1. PURPOSE and SCOPE of the DOCUMENT
- “Site policy ReviewApp.Today (hereinafter referred to as “the Website”) in relation to the processing of personal data” (hereinafter – the Policy) the collection, storage, transfer and other processing of personal data and information about ongoing requirements for protection of personal data.
- The Policy applies to all personal data of subjects processed on the Site with the use of automation tools and without the use of such tools.
- Any personal data subject has access to this Policy.
- The policy is developed in accordance with the current legislation.
2. COMPOSITION of PERSONAL DATA
- Personal data - any information related directly or indirectly to a specific or identifiable individual (citizen): Name and Email.
- All personal data processed by the Site is confidential, strictly protected information in accordance with the law.
- Processing of personal data - any action (operation) or a set of actions (operations) with personal data performed with the use of automation tools or without the use of such tools. Such actions (operations) include: collection, receipt, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
3. SUBJECTS of PERSONAL DATA of the COMPANY
The site processes the personal data of the following persons:
- entities with which civil contracts are concluded;
- customers of the Site;
- registered users of the Site;
- site visitors.
4. PRINCIPLES and CONDITIONS of PERSONAL DATA PROCESSING
- The purpose of processing personal data is to fulfill the obligations of the Operator to Users in relation to the use of the Site and its services.
- The processing of personal data of users is carried out with the consent of the personal data subject to the processing of his personal data.
- Personal data refers to any information relating directly or indirectly to a specific or identifiable individual (the subject of personal data) and which can be used to accurately identify a particular person or to communicate with him.
- We may request personal information from you at any time when you contact the Site. The site may use such data in accordance with this personal data processing Policy. It may also combine such information with other information for the purpose of providing and improving its products, services, content and communications.
- Under the security of personal data, the Site understands the protection of personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, distribution of personal data, as well as from other illegal actions in relation to personal data and takes the necessary legal, organizational and technical measures to protect personal data.
- Processing and security of personal data on the Website shall be in accordance with the requirements of the Constitution, Federal laws.
- When processing personal data, the Site adheres to the following principles:
- legality and fair basis;
- restrictions on the processing of personal data to achieve specific, predetermined and legitimate goals;
- preventing the processing of personal data that is incompatible with the purpose of collecting personal data;
- preventing the consolidation of databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
- processing of personal data that meet the purposes of their processing;
5. The COMPANY PROCESSES PERSONAL DATA ONLY in the PRESENCE of AT LEAST ONE of the FOLLOWING CONDITIONS
- the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
- the processing of personal data is necessary to achieve the goals stipulated by law, to implement and perform the functions, powers and duties assigned to the operator by the legislation;
- the processing of personal data is necessary for the execution of the contract to which the personal data subject is a party or beneficiary or guarantor, as well as for the conclusion of the contract on the initiative of the personal data subject or the contract under which the personal data subject will be the beneficiary or guarantor;
- processing of personal data is necessary for the implementation of the rights and legitimate interests of the Site or third parties or to achieve socially significant goals, provided that this does not violate the rights and freedoms of the subject of personal data;
- processing of personal data is carried out, access of an unlimited number of persons to which is provided by the subject of personal data or at his request;
- personal data subject to publication or mandatory disclosure in accordance with Federal law is processed.
- The site has the right to entrust the processing of personal data of citizens to third parties on the basis of a contract concluded with these persons. Persons who process personal data on behalf of the Site undertake to comply with the principles and rules of processing and protection of personal data provided for by Federal law No. 152-FZ “on personal data” of July 27, 2006. For each person, a list of actions (operations) with personal data that will be performed by a legal entity that processes personal data, the purpose of processing, and the obligation of such a person to maintain confidentiality and ensure the security of personal data during their processing are defined.
- In cases established by the legislation, the Site has the right to transfer personal data of citizens.
6. RIGHTS OF the subject of PERSONAL DATA
- The subject of personal data has the right to:
- require clarification of their personal data, their blocking or destruction if personal data is incomplete, outdated, unreliable, illegally obtained or not necessary for the stated purpose of processing, as well as take legal measures to protect their rights;
- require a list of their personal data processed by the Operator and the source of their receipt;
- receive information about the terms of processing your personal data, including the terms of their storage;
- appeal to the authorized body for the protection of the rights of subjects of personal data or in court illegal actions or omissions in the processing of his personal data.
- information about the procedure for exercising the rights provided for by the Federal law" on personal data " No. 152-FZ of July 27, 2017;
7. RESPONSIBILITY
- In case of failure to comply with the provisions of this Policy, the Site is liable in accordance with the current legislation.
- To get an explanation on the issues you are interested in processing Your personal data, please contact us personally on the Site.
In the case of sending an official request to the Site in the text of the request, you must specify:
- Full name;
- the number of the main identity document of the personal data subject or its representative, information about the date of issue of the specified document and the issuing authority; • information confirming Your participation in the relationship with the Site or information that otherwise confirms the fact of processing of personal data by the Site;
- signature of the citizen (or his legal representative). If the request is sent in electronic form, it must be issued in the form of an electronic document and signed with an electronic signature in accordance with the legislation.
8. FINAL PROVISIONS
- This Policy is subject to change, addition in the event of new legislation and special regulations on the processing and protection of personal data.
- This Policy is an internal document of the Site, and is subject to posting on the official website of the Site.
- Control over the implementation of the requirements of this Policy is carried out by the person responsible for ensuring the security of personal data of the Site.