Policy regarding the processing of personal data
Policy regarding the processing of personal data
1. General provisions
This Personal Data Processing Policy is drawn up in accordance with the requirements of the Federal Law of July 27, 2006. No. 152-ФЗ “On Personal Data” (hereinafter referred to as the Law on Personal Data) and determines the procedure for processing personal data and measures to ensure the safety of personal data taken by LLC Reform (hereinafter referred to as the Operator).
1.1. The operator sets his most important goal and condition for his activity to observe the rights and freedoms of man and citizen in the processing of his personal data, including protecting the rights to the inviolability of private life, personal and family secrets.
1.2. The operator’s real policy regarding the processing of personal data (hereinafter referred to as the policy) applies to all the information that the operator can receive about visitors to the website https://tapki.com.
2. Basic concepts used in politics
2.1. Automated personal data processing - processing of personal data using computer equipment.
2.2. Blocation of personal data - temporary termination of personal data processing (unless the processing is necessary to clarify personal data).
2.3. The website is a set of graphic and information materials, as well as computer programs and databases that provide their availability on the Internet at the network address https://tapki.com.
2.4. The information system of personal data is a set of personal data contained in the databases and ensuring their processing of information technologies and technical means.
2.5. Depreciation of personal data - actions, as a result of which it is impossible to determine without the use of additional information the belonging of personal data to a specific user or other subject of personal data.
2.6. Personal data processing - any action (operation) or a set of actions (operations) performed using automation tools or without using such means with personal data, including collection, record, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, removal, destruction of personal data.
2.7. The operator is a state body, municipal body, legal or individual, independently or together with other persons organizing and/or carrying out the processing of personal data, as well as determining the purpose of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data.
2.8. Personal data-any information related directly or indirectly to the specific or determined user of the website https://tapki.com.
2.9. Personal data allowed by the subject of personal data for distribution are personal data, access of an unlimited circle of persons to which is provided by the subject of personal data by giving consent to the processing of personal data allowed by the subject of personal data for distribution in the manner prescribed by the Law on Personal Data (hereinafter - personal data permitted for distribution).
2.10. User-any visitor to the website https://tapki.com.
2.11. The provision of personal data is actions aimed at disclosing personal data to a specific person or a certain circle of persons.
2.12. Distribution of personal data-any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or to familiarize yourself with the personal data of an unlimited circle of persons, including the publication of personal data in the media, posting in information and telecommunication networks or providing access to personal data in any other way.
2.13. A cross -border transfer of personal data - the transfer of personal data to the territory of a foreign state to the authority of a foreign state, a foreign physical or foreign legal entity.
2.14. The destruction of personal data is any actions, as a result of which personal data are destroyed irrevocably with the impossibility of further restoration of the content of personal data in the personal data information system and/or material carriers of personal data are destroyed.
3. Basic rights and obligations of the operator
3.1. The operator has the right:
Receive reliable information and/or documents containing personal data from the subject of personal data;- If the subject of personal data is called consent to the processing of personal data, as well as the direction of appeal with a request to terminate the processing of personal data, the operator has the right to continue processing personal data without the consent of the subject of personal data if there are grounds specified in the Law on Personal Data;
- To independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the duties provided for by the Law on Personal Data and the regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law on Personal Data or other federal laws.
3.2. The operator is obliged:
- Provide the subject of personal data at his request for information regarding the processing of his personal data;
- Organize the processing of personal data in the manner prescribed by the current legislation of the Russian Federation;
- Respond to appeals and requests of personal data subjects and their legal representatives in accordance with the requirements of the law on personal data;
- Report to the authorized body for the protection of the rights of personal data subjects at the request of this body the necessary information within 10 days from the date of receipt of such a request;
- To publish or otherwise provide unlimited access to this policy regarding the processing of personal data;
- Take legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destroy, change, block, copy, provide, distribute personal data, as well as from other unlawful actions in relation to personal data;
- Stop the transfer (distribution, provision, access) of personal data, stop processing and destroy personal data in the manner and cases provided for by the Law on Personal Data;
- Perform other duties provided for by the Law on Personal Data.
4. Basic rights and obligations of personal data subjects
4.1. Personal data entities have the right:
- Receive information regarding the processing of his personal data, with the exception of cases provided for by federal laws. Information is provided to the subject of personal data by the operator in an accessible form, and they should not contain personal data related to other personal data subjects, with the exception of cases when there are legal grounds for disclosing such personal data. The list of information and the procedure for its receipt is established by the Law on Personal Data;
- Demand from the operator to clarify his personal data, their blocking or destruction if personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the declared processing purpose, as well as take measures provided for by law to protect their rights;
- Put forward the condition for preliminary consent in the processing of personal data in order to promote goods, works and services in the market;
- To the review of consent to the processing of personal data, as well as to send the requirements for termination of the processing of personal data;
- Appeal to the authorized body for the protection of the rights of personal data subjects or in court unlawful actions or the inaction of the operator when processing his personal data;
- To the exercise of other rights provided for by the legislation of the Russian Federation.
4.2. Personal data are required:
- Provide the operator with reliable data about himself;
- Inform the operator about the clarification (update, change) of his personal data.
4.3. Persons who transferred the operator inaccurate information about themselves, or information about another subject of personal data without the consent of the latter, is liable in accordance with the legislation of the Russian Federation.
5. Principles of personal data processing
5.1. The processing of personal data is carried out on a legal and fair basis.
5.2. The processing of personal data is limited to the achievement of specific, predetermined and legal goals. The processing of personal data is not allowed, incompatible with the goals of the collection of personal data.
5.3. It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other.
5.4. Only personal data that meets the purpose of their processing are subject to processing.
5.5. The content and volume of the processed personal data correspond to the declared processing goals. The redundancy of the processed personal data in relation to the declared purposes of their processing is not allowed.
5.6. When processing personal data, the accuracy of personal data is ensured, their sufficiency, and, if necessary, and relevance in relation to the goals of the processing of personal data. The operator takes the necessary measures and/or ensures their adoption to delete or clarify incomplete or inaccurate data.
5.7. The storage of personal data is carried out in a form that allows you to determine the subject of personal data is no longer than this requires the purpose of processing personal data, if the shelf life of personal data is not established by federal law, an agreement, a party of which, the beneficiary or guarantor according to which the subject of personal data is. The processed personal data is destroyed or impersoned by achieving the goals of processing or in case of loss of need to achieve these goals, unless otherwise provided by federal law.
6. Purpose of personal data processing
6.1. Purpose of processing: informing the user by sending emails
6.2. Personal data: surname, name, patronymic; email address; Phone numbers
6.3. Legal grounds: Federal Law "On Information, Information Technologies and On Information Protection" dated 07.27.2006 N 149-ФЗ
6.4. Types of personal data processing: collection, recording, systematization, accumulation, storage, destruction and depersonalization of personal data; Sending information letters to the email address
7. Conditions for processing personal data
7.1. The processing of personal data is carried out with the consent of the subject of personal data to the processing of his personal data.
7.2. The processing of personal data is necessary to achieve the goals stipulated by the International Treaty of the Russian Federation or the Law, to exercise functions, powers and duties assigned by the legislation of the Russian Federation.
7.3. The processing of personal data is necessary for the administration of justice, the execution of the judicial act, the act of another body or official to execute in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. The processing of personal data is necessary for the execution of an agreement, the party of which either the beneficiary or guarantor under which is the subject of personal data, as well as for the conclusion of the contract at the initiative of the subject of personal data or the agreement under which the subject of personal data will be the beneficiary or guarantor.
7.5. The processing of personal data is necessary for the exercise of the rights and legitimate interests of the operator or third parties or to achieve socially significant goals, provided that the rights and freedoms of the subject of personal data are not violated.
7.6. Personal data is processed, access to an unlimited circle of persons to which is provided by the subject of personal data or at his request (hereinafter - public personal data).
7.7. The processing of personal data to be published or mandatory disclosure is carried out in accordance with federal law.
8. The procedure for collecting, storage, transfer and other types of personal data processing
The safety of personal data that is processed by the operator is ensured by the implementation of legal, organizational and technical measures necessary to fulfill the fulfillment of the current legislation in the field of personal data protection.
8.1. The operator ensures the safety of personal data and takes all possible measures that exclude access to the personal data of unauthorized persons.
8.2. Personal data of the user will never, under any conditions, will not be transferred to third parties, with the exception of cases related to the implementation of the current legislation or if the subject of personal data consent to the operator to transfer data to a third party to fulfill obligations under a civil law contract.
8.3. If inaccuracies are detected in personal data, the user can update them independently, by sending the operator to notification to the email address of the operator info@tapki.com with the note “Actualization of personal data”.
8.4. The process of processing personal data is determined by the achievement of the goals for which personal data was collected, unless otherwise provided by the contract or applicable law.
The user can at any time withdraw his consent to the processing of personal data by sending the operator a notification by e -mail to the email address of the operator info@tapki.com marked "Review of consent to the processing of personal data".
8.5. All information that is collected by third -party services, including payment systems, communications and other service providers, is stored and processed by the indicated persons (operators) in accordance with their user agreement and privacy policy. The subject of personal data and/or with the specified documents. The operator is not responsible for the actions of third parties, including the service providers specified in this paragraph.
8.6. Personal data prohibitions established by the subject of personal data, as well as processing or processing conditions (except for access) of personal data permitted for distribution, do not apply in cases of processing personal data in state, public and other public interests determined by the legislation of the Russian Federation.
8.7. The operator when processing personal data provides the confidentiality of personal data.
8.8. The operator storage of personal data in the form that allows you to determine the subject of personal data is no longer than the purpose of processing personal data requires, if the shelf life of personal data is not established by federal law, an agreement, a party of which, the beneficiary or guarantor under which the subject of personal data is.
8.9. The condition for the termination of the processing of personal data may be to achieve the goals of processing personal data, the expiration of the consent of the subject of personal data, the review of the consent by the subject of personal data or the requirement to terminate the processing of personal data, as well as the identification of unlawful processing of personal data.
9. The list of actions performed by the operator with the received personal data
9.1. The operator collects, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion and destruction of personal data.
9.2. The operator carries out automated processing of personal data with the receipt and/or transmitting information received on information and telecommunication networks or without it.
10. Cross -border transmission of personal data
10.1. The operator must notify the authorized body for the protection of the rights of personal data subjects about his intention to carry out a cross -border transfer of personal data (such a notification is sent separately from a notification of intention to process personal data).
10.2. The operator, before the submission of the above notification, is obliged to receive from the authorities of the foreign state, foreign individuals, foreign legal entities, which are planned to be a cross -border transfer of personal data, relevant information.
11. Privacy of personal data
The operator and other persons who have gained access to personal data are required to not disclose to third parties and not to disseminate personal data without the consent of the subject of personal data, unless otherwise provided by federal law.
12. Final provisions
12.1. The user can receive any clarifications on questions of interest to processing his personal data by contacting the operator using info@tapki.com.
12.2. This document will reflect any changes in the policy of processing personal data by the operator. Politics acts indefinitely until its new version is replaced.
12.3. The current version of the policy in the public domain is located on the Internet at https://tapki.com/privacy.