1. DEFINITIONS AND TERMS.
1.1 Website - a site in the information and telecommunication network ‘Internet’ located on the domain name (https://dome.foundation/, https://dome.foundation/en).
1.2. Operator - Joint Stock Company ‘Dom Foundation’ (OGRN: 1227200017813, TIN: 7203545771, KPP: 720301001 ; 625026 Tyumen region, Tyumen, Respublika str. Tyumen, Respublika str. 142, room. 36, RM 35).
1.3 Services - services rendered by the Contractor.
1.4 Personal Data Subject (User) - a person who has given the Operator consent to the processing of his/her personal data.
2. GENERAL PROVISIONS.
2.1 This Operator's Policy on personal data processing (hereinafter referred to as the Policy) is approved in accordance with the requirements of the provisions of the Federal Law ‘On Personal Data’ and applies to all personal data that the Operator may receive from the subject of personal data (hereinafter referred to as the User). The Policy defines the procedure for processing and protection of information about Users using the Website services.
2.2 The Policy applies to the personal data received during the entire period of the Site existence.
2.3 This Policy is developed and used in accordance with the current legislation of the Russian Federation.
2.3 By using the Site, the User expresses his/her consent to the terms of this Policy.
2.4 If the User does not agree with the terms of this Policy, the Services cannot be provided.
3. PERSONAL DATA PROCESSED BY THE OPERATOR.
3.1 For the purposes of this Policy, personal data shall mean: personal data received by the Operator for the fulfilment of the agreement to which the User is a party or a beneficiary or guarantor.
3.2 The terms and conditions of termination of processing and storage of the User's personal data shall be determined in accordance with the procedure established by the legislation of the Russian Federation.
3.3 If the User revokes his/her consent to the processing of his/her personal data, the Operator undertakes to cease processing or ensure the cessation of such processing and, if the storage of personal data is no longer required for the purposes of personal data processing, to destroy the personal data or ensure their destruction within a period not exceeding thirty days from the date of receipt of the said revocation, unless otherwise provided for in the agreement to which the User is a party, beneficiary or guarantor.
3.4 The User provides the Operator with the following personal data: surname, first name, patronymic, telephone number.
3.5 The User may be requested to provide additional data for the purpose of fulfilment of the Operator's obligations to the User arising from the contract. The Operator has the right to request from the User other additional information in the form of an electronic file, which, at the discretion of the Operator, will be considered necessary and sufficient for identification of such User.
3.6 The Operator has the right not to inform the User of a number of information and circumstances related to the implementation of operational and investigative activities by law enforcement agencies, both in relation to the User and third parties, if the said information and circumstances may constitute secrecy within the framework of investigation.
3.7 The Operator acts reasonably and in good faith, considering that the User has all the necessary rights (legal capacity, legal capacity, including the ability to purchase services that have age restrictions or require special permits from the User), allowing him to use the Site and services, and also considers that the User indicates accurate information about himself in the amounts necessary for the provision of Services, considers that the User transfers his personal data to the Operator after expressing consent to this Agreement.
4. PURPOSES OF COLLECTION, PROCESSING AND STORAGE AND LEGAL JUSTIFICATION OF PERSONAL DATA PROCESSING.
4.1 The Operator collects, processes and stores the User's personal data for the purposes of:
4.1.1 Providing the User with information about the services provided by the Operator, special offers and other information on behalf of the Operator.
4.1.2 To perform and fulfil the functions, powers and duties assigned to the Operator by the legislation of the Russian Federation on the basis and in accordance with Art. 23, 24 of the Constitution of the Russian Federation; the Federal Law ‘On Personal Data’; the Federal Law ‘On Information, Information Technology and Information Protection’ and other requirements of the legislation of the Russian Federation in the field of processing and protection of personal data.
4.2 The User's personal data is collected when paying for the Services, providing the Services, as well as when the User uses the Website.
4.3 The personal data of Users are stored exclusively on electronic media.
4.4 Processing of personal data is carried out on the basis of the following principles: lawfulness of the purposes and methods of personal data processing; good faith; compliance of the purposes of personal data processing with the purposes predetermined and declared at the time of personal data collection, as well as with the Operator's powers; compliance of the scope and nature of processed personal data, methods of personal data processing with the purposes of personal data processing; inadmissibility of combining databases containing personnel created for incompatible purposes
4.5 The Operator has the right to perform the following actions with the User's personal data during their processing:
4.5.1. Collect;
4.5.2. Record;
4.5.3. Systematise;
4.5.4 Accumulate;
4.5.5. Store;
4.5.6. Clarify;
4.5.7. Retrieve;
4.5.8. Apply;
4.5.9. Transfer;
4.5.10. De-identify;
4.5.11. Block;
4.5.12. Delete;
4.5.13. Destroy.
4.6 The Operator has the right to process the User's personal data in the following ways: Mixed processing of personal data.
5. BLOCKING, DEPERSONALISATION, USERS.
5.1 Procedure for blocking and unblocking of personal data:
5.1.1 Blocking of personal data is carried out on the basis of a written application of the User sent to the e-mail address: domefound@gmail.com within 10 (ten) working days from the date of receipt of the application.
5.1.2 Blocking of personal data implies temporary cessation of personal data processing (except for cases when processing is necessary to clarify personal data).
5.1.3 The blocking of personal data may be temporarily lifted if this is required to comply with the laws of the Russian Federation.
5.1.4 Unblocking of personal data is carried out with the User's written consent (if consent is required) or the User's application sent to the e-mail address: domefound@gmail.com within 10 (ten) working days from the date of receipt of consent or application.
5.1.5 The repeated consent of the User to the processing of his/her personal data (if it is necessary to obtain it) entails unblocking of his/her personal data.
5.2 Procedure of personal data destruction:
5.2.1 Destruction of personal data means actions as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed, as well as termination of any access to personal data.
5.2.2 When destroying the User's personal data, the Operator's employees cannot gain access to the personal data.
5.2.3 Destroyed Personal Data cannot be restored. The operation of personal data destruction is irreversible.
5.2.4 The term of personal data destruction corresponds to the term defined by the legislation of the Russian Federation (10 (ten) working days).
6. CONDITIONS OF PERSONAL DATA PROCESSING AND THEIR TRANSFER TO THIRD PARTIES.
6.1 The Operator processes personal data with and without the use of automation means.
6.2 The Operator processes the User's personal data only if it is filled in and/or sent by the User himself/herself via special forms located on the Website. By filling in the relevant forms and/or sending his/her personal data to the Operator, the User expressly and unambiguously voluntarily agrees with this Policy, as well as with all possible terms and conditions of the Operator, if the lack of consent to them prevents further use of the Site and its services.
6.3 The Operator has the right to transfer the User's personal data to third parties in the following cases:
6.3.1. The User has explicitly and unambiguously expressed his/her consent to such actions.
6.3.2 The transfer is stipulated by the current legislation of the Russian Federation within the framework of the established procedure.
6.3.3 The Operator has the right to provide the User's personal data to Partners, other third parties, when without transferring the User's personal data there is no other technical possibility to fulfil obligations to the User.
7. USER RIGHTS.
7.1 The User has the right to receive information regarding the processing of his/her personal data, including information containing:
7.1.1 Confirmation of the fact of personal data processing by the Operator.
7.1.2 The legal basis and purposes of personal data processing.
7.1.3. The methods of personal data processing applied by the Operator.
7.1.4 Name and location of the Operator, information about persons (except for the Operator's employees) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Operator or on the basis of federal law.
7.1.5 The processed personal data related to the respective User, the source of their obtaining, unless another procedure for submission of such data is provided for by the federal law.
7.1.6 The terms of personal data processing, including the terms of their storage.
7.1.7 The procedure for exercising the User's rights provided for by this Federal Law.
7.1.8. Information on trans-border data transfer that has taken place or is expected to take place.
7.1.9 The name or surname, first name, patronymic and address of the person who processes personal data on behalf of the operator, if the processing is or will be assigned to such a person.
7.1.10. Information regarding the processing of the User's personal data provided to the User shall not contain personal data relating to other Users, unless there are legitimate grounds for disclosure of such personal data.
7.2 In accordance with Clause 3, Article 14 of the Federal Law ‘On Personal Data’, information related to the processing of the User's personal data may be provided to the User or his/her legal representative by the Operator upon application or upon receipt of a request from the User or his/her legal representative. The User has the right to send the relevant request to the following e-mail address: domefound@gmail.com:
7.2.1 The request must contain the number of the main identity document of the User or its representative, information about the date of issue of the said document and the issuing authority.
7.2.2 The request may be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.
7.3 The User has the right to demand from the Operator to clarify his/her personal data, block or destroy it if the personal data is incomplete, outdated, out-of-date or missing.
8. INFORMATION ON REALISED REQUIREMENTS TO PROTECTION OF PERSONAL DATA.
8.1 To protect information on payment cards, the Operator's payment partner shall use secure networks, encryption or other protection of cardholder data, including physical and technical access control, monitoring and testing of security systems, as well as other methods of information protection.
8.2 In accordance with the current legislation of the Russian Federation, the Operator has developed and introduced a set of organisational, administrative, functional and planning documents regulating and ensuring the security of processed personal data.
8.3 The circle of persons authorised to process personal data is defined, instructions to users on working with personal data, anti-virus protection, and actions in crisis situations are developed.
8.4 The requirements to the personnel, the degree of responsibility of employees for ensuring personal data security are determined.
8.5 Employees processing personal data are familiarised with the provisions of the Russian Federation legislation on personal data security and personal data protection requirements, documents defining the Operator's policy on personal data processing, local acts on personal data processing. Periodic training of these employees in the rules of personal data processing is conducted.
8.6 Necessary and sufficient technical measures are taken to ensure security of personal data against accidental or unauthorised access, destruction, modification, blocking of access and other unauthorised actions:
8.7. The Operator is not liable for any damage that may be caused by the User to third parties.
9. RESPONSIBILITY FOR VIOLATION OF NORMS REGULATING PROCESSING AND PROTECTION OF PERSONAL DATA.
9.1 The Operator's employees guilty of violating the norms regulating the receipt, processing and protection of personal data shall bear disciplinary, administrative, civil or criminal liability in accordance with the current legislation of the Russian Federation and the Operator's internal local acts.
9.2 The Operator shall bear civil and administrative liability for violation of legislation in the field of personal data processing and protection.
10. ACCESS TO THE POLICY.
10.1 The electronic version of the current version of the Policy is available on the Website.
11. UPDATING AND APPROVAL OF THE POLICY.
11.1 The Operator has the right to make changes to this Policy without consent and notification of the User. The new edition of the Policy comes into effect from the moment of its posting on the Website, unless otherwise provided by the new edition of the Policy.
11.2 This Policy and the relations between the User and the Operator are subject to the current legislation of the Russian Federation.
11.3 The current version of the Policy is valid until it is replaced by a new version.
12. OTHER MATERIAL TERMS AND CONDITIONS:
12.1 Any legally significant documents (claims, applications, appeals) may be sent to the following e-mail addresses:
12.1.1 To the Operator at the e-mail address: domefound@gmail.com.
12.2 To the User at the e-mail address specified by the User.
The term of response to applications, claims and appeals is 10 (ten) calendar days.
12.3 The legislation of the Russian Federation shall be applied to the relations related to this Policy, as well as those arising from it.