Personal Data Processing Policy on the Internet site

1. GENERAL PROVISIONS

1.1. This document (hereinafter referred to as the Policy) defines the policy regarding the processing of personal data of users of the SOLID LLC website (hereinafter referred to as the Operator) on the website on the Internet at: www.solidcons.com and www.solidcons.ru (hereinafter referred to as the Website).
1.2. This Policy has been developed on the basis of Clause 2, Part 1, Article 18.1 of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", as well as Recommendations for drafting a document defining the operator's policy regarding personal data processing, in accordance with the procedure established by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
1.3. In compliance with the requirements of Part 2 of Article 18.1 of the Federal Law of 27.07.2006 N 152-FZ "On Personal Data", the Policy is published in free access on the Internet on the Operator's Website at: www.solidcons.com and www.solidcons.ru (hereinafter referred to as the Website).
1.4. This Privacy Policy applies only to the Website. The Operator does not control and is not responsible for third-party sites to which the User can click on the links available on the Site.
1.5. The concepts contained in Article 3 of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" are used in this Policy with a similar meaning.
1.6. The following terms are also used in this Policy:
User - any person who visits the Site and uses the information, materials and services of the Site. The user of the Website is a subject of personal data within the meaning of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data".
1.7. Rights and obligations of the Operator.
1.7.1. The Operator is obliged to:
- process personal data exclusively for the purposes specified in the Policy, in accordance with the procedure established by the current legislation of the Russian Federation, and take measures necessary and sufficient to ensure the fulfillment of obligations provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and regulatory legal acts adopted in accordance with it.;
- do not distribute personal data without the User's consent, unless otherwise provided by the current legislation of the Russian Federation;
- to process personal data in compliance with the principles and rules provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data";
- to organize the protection of personal data in accordance with the requirements of the legislation of the Russian Federation;
- consider the requests of the User (his legal representative) regarding the processing of personal data and provide motivated answers;
- provide the User (his legal representative) with the opportunity to access his personal data free of charge;
- take measures to clarify, block, and destroy the User's personal data in cases established by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
1.7.2. The Operator has the right to:
- independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations stipulated by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and regulatory legal acts adopted in accordance with it, unless otherwise provided by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" or other federal laws. by laws;
- entrust the processing of personal data to another person with the User's consent, unless otherwise provided by federal law, on the basis of an agreement concluded with this person, including a state or municipal contract, or by adopting a relevant act by a state body or municipal body;
- if the User withdraws consent to the processing of personal data, continue processing personal data without the User's consent, subject to the grounds specified in Federal Law No. 152-FZ of 27.07.2006 On Personal Data;
- receive reliable information and/or documents containing the User's personal data from the User for the purposes of processing specified in clause 2.2 of the Policy.;
- require the User to clarify the personal data provided in a timely manner.
1.8. Rights and obligations of the User.
1.8.1. The User is obliged to:
- to ensure the accuracy of the personal data provided to the Operator, necessary for the purposes of processing provided for in clause 2.2 of the Policy;
- provide the Operator, if necessary, with information to clarify (update, modify) the personal data provided.
1.8.2. The User has the right to:
- full information regarding the processing of his personal data by the Operator, except in cases provided for by the legislation of the Russian Federation;
- clarification of his personal data, their blocking or destruction in cases where the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
- withdrawal of consent to the processing of personal data;
- taking legal measures to protect their rights;
- appeal to the authorized body for the protection of the rights of personal data subjects or in court against unlawful actions or omissions of the Operator during the processing of his personal data;
option: - giving prior consent to the processing of personal data in order to receive advertising.
The Operator and Users also have other rights and bear other obligations stipulated by the legislation of the Russian Federation.

2. PURPOSES OF PERSONAL DATA PROCESSING
2.1. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. Processing of personal data incompatible with the purposes of personal data collection is not allowed. The personal data being processed should not be redundant in relation to the stated purposes of their processing.
Only personal data that meets the purposes of their processing is subject to processing.
2.2. The Operator processes the User's personal data for the following purposes::
2.2.1. Providing the User with access to personalized Website resources.
2.2.2. Establishing feedback with the User and processing requests from the User.

3. LEGAL GROUNDS FOR PERSONAL DATA PROCESSING
3.1. The legal grounds for processing personal data by the Operator are:
- The Constitution of the Russian Federation;
- The Civil Code of the Russian Federation;
- Federal Law No. 149-FZ of 27.07.2006 "On Information, Information Technologies and Information Protection";
- Federal Law No. 294-FZ of 12.26.2008 "On the Protection of the Rights of Legal Entities and Individual Entrepreneurs in the Exercise of State Control (Supervision) and Municipal Control";
- Decree of the President of the Russian Federation No. 188 dated 03/06/1997 "On approval of the List of Confidential Information";
- Decree of the Government of the Russian Federation No. 1119 dated 01.11.2012 "On Approval of Requirements for the Protection of Personal Data during their Processing in Personal Data Information Systems"
- FSTEC of Russia Order No. 21 dated 02/18/2013 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data during their Processing in Personal Data Information Systems";
- consent to the processing of personal data on the Website;

4. SCOPE AND CATEGORIES OF PERSONAL DATA PROCESSED,
CATEGORIES OF PERSONAL DATA SUBJECTS
4.1. The Operator may process the personal data of the following Users: visitors to the Operator's website.
4.2. Personal data processed by the Operator includes (select appropriate):
- last name, first name, patronymic of the User;
- place of residence (region/city);
- mobile phone number;
- e-mail address (e-mail);
- data that is automatically transmitted to the Site's Services during their use using software installed on the User's device, namely: IP address, cookie data, information about the User's browser (or other program that accesses the Services), technical characteristics of the equipment and software used by the User, the date and time of access to the Services, the addresses of the requested pages, the history of requests and views on the Site and its Services, ( other information depending on the purposes of processing).

4.3. The Operator ensures that the content and volume of the processed personal data correspond to the stated purposes of processing provided for in sec. 2 Policies.

4.4. The Operator does not process biometric personal data, special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, or intimate life.

5. PROCEDURE AND CONDITIONS OF PERSONAL DATA PROCESSING
5.1. The processing of personal data by the Operator is carried out in accordance with the requirements of the legislation of the Russian Federation in the following ways::
- non-automated processing of personal data;
- automated processing of personal data with or without transmission of the received information via information and telecommunication networks;
- mixed processing of personal data.
5.2. The list of actions performed by the Operator with the User's personal data for the purposes stipulated in clause 2.2 of the Policy (select the appropriate one): collection, recording, systematization, accumulation, storage, refinement (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction.
5.3. The processing of personal data is carried out by the Operator subject to obtaining the User's consent (hereinafter referred to as Consent), obtained in accordance with the requirements of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data", with the exception of cases established by the legislation of the Russian Federation when personal data processing can be carried out without such Consent.
5.4. The User decides on the provision of his personal data and gives Consent freely, voluntarily and in his own interest.
5.5. The period of personal data processing is determined by the achievement of the purposes for which personal data was collected, unless another period is stipulated by the agreement with the User or the current legislation.
The condition for termination of personal data processing may be the achievement of personal data processing goals or the loss of the need to achieve these goals, the expiration of Consent or withdrawal of Consent by the User, as well as the detection of unlawful processing of personal data.
5.6. Consent may be revoked in the following way:: __________________.
5.7. The Operator distributes personal data authorized by the User for distribution, that is, performs actions aimed at disclosing them to an indefinite circle of persons, in compliance with the requirements, prohibitions and conditions established by Part 9 of art. 9, art. 10.1 of the Federal Law of 27.07.2006 N 152-FZ "On Personal Data". Disclosure and dissemination of personal data to third parties without the User's consent is prohibited, unless otherwise provided by federal law. Consent to the processing of personal data authorized by the User for distribution is issued separately from other User consents to the processing of his personal data, taking into account the Requirements for the content of consent to the processing of personal data authorized by the personal data subject for distribution, approved by Roskomnadzor Order No. 18 dated 02/24/2021.
5.8. When processing personal data, the Operator takes or ensures the adoption of necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions with respect to personal data.
5.9. Personal data is stored in a form that makes it possible to identify the User for a period not longer than the purposes of personal data processing require, except in cases where the storage period of personal data is established by federal law, an agreement to which the User is a party, beneficiary or guarantor.
Other conditions of personal data storage: _________________.
5.10. When processing personal data, the Operator complies with the requirements of art. 18 of the Federal Law of 27.07.2006 N 152-FZ "On personal data".
5.11. When processing personal data, the Operator undertakes to respect the confidentiality of personal data.
5.12. There is no cross-border transfer of personal data by the Operator.
5.13. In case of unlawful or accidental transfer (provision, dissemination, access) of personal data, the Operator informs the User about it within _________________________________.
5.14. Оператор совместно с Пользователем принимает все необходимые меры по предотвращению убытков или иных отрицательных последствий, вызванных неправомерной или случайной передачей (предоставлением, распространением, доступом) персональных данных Пользователя.

6. BLOCKING, CLARIFICATION AND DESTRUCTION OF PERSONAL DATA.
RESPONSES TO USER REQUESTS FOR ACCESS TO PERSONAL DATA
6.1. In case of detection of unlawful processing of personal data when contacting the User (his representative) or at the request of the User (his representative) or the authorized body for the protection of the rights of personal data subjects, the Operator blocks the unlawfully processed personal data related to the relevant User, or ensures their blocking from the moment of such request or receipt of the specified User request for the verification period.
In case of detection of inaccurate personal data when contacting the User or his representative, or at their request or at the request of the authorized body for the protection of the rights of personal data subjects, the Operator blocks personal data related to this User, or ensures their blocking from the moment of such request or receipt of the specified request for the verification period, if the blocking of personal data does not violate the rights and legitimate interests of the User or third parties.
6.2. In case of confirmation of the inaccuracy of personal data, the Operator, based on the information provided by the User (his representative) or the authorized body for the protection of the rights of personal data subjects, or other necessary documents, clarifies the personal data or ensures their clarification within seven working days from the date of submission of such information.
6.3. In case of detection of unlawful processing of personal data, the Operator, within a period not exceeding three working days from the date of detection, stops the unlawful processing of personal data or ensures the termination of the unlawful processing of personal data, and if it is impossible to ensure the legality of the processing of personal data, within a period not exceeding ten working days from the date of detection of the unlawful processing of personal data. processing of personal data, destroys such personal data or ensures their destruction.
6.4. In case of achievement of the purpose of personal data processing, the Operator destroys the personal data or ensures their destruction within a period not exceeding thirty days from the date of achievement of the purpose of personal data processing, unless otherwise provided by an agreement to which the User is a party, beneficiary or guarantor, another agreement between the Operator and the User, or if the Operator is not entitled to process personal data without the User's consent on the grounds provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" or other federal laws.
6.5. If the User withdraws consent to the processing of his personal data and if the storage of personal data is no longer required for the purposes of personal data processing, the Operator destroys the personal data or ensures their destruction within a period not exceeding thirty days from the date of receipt of the said withdrawal, unless otherwise provided by the agreement, the party to which, the beneficiary or under which the User is the guarantor, by another agreement between the Operator and the User, or if the Operator is not entitled to process personal data without the User's consent on the grounds provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" or other federal laws.
6.6. Within a period not exceeding seven working days from the date of submission by the User (his representative) of information confirming that such personal data was illegally obtained or is not necessary for the stated purpose of processing, the Operator destroys such personal data.
6.7. The processed personal data is subject to destruction in case of loss of the need to achieve the purposes of processing, unless otherwise provided by federal law.
6.8. The Operator responds to requests and requests from the User (his representative) about the processing of personal data carried out by him in the following order: _________________________________________________________.

7. RESPONSIBILITY OF THE PARTIES
7.1. The Operator is responsible for violating the requirements of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" in accordance with the legislation of the Russian Federation.
7.2. The User has the right to claim damages and (or) compensation for moral damage in court.
Moral damage caused to the User as a result of violation of his rights, violation of the rules for processing personal data, as well as the requirements for personal data protection established in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data", as well as the provisions of the Policy, is subject to compensation in accordance with the legislation of the Russian Federation. Compensation for moral damage is carried out independently of compensation for property damage and losses incurred by the User.

8. DISPUTE RESOLUTION
8.1. In case of disputes and/or disagreements arising from the relationship between the User and the Operator, such issues are resolved in accordance with the current legislation of the Russian Federation
8.2. The current legislation of the Russian Federation applies to the Policy and relations between the User and the Operator.

9. FINAL PROVISIONS
9.1. The Operator has the right to make changes to the Policy without the User's consent.
9.2. The new version of the Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new version of the Policy.
The new version of the Policy applies to relationships that have arisen after its introduction.
9.3. All suggestions or questions about the Policy should be reported info@solidcons.ru .