Rules for protecting information about users of the website arrko.ru June 30, 2017
1. General Provisions
1.1. These Rules are an official document of the State Autonomous Institution of the Kaluga Region Agency for Regional Development of Kaluga Region (State Autonomous Institution Agency for Regional Development of Kaluga Region) (hereinafter referred to as the Website Administration) used to determine the procedure for processing and protecting information about individuals using the services of the website https://arrko.ru (hereinafter referred to as the Website) and its services (hereinafter referred to as the Users).
1.2. The purpose of these Rules is to ensure adequate protection of information about users, including their personal data, from unauthorized access and disclosure.
1.3. Relations related to the collection, storage, distribution and protection of information about Website Users are governed by these Rules, other official documents of the Website Administration and the current legislation of the Russian Federation.
1.4. The current version of the Rules, which is a public document, is available to any Internet user. The Website Administration has the right to make changes to these Rules. When doing this, the Website Administration shall notify users thereof by posting a new version of the Rules on the Website at the permanent address https://arrko.ru.
1.5. By using the Website, the User agrees to the terms of these Rules.
1.6. If the User disagrees with the terms of these Rules, the use of the Website and its services must be immediately terminated.
2.1. By providing services for the use of the Website and its services (hereinafter referred to as the Website Services), the Website Administration, acting reasonably and in good faith, believes that the User:
• has all the necessary rights to enable him to register and use this Website;
• provides reliable information about himself to the extent necessary to use the Website Services;
• is aware that information on the Website posted by the User about himself may become available to other Website Users and Internet users, may be copied and distributed by such users;
• is aware that some types of information transmitted by him to other Users cannot be deleted by the User himself;
• familiarized with these Rules, agrees with them and assumes the rights and obligations specified therein.
2.2. The Website Administration does not verify the accuracy of the received (collected) information about users, except when such verification is necessary in order to fulfill the obligations of the Website Administration to the user.
3. Purposes of information processing
3.1. The Website Administration processes the personal data of the Users in order to fulfill the obligations of the Website Administration to the Users regarding the use of the Website and its services.
4. Composition of user information
4.1. Personal data of Users
Personal data of Users includes:
4.1.1. name, surname, mobile phone number (or landline phone number) provided by the Users and the minimum required for using the feedback form on the Website;
5. Processing information about users
5.1. Any personal data is processed on the basis of the principles:
a) lawfulness of the purposes and methods of processing personal data;
b) good faith;
c) compliance of the purposes of processing personal data with the purposes predetermined and declared during the collection of personal data, as well as the powers of the Website Administration;
d) compliance of the volume and nature of the personal data being processed, methods of processing personal data with the purposes of processing personal data;
e) the inadmissibility of combining databases created for mutually incompatible purposes containing personal data.
5.2. Conditions and purposes of personal data processing
The Website Administration processes the user’s personal data in order to fulfill the contract between the Website Administration and the User for the provision of services. By virtue of Article 6 of the Federal Law No. 152-FZ “On Personal Data” dd. July 27, 2006, a separate user consent to the processing of his personal data is not required. By virtue of subclause 2 Clause 2 Article 22 of the above law, the Website Administration has the right to process personal data without notifying the authorized body for the protection of the rights of subjects of personal data.
5.3. Collection of personal data
The User’s personal data is collected on the Website when the User fills in the feedback form with his personal data using the Website tools. Personal data provided for in Clause 4.1.1. of these Rules shall be provided by the User as the minimum necessary data.
5.4. Storage and use of personal data
Users’ personal data is stored exclusively on electronic media and processed using automated systems, except when non-automated processing of personal data is necessary in connection with the fulfillment of legal requirements. The terms of storage of personal data are established in accordance with applicable law.
5.5. Transfer of personal data
a) Users’ personal data shall not be transferred to any third parties, except as expressly provided by applicable law.
b) The personal data of Users shall be provided at the request of state bodies (local authorities) in the manner prescribed by law.
c) In order to fulfill the agreement between the User and the Website Administration and provide the User with access to use the Website functionality, the Website Administration shall develop the services and products provided, develop and implement new services and products, optimize the quality of services and products, improve the available functionality of the Website and services. To ensure the implementation of these goals, the User agrees that the Website Administration, in compliance with applicable law, shall collect, store, accumulate, systematize, extract, compare, use, fill (clarify) their data, and receive and transfer to affiliates and partners the results of automated processing of such data using various information evaluation models, in the form of integer and/or text values and identifiers corresponding to the evaluation criteria specified in the requests, for data processing by the Website Administration and/or persons specified in this paragraph.
5.6. Destruction of personal data. The user’s personal data shall be destroyed when:
a) the User’s personal data is deleted by the Website Administration when reaching the purpose of processing personal data, within the time limits established by applicable law;
b) personal data is deleted by the Website Administration upon withdrawal of consent to the processing of personal data, within the time limits established by applicable law.
6. Rights and obligations of users
All Users have the right to:
6.1. require that the Website Administration clarify their personal data, block or destroy them.
6.2. on the basis of their request, receive from the Website Administration information regarding the processing of their personal data.
7. Measures to protect information about Users
7.1. The Website Administration takes technical, organizational and legal measures to ensure the protection of the User’s personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.
8. User requests
8.1. Users have the right to send their requests to the Website Administration, including requests regarding the use of their personal data in writing to: Russia, 248001, Kaluga, Dzerzhinsky str., 41, building 2 or in the form of an electronic document signed with a qualified electronic signature in accordance with the legislation of the Russian Federation, to the email address: firstname.lastname@example.org.
8.2. The Website Administration undertakes to consider and send a response to the user’s request within 30 days as of receipt of the request.
8.3. All correspondence received by the Website Administration from users (applications in written or electronic form) refers to restricted access information and shall not be disclosed without the User’s written consent. Personal data and other information about the User who sent the request cannot be used without the User’s special consent except to respond to the topic of the received request or in cases expressly provided for by law.