Primary State Registration Number (OGRN): 318619600249722
Taxpayer Identification Number (INN): 616108063916
Individual Entrepreneur Kim Leonid Sergeevich
August 4, 2022
Personal Data Processing Policy
1. INTRODUCTION
1.1. The Personal Data Processing Policy (hereinafter referred to as the "Policy") was issued and applied by Individual Entrepreneur Kim Leonid Sergeevich (hereinafter referred to as the "Operator") in accordance with clause 2, Part 1, Article 18.1 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
This Policy defines the procedure and conditions of the Operator regarding the processing of personal data, establishes provisions aimed at compliance with the legislation of the Russian Federation concerning the processing of personal data.
All issues related to the processing of personal data that are not regulated by this Policy are resolved in accordance with the current legislation of the Russian Federation in the field of personal data.
.
2. BASIC PROVISIONS
2.1. The purpose of personal data processing is: provision of services by the Operator on behalf of the subject of personal data.
2.2. Processing is organized by the Operator on the principles of:
- legality of the purposes and methods of personal data processing, integrity and fairness in the Operator's activities;
- the reliability of personal data, their sufficiency for the purposes of processing, the inadmissibility of processing personal data that are redundant in relation to the purposes stated when collecting personal data;
- processing only those personal data that meet the purposes of their processing. The processed personal data should not be redundant in relation to the stated purposes of their processing;
- compliance of the content and volume of the processed personal data with the stated purposes of processing;
- the inadmissibility of combining databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
- ensuring the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of personal data processing. The operator takes the necessary measures or ensures that they are taken to delete or clarify incomplete or inaccurate data;
- storage of personal data in a form that allows you to identify the subject of personal data, no longer than the purposes of personal data processing require;
- ensuring the recording, systematization, accumulation, storage, clarification (updates, changes), extraction of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation.
2.3. The Operator processes the following personal data:
- name, surname of the subject of personal data;
- phone number of the personal data subject;
- email address of the personal data subject.
2.4. The personal data specified above are processed using automation tools and without the use of automation tools. When processing personal data without the use of automation tools, the Operator is guided by the Regulation on the specifics of personal data processing carried out without the use of automation tools, approved by the Decree of the Government of the Russian Federation No. 687 of September 15, 2008.
2.5. When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with Article 19 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data". The operator provides services by placing its website on the website https://getcourse.ru /, which is a software "GETCOURSE 2.0." designed to create an online school and organize the learning process on the Internet. On the website getcourse.ru the HTTPS extension to the HTTP protocol is used in order to increase security and protect information.
2.6. The Operator does not disclose or distribute personal data to third parties without the consent of the personal data subject, except in cases provided for by the current legislation of the Russian Federation and this Policy.
2.7. The assessment of the harm that may be caused to personal data subjects in case of violation by the Operator of the requirements of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" is determined in accordance with Articles 15, 151, 152, 1101 of the Civil Code of the Russian Federation.
2.7.1.The ratio of the specified harm and the measures taken by the Operator aimed at preventing, preventing and/or eliminating its consequences is determined in accordance with the Federal Law of the Russian Federation of 27.07.2006 N 152-FZ "On Personal Data".
2.8. Conditions for processing personal data by the Operator:
1) personal data is processed by the Operator after the acceptance by the subject of personal data of the offer for the provision of services.
2) according to paragraph 5 of Article 6 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", the subject of personal data accepts the offer on his own initiative and is a party and beneficiary under the contract concluded by him. A separate consent to the processing of the subject's personal data is not required in this case.
3) the terms of this Policy are available to users in the public domain, until the acceptance of the offer for the provision of services.
2.9. The storage of personal data of users is carried out in a form that allows to determine the subject of personal data.
2.10. Personal data is subject to destruction upon achievement of the processing objectives. The deletion of personal data is carried out by deleting the account, after which such a record cannot be restored..
2.11. Interaction with federal executive authorities on the processing and protection of personal data of subjects whose personal data is processed by the Operator is carried out within the framework of the legislation of the Russian Federation.
3. THIRD PARTIES INVOLVED IN THE PROCESSING OF PERSONAL DATA
3.1. OOO "Sistema GETKURS" https://getcourse.ru/) Taxpayer Identification Number (INN) 9731055900 / Tax Registration Reason Code (KPP) 773101001, Primary State Registration Number (OGRN) 1197746675170, place: 121596, Gorod Moscow, Gorbunova Street, Home 2 stroenie 3, komnata 3.
1.3.2. Hosting services and dedicated server services are provided by ООО «Selectel» https://selectel.ru/about/details.
4. RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA
4.1. The Operator or his legal representative is responsible for the processing of personal data.
4.2. Responsible for the processing of personal data:
4.2.1. Performs internal control over compliance with the legislation of the Russian Federation on personal data, including requirements for the protection of personal data;
4.2.2. Controls the reception and processing of requests and requests of personal data subjects or their representatives;
4.2.3. Takes measures to detect the facts of unauthorized access to personal data;
4.2.4. Performs constant monitoring of ensuring the level of protection of personal data;
4.2.5. Performs internal control and (or) audit of compliance of personal data processing with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and regulatory legal acts adopted in accordance with it.
5. THE PROCEDURE FOR ENSURING THE RIGHTS OF THE PERSONAL DATA SUBJECT BY THE OPERATOR
5.1. Personal data subjects or their representatives have the rights provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
5.2. The Operator ensures the rights of personal data subjects in accordance with the procedure established by Chapters 3 and 4 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
5.3. The representative's authority to represent the interests of each personal data subject is confirmed by a corresponding power of attorney.
5.4. The information specified in Part 7 of Article 22 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" is provided to the subject of personal data in an accessible form without personal data relating to other subjects of personal data, except in cases where there are legitimate grounds for disclosure of such personal data, in electronic form. At the request of the subject of personal data, they can be duplicated on paper.
5.5. The information specified in Part 7 of Article 22 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" is provided to the personal data subject or his representative upon personal request or upon receipt of a request from the personal data subject or his representative. The request must contain the number of the main identity document of the personal data subject or his representative, information about the date of issue of the specified document and the issuing authority, information confirming the participation of the personal data subject in relations with the Operator (contract number, date of conclusion of the contract, conditional verbal designation and (or) other information), or information, otherwise confirming the fact of personal data processing by the Operator, the signature of the personal data subject or his representative. If technically possible, the request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation..
5.6. The right of a personal data subject to access his personal data may be restricted in accordance with federal laws.
5.7. The operator is obliged to provide free of charge to the subject of personal data or his representative the opportunity to get acquainted with personal data related to this subject of personal data at his location during working hours.