PERSONAL DATA PROCESSING POLICY

GENERAL PROVISIONS

1.1. This Personal Data Processing Policy (hereinafter - the Policy) is developed in accordance with the Constitution of the Russian Federation, the Civil Code of the Russian Federation, Federal Law of July 27, 2006 No. 149-ФЗ "On Information, Information Technologies and Information Protection," Federal Law of July 27, 2006 No. 152-ФЗ "On Personal Data" (hereinafter - the Law "On Personal Data") and the regulatory acts adopted in accordance with them of the Russian Federation.
1.2. Concepts related to the processing of personal data are used in the sense in which they are given in Art. 3 of the Law "On Personal Data," unless otherwise directly follows from the text of the Policy.
1.3. The purpose of this Policy is to determine the procedure for collecting, recording, systematizing, accumulating, storing, clarifying (updating, changing), retrieving, using, transmitting (distributing, providing, accessing), depersonalizing, blocking, deleting, destroying personal data processed by Individual Entrepreneur Jaroslaslavovich Frantsev.
1.4. Real Policy:
1.4.1 Establishes the rules for processing personal data provided by Individual entrepreneur Frantsev Jaroslavovich (hereinafter - the Operator) by customers who use the site https://radisvetafest.com and its separate services to receive services (hereinafter - Users and the Site, respectively);
1.4.2. Defines the purposes, legal grounds, procedure and scope of personal data processed;
1.4.3. Contains information about the implemented requirements for the protection of processed personal data;
1.4.4. Defines the procedure for interaction with personal data subjects when complaints are received from them.
1.5. The Policy text is available to Users on the Internet at https://radisvetafest.com. In case of disagreement with the terms of the Policy, the User shall immediately cease any use of the Site.

TERMS AND DEFINITIONS

2.1. Personal data - any information related directly or indirectly to a specific or determined individual (personal data subject).
2.2. Personal data processing - any action or set of actions performed using automation means or without the use of such means with personal data, including collection, recording, systematization, accumulation, storage, refinement (updating, modification), extraction, use, depersonalization, blocking, deletion, destruction of personal data.
2.3. Automated processing of personal data - processing of personal data using computer equipment.
2.4. Provision of personal data - actions aimed at revealing personal data to a certain person or a certain circle of persons.
2.5. Personal data blocking - temporary termination of personal data processing (except when processing is necessary to clarify personal data).
2.6. Use of personal data - actions (operations) with personal data performed by the Operator in order to make decisions or perform other actions that give rise to legal consequences against the personal data subject or other persons or otherwise affecting the rights and freedoms of the personal data subject or other persons.
2.7. Depersonalization of personal data - actions that make it impossible without the use of additional information to determine the belonging of personal data to a particular subject of personal data.
2.8. Destruction of personal data - actions that make it impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed.
2.9. Platform - software used by the Operator, which is a set of interconnected web services and modules that make up a single space for providing services on the Internet.
2.10. User Agreement - an agreement posted on the Internet at the address: https://radisvetafest.com/, which is an offer of the Operator to enter into an agreement with any third party using the Site on the terms provided for in the User Agreement.
2.11. The site is a collection of information, texts, graphic elements, design, images, photos and videos and other results of intellectual activity, as well as computer programs contained in the information system that ensures the availability of such information on the Internet at a network address (including subdomains): https://radisvetafest.com/.
2.12. Cookies - data that are automatically transmitted to the Operator during the use of the Site using the software installed on the User's device, including IP address, geographical location, information about the browser and the type of operating system of the User's device, technical specifications of the equipment and software used by the User, date and time of access to the Site.

USER'S CONSENT TO PERSONAL DATA PROCESSING

3.1. The User accepts the terms of the Policy and gives the Operator informed and informed consent to the processing of his personal data on the terms and conditions stipulated by the Policy and the Law:
3.1.1. When registering on the Site - for personal data that the User provides to the Operator by filling out the registration form located on the Site. The User shall be deemed to have consented to the processing of his/her personal data when ticked in the field "I Accept the Terms of the User Agreement and agree to the processing of my/her personal data" at the time of clicking the registration button;
By pressing the above button, the User agrees to transfer to the Operator all personal data that were made publicly available to them by indicating in the profile of the corresponding social network or electronic service.
3.1.2. When subscribing for information and news materials from the Operator - by filling out the form for subscribing to the newsletter located on the Website on the Internet. The subscription form is available after you complete the registration process. The User shall be deemed to have consented to the processing of his/her personal data by ticking the box "I Accept the Terms of the User Agreement and agree to the processing of my/her personal data" at the time of clicking the subscription button.
3.1.3. In case of any use of the Site - for personal data, which are automatically transferred to the Operator during the use of the Site using the software installed on the User's device. The User shall be deemed to have consented to the processing of his/her personal data at the time of the beginning of use of the Site.
3.2. The User's consent to the processing of his personal data by the Operator shall be valid from the day of granting consent to their processing (Clause 3.1. Policies), and during the period necessary to achieve the goals of personal data processing.
3.3. The User shall have the right to withdraw consent to processing of personal data in the form and procedure stipulated in Section 11 of the Policy.

TERMS OF PROVIDING PERSONAL DATA BY USER

4.1. In general, the site does not verify the authenticity of personal information provided by users and does not control their legal capacity.
4.2. The operator assumes that:
4.2.1. The user provides reliable and sufficient personal information on the issues offered in the forms of these resources and keeps this information up to date.
4.2.2. If you download your image through the Site's personal account, the User shall agree free of charge to use this image (Article 152.1 of the Civil Code) for purposes not related to the identification of the User. The User undertakes not to provide photos of third parties as an image of the User.
4.3. The User understands that the information on the Site posted by the User about itself may become available to other Users of the Site, may be copied and distributed by such Users in cases and under the conditions specified in Clause 8.6. Politicians.
4.4. The User is familiar with this Policy and expresses his informed and informed consent to it.

ACCESS TO PERSONAL DATA

Personal data of the User processed by the Operator include:
5.1. Surname, name;
5.2. Mobile phone number;
5.3. City of residence;
5.4. E-mail address;
5.5. Information on where the User learned about the event;
5.6. Cookies.

LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Processing of personal data of Users is carried out on the following legal grounds:
6.1. Constitution of the Russian Federation;
6.2. Civil Code of the Russian Federation;
6.3. Federal law of 27.07.2006 No. 152-FZ "About Personal Data";
6.4. Federal Law of July 27, 2006 No. 149-ФЗ "On Information, Information Technologies and on the Protection of Information";
6.5. User Agreement and other agreements located on the Site https://radisvetafest.com/

PURPOSES OF PERSONAL DATA PROCESSING

The Operator processes the personal data of the Users solely for the following purposes:
7.1. Registration of the User by the Operator on the Site, providing the User with the possibility of full use of the services of the Site.
7.2. Establishing and maintaining communication between the User and the Operator, advising on the provision of services.
7.3. Performance of the Operator's obligations to the User, which accepted the Public Offer for the conclusion of the Service Agreement dated June 18, 2020.
7.4. Performance of the Operator's obligations to the User, which accepted the Public Offer for conclusion of the User Agreement dated June 18, 2020.
7.5. Sending advertising messages to the e-mail address of the User, targeting advertising materials.
7.6. Improvement of service quality of Users and modernization of the Operator's Site by processing requests and requests from the User.
7.7. Statistical and other studies based on the impersonal information provided by the User.

PERSONAL DATA PROCESSING

8.1. Personal data of the User shall be processed by the Operator using databases on the territory of the Russian Federation.
8.2. Personal data is processed using automated systems.
8.3. Processing of the User's personal data includes performing the following actions by the Operator: collection, recording, systematization, accumulation, storage, refinement (updating, modification), extraction, use, depersonalization, blocking, removal, destruction.
8.4. The User's personal data shall be collected in the cases specified in Clause 3.1 of the Policy.
8.5. Personal data shall be stored (whichever occurs earlier):
8.5.1. Until the moment of their destruction by the Operator - in case of withdrawal from the User of consent to the processing of personal data or a requirement for the destruction of personal data;
8.5.2. Until consent expires or personal data processing objectives are achieved.
8.6. Distribution of personal data may be carried out by the Operator in the following cases:
8.6.1. In order to post feedback on services provided by the Operator left by the Users in various sources of information.
8.6.2. In order to place video and photo materials obtained in the process of providing services in various sources of information.
8.7. The Operator has the right to transfer personal data to third parties.
8.7.1. Execution of the terms of the agreement to the Users of the Site with the involvement of third parties.
8.8. List of permitted methods of personal data processing: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, depersonalization, blocking, deletion, destruction. A third party is prohibited from transmitting and distributing personal data.
8.9. Destruction of personal data shall be performed by the Operator in the following cases:
8.9.1. Deletion by the User of personal data in the corresponding section of the personal account;
8.9.2. Receipt from the User of revocation of consent to personal data processing;
8.9.3. Receiving a request from the User on the destruction of personal data;
8.9.4. Expiration of consent;
8.9.5. Expiration of the term of personal data storage in accordance with the Operator's and User's agreements.

METHODS USED BY THE OPERATOR TO PROTECT PERSONAL DATA

The Operator shall take the necessary and sufficient legal, organizational and technical measures to protect the information provided by the Users from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions with it by third parties.
9.1. The main organizational measures to protect personal data in the Project are:
9.1.1. Regulation of the composition of third parties to whose services the Operator applies in the process of personal data processing;
9.1.2. Strict, selective and reasonable distribution of confidential information provided to them by access;
9.1.3. Proper organization of the process of destruction of confidential information;
9.1.4. Development and improvement of local acts of the Operator regulating personal data processing processes;
9.1.5. Appointment of a person responsible for processing personal data;
9.1.6. Monitoring of unauthorized access to personal data and taking measures to prevent such incidents in the future;
9.1.7. Control over the measures taken to ensure the security of personal data and the level of security of personal data information systems.
9.2. As technical measures of personal data protection, the Operator shall use: antivirus protection, specialized means of information protection against unauthorized access, provided by the relevant services and software used by the Operator in rendering its services.

RIGHTS OF USERS
The user has the right:
10.1. At its discretion to provide the Operator with personal data for processing on the terms specified in the Policy;
10.2. Independently make changes and corrections to their personal data in the relevant section of the personal account, provided that such changes and corrections contain up-to-date and reliable information;
10.3. Delete personal data by editing the corresponding section in the personal account;
10.4. Contact the Operator with requirements, including the clarification of personal data; blocking or destruction of personal data, if such data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing. The claim shall be made in accordance with section 11 of the Policy;
10.5. On the basis of the request to receive from the Operator information relating to the processing of his personal data and provided for in Clause 7 of Art. 14 of the Law.
10.6. Other rights provided by the Legislation of the Russian Federation.

ADDRESSES OF USERS

11.1. The User shall have the right to send to the Operator his/her requests and demands (hereinafter referred to as the Application), including regarding the use of his/her personal data, as well as withdrawal of consent to personal data processing. The case can be sent in the following ways:
11.1.1. In writing at the address of the Operator (Section 13 of the Policy);
11.1.2. In the form of an electronic document (scanner, photocopy of the document). The document shall be sent from the User's e-mail address specified by him when registering on the Site or in the contract as an authorized e-mail address to the Operator's e-mail address: moscow@givinschool.org.
11.2. The User's request and requirements shall contain the following information:
11.2.1. Last name and Account name;
11.2.2. Information confirming the participation of the User in relations with the Operator (in particular, login and password of the User on the Site);
11.2.3. Address essence;
11.2.4. Signature of the User or his legal representative.
11.3. The Operator considers the Account Contact in the following order:
11.3.1. The call is registered in the Account Log of User Requests;
11.3.2. All mandatory details of the Application shall be checked;
11.3.3. The validity of the Appeal shall be checked;
11.3.4. A reply to the Appeal is provided. Depending on the essence of the Appeal, the answer to it should contain:
11.3.5. Information requested by the User on the processed personal data;
11.3.6. Motivated refusal to provide the requested information about the processed personal data;
11.3.7. Notification of actions taken with the personal data of the User upon its Request
11.4. The response to the Appeal is sent in the form corresponding to the form of the User's appeal (item 11.1 of the Policy).

CHANGE OF POLICY

12.1. The Operator reserves the right to amend the Policy. It is the duty of the User to familiarize himself with the text of the Policy every time the Site is used.
12.2. The new version of the Policy shall come into force from the moment of its placement in the corresponding section of the Operator's website. Continued use of the Site or its services after publication of the new version of the Policy means acceptance of the Policy and its terms by the User. In case of disagreement with the terms of the Policy, the User shall immediately cease using the Site and its services.


INFORMATION ABOUT THE OPERATOR

IP Frantsev Yaroslav Alekeslavovich.
INN 027814871563 / OGRNIP 318028000162232 dated October 9, 2018.
Legal address: 450055, Republic of Bashkortostan, Ufa,
October Avenue, 180 - 57
Tel.: + 7 987 103 84 48
Email: radisvetafest@yandex.ru