Privacy Policy

General provisions

1. The Policy in the field of personal data processing (hereinafter referred to as the “Policy”) is developed in accordance with Article 18.1 of the Federal Law dated 27.07.2006 No. 152-FZ “On Personal Data” (hereinafter referred to as the “Federal Law”) and contains information on the implemented requirements to the processing and protection of personal data.

2. The Policy is developed taking into account the Constitution of the Russian Federation, international treaties of the Russian Federation, federal laws and other regulatory legal acts of the Russian Federation in the field of personal data.

3. The purpose of this document is to inform the Subjects of personal data and persons involved in the processing of personal data about compliance with the Moscow City Law Office “RusLegal” (INN 9704137858, location Moscow, vn.ter.g. Tverskoy municipal district, 10 Nikolskaya St., room. 4/7) (hereinafter referred to as the “Operator”) of the fundamental principles of legality, fairness, compliance of the content and scope of processed personal data with the stated purposes of processing.

4. Ensuring the protection of human rights and freedoms during the processing of personal data, including the protection of the right to privacy, personal and family secrecy, is one of the priority tasks of the Operator.

5. The Policy applies to all personal data processed by the Operator and is a publicly available document.

6. The Operator shall have the right to make changes to this Policy. When changes are made, the date of the last update of the revision shall be indicated in the title of the Policy. The new edition

7. The Policy shall come into force from the moment of its posting on the website www.russianlegal.com (hereinafter referred to as the “Website”), unless otherwise provided for by the new version of the Policy.

8. The Operator shall not be liable for unreliable information provided by the subject of personal data.

Terms

9. Personal Data - any information provided through the site relating directly or indirectly to a particular individual (Personal Data Subject).

10. Personal Data Subjects - defined or identifiable (identifiable) natural persons.

11. Personal Data Processing - any action (operation) or set of actions (operations) performed with or without the use of automation means with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

General provisions on the processing of personal data

12 The Operator collects personal data entered into the data fields on the Website by the users themselves or by other persons on their behalf.

13. The Operator may use third-party Internet services (third-party technologies) to organize the collection of statistical personal data, the third-party Internet services provide storage of the obtained data on their own servers. The Operator is not responsible for localization of servers of third-party Internet services.

14. Processing of personal data by the Operator, depending on the purposes of processing, is carried out:

with the consent of the Personal Data Subjects to the processing of their personal data;

for the purposes of execution of laws of the Russian Federation, international treaties of the Russian Federation, resolutions of the Government of the Russian Federation and other regulatory legal acts of the Russian Federation;

for the purposes of execution or conclusion of an agreement to which the Personal Data Subject is a party or beneficiary

Principles of personal data processing

15. The processing of personal data shall be carried out on a lawful and fair basis and shall be limited to the achievement of specific, predetermined and legitimate purposes.

16. Only personal data that meet the purposes of their processing shall be processed. The content and scope of personal data processed by the Operator correspond to the stated processing purposes, redundancy of processed personal data is not allowed.

17. When processing personal data, the Operator ensures the accuracy of personal data, their sufficiency and, where necessary, relevance in relation to the purposes of personal data processing. The Company shall take the necessary measures (ensure that they are taken) to delete or clarify incomplete or inaccurate personal data.

18. In the course of its activities, the Operator may transfer, provide and (or) entrust the processing of personal data to another person with the consent of the Subject of personal data, unless otherwise provided for by the legislation of the Russian Federation. At the same time, a mandatory condition for providing and (or) entrusting the processing of personal data to another person is the obligation of the parties to maintain confidentiality and ensure the security of personal data during their processing

19. The terms of personal data processing shall be determined in accordance with the purposes for which they were collected.

20. Trans-border transfer of personal data, i.e. transfer of personal data to the territory of a foreign state, to a foreign state authority, to a foreign individual or a foreign legal entity is not carried out by the Operator.

Purposes and applied methods of personal data processing

21. Processing of personal data is carried out with the use of means of automation, including in personal data information systems, and without the use of such means (mixed processing of personal data).

22. In case of automated processing of personal data, personal data transfer using the information and telecommunication network “Internet” is applied.

23. Processing of personal data is carried out for the purposes of:

24. Communication with the Personal Data Subject, in connection with filling in the feedback form on the Website, including sending notifications, requests and information regarding the use of the Website, processing, mailings of announcements, advertising and marketing materials;

25. Providing the Personal Data Subject with the opportunity to access the Operator's services and information about events organized by the Operator or its partners;

26. Receipt by the Personal Data Subject of services of third parties - partners of the Operator.

27. Processing of personal data is carried out:

with the use of automation tools;

without the use of automation tools.

Storage of personal data.

28. Personal data may be received, further processed and stored both on paper and electronically.

29. Personal data recorded on paper shall be stored in locked cabinets or in locked rooms with limited access.

30. It is not allowed to store and place documents containing personal data in open electronic catalogs (file exchangers).

31. Storage of personal data in a form that allows identification of the Personal Data Subject shall not last longer than the purposes of their processing require, and they shall be destroyed upon achievement of the purposes of processing or in case of loss of necessity in their achievement.

Periods of personal data processing and storage

32. Processing of personal data begins not earlier than the occurrence of legal grounds for processing of personal data.

33. Processing of personal data shall be terminated upon achievement of the processing purposes, loss of legal grounds for processing, expiration of the retention period of documents established by the legislation on archiving in the Russian Federation.

34. Upon expiration of the processing period, personal data shall be destroyed or depersonalized for use in statistical or other research purposes.

35. The Operator stops processing of personal data in the following cases

when the conditions for termination of processing of personal data occur or upon expiration of the established terms;

upon achievement of the purposes of their processing or in case of loss of necessity in achieving these purposes;

at the request of the Subject of personal data, if the processed data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing;

in case of withdrawal by the Subject of personal data processing; in case of withdrawal by the Operator of personal data from the data subject.

Rights of personal data subjects

36. The subject of personal data has the right (unless otherwise provided by law):

to demand specification of his/her personal data, their blocking or destruction in case the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing, as well as to take measures provided by law to protect his/her rights;

to demand a list of his/her personal data processed by the Operator and the source of their obtaining;

to receive information about the personal data processed by the Operator and the source of their obtaining; to receive information about the Operator's personal data.

Information on implemented requirements to personal data protection

37. When processing personal data, the Operator shall ensure that the necessary legal, organizational and technical measures are taken to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination and other unlawful actions with respect to personal data.

38. The Operator shall require other persons who have access to personal data not to disclose to third parties and not to disseminate personal data without the consent of the subject of personal data, unless otherwise provided for by federal law.

39. In order to ensure the security of personal data during their processing, the Operator shall take necessary and sufficient legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions against them.

40. The Operator shall ensure that all its organizational and technical measures for personal data protection are carried out legally, including in accordance with the requirements of the legislation of the Russian Federation on personal data processing.

41. In order to ensure adequate protection of personal data, the Operator shall assess the harm that may be caused to the Personal Data Subjects in case of violation of the security of their personal data, as well as determine the current threats to the security of personal data during their processing in personal data information systems.

42. In accordance with the identified current threats, the Operator shall apply necessary and sufficient legal, organizational and technical measures to ensure the security of personal data, including the use of information protection means, detection of facts of unauthorized access to personal data and taking measures, recovery of personal data, restriction of access to personal data, registration and recording of actions with personal data, as well as control and evaluation of the effectiveness of the applied measures to ensure the security of personal data.

Contact information of the Operator

Moscow City Law Office “RusLegal” (INN 9704137858).

Address (location): Moscow, vn.ter.g. Tverskoy municipal district, 10, Nikolskaya str. 4/7; tel.: +7 495 150 06 01, e-mail: welcom@russianlegal.com.

Questions, comments regarding the processing of personal data by the Operator, as well as requests for actions with personal data within the framework of exercising the rights established by law, the Personal Data Subjects should send:

in the form of an electronic document to welcom@russianlegal.com

in writing to the following address: Moscow, Tverskoy municipal district, 10, Nikolskaya St., premises 4/7; tel: +7 495 495 495 06 01, tel. 4/7; tel.: +7 495 150 06 01