1. General provisions
1.1. This Personal Data Processing Policy of Erfis LLC (hereinafter referred to as the “Policy”) was developed to ensure the protection of the rights and freedoms of the personal data subject when processing his personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. The policy has been developed in accordance with the current legislation of the Russian Federation on personal data, regulations of executive authorities on the security of personal data, including when processing it in personal data information systems.
1.3. This Policy applies to all processes of collection, systematization, storage, recording, extraction, transmission, deletion, use, distribution, depersonalization, blocking, carried out using automation tools and without the use of such tools.
1.4. This Policy uses terms that have the following meaning:
1.4.1. Administrator, ERFIS – Erfis LLC (TIN 7804564715), which processes personal data of Site Users.
1.4.2. Website – ERFIS website located at: erfis.ru
1.4.3. User is an individual who is the subject of personal data, who has registered on the Site and provided the personal data necessary for registration.
1.4.4. Personal data - any information relating to a directly or indirectly identified or identifiable individual (subject of personal data), which alone or in combination with other information available to the site allows the user to be identified.
The Administrator processes the following personal data of the User:
- name;
- phone number;
- email address.
Processing of personal data - any action (operation) or set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, transfer (distribution, provision, access), recording, accumulation, storage, clarification (updating, changing), extraction, use, systematization, depersonalization, blocking, deletion of personal data.
2. Principles and purposes of processing personal data:
2.1. When processing personal data, the following principles are observed:
- content compliance;
- legality and fairness;
- preventing the processing of personal data incompatible with the purposes of collecting personal data;
- limiting the processing of personal data to the achievement of specific, predetermined and legitimate purposes.
2.2. Processing of Personal Data is carried out for the following purposes:
- providing Users with access to information and materials published on the Site;
- conclusion, execution, termination of civil contracts;
- sending informational messages to Users.
3. User rights and Administrator responsibilities:
3.1. The user as a subject of personal data has the right to:
- demand clarification of your personal data, their blocking or deletion if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
- demand elimination of unlawful actions of the Administrator in relation to his personal protection of his rights and legitimate interests, including demanding compensation for losses and/or compensation for moral damage in court;
- withdraw your consent to the processing of personal data.
3.2. The administrator is obliged:
- provide the User, upon his request, with information regarding the processing of his personal data, or provide a refusal on legal grounds;
- at the User’s request, clarify the processed personal data, block or delete if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
- ensure blocking, deletion, if the processing of personal data is carried out by another person acting on behalf of the Administrator;
- notify the User about the processing of personal data if the personal data was not received from the User (except for cases where the User has already been notified about the processing of his personal data by the relevant operator);
- delete or anonymize personal data within 20 working days from the date of receipt of the withdrawal of consent to the processing of personal data;
- when collecting personal data, including using the Internet information and telecommunications network, ensure recording, systematization, accumulation, storage, clarification, retrieval of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation, except for cases specified in the Federal Law “On Personal Data”.
4. Measures to ensure the security of personal data:
4.1. The administrator takes measures established by law to ensure the security of personal data during their processing. Ensuring the security of personal data is achieved:
- identification of threats to the security of personal data during their processing in personal data information systems;
- application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems;
- detecting facts of unauthorized access to personal data and taking measures;
- restoration of personal data modified or destroyed due to unauthorized access to it;
- establishing rules for access to personal data processed in the personal data information system, as well as ensuring registration and accounting of actions performed with personal data in the personal data information system;
- monitoring the effectiveness of the measures and means used to ensure the security of personal data, as well as monitoring the level of security of personal data information systems.
4.2. The administrator who has gained access to personal data is obliged to maintain the confidentiality of personal data - not to disclose to third parties or distribute personal data without the consent of the User, unless otherwise provided by federal law.
5. Final provisions
5.1. The user has the right to receive any clarification on issues of interest regarding the processing of his personal data by contacting the Administrator at info@erfis.ru.
5.2. Requirements or statements in accordance with clause 3.1 of this Policy are sent by registered mail to the address: 195256, St. Petersburg, st. Butlerova, 13-687. The request or application must contain the full name and passport details of the applicant, as well as the handwritten signature of the applicant or his representative. If a request or application is signed by a representative, a copy of the power of attorney must be attached.
5.3. The current version of the Policy is posted on the Website at: https://erfis.ru/politika-v-otnoshenii-obrabotki-personalnykh-dannykh/.
