We noticed that you are using a different language. Change the language of the website?
RU EN
0
☰
Exhaust sounds Terminator Shop System installation Mobile app FAQ Contact us 0

Privacy policy

revision dated 05.11.2025

1. The operator

LIMITED LIABILITY COMPANY "CONCERT"
TIN 7813336546
OGRN 1057813204866
email: contactUs@terminatorexhaust.com

2. General provisions

2.1. The provisions of this Policy apply to all relations related to the processing of personal data by the Operator, both with and without the use of automation tools.

2.2. The Policy is subject to publication on the official website of the Operator.
2.3. The Policy applies to all employees of the Operator.

3. Legal grounds for personal data processing

3.1. The following regulations and documents are the basis for the processing of Personal Data by the Operator:

  • The Constitution of the Russian Federation;
  • The Labor Code of the Russian Federation;
  • The Tax Code of the Russian Federation;
  • The Civil Code of the Russian Federation;
  • Federal Law No. 326-FZ dated 29.11.2010 "On Compulsory Medical Insurance in the Russian Federation";
  • Federal Law No. 165-FZ of 07/16/1999 "On the Basics of Compulsory Social Insurance";
    Federal Law No. 255-FZ of December 29, 2006 "On Compulsory social insurance in case of temporary disability and in connection with maternity";
  • Federal Law No. 167-FZ dated December 15, 2001 "On Compulsory Pension Insurance in the Russian Federation";
  • Federal Law No. 400-FZ dated December 28, 2013 "On Insurance Pensions";
  • Federal Law No. 53-FZ dated 28.03.1998 "On Military Duty and Military Service";
  • Federal Law No. 402-FZ dated 06.12.2011 "On Accounting";
  • Federal Law No. 152-FZ of 27.07.2006 "On Personal Data";
  • Federal Law No. 2300-1 dated 07.02.1992 "On Consumer Rights Protection";
  • Federal Law No. 14-FZ dated 08.02.1998 "On Limited Liability Companies";
  • Federal Law No. 129-FZ dated 08.08.2001 "On State Registration of Legal Entities and Individual Entrepreneurs";
  • Decree of the Government of the Russian Federation dated 11/01/2012 No. 1119 "On Approval of Requirements for the Protection of Personal Data during their Processing in Personal Data Information Systems";
  • Decree of the Government of the Russian Federation dated 09/15/2008 No. 687 "On Approval of the Regulation on the Specifics of Personal Data Processing carried out without the use of automation tools".
  • Operator's Charter;
    the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data (in cases not directly provided for by the legislation of the Russian Federation, but corresponding to the authority of the Operator);
  • The processing of personal data is necessary to achieve the goals stipulated by an international agreement of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the Operator by the legislation of the Russian Federation.;
  • The processing of personal data is necessary for the performance of an agreement to which the personal data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement on the initiative of the personal data subject or an agreement under which the personal data subject will be the beneficiary or guarantor. A contract concluded with a personal data subject may not contain provisions restricting the rights and freedoms of the personal data subject, establishing cases of processing personal data of minors, unless otherwise provided for by the legislation of the Russian Federation, as well as provisions allowing inaction of the personal data subject as a condition for concluding the contract.

4. Purposes of personal data processing

4.1. For each purpose of personal data processing, the Operator's local regulations approve the volume, categories and lists of processed data, categories of subjects, methods, terms of processing and storage, and the procedure for destruction upon achievement of processing objectives or upon the occurrence of legitimate grounds.

4.2. This Policy contains the basic information to be disclosed in accordance with the requirements of the current legislation.:

Purpose: To use the site in accordance with its functionality, including filling out forms, sending messages and other actions performed by the user when visiting the site
Subject category: Site visitors
Scope and categories: last name, first name, patronymic; contact information: phone number, email address, identifiers in social networks and messengers; information collected by web analytics services: IP address, cookies; technical characteristics of the device, operating system and browser; information about user behavior on the site: pages viewed, session time, clicks, transitions, scroll depth; geolocation data; other data independently provided by the site visitor, if it is necessary to achieve the goal, for example: customer preferences, location address, etc.
Processing operations: Collection, Recording, Systematization, Accumulation, Storage, Refinement, Extraction, Use, Transfer, Deletion, Destruction
Processing time: Before the purposes of processing are achieved, the expiration of the consent to processing or withdrawal of consent, as well as the detection of unlawful processing of personal data, termination of activities
Purpose: Processing and execution of orders through the Operator's website, including the organization of delivery, refunds, settlements and interaction with the client on all related issues.
Subject category: Site visitors
Scope and categories: last name, first name, patronymic; contact information: phone number, email address, identifiers on social networks and messengers; delivery address; bank card details; INN; identification document data; information collected by web analytics services: IP address, cookies; device specifications, operating system and browser; information about user behavior on the site: pages viewed, session time, clicks, transitions, scroll depth; geolocation data; other data independently provided by the site visitor, if it is necessary to achieve the goal, for example: customer preferences, location address, etc.
Processing operations: Collection, Recording, Systematization, Accumulation, Storage, Refinement, Extraction, Use, Transfer, Deletion, Destruction
Processing time: Before the purposes of processing are achieved, the expiration of the consent to processing or withdrawal of consent, as well as the detection of unlawful processing of personal data, termination of activities
Purpose: Recruitment of personnel for vacant positions
Subject category: Applicants
Scope and categories: last name, first name, patronymic; email address; phone number; information about education, qualifications, work experience; results of professional training and/or completed test assignment; information about professional and personal qualities obtained during the interview; photographic image; other data independently provided the applicant.
Processing operations: Collection, Recording, Systematization, Accumulation, Storage, Refinement, Extraction, Use, Transfer, Deletion, Destruction
Processing time: Until the expiration of 30 days from the date of achievement of the processing goal — job closure.
Purpose: Organization, provision and regulation of labor and directly related relations
Category of subjects: Employees, Relatives of employees, Dismissed employees
Scope and categories: surname, first name, patronymic; year of birth; month of birth; date of birth; place of birth; marital status; income; gender; e-mail address; place of residence; registration address; phone number; SNILS; INN; citizenship; identity document data; bank card details; current account number; profession; position; information about work; attitude to military service, information about military registration; information about education;
Processing operations: Collection, Recording, Systematization, Accumulation, Storage, Refinement, Extraction, Use, Transfer, Deletion, Destruction
Processing time: Before the purposes of processing are achieved, the expiration of the consent to processing or withdrawal of consent, as well as the detection of unlawful processing of personal data, termination of activities
Purpose: Preparation, conclusion and execution of a civil law contract;
Category of subjects: Counterparties, Representatives of counterparties, Clients
Scope and categories: surname, first name, patronymic; year of birth; month of birth; date of birth; e-mail address; place of residence; registration address; telephone number; SNILS; INN; identification document data; current account number; other information voluntarily provided by the personal data subject in messages, comments, correspondence, attached files, and oral communications, if they relate to the conclusion or execution of the contract, for example: delivery address, customer preferences, etc.
Processing operations: Collection, Recording, Systematization, Accumulation, Storage, Refinement, Extraction, Use, Transfer, Deletion, Destruction
Processing time: Before the purposes of processing are achieved, the expiration of the consent to processing or withdrawal of consent, as well as the detection of unlawful processing of personal data, termination of activities
Purpose: To ensure corporate governance and documentation of participants, including interaction with banks, notaries, counterparties and government agencies
Category of subjects: Participants in a limited liability company
Scope and categories: surname, first name, patronymic; year of birth, month of birth, date of birth; place of birth; e-mail address; place of residence; registration address; telephone number; INN; nationality; identity document data; information about the share of participation; details of powers of attorney; and other information necessary to achieve the purpose of processing, provided voluntarily, or subject to processing in accordance with the requirements of the Charter, the legislation of the Russian Federation.
Processing operations: Collection, Recording, Systematization, Accumulation, Storage, Refinement, Extraction, Use, Transfer, Deletion, Destruction
Processing time: Before the purposes of processing are achieved, the expiration of the consent to processing or withdrawal of consent, as well as the detection of unlawful processing of personal data, termination of activities

4.3. Personal data is not processed by the Operator for the purpose of promoting goods, works, and services on the market through direct contacts with potential consumers via means of communication, as well as for political campaigning purposes.

5. Use of cookies and web analytics services

5.1. Cookies are small text files that are stored on the User's device (computer, tablet, smartphone, etc.) when visiting this website (yes, the Website). They contain information about the User's actions on the site and can be used for various purposes.

5.2. The Operator uses cookies:
5.2.1. To ensure the functioning of the Website (strictly necessary cookies): These files are necessary for the correct operation of the Site, navigation on it and the use of its main functions, for example, to maintain the session of an authorized User.
5.2.2. To analyze and improve the operation of the Website (analytical cookies): These files allow you to collect anonymized statistical information about how Users interact with the Site, which pages are most popular, and identify technical problems. This helps the Operator to improve the quality of the Site.
5.2.3. For personalization and marketing (marketing cookies): These files can be used to remember User preferences and show them more relevant ads on other resources (retargeting).

5.3. By continuing to use the Site, the User agrees to the use of cookies by the Operator in accordance with this Policy. The user can completely delete cookies through his browser settings.

5.4. In order to achieve the goals specified in clause 5.2, the Operator uses third-party Internet services.
5.4.1. The Website uses the Yandex.Metrica web analytics service provided by Yandex LLC (OGRN 1027700229193, address: 119021, Moscow, Lva Tolstogo str., 16).

5.5. The Yandex.Metrica web analytics service collects and processes anonymized data about the Site User. The composition of this data is determined directly by the copyright holder of the service (Yandex LLC) and may include:
The user's IP address; location data (geolocation); technical data about the device and browser (type, version, screen resolution, operating system); behavior on the site (pages visited, time on the site, clicks, scrolling); cookies and other technical identifiers.

5.6. The Operator is not responsible for the use of the specified data by third parties (Yandex LLC). The terms of use of the Yandex.Metrica service are available on the copyright holder's official website.

5.7. The User may opt out of data collection by the Yandex.Metrica service and terminate the processing of their data for the specified purposes. To do this, use the special tool "Yandex.Metrica Blocker" (Yandex.Metrica Opt-out add-on), or disable (block) cookies in your browser settings.

5.8. The Operator draws attention to the fact that disabling or blocking cookies may result in limiting the functionality of the website or make it impossible to access some of its sections.

6. Principles and conditions of personal data processing

6.1. When processing personal data, the Operator adheres to the following principles:
 processing is carried out on a lawful and fair basis;
 processing is limited to achieving specific, pre-defined and legitimate purposes;
Processing of personal data incompatible with the purposes of their collection is not allowed;
It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other; - only personal data that meets the purposes of their processing is subject to processing;
The content and volume of personal data processed correspond to the stated purposes of processing;
The personal data being processed is not redundant in relation to the stated purposes of their processing;
when processing personal data, the accuracy of personal data, their sufficiency and, if necessary, relevance in relation to the purposes of personal data processing are ensured;
Necessary measures are being taken to delete or clarify incomplete or inaccurate personal data;
 personal data is stored in a form that makes it possible to identify the subject of personal data, no longer than the purposes of personal data processing require, unless the period of personal data storage is established by federal law, an agreement to which the personal data subject is a party, beneficiary or guarantor; the processed personal data is subject to destruction or depersonalization upon achievement of the goals processing or in case of loss of the need to achieve these goals, unless otherwise provided by the legislation of the Russian Federation.

6.2. The Operator performs both automated processing of personal data and without the use of automation tools. For the totality of the Operator's personal data processing operations, see section 3 of this Policy.

6.3. When collecting personal data, the Operator ensures the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data using databases located on the territory of the Russian Federation.

6.4. The Operator does not entrust the processing of personal data to other persons.

6.5. The Operator engages third parties to provide its products and services. For this purpose, the subject's personal data may be transferred to the following recipients or categories of recipients:

6.5.1. Payment service providers and credit organizations: persons who provide online payment acceptance and processing, as well as the provision of installment or loan services.
Transmitted data: full name, phone number, e-mail address, as well as payment details (card number, expiration date, holder's name, etc.).
Note: The payment information is transmitted directly to the appropriate payment processor to complete the transaction. The Operator does not collect, process, or store the specified payment details.

6.5.2. IT infrastructure and hosting service providers: persons who ensure the availability, storage and operation of the Operator's information systems (including CRM, servers, cloud data warehouses), as well as technical support and site administration.

6.5.3. Courier and postal services, logistics companies: persons providing delivery of goods and correspondence.
Transmitted data: full name, phone number, delivery address.

6.6. There is no cross-border transfer of personal data by the Operator.

6.7. The Operator ensures the confidentiality of personal data. The Operator's employees who have gained access to personal data do not disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by federal law.

6.8. The Operator may process publicly available personal data.

6.9. Processing of other categories of personal data is carried out by the Operator in compliance with the following conditions:
1) the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
2) the processing of personal data is necessary for the performance of an agreement to which the personal data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement on the initiative of the personal data subject or an agreement under which the personal data subject will be the beneficiary or guarantor. An agreement concluded with a personal data subject may not contain provisions restricting the rights and freedoms of the personal data subject, establishing cases of processing personal data of minors, unless otherwise provided for by the legislation of the Russian Federation, as well as provisions allowing inaction of the personal data subject as a condition for concluding the agreement.
3) the processing of personal data is necessary to achieve the goals stipulated by an international treaty of the Russian Federation or a law, to carry out and fulfill the functions, powers and duties assigned to the operator by the legislation of the Russian Federation.

7. Implementation of personal data security measures

7.1. The Operator takes or ensures the adoption of necessary and sufficient legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions in relation to personal data.
Such Operator measures include:

1) a person responsible for organizing the processing of personal data has been appointed;

2) documents have been issued defining the Operator's policy regarding personal data processing, local acts on personal data processing, and local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation and eliminating the consequences of such violations.

3) the application of legal, organizational and technical measures to ensure the security of personal data has been ensured in accordance with Article 19 of this Federal Law on Personal Data;

4) internal control is carried out over the compliance of personal data processing with the Federal Law "On Personal Data" and regulatory legal acts adopted in accordance with it, requirements for personal data protection, operator's policy regarding personal data processing, and Operator's local acts;

5) an assessment of the harm that may be caused to personal data subjects in the event of a violation of the Federal Law "On Personal Data", the ratio of the specified harm and the measures taken to ensure the fulfillment of obligations provided for by the Federal Law "On Personal Data" is ensured;

6) employees who directly process personal data are familiar with the provisions of the legislation of the Russian Federation on personal data, including requirements for personal data protection, documents defining the Operator's policy regarding personal data processing, local acts on personal data processing, and training of these employees has been conducted.

7) threats to the security of personal data during their processing in personal data information systems have been identified, current threat models are being applied and measures are being taken to neutralize them, machine storage of personal data is being recorded, measures are being taken to ensure the security of personal data and the level of security of personal data information systems, access by unauthorized persons to premises intended for for processing personal data.

7.2. The Operator, in accordance with the established procedure, ensures interaction with the state system for detecting, preventing and eliminating the consequences of computer attacks on information resources of the Russian Federation, including informing the federal executive governmental body authorized in the field of security about computer incidents that have resulted in the unlawful transfer (provision, dissemination, access) of personal data.

8. Processing of personal data carried out without the use of automation tools

8.1. Personal data, when processed without the use of automation tools, is separated from other information, in particular by recording them on separate tangible personal data carriers (hereinafter referred to as tangible media), in special sections or in the fields of forms (forms).

8.2. When recording personal data on tangible media, it is not allowed to record personal data on one tangible medium, the purposes of processing which are obviously incompatible. For the processing of various categories of personal data carried out without the use of automation tools, a separate physical medium is used for each category of personal data.

8.3. Persons who process personal data without the use of automation tools are informed about the fact that they process personal data processed by the Operator without the use of automation tools, the categories of personal data being processed, as well as the specifics and rules for such processing established by regulatory legal acts of the Russian Federation, as well as local legal acts of the Operator.

8.4. When using standard forms of documents, the nature of the information in which presupposes or allows the inclusion of personal data in them (hereinafter referred to as the standard form), the following conditions are met::
the standard form or related documents (instructions for completing it, cards, registers and journals) contain information about the purpose of personal data processing carried out without the use of automation tools, the name(s) and address of the Operator, the surname, first name, patronymic and address of the personal data subject, the source of personal data, the processing time personal data, a list of actions with personal data that will be performed during their processing, a general description of the methods used by the Operator for processing personal data;
The standard form provides for a field in which the personal data subject can mark his consent to the processing of personal data carried out without the use of automation tools, if necessary, to obtain written consent to the processing of personal data.;
The standard form is drawn up in such a way that each of the subjects of personal data contained in the document has the opportunity to get acquainted with their personal data contained in the document without violating the rights and legitimate interests of other subjects of personal data.;
The standard form excludes combining fields intended for entering personal data, the purposes of processing which are obviously incompatible.

8.5. If the purposes of processing personal data recorded on one physical medium are incompatible, if the physical medium does not allow processing personal data separately from other personal data recorded on the same medium, measures are taken to ensure separate processing of personal data, in particular:
If it is necessary to use or distribute certain personal data separately from other personal data located on the same physical medium, the personal data subject to distribution or use is copied in a way that excludes simultaneous copying of personal data not subject to distribution and use, and a copy of the personal data is used (distributed).;
If it is necessary to destroy or block part of the personal data, the material medium is destroyed or blocked with preliminary copying of information that is not subject to destruction or blocking, in a way that excludes simultaneous copying of personal data that is subject to destruction or blocking.

8.6. The destruction or depersonalization of a part of personal data, if permitted by a tangible medium, may be carried out in a manner that excludes further processing of this personal data while preserving the possibility of processing other data recorded on a tangible medium (deletion, erasure). The provisions provided for in this clause and clause 7.5 of this Policy also apply if it is necessary to ensure separate processing of personal data recorded on the same physical medium and information that is not personal data.

8.7. Clarification of personal data when processing them without the use of automation tools is carried out by updating or changing data on a tangible medium, and if this is not allowed by the technical features of the tangible medium, by fixing information about changes made to them on the same tangible medium or by manufacturing a new tangible medium with updated personal data.
8.8. Measures to ensure the security of personal data during their processing, carried out without the use of automation tools:
The processing of personal data, carried out without the use of automation tools, is carried out in such a way that, for each category of personal data, it is possible to determine the storage locations of personal data (tangible media) and establish a list of persons who process personal data or have access to it.;
 separate storage of personal data (tangible media) is provided, the processing of which is carried out for various purposes;
When storing physical media, conditions are met that ensure the safety of personal data and exclude unauthorized access to them. The list of measures necessary to ensure such conditions, the procedure for their adoption, as well as the list of persons responsible for the implementation of these measures, are established by the Operator.

 9. Updating, correction, deletion and destruction of personal data. Responses to requests from subjects for access to personal data

9.1. Rights of personal data subjects:

9.1.1. The right of the personal data subject to access his/her personal data:

1) The personal data subject has the right to receive information (hereinafter referred to as the information requested by the subject) concerning the processing of his personal data, including information containing:
 confirmation of the fact of personal data processing by the Operator;
 legal grounds and purposes of personal data processing;
the purposes and methods of personal data processing used by the Operator;
 the name and location of the Operator, information about persons (with the exception of the Operator's employees, if any) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Operator or on the basis of federal law;
processed personal data related to the relevant personal data subject, the source of their receipt, unless another procedure for submitting such data is provided by federal law;
terms of personal data processing, including the terms of their storage;
 the procedure for the exercise by the personal data subject of the rights provided for by the Federal Law "On Personal Data";
 information about the implemented or proposed cross-border data transfer;
 the name or surname, first name, patronymic and address of the person who processes personal data on behalf of the Operator, if the processing is or will be entrusted to such a person;
information about the ways in which the operator fulfills the duties established by Article 18.1 of the Federal Law "On Personal Data";
other information provided by the Federal Law "On Personal Data" or other federal laws.
2) The personal data subject has the right to receive the information requested by the subject, except in cases where the access of the personal data subject to his personal data violates the rights and legitimate interests of third parties.

3) The personal data subject has the right to require the Operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as to take legally prescribed measures to protect their rights.

4) The information requested by the subject must be provided to the personal data subject from the Operator in an accessible form, and it must not contain personal data related to other personal data subjects, except in cases where there are legitimate grounds for the disclosure of such personal data.

5) The requested information is provided to the personal data subject or his representative by the Operator within 10 working days from the date of the request or upon receipt of the request from the personal data subject or his representative. The specified period may be extended, but not for more than 5 working days if the Operator sends a reasoned notification to the subject of personal data indicating the reasons for extending the deadline for providing the requested information. The request must contain the number of the main identity document of the personal data subject or his representative, information about the date of issue of the specified document and the issuing authority, information confirming the participation of the personal data subject in relations with the Operator (contract number, 05.11.2025 conclusion of the contract, conditional verbal designation and (or) other information), or information, otherwise confirming the fact of personal data processing by the Operator, the signature of the personal data subject or his representative (hereinafter referred to as the information required for the request). The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation. The operator provides information to the personal data subject or his representative in the form in which the relevant request or request is sent, unless otherwise specified in the request or request.

6) If the information requested by the subject, as well as the personal data being processed, has been provided to the personal data subject for review upon his request, the personal data subject has the right to contact the Operator again or send a repeat request in order to receive the information requested by the subject and familiarize himself with such personal data no earlier than 30 days after the initial request or referral the initial request, unless a shorter period is established by federal law, a regulatory legal act adopted in accordance with it or an agreement to which the personal data subject is a party or beneficiary or guarantor.

7) The personal data subject has the right to contact the Operator again or send a repeat request in order to obtain the information requested by the subject, as well as to familiarize himself with the personal data being processed before the expiration of the period specified in subparagraph 6 of paragraph 8.1.1. of these Regulations, if such information and (or) the personal data being processed have not been provided to him for full review based on the results of consideration of the initial appeal. The repeated request, along with the information necessary for the request, must contain a justification for sending the repeated request.

8) The operator has the right to refuse the subject of personal data to fulfill a repeated request that does not comply with the conditions of the repeated request. Such a refusal must be motivated. The Operator is responsible for providing evidence of the validity of the refusal to fulfill the repeated request.
9.1.2. The right to appeal against the actions or omissions of the Operator:
1) If the personal data subject believes that the Operator is processing his personal data in violation of the requirements of the Federal Law "On Personal Data" or otherwise violates his rights and freedoms, the personal data subject has the right to appeal the actions or omissions of the Operator to the authorized body for the protection of the rights of personal data subjects or in court.
2) The subject of personal data has the right to protect his rights and legitimate interests, including compensation for damages and (or) compensation for moral damage in court.

9.2. Obligations of the Operator:

9.2.1. Obligations of the Operator when collecting personal data:

1) When collecting personal data, the Operator provides the personal data subject, at his request, with the requested information regarding the processing of his personal data in accordance with part 7 of Article 14 of the Federal Law "On Personal Data".

2) If the provision of personal data and (or) consent to the processing of personal data by the Operator is mandatory in accordance with federal law, the Operator explains to the personal data subject the legal consequences of refusing to provide his personal data and (or) consent to their processing.

3) If personal data is not received from the personal data subject, the Operator, prior to the start of processing such personal data, provides the personal data subject with the following information (hereinafter referred to as information provided upon receipt of personal data not from the personal data subject):
 the name or surname, first name, patronymic and address of the Operator;
The purpose of personal data processing and its legal basis;
, list of personal data;
 intended users of personal data;
The rights of the personal data subject established by the Federal Law "On Personal Data";
 the source of receiving personal data.
4) The operator does not provide the subject with information provided upon receipt of personal data not from the subject of personal data, in cases where:
The personal data subject has been notified about the processing of his personal data by the Operator;
Personal data was obtained by the Operator on the basis of a federal law or in connection with the execution of a contract to which the personal data subject is a party or beneficiary or guarantor.;
The processing of personal data authorized by the personal data subject for dissemination is carried out in compliance with the prohibitions and conditions provided for in Article 10.1 of 27.06.2006 No. 152-FZ "On Personal Data";
The operator processes personal data for statistical or other research purposes, for the professional activity of a journalist, or for scientific, literary or other creative activities, provided that the rights and legitimate interests of the personal data subject are not violated.;
 providing the personal data subject with information provided upon receipt of personal data not from the personal data subject violates the rights and legitimate interests of third parties.

9.2.2. Obligations of the Operator when contacting the personal data subject or when receiving a request from the personal data subject or his representative, as well as the authorized body for the protection of the rights of personal data subjects:

1) The operator, in accordance with the established procedure, informs the personal data subject or his representative about the availability of personal data related to the relevant personal data subject, and also provides an opportunity to get acquainted with these personal data when contacting the personal data subject or his representative, or within 10 working days from the date of receipt of the request from the personal data subject or his representative. The specified period may be extended, but not for more than 5 working days if the Operator sends a reasoned notification to the subject of personal data indicating the reasons for extending the deadline for providing the requested information.

2) In case of refusal to provide information about the availability of personal data about the relevant personal data subject or personal data to the personal data subject or his representative, upon their request or upon receipt of a request from the personal data subject or his representative, the Operator shall give a reasoned response in writing within a period not exceeding 10 working days from the date of the personal data subject's request or his representative, or from the date of receipt of the request from the personal data subject or his representative. The specified period may be extended, but not for more than 5 working days if the Operator sends a reasoned notification to the subject of personal data indicating the reasons for extending the deadline for providing the requested information.

3) The operator provides, free of charge, the personal data subject or his representative with the opportunity to get acquainted with personal data related to this personal data subject. Within a period not exceeding 7 business days from the date on which the personal data subject or his representative provides information confirming that the personal data is incomplete, inaccurate or outdated, the Operator makes the necessary changes to them. Within a period not exceeding 7 business days from the date of submission by the personal data subject or his representative of information confirming that such personal data was illegally obtained or is not necessary for the stated purpose of processing, the Operator destroys such personal data. The operator notifies the personal data subject or his representative of the changes made and the measures taken and takes reasonable measures to notify third parties to whom the personal data of this subject has been transferred.

4) The operator shall inform the authorized body for the protection of the rights of personal data subjects upon request of this body of the necessary information within 10 working days from the date of receipt of such request. The specified period may be extended, but not for more than 5 working days, if the Operator sends a reasoned notification to the authorized body for the protection of the rights of personal data subjects, indicating the reasons for extending the deadline for providing the requested information.

9.2.3. Obligations of the operator to eliminate violations of the law committed during the processing of personal data, to clarify, block and destroy personal data:

1) In case of detection of unlawful processing of personal data when contacting the subject of personal data or his representative, or at the request of the subject of personal data or his representative or the authorized body for the protection of the rights of personal data subjects, the Operator blocks the unlawfully processed personal data related to this personal data subject, or ensures their blocking (if personal data processing is carried out by another person, acting on behalf of the Operator) from the moment of such request or receipt of the specified request for the verification period. In case of detection of inaccurate personal data when contacting the personal data subject or his representative, or at their request or at the request of the authorized body for the protection of the rights of personal data subjects, the Operator blocks personal data related to this personal data subject, or ensures their blocking (if the processing of personal data is carried out by another person acting on behalf of the Operator) from the moment of such request or receipt of the specified request for the verification period, if the blocking of personal data does not violate the rights and legitimate interests of the personal data subject or third parties.

2) In case of confirmation of the inaccuracy of personal data, the Operator, based on information provided by the personal data subject or his representative or the authorized body for the protection of the rights of personal data subjects, or other necessary documents, clarifies the personal data or ensures their clarification (if the processing of personal data is carried out by another person acting on behalf of the Operator) within 7 working days days from the date of submission of such information and removes the blocking of personal data.

3) In case of detection of unlawful processing of personal data carried out by the Operator or a person acting on behalf of the Operator, the Operator, within a period not exceeding 3 working days from the date of this detection, stops the unlawful processing of personal data or ensures the termination of the unlawful processing of personal data by a person acting on behalf of the Operator. If it is impossible to ensure the legality of the processing of personal data, the Operator, within a period not exceeding 10 working days from the date of detection of the unlawful processing of personal data, destroys such personal data or ensures their destruction. The Operator notifies the personal data subject or his representative about the elimination of violations or the destruction of personal data, and if the request of the personal data subject or his representative or the request of the authorized body for the protection of the rights of personal data subjects has been sent by the authorized body for the protection of the rights of personal data subjects, also the specified body.

4) If the fact of unlawful or accidental transfer (provision, dissemination, access) of personal data is established, which has resulted in a violation of the rights of personal data subjects, the Operator is obliged to notify the authorized body for the protection of the rights of personal data subjects from the moment such incident is identified by the operator, the authorized body for the protection of the rights of personal data subjects or another interested person.:
 within 24 hours about the incident, about the alleged causes that led to the violation of the rights of personal data subjects, and the alleged harm caused to the rights of personal data subjects, about the measures taken to eliminate the consequences of the relevant incident, as well as provide information about the person authorized by the Operator to interact with the authorized body for the protection of the rights of personal data subjects, for questions related to the identified incident;
 within 72 hours, on the results of the internal investigation of the identified incident, as well as provide information about the persons whose actions caused the identified incident (if any).

5) If the purpose of personal data processing is achieved, the Operator stops processing personal data or ensures its termination (if personal data processing is carried out by another person acting on behalf of the Operator) and destroys personal data or ensures their destruction (if personal data processing is carried out by another person acting on behalf of the Operator) within a period not exceeding 30 days. days from the date of achievement of the purpose of personal data processing, unless otherwise provided by the contract to which the party, the beneficiary or guarantor of which is the personal data subject, by another agreement between the Operator and the personal data subject, or if the Operator is not entitled to process personal data without the consent of the personal data subject on the grounds provided for by the Federal Law "On Personal Data" or other federal laws.

6) If the personal data subject withdraws consent to the processing of his personal data, the Operator terminates their processing or ensures the termination of such processing (if the processing of personal data is carried out by another person acting on behalf of the Operator) and if the storage of personal data is no longer required for the purposes of personal data processing, destroys the personal data or ensures their destruction (if personal data is processed by another person acting on behalf of the Operator) on time, not exceeding 30 days from the date of receipt of the said withdrawal, unless otherwise provided by an agreement to which the personal data subject is a party, beneficiary or guarantor, or by another agreement between the Operator and the personal data subject, or if the Operator is not entitled to process personal data without the consent of the personal data subject on the grounds provided for by the Federal Law "On Personal Data personal data" or other federal laws.

7) If the personal data subject applies to the Operator with a request to terminate the processing of personal data, the operator must, within a period not exceeding 10 working days from the date of receipt by the operator of the relevant request, terminate their processing or ensure the termination of such processing (if such processing is carried out by the person processing personal data), except for the cases provided for by The Federal Law "On Personal Data". The specified period may be extended, but not for more than 5 working days if the operator sends a reasoned notification to the subject of personal data indicating the reasons for extending the deadline for providing the requested information.

8) If it is not possible to destroy personal data within the specified period, the Operator blocks such personal data or ensures their blocking (if the processing of personal data is carried out by another person acting on behalf of the Operator) and ensures the destruction of personal data within no more than 6 months, unless another period is established by federal laws.

10. Responsibility

10.1. Persons guilty of violating the requirements of the Federal Law "On Personal Data" are liable in accordance with the legislation of the Russian Federation.

10.2. Moral damage caused to a personal data subject as a result of violation of his rights, violation of the rules for processing personal data established by the Federal Law "On Personal Data", as well as requirements for the protection of personal data established in accordance with the Federal Law "On Personal Data", is subject to compensation in accordance with the legislation of the Russian Federation. Compensation for moral damage is carried out independently of compensation for property damage and losses incurred by the personal data subject.

✖
Consultation with a specialist
or