This Policy regarding the processing of personal data (hereinafter referred to as the "Policy") has been prepared in accordance with clause 2, part 1 of Art. 18.1 of the Federal Law of the Russian Federation "On Personal Data" No. 152-FZ dated July 27, 2006 (hereinafter - the "Law") and determines the position of a legal entity (LLC "MOS") and / or its affiliates, (hereinafter - the "Company" ) in the field of processing and protection of personal data (hereinafter - "Data"), observance of the rights and freedoms of every person and, in particular, the right to privacy, personal and family secrets.
This Policy applies to the Data received both before and after the entry into force of this Policy.
Understanding the importance and value of the Data, as well as taking care of the observance of the constitutional rights of citizens of the Russian Federation and citizens of other states, the Company ensures reliable protection of the Data.
Data is understood as any information relating directly or indirectly to a specific or identifiable natural person (citizen), i.e. such information, in particular, includes: name, email address, location, link to a personal website or social network, ip address, cookies.
Data processing means any action (operation) or a set of actions (operations) with Data performed using automation tools and / or without using such tools. Such actions (operations) include: collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of Data.
Data security refers to the protection of the Data from unauthorized and / or unauthorized access to them, destruction, alteration, blocking, copying, provision, dissemination of Data, as well as from other illegal actions in relation to the Data.
Legal bases and purposes of data processing
The processing and security of the Data in the Company is carried out in accordance with the requirements of the Constitution of the Russian Federation, the Law, the Labor Code of the Russian Federation, bylaws, and other federal laws of the Russian Federation determining the cases and specifics of data processing, guidelines and methodological documents of the FSTEC of Russia and the FSB of Russia.
The subjects of the Data processed by the Company are:
- clients - consumers, incl. site visitors https://rankquality.com/ owned by the Company, including for the purpose of placing an order on the Site https: // rankquality.com < / a> / , with subsequent delivery to the client, service recipients ;,
The Company processes Data subjects for the following purposes:
implementation of the functions, powers and duties assigned to the Company by the legislation of the Russian Federation in accordance with federal laws, including, but not limited to: the Civil Code of the Russian Federation, the Tax Code of the Russian Federation, the Labor Code of the Russian Federation, the Family Code of the Russian Federation, the Federal Law of 01.04 .1996 No. 27-FZ "On individual (personified) accounting in the compulsory pension insurance system", Federal Law of 27.07.2006, No. 152-FZ "On Personal Data", Federal Law of 28.03.1998, No. 53 -FZ "On military duty and military service", Federal Law of February 26, 1997, No. 31-FZ "On mobilization training and mobilization in the Russian Federation", Federal Law of February 8, 1998, No. 14-FZ "On societies with limited liability ", Federal Law of 07.02.1992 No. 2300-1" On Protection of Consumer Rights ", Federal Law of 21.11.1996, No. 129-FZ" On Accounting ", F federal law of November 29, 2010 No. 326-FZ "On compulsory medical
insurance in the Russian Federation ", Clients - consumers in order to:
- providing information on goods / services, ongoing promotions and special offers;
Data processing principles and conditions.
When processing Data, the Company adheres to the following principles: Data processing is carried out on a legal and fair basis; The Data is not disclosed to third parties and is not disseminated without the consent of the Data subject, except for cases requiring disclosure of the Data at the request of authorized state bodies, legal proceedings; determination of specific legitimate purposes before the start of processing (including collection) of the Data; only those Data are collected that are necessary and sufficient for the stated purpose of processing; combining databases containing Data, the processing of which is carried out for purposes incompatible with each other is not allowed; the processing of the Data is limited to the achievement of specific, predetermined and legitimate purposes; The processed Data are subject to destruction or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.
The Company may include the Data of subjects in publicly available sources of Data, while the Company takes the subject's written consent to the processing of his Data, or by expressing consent through the site form (checkbox), by clicking which the subject of personal data expresses his consent.
The Company does not process Data related to race, nationality, political views, religious, philosophical and other beliefs, intimate life, membership in public associations, including trade unions.
Biometric Data (information that characterizes the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity and which is used by the operator to establish the identity of the Data subject) are not processed in the Company.
The Company does not carry out cross-border transfers of Data.
In the cases established by the legislation of the Russian Federation, the Company has the right
transfer the Data to third parties (the federal tax service, the state pension __________ fund and other state bodies) in the cases provided for by the legislation of the Russian Federation.
The Company has the right to entrust the processing of the Data of the Data subjects to third parties with the consent of the Data subject, on the basis of an agreement concluded with these persons, including with consent to the user agreement and the policy for processing personal data posted on the website.
Persons who process the Data on the basis of an agreement concluded with the Company (instructions of the operator) undertake to comply with the principles and rules for the processing and protection of Data provided for by the Law. For each third party, the agreement defines a list of actions (operations) with the Data that will be performed by a third party processing the Data, the purposes of processing, the obligation of such a person to maintain confidentiality and ensure the security of the Data during their processing is established, the requirements for the protection of the processed Data are specified with the Law.
In order to comply with the requirements of the current legislation of the Russian Federation and its contractual obligations, the Data processing in the Company is carried out both with and without the use of automation tools. The set of processing operations includes the collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of Data.
The Company prohibits making decisions on the basis of solely automated processing of the Data that generate legal consequences in relation to the Data subject or otherwise affect his rights and legitimate interests, except as otherwise provided by the legislation of the Russian Federation.
Rights and obligations of Data subjects, as well as the Company in terms of data processing
The subject whose Data is processed by the Company has the right:
- receive from the Company:
confirmation of the fact of processing the Data and information about the availability of Data related to the relevant Data subject;
information on the legal grounds and purposes of the Data processing;
information about the methods of data processing used by the Company;
information about the name and location of the Company;
information about persons (with the exception of employees of the Company) who have access to the Data or to whom the Data may be disclosed on the basis of an agreement with the Company or on the basis of federal law;
a list of processed Data related to the Data subject, and information about the source of their receipt, unless another procedure for providing such Data is provided for by federal law;
information about the terms of data processing, including the terms of their storage;
information on the procedure for exercising by the Data subject of the rights provided for by the Law;
name (full name) and address of the person processing the Data on behalf of the Company;
other information provided for by the Law or other regulatory legal acts of the Russian Federation;
- demand from the Company:
clarification of their Data, their blocking or destruction in the event that the Data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
revoke your consent to the processing of Data at any time; demand the elimination of illegal actions of the Company in relation to its Data;
appeal against the actions or inaction of the Company to the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) or in court if the Data subject believes that the Company is processing his Data in violation of the requirements of the Law or otherwise violates his rights and freedom;
- to protect their rights and legitimate interests, including compensation for damages and / or compensation for moral damage in court.
In the process of processing the Data, the Company is obliged to:
provide the Data subject, upon his request, with information regarding the processing of his personal data, or legally provide a refusal within thirty days from the date of receipt of the request from the Data subject or his representative;
explain to the Data subject the legal consequences of refusing to provide Data if the provision of Data is mandatory in accordance with federal law;
before the start of the Data processing (if the Data was not obtained from the Data subject), provide the Data subject with the following information, except for the cases provided for in part 4 of Article 18 of the Law: