Personal Data Processing Policy
1. General Provisions
This Personal Data Processing Policy has been drawn up in accordance with the requirements of the Federal Law of the Russian Federation dated 27.07.2006 No. 152-FZ "On Personal Data" (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data, as well as measures to ensure the security of personal data taken by AQUA VORTEX (hereinafter referred to as the Operator).
1.1.
The Operator sets as its most important goal and condition for carrying out its activities the observance of the rights and freedoms of an individual and citizen when processing his or her personal data, including the protection of the right to privacy, personal and family secrets.
1.2.
This Policy applies to all information that the Operator may receive about visitors to the website:
https://aquavortextech.com
2. Basic Concepts
2.1.
Automated processing of personal data is the processing of personal data using computer technology.
2.2.
Blocking personal data is a temporary suspension of the processing of personal data (except in cases where processing is necessary to clarify personal data).
2.3.
Website — a collection of graphic and information materials, computer programs and databases that make them available on the Internet at the address:
https://aquavortextech.com
2.4.
Personal data information system — a collection of personal data contained in databases and the information technologies and technical means that ensure their processing.
2.5.
Depersonalization of personal data — actions that make it impossible to determine the ownership of personal data by a specific User without the use of additional information.
2.6.
Personal data processing — any action (operation) or set of actions performed with or without the use of automation tools, including:
collection;
recording;
systematization;
accumulation;
storage;
clarification (updating, modification); retrieval
;
use;
transfer ;
provision;
access;
depersonalization;
blocking;
deletion;
destruction of personal data.
2.7.
Operator — a legal entity that independently organizes the processing of personal data, determines the purposes of processing, the composition of personal data and the actions performed with them.
2.8.
Personal data — any information relating directly or indirectly to a specific or identifiable User of the website:
https://aquavortextech.com
2.9.
Personal data permitted for distribution by the personal data subject are personal data, access to which by an unlimited number of persons is granted by the subject by giving a separate consent in the manner prescribed by the legislation of the Russian Federation.
2.10.
User — any person who has visited the website:
https://aquavortextech.com
2.11.
Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific circle of persons.
2.12.
Dissemination of personal data — actions aimed at disclosing personal data to an indefinite number of persons.
2.13.
Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign government agency, individual or legal entity.
2.14.
Destruction of personal data — actions as a result of which personal data are destroyed without the possibility of restoration.
3. Main rights and obligations of the Operator
3.1. The Operator has the right to:
receive reliable information and documents from the personal data subject;
Continue processing personal data after withdrawal of consent in cases stipulated by the legislation of the Russian Federation;
Independently determine the composition of organizational and technical measures to ensure the security of personal data.
3.2. The Operator is obliged to:
Provide the personal data subject with information on the processing of his personal data;
Organize the processing of personal data in accordance with the legislation of the Russian Federation;
Consider requests from personal data subjects;
Provide information to Roskomnadzor in cases stipulated by law;
Publish this Policy in the public domain;
Take the necessary legal, organizational and technical measures to protect personal data;
Terminate processing and destroy personal data in cases established by law;
Perform other obligations stipulated by the legislation of the Russian Federation.
4. Basic rights and obligations of personal data subjects
4.1. Personal data subjects have the right to:
Receive information concerning the processing of their personal data, with the exception of cases stipulated by federal legislation;
Demand clarification, blocking or destruction of their personal data if they are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing;
revoke previously provided consent to the processing of personal data;
demand termination of personal data processing in cases stipulated by the legislation of the Russian Federation;
appeal the actions or inactions of the Operator to Roskomnadzor or in court;
exercise other rights stipulated by the legislation of the Russian Federation.
4.2. Personal data subjects are obliged to:
provide the Operator with reliable personal data;
promptly notify of changes in previously provided personal data.
4.3.
Persons who have provided the Operator with false information about themselves or information about another person without their consent shall be liable in accordance with the legislation of the Russian Federation.
5. Personal data processed by the Operator
The Operator may process the following personal data of the User:
5.1.
Last name, first name, patronymic.
5.2.
Email address.
5.3.
Telephone number.
5.4.
When using the website, anonymized technical data may be automatically collected, including:
IP address;
browser information;
operating system information;
date and time of visiting the website;
pages visited by the User;
cookies;
other technical data.
The specified information may be processed using web analytics services (for example, Yandex Metrica and other similar services).
5.5.
All of the listed information is hereinafter referred to as Personal Data.
5.6.
The Operator does not process special categories of personal data related to:
race;
nationality;
political views;
religious beliefs;
philosophical beliefs;
health status;
intimate life,
unless otherwise expressly provided by the legislation of the Russian Federation.
5.7.
The processing of personal data permitted by the subject of personal data for distribution shall be carried out only in compliance with the requirements of Article 10.1 of Federal Law No. 152-FZ.
5.8.
Consent to the distribution of personal data shall be drawn up separately from consent to the processing of personal data.
5.8.1.
Such consent is provided by the User directly to the Operator.
5.8.2.
The Operator is obliged to comply with the restrictions and conditions for the distribution of personal data established by the legislation of the Russian Federation.
5.8.3.
The subject of personal data has the right to demand that the distribution of their personal data be stopped at any time.
5.8.4.
Such consent shall cease to be valid upon receipt of the corresponding request by the Operator.
6. Principles of personal data processing
The Operator processes personal data based on the following principles:
legality;
good faith;
fairness;
limiting processing to achieving specific goals;
minimizing the volume of processed data;
reliability of personal data;
relevance of personal data;
limiting the storage period;
ensuring the security of personal data.
Only the personal data that is necessary to achieve the processing purposes are processed.
Upon achieving the processing purposes, personal data are destroyed or anonymized, unless otherwise provided by the legislation of the Russian Federation.
7. Purposes of personal data processing
The Operator processes personal data exclusively for the following purposes:
processing User requests;
feedback;
providing consultations;
sending responses to requests;
fulfillment of contractual obligations;
ensuring website operation;
improving the quality of website functioning;
ensuring website security;
conducting statistical analysis of traffic;
compliance with the requirements of the legislation of the Russian Federation.
7.2.
Subject to separate consent of the User, the Operator has the right to send informational messages about the AQUA VORTEX project, new publications, research, events and other materials.
The User has the right to unsubscribe from receiving such messages at any time by sending a corresponding notice to the e-mail address:
info@aquavortextech.com
with the subject:
"Unsubscribe from information messages".
7.3.
Anonymized information collected by web analytics services is used solely to analyze website traffic and improve its operation.
8. Legal grounds for processing personal data
8.1.
The legal grounds for processing personal data are:
the Constitution of the Russian Federation;
Federal Law of 27.07.2006 No. 152-FZ "On Personal Data";
Federal Law of 27.07.2006 No. 149-FZ "On Information, Information Technologies and the Protection of Information";
the Civil Code of the Russian Federation;
other regulatory legal acts of the Russian Federation;
consent of the personal data subject;
agreements concluded between the Operator and the personal data subject (if any);
other legal grounds provided for by the legislation of the Russian Federation.
8.2.
The Operator processes the User's personal data only if they are provided voluntarily by filling in forms located on the website:
https://aquavortextech.com
or by sending the relevant information by e-mail.
By sending their personal data, the User confirms their consent to this Policy.
8.3.
The Operator has the right to process the User's anonymized technical data, provided that the corresponding browser settings allow the use of cookies and JavaScript technology.
8.4.
The User provides personal data voluntarily, freely, of their own free will and in their own interests.
9. Terms of personal data processing
9.1.
Personal data shall be processed with the consent of the personal data subject, except for cases stipulated by the legislation of the Russian Federation.
9.2.
Personal data may be processed without the consent of the personal data subject in cases stipulated by Federal Law No. 152-FZ and other regulatory legal acts of the Russian Federation.
9.3.
Personal data shall be processed solely to achieve the purposes specified in this Policy.
9.4.
If it is necessary to perform an agreement to which the personal data subject is a party, the Operator has the right to process personal data to the extent necessary for the performance of the relevant agreement.
9.5.
The Operator has the right to process personal data to protect its legitimate interests, subject to the observance of the rights and freedoms of personal data subjects.
9.6.
The processing of publicly available personal data is carried out in accordance with the legislation of the Russian Federation.
9.7.
Personal data subject to mandatory publication or disclosure in accordance with the legislation of the Russian Federation, are processed in the manner prescribed by law.
10. Procedure for collecting, storing, transferring and other types of processing personal data
10.1.
The Operator takes the necessary legal, organizational and technical measures to protect personal data from:
unauthorized access;
destruction;
modification;
blocking;
copying;
distribution;
other illegal actions.
10.2.
The personal data of Users is not transferred to third parties, except in cases:
provided for by the legislation of the Russian Federation;
necessary for the performance of the agreement;
carried out with the consent of the personal data subject.
10.3.
If any inaccuracies in personal data are discovered, the User has the right to send a notification to the Operator by e-mail:
info@aquavortextech.com
with the subject:
"Updating personal data".
10.4.
The User has the right to revoke consent to the processing of personal data at any time by sending a corresponding notification to the address:
info@aquavortextech.com
with the subject:
"Withdrawal of consent to the processing of personal data".
Upon receipt of such a request, the Operator shall cease processing the personal data, except in cases where the legislation of the Russian Federation allows their further processing without the consent of the subject.
10.5.
The storage period of personal data is determined by the purposes of their processing or the requirements of the legislation of the Russian Federation.
After achieving the purposes of processing, personal data is destroyed or anonymized.
10.6.
Information collected by third-party services (for example, web analytics services) is processed by the relevant operators of such services in accordance with their own privacy policies.
10.7.
The Operator ensures the confidentiality of personal data and does not allow its disclosure to third parties without legal grounds.
10.8.
Personal data of citizens of the Russian Federation shall be processed using databases located on the territory of the Russian Federation, unless otherwise provided by the current legislation.
10.9.
The conditions for termination of personal data processing are:
achievement of the processing purposes;
withdrawal of consent by the personal data subject;
expiration of the storage period;
detection of unlawful processing;
termination of the Operator’s activities;
other cases stipulated by the legislation of the Russian Federation.
11. List of actions with personal data
The Operator has the right to perform the following actions:
collection;
recording;
systematization;
accumulation;
storage
; clarification ;
updating ;
modification ;
retrieval ;
use;
transfer;
provision;
access;
depersonalization;
blocking;
deletion;
destruction of personal data.
Processing can be carried out both automatically and without the use of automation tools.
12. Cross-border transfer of personal data
12.1.
Before commencing the cross-border transfer of personal data, the Operator shall ensure that the foreign state provides sufficient protection for the rights of personal data subjects or that such transfer is carried out in accordance with the requirements of the legislation of the Russian Federation.
12.2.
If necessary, the cross-border transfer of personal data shall be carried out only in the cases and according to the procedure stipulated by the legislation of the Russian Federation.
13. Confidentiality of personal data
The Operator and persons who have gained access to personal data undertake not to disclose or distribute personal data without the consent of the personal data subject, unless otherwise provided by the legislation of the Russian Federation.
14. Final provisions
14.1.
For questions regarding the processing of personal data, the User may contact the Operator by e-mail:
info@aquavortextech.com
14.2.
This Policy is valid indefinitely until a new version is approved.
14.3.
The current version of the Personal Data Processing Policy is publicly available on the official website:
https://aquavortextech.com
