This Privacy Policy for Personal Data (hereinafter referred to as the “Privacy Policy”) applies to all information that the Company’s website, located at the domain name https://nko-mssp.ru, may obtain about the User while the User is using the Company’s website, programs, and products.
TERMS AND DEFINITIONS
1.1. The following terms are used in this Privacy Policy:
1.1.1. “The Company’s Website Administration (hereinafter referred to as the “Website Administration”)” — authorized employees responsible for managing the website, acting on behalf of the NPO Union “MSSP”, who organize and/or carry out the processing of personal data, as well as determine the purposes of personal data processing, the scope of personal data to be processed, and the actions (operations) performed with personal data.
1.1.2. “Personal Data” — any information relating directly or indirectly to a specifically identified or identifiable User of the website (the subject of personal data).
1.1.3. “Processing of Personal Data” — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
1.1.4. “Confidentiality of Personal Data” — a mandatory requirement for the Operator or any other person who has gained access to personal data not to allow their distribution without the consent of the subject of personal data or the existence of another legal basis.
1.1.5. “User of the Company’s Website (hereinafter referred to as the “User”)” — a person who has access to the Website via the Internet and uses the Company’s Website.
1.1.6. “Cookies” — a small piece of data sent by a web server and stored on the User’s computer, which the web client or web browser sends back to the web server in an HTTP request each time an attempt is made to open a page of the corresponding website.
1.1.7. “IP Address” — a unique network address of a node in a computer network built using the IP protocol.
1.1.8. “Personal Data Information System” — a set of personal data contained in databases and the information technologies and technical means that ensure their processing.
1.1.9. “Depersonalization of Personal Data” — actions as a result of which it becomes impossible to determine, without using additional information, to which specific User or other subject of personal data the personal data belongs.
1.1.10. “Provision of Personal Data” — actions aimed at disclosing personal data to a specific person or a specific group of persons.
1.1.11. “Distribution of Personal Data” — any actions aimed at disclosing personal data to an indefinite group of persons (transfer of personal data) or at making personal data available to an unlimited number of persons, including the publication of personal data in the media, posting in information and telecommunications networks, or providing access to personal data by any other means.
1.1.12. “Cross‑Border Transfer of Personal Data” — the transfer of personal data to the territory of a foreign state to a government authority of a foreign state, a foreign individual, or a foreign legal entity.
1.1.13. “Destruction of Personal Data” — any actions as a result of which personal data are permanently destroyed and cannot be further recovered in the personal data information system and/or the physical media containing personal data are destroyed.
- GENERAL PROVISIONS
2.1. The User’s use of the Company’s website means acceptance of this Privacy Policy and the terms of processing the User’s personal data.
2.2. If the User disagrees with the terms of the Privacy Policy, the User must stop using the Company’s website.
2.3. This Privacy Policy applies only to the Company’s website. The Company does not control and is not responsible for third‑party websites to which the User may navigate via links available on the Company’s website.
2.4. The Company’s Website Administration does not verify the accuracy of the personal data provided by the User of the Company’s website.
- SUBJECT OF THE PRIVACY POLICY
3.1. This Privacy Policy establishes the obligations of the Company’s Website Administration to maintain confidentiality and ensure the protection of the confidentiality of personal data that the User provides upon request of the Website Administration when registering on the Company’s website or when submitting an application.
3.2. The personal data permitted for processing under this Privacy Policy are provided by the User by filling out the registration form on the Company’s Website and include the following information:
3.2.1. the User’s surname, first name, and patronymic;
3.2.2. the User’s contact phone number;
3.2.3. the region;
3.2.4. the phone number;
3.2.5. the User’s email address.
3.3. Personal data processing is carried out using the Yandex Metrica and Top.Mail metric systems:
- IP address;
- information from cookies;
- information about the browser (or other program that provides access to displaying advertisements);
- access time;
- the address of the page where the advertising block is located;
- referrer (the address of the previous page).
Processing of personal data using the Yandex Metrica and Top.Mail metric systems is used for the purpose of conducting web analytics and analyzing user behavior to improve the website’s performance.
3.3.1. Disabling cookies may result in the inability to access parts of the Company’s website that require authorization.
3.3.2. The Company collects statistics on the IP addresses of its visitors. This information is used to identify and resolve technical issues.
3.4. Any other personal information not specified above (e.g., browsers and operating systems used, etc.) shall be securely stored and not disclosed, except in the cases provided for in clauses 5.2 and 5.3 of this Privacy Policy.
- PURPOSES FOR COLLECTING THE USER’S PERSONAL INFORMATION
4.1. The Company’s Website Administration may use the User’s personal data for the purpose of promoting goods, works, and services in the market. To achieve this purpose, the Website Administration performs the following actions:
4.1.1. Identifying the User registered on the Company’s website to establish feedback.
4.1.2. Providing the User with access to personalized resources of the Company’s Website.
4.1.3. Establishing feedback with the User, including sending notifications and requests regarding the use of the Company’s Website, the provision of services, and processing the User’s requests and applications.
4.1.4. Determining the User’s location for security purposes and to prevent fraud.
4.1.5. Providing the User with effective customer and technical support in case of problems related to the use of the Company’s Website.
4.1.6. Providing the User, with their consent, with product updates, special offers, price information, newsletters, and other information on behalf of the Company or its partners.
4.1.7. Conducting advertising activities with the User’s consent.
4.1.8. Providing the User with access to the websites or services of the Company’s partners to obtain products, updates, and services.
- METHODS AND PERIODS FOR PROCESSING PERSONAL INFORMATION
5.1. Processing of the User’s personal data is carried out on a lawful and fair basis.
5.2. Processing of personal data is limited to achieving specific, predefined, and lawful purposes. Processing of personal data incompatible with the purposes for which the personal data were collected is not permitted.
5.3. Merging databases containing personal data processed for incompatible purposes is not allowed.
5.4. Only personal data relevant to the purposes of their processing are subject to processing.
5.5. The content and volume of the processed personal data correspond to the stated purposes of processing. Excessive processing of personal data relative to the stated purposes is not permitted.
5.6. During personal data processing, the accuracy, sufficiency, and, where necessary, the relevance of the personal data with respect to the purposes of processing are ensured. The Operator takes the necessary measures and/or ensures their implementation to delete or update incomplete or inaccurate data.
5.7. Personal data are stored in a form that allows identifying the subject of personal data for as long as required for the purposes of personal data processing, unless the retention period for personal data is established by federal law, a contract to which the subject of personal data is a party, beneficiary, or guarantor, or until the subject of personal data withdraws their consent (clause 5.9 of the Policy).
5.8. Processed personal data are destroyed or depersonalized once the processing purposes are achieved or if there is no longer a need to achieve these purposes, unless otherwise provided by federal law. The destruction of personal data is carried out by deletion, and a corresponding act is drawn up. The User may revoke their consent to the processing of personal data at any time by sending a notification to the Website Administrator via email to the Administrator’s email address info@nko-mssp.ru with the subject line “Revocation of Consent to the Processing of Personal Data”.
5.9. The conditions for terminating the processing of personal data may include achieving the purposes of personal data processing, the expiration of the consent period granted by the subject of personal data, the revocation of consent by the subject of personal data or a request to terminate the processing of personal data, as well as the identification of unlawful processing of personal data.
5.10. The Website Administration and other persons who have gained access to personal data are obliged not to disclose or distribute personal data to third parties without the consent of the subject of personal data, unless otherwise provided by federal law. The Website Administration takes the necessary organizational and technical measures to protect the User’s personal information from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions by third parties.
5.11. The Website Administration, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s personal data.
5.12. The Website Administration does not carry out cross‑border transfers of the Users’ personal data and does not entrust the processing of such data to a foreign individual or legal entity.
- OBLIGATIONS OF THE PARTIES
6.1. The User is obliged to:
6.1.1. Provide the personal data information necessary to use the Company’s Website.
6.1.2. Update or supplement the provided personal data information if this information changes.
6.2. The Website Administration is obliged to:
6.2.1. Use the received information exclusively for the purposes specified in clause 4 of this Privacy Policy.
6.2.2. Ensure that confidential information is kept secret, not disclosed without the User’s prior written permission, and not sold, exchanged, published, or disclosed by any other possible means of the User’s submitted personal data, except as provided in clauses 5.2 and 5.3 of this Privacy Policy.
6.2.3. Take precautionary measures to protect the confidentiality of the User’s personal data in accordance with the procedures commonly used to protect such information in current business practice.
6.2.4. Block the personal data relating to the relevant User from the moment of the User’s or their legal representative’s request or the request of an authorized body for the protection of subjects’ personal data rights for the duration of the audit, in the event of identifying inaccurate personal data or unlawful actions.
- LIABILITY OF THE PARTIES
7.1. The Website Administration that has failed to fulfill its obligations shall be liable for the losses incurred by the User due to the unlawful use of personal data in accordance with the legislation of the Russian Federation, except in the cases provided for in clauses 5.2, 5.3, and 7.2 of this Privacy Policy.
7.2. In the event of loss or disclosure of Confidential Information, the Website Administration shall not be liable if the confidential information:
7.2.1. Became public before its loss or disclosure.
7.2.2. Was received from a third party prior to its receipt by the Website Administration.
7.2.3. Was disclosed with the User’s consent.
- DISPUTE RESOLUTION
8.1. Before filing a lawsuit regarding disputes arising from the relationship between the User of the Company’s website and the Website Administration, it is mandatory to submit a claim (a written proposal for the voluntary settlement of the dispute).
8.2. The recipient of the claim shall, within 30 calendar days from the date of receipt of the claim, notify the claimant in writing of the results of the claim review.
8.3. If no agreement is reached, the dispute will be submitted to a judicial authority in accordance with the current legislation of the Russian Federation.
8.4. This Privacy Policy and the relationship between the User and the Website Administration are governed by the current legislation of the Russian Federation.
- ADDITIONAL PROVISIONS
9.1. The Website Administration has the right to amend this Privacy Policy without the User’s consent.
9.2. The new Privacy Policy comes into force from the moment it is posted on the Company’s Website, unless otherwise provided in the new version of the Privacy Policy.
9.3. All suggestions or questions regarding this Privacy Policy should be sent to: info@nko-mssp.ru