Personal data processing policy
1. General provisions
This personal data processing policy is drawn up in accordance with the requirements of the Federal Act dated 27.07.2006. No.152-FL "On personal data" (hereinafter referred to as the Personal Data Act) and determines the procedure for processing personal data and the measures for ensuring the security of personal data taken by GC "Olymp energy" (hereinafter referred to as the Operator).
1.1. The most important objective of the Operator and the condition for carrying out its activities is to respect the rights and freedoms of man and citizen when processing personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. The personal data processing policy of this Operator (hereinafter the Policy) applies to all information that the Operator may receive about visitors to https://olimp.rent Website.
2. Basic concepts used in the Policy
2.1. Automated processing of personal data is the processing of personal data by means of computer technology.
2.2. Blocking of personal data - temporary suspension of processing of personal data (unless the processing is necessary to clarify the personal data).
2.3. Website - a collection of graphic and informative documents, as well as computer programs and databases, made available on the Internet at the network address https://olimp.rent.
2.4. Personal data information system - a set of personal data contained in databases of personal data, together with the information technology and technical means for processing them.
2.5. De-identification of personal data - actions that make it impossible to determine, without the use of additional information, whether personal data belongs to a specific User or to another subject of personal data.
2.6. Processing of personal data means any action (operation) or set of actions (operations) carried out with or without the use of automated means with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction of personal data.
2.7. Operator - a state body, municipal authority, legal entity or natural person, independently or together with other persons, who organizes and/or carries out the processing of personal data, and who determines the purposes of the processing of personal data, the composition of the personal data to be processed, the actions (operations) carried out with the personal data.
2.8. Personal data is any information relating directly or indirectly to an identified or identifiable User of https://olimp.rent Website.
2.9. Personal data authorized by the data subject for circulation - personal data to which access is granted to an unlimited number of persons by the data subject by giving his/her consent to the processing of personal data authorized by the data subject for dissemination in the manner prescribed by the Personal Data Act (hereafter - personal data authorized for circulation).
2.10. The User is any visitor to the https://olimp.rent Website.
2.11. Disclosure of personal data is the act of disclosing personal data to a certain person or a certain circle of persons.
2.12. Dissemination of personal data - any action aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or making personal data available to an unlimited number of persons, including disclosure of personal data in the media, placement in information and telecommunications networks, or providing access to personal data in any other way.
2.13. Cross-border transfer of personal data is the transfer of personal data on the territory of a foreign country to a foreign authority, a foreign natural person or a foreign legal entity.
2.14. Destruction of personal data - any action resulting in the irretrievable destruction of personal data with the impossibility of subsequently restoring the content of the personal data in the personal data information system and/or the destruction of tangible carriers of personal data.
3. The basic rights and obligations of the Operator
3.1. The Operator has the right :
– receive accurate information and/or documents containing personal data from the data subject;
– If the data subject withdraws his/her consent to the processing of personal data, the Operator has the right to continue processing the personal data without the consent of the data subject for the reasons set out in the Personal Data Act;
– independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations arising from the Personal Data Act and the regulations adopted pursuant thereto, unless otherwise provided for in the Personal Data Act or other federal laws.
3.2. The Operator is required to:
– provide the data subject, upon request, with information about the processing of his/her personal data;
– organize the processing of personal data in accordance with the procedure established by the applicable laws of the Russian Federation;
– respond to requests and queries from data subjects and their legal representatives in accordance with the requirements of the Personal Data Act;
– provide the competent authority for the protection of data subjects with the necessary information at the request of that authority within 30 days from the date of receipt of such a request;
– publish or provide unrestricted access to this personal data processing policy;
– take legal, organizational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, sharing, distribution of personal data, and other unlawful acts in relation to personal data;
– stop the transfer (circulation, provision, access) of personal data, to stop the processing and to destroy personal data in the manner and in the cases provided for by the law on personal data;
– fulfil other obligations under the Personal Data Act.
4. Basic rights and obligations of data subjects
4.1. Data subjects have the right to:
– receive information about the processing of his or her personal data, except as provided by the federal law. The information shall be provided to the data subject by the Operator in an accessible form and shall not contain personal data relating to other data subjects, unless there are legitimate grounds for disclosing such personal data. The list of information and the procedure for obtaining it are defined in the Personal Data Act;
– require the Operator to clarify, block or destroy personal data if it is incomplete, out of date, inaccurate, unlawfully obtained or not necessary for the stated purpose of the processing, and take legal steps to protect their rights;
– condition prior consent to the processing of personal data for the purpose of marketing goods, works and services;
– withdraw your consent to the processing of personal data;
– appeal to the competent authority for the protection of the rights of data subjects or to the court against unlawful acts or omissions of the Operator in the processing of personal data;
– exercise other rights under the Russian law.
4.2. Data subjects of personal data:
– provide the Operator with accurate information about yourself;
– inform the Operator of any changes (updates, modifications) to your personal data.
4.3. Persons who have provided the Operator with false information about themselves or another person concerned with the personal data without their consent are liable according to the Russian law.
5. The Operator may process the following personal data of the User
5.1 Name, first name, surname.
5.1 Name, first name, surname.
5.3. Telephone numbers.
5.4 The Website also collects and processes anonymous visitor data (including cookies) using web statistics services (Yandex Metrika and Google Analytics and others).
5.5. The above-mentioned data is referred to later in the Policy under the generic term Personal Data.
5.6. no category of personal data relating to race, nationality, political opinions, religious or philosophical beliefs or personal life will be processed by the Operator.
5.7. The processing of personal data whose dissemination is permitted among the special categories of personal data specified in Article 10.1 of the Personal Data Act is permitted if the prohibitions and conditions stipulated in Article 10.1 of the Personal Data Act are met.
5.8. The User's consent to the processing of personal data whose dissemination is authorized is given separately from other consents to the processing of his/her personal data. The conditions laid down, in particular, in Article 10.1 of the Personal Data Act are complied with. The requirements for the content of such consent shall be established by the competent authority for the protection of data subjects.
5.8.1 The User consents to the processing of personal data authorized to be distributed directly to the Operator.
5.8.2 Within three working days of receiving the aforementioned consent from the User, the Operator shall publish information on the conditions of processing, prohibitions and conditions of processing of personal data allowed to be distributed to an unlimited number of persons.
5.8.3 The transfer (circulation, provision, access) of personal data whose dissemination has been authorized by the data subject must be stopped at any time at the request of the data subject. This requirement should include the surname, first name, patronymic (if available), contact details (telephone number, e-mail address or postal address) of the data subject, as well as a list of personal data whose processing is to be discontinued. The personal data specified in this request may only be processed by the Operator receiving this information.
5.8.4 The consent to the processing of personal data authorized for distribution ends upon receipt by the Operator of the request to process personal data referred to in point 5.8.3 of this Policy.
6. Principles of personal data processing
6.1. The processing of personal data must be lawful and fair.
6.2. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. The processing of personal data that is incompatible with the purpose of collecting personal data is not permitted.
6.3. Databases containing personal data whose processing is incompatible with each other may not be merged.
6.4. Only personal data corresponding to the purposes for which they are processed may be processed.
6.5. The content and scope of the personal data processed correspond to the purposes of processing indicated. The processing of personal data must not be excessive in relation to the declared purposes of its processing.
6.6. When processing personal data, the accuracy of the personal data, its sufficiency and, where appropriate, its relevance to the purpose of the processing of personal data shall be ensured. The Operator shall take the necessary measures and/or ensure that such measures are taken to remove or clarify incomplete or inaccurate data.
6.7. Personal data shall be kept in a form which allows the data subject to be identified for no longer than is required for the purposes of the processing of the personal data, unless the period of retention of personal data is laid down by federal law, an agreement to which the data subject is a party, a beneficiary or a guarantor under which the data subject is a party. The personal data processed shall be destroyed or de-identified when the purposes of the processing have been achieved or when it is no longer necessary to achieve those purposes, unless otherwise provided by federal law.
7. Purposes of the processing of personal data
7.1. The purpose of processing the User's personal data :
– inform the User by sending e-mails;ных писем;
– the conclusion, performance and termination of civil law contracts;
– provide the User with access to the services, information and/or materials contained on https://olimp.rent.
7.2. The Operator also has the right to send the User notifications of new products and services, special offers and various events. The User can always choose not to receive information messages by sending an e-mail to the Operator at privacy@energoprom-stroy.ru marked "Disable the notifications of new products and services and special offers".
7.3. Anonymous User data collected by Internet statistical services is used to collect information about User activities on the Website and to improve the quality of the Website and its content.
8. Legal basis for processing personal data
8.1. The legal basis for the processing of personal data by the Operator is as follows:
– the statutory (constitutive) Operator's documents;
– federal laws and other regulations governing the protection of personal data;
– the User's consent to the processing of his/her personal data and to the processing of personal data whose dissemination is authorized.
8.2. The Operator processes the User's personal data only if they are filled in and/or submitted by the User him/herself via special forms located on the Website https://olimp.rent or sent to the Operator by e-mail. By filling in the relevant forms and/or sending personal data to the Operator, the User expresses his/her consent to this Policy.
8.3. The Operator processes anonymous data about the User if the User's browser settings allow it (saving cookies and using JavaScript technology are enabled).
8.4. The person concerned by the personal data decides himself/herself to provide his/her personal data and gives his/her consent freely, of his/her own free will and in his/her own interest.
9. Conditions for the processing of personal data
9.1. The processing of personal data is subject to the consent of the data subject to the processing of his/her personal data.
9.2. The processing of personal data is necessary to achieve the objectives set out in an international treaty of the Russian Federation or by law, to fulfil the functions, powers and duties imposed on the Operator by the legislation of the Russian Federation.
9.3. The processing of personal data is necessary for the administration of justice, the execution of a judicial act, an act of another body or an official to be executed in accordance with the legislation of the Russian Federation on enforcement proceedings.
9.4. The processing of personal data is necessary for the performance of an agreement to which the data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement at the initiative of the data subject or an agreement under which the data subject will be a beneficiary or guarantor.
9.5. The processing of personal data is necessary for the exercise of the rights and legitimate interests of the Operator or third parties or for the achievement of socially important objectives, provided that the rights and freedoms of the data subject are not thereby violated.
9.6. Personal data are processed to which access is granted to an unlimited number of persons by or at the request of the person concerned by the personal data (hereinafter referred to as "generally accessible personal data").
9.7. Personal data that is subject to mandatory publication or disclosure in accordance with federal law is processed.
10. Procedure for collection, storage, transfer and other processing of personal data
The security of the personal data processed by the Operator is ensured by the implementation of legal, organizational and technical measures necessary for the full application of the requirements of the legislation in force in the field of personal data protection.
10.1. The Operator ensures the security of personal data and takes all possible measures to exclude access to personal data by unauthorized persons.
10.2. The User's personal data will never, under any circumstances, be disclosed to third parties, except in cases related to the application of current legislation or if the data subject has given his consent to the Operator to transfer data to a third party in order to fulfil the obligations of a civil law contract.
10.3. If inaccuracies in the personal data are identified, the User can update the personal data himself/herself by sending a notification to the e-mail address of the Operator privacy@energoprom-stroy.ru, with the mention "Update of personal data".
10.4. The time limit for processing personal data is determined by the fulfilment of the purposes for which the personal data was collected, unless a different time limit is stipulated by contract or by applicable law. The User may withdraw consent to the processing of personal data at any time by sending the Operator an e-mail notification to the Operator's e-mail address privacy@energoprom-stroy.ru, marked "Withdrawal of consent to process personal data".
10.5. All information collected by third party services, including payment systems, communication facilities and other service providers, is stored and processed by these parties (Operators) in accordance with their User agreement and privacy policy. All information collected by third party services, including payment systems, communication facilities and other service providers, is stored and processed by these parties (Operators) in accordance with their User agreement and privacy policy. The Operator shall not be liable for the actions of third parties, including the service providers referred to in this clause.
10.6. Prohibitions established by the data subject on the transfer (other than granting access) and on the processing or conditions of processing (other than obtaining access) of personal data authorized for circulation do not apply in cases of processing of personal data for state, public and other public interests as defined by Russian law.
10.7. The Operator ensures the confidentiality of personal data when processing personal data.
10.8. The Operator shall store personal data in a form that allows the subject of the personal data to be identified for no longer than is required for the purposes of processing the personal data, unless the period of storage of the personal data is laid down by federal law, an agreement to which the subject of the personal data is a party, a beneficiary or a guarantor under which the subject of the personal data is a party.
10.9. A condition for terminating the processing of personal data may be the fulfilment of the purposes of the processing of personal data, the expiry of the data subject's consent or the withdrawal of consent by the data subject, as well as the discovery of unlawful processing of personal data.
11. List of actions carried out by the Operator with the personal data received
11.1. The Operator collects, records, systemizes, stacks, stores, clarifies (updates, modifies), extracts, uses, transmits (distributes, provides, accesses), anonymizes, blocks, erases and destroys personal data.
11.2. The Operator carries out automated processing of personal data with or without receiving and/or transmitting the information received via information and telecommunications networks.
12. Cross-border transfer of personal data
12.1. Prior to the cross-border transfer of personal data, the Operator must ensure that the foreign country to whose territory the transfer of personal data is to take place provides adequate protection of the rights of data subjects.
12.2. Cross-border transfer of personal data to foreign countries that do not meet the above requirements may only take place if the data subject consents in writing to the cross-border transfer of his/her personal data and/or to the execution of the agreement to which the data subject is a party.
13. Confidentiality of personal data
The Operator and other persons who have access to personal data are obliged not to disclose or distribute personal data to third parties without the consent of the person concerned, unless otherwise provided by federal law.
14. Final provisions
14.1. The User may obtain any clarification on matters of interest relating to the processing of his/her personal data by contacting the Operator by e-mail at privacy@energoprom-stroy.ru.
14.2. This document will reflect any changes to the Operator's personal data processing policy.
14.3. The current version of the policy is available free of charge on the Internet at https://olimp.rent/privacy.
