- ServicesWeb Development
MarketingVideo production
Back
Automated Processing of Personal Data — processing of personal data using computer technology;
Blocking of Personal Data — temporary cessation of personal data processing (except for cases where processing is necessary to clarify personal data);
Destruction of Personal Data — actions resulting in the impossibility of restoring the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed;
Personal Data Information System — a set of personal data contained in databases and information technologies and technical means ensuring their processing;
Depersonalization of Personal Data — actions resulting in the impossibility of determining the belonging of personal data to a specific personal data subject without the use of additional information;
Processing of Personal Data — any action (operation) or set of actions (operations) performed with personal data, using automation tools or without their use.
Personal Data Operator — a state body, municipal body, legal entity or individual who independently or jointly with other persons organizes and (or) carries out the processing of personal data, and also determines the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data;
Personal Data — any information relating to a directly or indirectly identified or identifiable individual (personal data subject);
Provision of Personal Data — actions aimed at disclosing personal data to a specific person or a specific circle of persons;
Personal Data Subject — an individual who is directly or indirectly identified, or identifiable using personal data;
Dissemination of Personal Data — actions aimed at disclosing personal data to an indefinite circle of persons;
Cross-Border Transfer of Personal Data — transfer of personal data to the territory of a foreign state to a foreign state authority, foreign individual or foreign legal entity.
1.1. This document (hereinafter referred to as the Policy) defines the policy regarding the processing of personal data of Individual Entrepreneur Shushpanov Anton Vladimirovich, Taxpayer Identification Number (INN) 110314238613, Primary State Registration Number (OGRN) 320911200033082, located at: 295017, Simferopol. (hereinafter referred to as the Operator).
1.2. This Policy has been developed in compliance with the requirements of Clause 2, Part 1, Article 18.1 of Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" (hereinafter referred to as the Personal Data Law).
1.3. The concepts contained in Article 3 of the Personal Data Law are used in this Policy with the same meaning.
1.4. This Policy applies to all operations performed by the Operator with personal data using automation tools or without their use.
1.5. Basic rights and obligations of the Operator.
1.5.1. The Operator has the right to:
1.6. Basic rights and obligations of personal data subjects:
1.6.1. Personal data subjects have the right to:
1.6.2. Personal data subjects are obliged to:
1.6.3. Persons who provided the Operator with false information about themselves, or information about another personal data subject without the latter's consent, bear responsibility in accordance with the legislation of the Russian Federation.
2.1. The Operator may process personal data of the following personal data subjects:
2.2. The personal data processed by the Operator include:
2.2.1. If the personal data subjects are employees of the Operator, former employees, candidates for vacant positions, as well as relatives of employees:
2.2.2. If the personal data subjects are clients of the Operator (individuals):
2.2.3. If the personal data subjects are contractors of the Operator (individuals providing services under a contract without forming a legal entity (self-employed, individual entrepreneurs)):
2.2.4. If the personal data subjects are representatives/employees of the Operator's clients and contractors (legal entities):
2.2.5. If the personal data subjects are visitors of the Operator's website(s):
2.2.6. If the personal data subjects are clients of the Operator who contacted by phone or hotline:
2.3. The Operator ensures that the content and volume of processed personal data correspond to the stated purposes of processing and, if necessary, takes measures to eliminate their redundancy in relation to the stated purposes of processing.
2.4. The Operator processes biometric personal data subject to the written consent of the relevant personal data subjects, as well as in other cases provided for by the legislation of the Russian Federation.
2.5. The Operator does not process special categories of personal data concerning race, nationality, political views, religious or philosophical beliefs, intimate life.
2.6. The Operator does not carry out cross-border transfer of personal data.
Personal data are processed by the Operator for the following purposes:
4.1. The legal grounds for the processing of personal data by the Operator are:
5.1. The processing of personal data by the Operator is carried out in the following ways:
5.2. List of actions performed by the Operator with personal data: collection, systematization, accumulation, storage, clarification (updating, modification), use, dissemination (including transfer), depersonalization, blocking, destruction, as well as performing any other actions in accordance with the current legislation of the Russian Federation.
5.3. The processing of personal data is carried out by the Operator subject to obtaining the consent of the personal data subject (hereinafter referred to as the Consent), except for cases established by the legislation of the Russian Federation, when the processing of personal data can be carried out without such Consent.
5.4. The personal data subject makes the decision to provide his/her personal data and gives Consent freely, by his/her own will and in his/her own interest.
5.5. Consent is given in any form that allows confirming the fact of its receipt. In cases provided for by the legislation of the Russian Federation, Consent is formalized in writing.
5.6. The condition for termination of personal data processing may be the achievement of the purposes of personal data processing, the expiration of the Consent validity period or the withdrawal of Consent by the personal data subject, as well as the identification of unlawful processing of personal data.
5.7. Consent may be withdrawn by written notification sent to the Operator's address by registered mail.
5.8. The Operator has the right to entrust the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by Federal Law, on the basis of a concluded agreement. The person processing personal data on behalf of the Operator is obliged to comply with the principles and rules of personal data processing provided for by 152-FZ "On Personal Data" and this Policy.
In accordance with the requirements of 152-FZ "On Personal Data", agreements with persons processing personal data on behalf of the Operator define the list of actions (operations) with personal data that will be performed by the person processing personal data, and the purposes of processing, establish the obligations of such person to maintain the confidentiality of personal data and ensure the security of personal data during their processing, and specify the requirements for the protection of processed personal data in accordance with Article 19 of 152-FZ "On Personal Data". The list of third parties is approved by order and provided upon written request.
5.9. When processing personal data, the Operator takes or ensures the taking of necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions regarding personal data.
5.10. Storage of personal data is carried out in a form that allows identifying the personal data subject for a period no longer than required by the purposes of personal data processing, except in cases where the storage period for personal data is established by federal law, an agreement to which the personal data subject is a party, beneficiary or guarantor.
5.11. When storing personal data, the Operator uses databases located on the territory of the Russian Federation.
5.12. The terms of personal data processing are determined taking into account:
Termination of personal data processing is carried out upon the expiration of the established terms of personal data processing, upon withdrawal of the personal data subject's consent to the processing of his/her personal data (except for cases when the Operator has the right to continue processing personal data on another legal basis), upon achievement of the purpose of personal data processing or loss of necessity to achieve the purpose, as well as upon identification of unlawful processing of personal data.
6.1. The personal data subject has the right to contact the Operator on issues of processing his/her personal data in the following cases:
6.2. According to the requirements of 152-FZ "On Personal Data", the request must contain, in particular:
6.3. In case of withdrawal by the personal data subject of the consent given by him/her to the processing of personal data, the corresponding request must comply with the conditions specified in such consent.
Requests from personal data subjects or their representatives are accepted at the address: 295017, Simferopol.
Also, a request signed with an electronic signature can be sent to the email address: info@quantm.ru, or contact by phone: 8 (995) 577 53 50
The response to the request is sent to the personal data subject or his/her representative within a period not exceeding 30 (thirty) days from the date of application.
6.4. In case of refusal to provide information or perform the action reflected in the request, a reasoned response is sent to the subject containing a reference to the provision of Part 8, Article 14 of 152-FZ "On Personal Data" or another federal law that is the basis for such refusal, within a period not exceeding 30 (thirty) days from the date of application of the personal data subject or his/her representative.
6.5. The personal data subject may reapply to the Operator to obtain information regarding the processing of his/her (the subject's) personal data no earlier than 30 (thirty) days after the initial application or sending the initial request. If the personal data subject was provided with incomplete information based on the results of consideration of the initial appeal, the subject may reapply to the Operator earlier than the established period, indicating the justification for sending a repeated request.
6.6. The Operator has the right to refuse the personal data subject to fulfill a repeated request if there is evidence of the validity of the refusal.
6.7. In case of identification of unlawful processing of personal data or inaccurate personal data, the Operator ensures the blocking of personal data (including during processing of personal data by another person acting on behalf of the Operator), for the period of verification.
6.8. In case of confirmation of the fact of inaccuracy of personal data, the Operator ensures the clarification of personal data (including during processing of personal data by another person acting on behalf of), within 7 (seven) working days from the date of submission of such information and removes the blocking of personal data.
6.9. In case of identification of unlawful processing of personal data, the Operator, within a period not exceeding 3 (three) working days from the date of such identification, ensures the termination of unlawful processing of personal data (including during processing of personal data by another person acting on behalf of). If it is impossible to ensure the lawfulness of personal data processing, the Operator, within a period not exceeding 10 (ten) working days from the date of identification of unlawful processing of personal data, is obliged to destroy such personal data or ensure their destruction. The Operator is obliged to notify the personal data subject or his/her representative, or the authorized body for the protection of the rights of personal data subjects (if the request was sent by the said body) about the elimination of the violations committed or the destruction of personal data.
6.10. In case of withdrawal by the personal data subject of consent to the processing of his/her personal data, the Operator ensures the destruction of personal data (including during processing of personal data by a third party acting on behalf of), within a period not exceeding 30 (thirty) days from the date of receipt of the specified withdrawal (except for cases of reasoned refusal to withdraw consent established by the legislation of the Russian Federation).
6.11. Upon expiration of the storage periods for personal data, the Operator ensures the destruction of personal data (including during processing of personal data by a third party acting on behalf of), within a period not exceeding 30 (thirty) days.
6.12. In case of impossibility to destroy personal data within the established period, the Operator ensures the blocking of such personal data (including during processing of personal data by a third party acting on behalf of), and ensures the destruction of personal data within a period not exceeding 6 (six) months, unless another period is established by the legislation of the Russian Federation.
7.1. The security of personal data processed by the Operator is ensured by taking legal, organizational and technical measures determined by the current legislation of the Russian Federation, as well as internal regulatory documents of the Operator in the field of information protection.
7.2. The Operator's provision of protection of personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions regarding personal data is achieved, in particular, by the following measures taken:
7.3. Ensuring the confidentiality of personal data processed by the Operator is a mandatory requirement for all employees of the Operator admitted to the processing of personal data in connection with the performance of their job duties. All employees who have current employment relations, whose activities are related to the receipt, processing and protection of personal data, sign a non-disclosure agreement, undergo briefings on ensuring information security against signature and bear personal responsibility for compliance with the requirements for processing and ensuring the security of personal data.
8.1. All relations concerning the processing of personal data not reflected in this Policy are regulated in accordance with the provisions of the legislation of the Russian Federation.
8.2. The Operator has the right to make changes to this Policy. The new version of the Policy comes into force from the moment of its approval.
