1. GENERAL PROVISIONS.
1.1. These Privacy Policy of work with personal data of users of the website http://gmtlegal.com/ (further-Privacy Policy) are developed by the LLC «GMT LEGAL», a company registered under the laws of Russian Federation (hereinafter-the Operator) in accordance with sp. 2 part 1 article 18.1 of the Federal law of 27.07.2006 № 152-FZ "On personal data" (hereinafter – the Law on personal data).
1.2. These Privacy Policy determine the policy of the Operator in relation to the personal data processing, adopted for processing the order and terms of carrying out the processing of personal data of individuals who submitted their personal data for processing to the Operator (further – personal data subjects) with and without the use of automation, establishes procedures aimed at preventing violations of the legislation of the Russian Federation, the elimination of the consequences of such violations related to the processing of personal data.
1.3. The regulation is designed to protect the rights and freedoms of personal data subjects in the processing of their personal data, as well as to establish liability of the Operator's officials who have access to personal data of personal data subjects for non-compliance with the requirements and regulations governing the processing of personal data.
1.4. Personal data of a personal data Subject is any information related to an identified or identifiable natural person, directly or indirectly.
1.5. The operator processes the following personal data of Users:
1.5.1. Surname, Name, Patronymic;
1.5.2. Email address;
1.5.3. Phone number;
1.5.4. other data required by the Operator in the provision of services to Users to ensure the functioning of the Site.
1.6. The operator processes personal data of personal data Subjects for the purposes of:
1.6.1. providing feedback from the Operator's Specialists upon Users ' requests;
1.6.2. providing the possibility of online payment for services ordered on the Website;
1.6.3. ensuring fulfillment of the Operator's obligations to Users;
1.6.4. market research;
1.6.5. informing the Personal data subject on promotions, contests, special offers, new services, discounts, promotional materials and other services, as well as obtaining commercial or advertising information and free products, participation in exhibitions or events, market research and notification of all special initiatives for customers;
1.6.6. statistics;
1.6.7. for other purposes, if the relevant actions of the Operator do not contradict the current legislation, the activities of the Operator, and to conduct this processing received the consent of the personal data Subject.
1.7. The operator processes the personal data of personal data subjects by performing any action (operation) or a set of actions (operations) performed with or without the use of automation tools, including the following:
1.7.1. collection;
1.7.2. record;
1.7.3. arrangement;
1.7.4. accumulation;
1.7.5. storage;
1.7.6. specification (update, change);
1.7.7. extraction;
1.7.8. use;
1.7.9. transfer (distribution, provision, access));
1.7.10. anonymizing;
1.7.11. blocking;
1.7.12. removal;
1.7.13. destruction.
2. THE PRINCIPLES OF PERSONAL DATA PROCESSING.
2.1. When processing personal data, the Operator is guided by the following principles:
2.1.1. law and justice;
2.1.2. confidentiality;
2.1.3. timeliness and reliability of obtaining the consent of the personal data subject to the processing of personal data;
2.1.4. processing only personal data that meet the purposes of their processing;
2.1.5. compliance of the content and volume of the processed personal data with the declared processing purposes. The processed personal data shall not be excessive in relation to the declared purposes of their processing;
2.1.6. inadmissibility of combining databases that contain personal data, which processing is carried out for the purposes incompatible with each other;
2.1.7. storage of personal data in a form that allows to determine the subject of personal data, no longer than required by the purpose of personal data processing;
2.1.8. destruction or depersonalization of personal data to achieve goals, their processing or in case of loss of the need to achieve these goals.
2.2. Processing of personal data by the Operator is carried out in compliance with the principles and rules provided for:
2.2.1. Federal law 27.07.2006 №152-FZ " on personal data»;
2.2.2. this Privacy Policy;
2.2.3. The Universal Declaration of human rights 1948;
2.2.4. International Covenant on civil and political rights 1966;
2.2.5. The European Convention on Human rights 1950;
2.2.6. Provisions of the Commonwealth of Independent States Convention on human rights and fundamental freedoms (Minsk, 1995), ratified by the Russian Federation on 11.08.1998;
2.2.7. Provisions of the Okinawa Charter on the global information society, adopted on 22.07.2000;
2.2.8. Resolution of the government of the Russian Federation dated 01.11.2012 № 1119 "On approval of requirements to personal data protection during their processing in information systems of personal data»;
2.2.9. The order of FSTEC of Russia of 18.02.2013 № 21 " on approval of the Composition and content of organizational and technical measures to ensure the security of personal data during their processing in information systems of personal data»;
2.2.10. Other normative and non-normative legal acts regulating the issues of personal data processing.
3. OBTAINING PERSONAL DATA.
3.1. Personal data of personal data subjects are obtained by the Operator:
3.1.1. by providing personal data by the subject when registering on the Site, when submitting applications, applications, questionnaires, forms, filling in registration forms on the Operator's website or sending an e-mail message by telephone Operator support service;
3.1.2. in other ways, not contradicting the legislation of the Russian Federation and the requirements of international legislation on personal data protection.
3.2. The operator receives and begins processing the personal data of the Subject from the moment of obtaining his consent.
Consent to the processing of personal data in the form of an Application-consent to the processing of the provided information (Appendix №1) is given by the subject of personal data from the moment of the beginning of use of the site, including by marking the boxes "I agree with the user agreement", "I consent to the processing of personal data", by course of conduct of the personal data subject.
3.3. The personal data subject may revoke his / her consent to the processing of personal data at any time. To withdraw consent to the processing of personal data, you must submit an application to the Operator for available means of communication. At the same time, the Operator must stop their processing or ensure the termination of such processing and, if the preservation of personal data is no longer required for the purposes of their processing, destroy personal data or ensure their destruction within a period not exceeding 30 (Thirty) days from the date of receipt of the said withdrawal.
In case of withdrawal of consent to the processing of personal data by the Subject of personal data, the Operator has the right to continue the processing of personal data without the consent of the Subject of personal data only if there are grounds specified in the personal data Law.
3.4. The personal data subject has the right to choose which personal data will be provided to them. However, in case of incomplete provision of the necessary data, the Operator does not guarantee the possibility of the subject to use all services and products of the Site, to use all Services of the site.
3.5. The personal data subject may at any time view, update or delete any personal data that is included in his / her profile. To do this, he / she can edit his / her profile online or send an email to info@gmtlegal.com.
4. THE RULES AND REGULATIONS GOVERNING THE PROCESSING OF PERSONAL DATA.
4.1. The operator takes technical, organizational and legal measures to ensure the protection of personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as other illegal actions.
When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with art. 19 of the Federal law "On personal data", the Resolution of the RF Government dated 01.11.2012 №1119 "On approval of requirements for protection of personal data during their processing in personal data information systems", Methods of determining the relevant threats to the security of personal data during their processing in personal data information systems, approved by FSTEC of the Russian Federation of 14.02.2008, the Methodological guidelines on security of personal data during automatically processing of personal data in information systems with the help of cryptocredits approved by FSB 21.02.2008 g. № 149/54-144.
4.2. When transferring personal data, the Operator complies with the following requirements:
4.2.1. does not disclose personal data of the personal data subject to a third party without Express consent, except where it is necessary for the purposes of processing personal data, preventing threats to the life and health of the personal data subject, as well as in cases established by law;
4.2.2. does not disclose personal data for commercial purposes without the Express consent of the subject of personal data;
4.2.3. informs the persons receiving the personal data that this data can be used only for the purposes for which it is reported, and requires these persons to take appropriate measures to protect personal data. Persons receiving the User's personal data are obliged to respect the confidentiality regime;
4.2.4. authorizes access to personal data only to authorized persons, and such persons shall be entitled to receive only the personal data necessary for the performance of specific functions.
4.3. The operator has the right to disclose any information collected through this Site, if the disclosure is necessary in connection with the investigation or complaint regarding the misuse of the Site, or to identify (identify) a User who may violate or interfere with the rights of the site Administration or the rights of other users of the Site, as well as to comply with the provisions of applicable law or court decisions, to ensure compliance with the terms of this Agreement, to protect the rights or safety of other Users and any third parties.
4.4. Third parties independently determine the list of other persons (their employees) who have direct access to such personal data and (or) perform their processing. The list of these persons, as well as the order of access and (or) processing of personal data by them shall be approved by the internal documents of the Third party.
4.5. The operator does not sell or provide personal data to third parties for marketing purposes, not provided for by this privacy Policy, without the Express consent of the personal data subjects. The operator may combine non-personal data with other information received from third parties and use them to improve and personalize services, content and advertising.
4.6. Processing of personal data is carried out in the territory of the Russian Federation, cross-border transfer of personal data is not carried out. The operator reserves the right to choose any channels of transmission of information about personal data, as well as the content of the transmitted information.
4.7. Personal information collected online is stored by the Operator and/or service providers in databases protected through physical and electronic means of control, access control technologies and other appropriate security measures.
4.8. The personal data subject acknowledges, confirms and agrees that the technical processing and transmission of information on the Operator's Website may include data transmission over various networks, including unencrypted channels of communication on the Internet, which is never completely confidential and secure.
4.9. The personal data subject also understands that any messages and/or information sent through the Operator's Server may not be read and/or intercepted by third parties.
5. FINAL PROVISION
5.1. In case of any disputes or disagreements related to the implementation of this Privacy Policy, the personal data Subject and the Operator will make every effort to resolve them through negotiations. If the disputes are not resolved by negotiations, the disputes shall be settled in the manner prescribed by the current legislation of the Russian Federation.
5.2. This Privacy Policy come into force for the Subject of personal data from the moment of the beginning of use of the Operator's Website and are valid for an indefinite period.
5.3. This Privacy Policy may be amended and/or supplemented by the Operator at any time during the term of the Privacy Policy at its discretion without the need to obtain the consent of the Subject of personal data. All changes and/or additions shall be placed by the Operator in the relevant section of the website and shall come into force on the day of such placement. The subject of personal data shall be obliged to get acquainted with all changes and/or additions in a timely manner and independently. If the Subject of personal data disagrees with the amendments, he / she shall refuse access to the Site, stop using the materials and Services of the site.
Appendix 1
Application-Consent to the processing of the information provided
I consent and authorise the LLC «GMT LEGAL», company registered under the laws of the Russian Federation (further – The Operator) and third parties who have civil legal relations with the Operator, to processing of personal data, including: collection, arrangement, accumulation, storage, specification (update, change), use, distribution (including transfer in the territory of the Russian Federation), anonymization, blocking, destruction, within and on the terms established in this Application-Consent, the Terms of Use and Privacy Policy, my personal data for the purposes of processing, defined in the Privacy Policy for determining the Policy of work with personal data of Users, including:
- Surname, First Name, Patronymic;
- Email address;
- Phone number;
- other data required by the Operator in the provision of services to Users, to ensure the functioning of the Site, etc.
I Express my consent to the processing of personal data by means of automated database management systems, as well as other software tools specifically developed on behalf of the Operator, as well as without the use of such tools.
I understand and accept that personal data is provided for:
- providing feedback from the Operator's Specialists upon Users ' requests;
- providing the possibility of online payment for services ordered on the Website;
- ensuring fulfillment of the Operator's obligations to Users;
- informing the Personal data subject on promotions, contests, special offers, new services, discounts, promotional materials and other services, as well as obtaining commercial or advertising information and free products, participation in exhibitions or events, market research and notification of all special initiatives for customers;
- statistics;
- for other purposes, if the relevant actions of the Operator do not contradict the current legislation, the activities of the Operator, and to conduct this processing received the consent of the personal data Subject.
I agree that if this is necessary for the purposes of processing of the personal data specified in this consent, my personal data received by the Operator may be transferred to third parties to whom the Operator may entrust their processing on the basis of an agreement concluded with them, subject to the requirements of the legislation of the Russian Federation on ensuring the confidentiality and security of personal data by such third parties during their processing.
I confirm that all data provided during registration is correct, the contact number is my phone number allocated by the mobile operator. This consent is valid from the date of its provision to the day of withdrawal in writing.
The operator undertakes to immediately stop processing the provided data within a reasonable time after receiving the relevant request of the data subject, expressed in accordance with the current legislation applicable to the legal relations of the parties.