian Federation.
    • The Operator destroys Personal Data if there is a threat to the security of the Site; after the expiration of the storage period of Personal Data; at the request of the Visitor.
    • The Operator deletes all information received from the Visitor when the User withdraws consent to the processing of Personal Data. The User's right to use the Site is terminated.
    • The Operator has the right to temporarily stop processing Personal Data, so block the processing (except in cases where the processing is necessary to clarify Personal Data).
    • The Operator independently determines the composition and list of measures necessary and sufficient to ensure the protection of personal data of Visitors.
    • In most cases, personal information is processed automatically without access to it by any of the Operator's employees. If such access is needed, it can be provided only to those employees of the Operator who need it to perform their tasks. To protect and ensure the confidentiality of data, all employees of the Operator act in accordance with internal rules and procedures regarding the processing of personal information. They also follow all technical and organizational security measures in place to protect personal information. The Operator has implemented sufficient technical and organizational measures to protect personal information from unauthorized, accidental or unlawful destruction, loss, alteration, misuse, disclosure or access, as well as other illegal forms of processing. These security measures were implemented taking into account the state-of-the-art technology, the cost of their implementation, the risks associated with the processing and nature of personal information.
    • The measures to protect the Personal Data of Visitors carried out by the Operator include:
      • application of legal, organizational and technical measures to ensure the security of personal data;
      • implementation of internal control over the compliance of Personal Data processing with the legislation of the Russian Federation and Personal data protection requirements;
      • familiarization of the Operator's employees with the provisions of the legislation governing the processing and protection of Personal Data, as well as with the Operator's internal documents defining the policy in the field of personal data processing.
    • The measures to ensure the security of Personal Data of Visitors implemented by the Operator within the framework of the Personal data protection system include:
  • development and timely updating of local regulations governing the processing of Personal data;
  • appointment of a person responsible for the organization of Personal data processing;
  • periodic verification of compliance with the requirements of the law on personal data processing;
  • identification and authentication of Visitors;
  • managing User access to access objects;
  • limitation of the software environment;
  • protection of machine storage media on which Personal Data is stored and/or processed;
  • registration of security events, as well as identification of incidents that may lead to failures or disruption of the functioning of the information system and (or) to threats to the security of Personal Data, and responding to them;
  • antivirus protection; o intrusion detection (prevention);
  • control (analysis) of personal data security;
  • ensuring the integrity of the information system and Personal Data;
  • protection of technical means;
  • backup and recovery of Personal Data;

protection of the information system, its facilities, communication and data transmission systems.

  • The composition and content of measures to ensure the security of Personal Data necessary to ensure each of the levels of Personal Data security are determined by the Operator independently.
  • Compliance with the claims procedure for dispute resolution is mandatory. The Party requesting actions from the other Party is obliged to send a written claim with a list of requirements, a regulatory justification for the requirements and an attachment of documents substantiating the claims of the Party, if the recipient of the claim does not have such documents. The deadline for responding to a claim is 10 (Ten) business days from the date of its receipt.
  • All disputes arising from or related to this Policy are subject to resolution in accordance with the current legislation of the Russian Federation in the Tchaikovsky City Court of the Perm Territory or (in the case of jurisdiction of the dispute to the court of general jurisdiction) or in the Arbitration Court of the Perm Territory (in the case of jurisdiction of the dispute to the arbitration court).