1. General provisions
This Personal Data Processing Policy (hereinafter — the Policy) has been drawn up in fulfilment of the requirements of clause 2 of part 1 of Article 18.1 of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (hereinafter — 152-FZ) and defines the procedure for the processing of personal data and the measures taken by the Operator to ensure their security.
The Operator regards it as its paramount objective to observe the rights and freedoms of the individual and the citizen when processing their personal data, including the protection of the rights to inviolability of private life and to personal and family privacy.
The Policy applies to all information that the Operator may obtain about visitors to the website https://dmitriy-stroy.ru (hereinafter — the Site).
2. Key definitions
- Personal data — any information relating to a directly or indirectly determined or determinable natural person (the data subject).
- Processing of personal data — any action (operation) or set of actions performed on personal data (collection, recording, systematisation, storage, updating, use, transfer, depersonalisation, blocking, deletion, destruction).
- Operator — a person who, independently or jointly with other persons, organises and (or) carries out the processing of personal data.
- Data subject — a visitor to the Site who has submitted their data.
- Consent — a free, specific, informed and conscious expression of the data subject’s will to have their personal data processed.
3. The Operator and contact details
The operator of personal data is:
- Individual entrepreneur K.S. Goncharik;
- e-mail: Arx.Dmitriy1974@yandex.ru;
- telephone: +7 (910) 019-95-50.
4. Categories of data subjects and the personal data processed
The Operator processes the personal data of visitors to the Site that they voluntarily provide through feedback forms, requests and messengers:
- surname, first name;
- telephone number;
- e-mail address and (or) messenger handle (Telegram, WhatsApp, etc.);
- other data voluntarily communicated by the data subject in the text of the enquiry (for example, information about the plot and wishes regarding the design);
- depersonalised data about visitors collected by internet statistics tools (see section 9).
The Operator does not process special categories of personal data or biometric personal data.
5. Purposes of the processing of personal data
- handling requests and enquiries, contacting the data subject, providing consultations;
- preparing and sending calculations, estimates and commercial proposals;
- concluding and performing a contract for design and (or) construction;
- informing the data subject about the Operator’s services (where consent has been given);
- improving the operation of the Site and analysing its traffic (depersonalised data).
6. Legal grounds for the processing
- the data subject’s consent to the processing of their personal data (Article 6, part 1, clause 1 of 152-FZ), given by ticking the box in the form on the Site;
- performance of a contract to which the data subject is a party, or conclusion of a contract at the data subject’s initiative (Article 6, part 1, clause 5 of 152-FZ);
- Federal Law 152-FZ and other regulatory legal acts in the field of personal data protection.
7. Procedure, conditions and periods of processing
Personal data are processed with the data subject’s consent, on a lawful and fair basis, and the processing is limited to the achievement of specific, predetermined and lawful purposes.
Processing is carried out both with and without the use of automation tools. The personal data of citizens of the Russian Federation are stored using databases located within the territory of the Russian Federation (Article 18, part 5 of 152-FZ).
The period of processing and storage runs until the purposes of the processing are achieved, until the data subject withdraws consent, or for the period established by law. Once the purposes have been achieved, or upon withdrawal of consent, the data are to be destroyed or depersonalised within a period not exceeding 30 days, unless otherwise provided by law.
8. Transfer of personal data to third parties
The Operator does not sell or disclose personal data to third parties, except in the cases provided for by law and in cases where contractors are engaged for processing purposes on terms of confidentiality:
- to the hosting / cloud storage service provider — the hosting provider Timeweb;
- to internet analytics services (see section 9);
- to authorised state bodies — on the grounds and in the manner established by the legislation of the Russian Federation.
9. Cookies and metric data
The Site uses cookies and internet statistics services (for example, Yandex.Metrica) to analyse traffic and improve the operation of the Site. Further details are set out in the Cookie Policy. By continuing to use the Site, the visitor agrees to the processing of cookies; they can be disabled in the browser settings.
10. Rights of the data subject
The data subject has the right:
- to obtain information about the processing of their personal data;
- to demand that the data be updated, blocked or destroyed if they are incomplete, out of date, inaccurate or processed in breach of the law;
- to withdraw consent to the processing of personal data at any time;
- to appeal against the Operator’s actions to Roskomnadzor or through the courts.
To exercise these rights, withdraw consent or obtain information, the data subject shall send a request to the e-mail address Arx.Dmitriy1974@yandex.ru.
11. Protection of personal data
The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, dissemination and other unlawful actions.
12. Amendments to the Policy
The Operator has the right to make amendments to this Policy. A new version takes effect from the moment it is published on the Site, unless the new version provides otherwise. The current version is always available on the page at https://dmitriy-stroy.ru/privacy.html.