1.1. This policy of LLC "INT FIN LOGISTIC" (TIN 9909697628), hereinafter referred to as the "Operator", describes the procedure for processing personal data and is aimed at protecting the rights and legitimate interests of data subjects. The document has been developed in accordance with Federal Law No. 152-FZ of July 27, 2006 "On Personal Data".
1.2. The Policy defines the procedure and measures to ensure the security of personal data processing on the website https://dexarmarket.ru, with the goal of protecting human and civil rights and freedoms, including the right to privacy, personal and family secrets.
1.3. The document covers all processes carried out by the Operator relating to the processing of personal data.
1.4. The Policy is mandatory for study and compliance by all persons authorized to process personal data.
1.5. It applies to all actions related to the processing of personal data on the website https://dexarmarket.ru and in the Operator's information systems.
1.6. A User who places an order, opens a personal account, or otherwise interacts with the Operator expresses consent to the processing of their personal data in accordance with the Policy and the legislation of the Russian Federation. Continued use of the website indicates agreement with the provisions of the Policy. A User who is not willing to agree to the terms should refrain from using the resource.
Additionally: This Policy applies to personal data collected both before and after the document comes into force.
The following main terms and definitions are used in this Policy:
Personal Data (PD) — any information directly or indirectly related to a specific individual (personal data subject).
Personal Data Information System (PDIS) — a set of personal data stored in databases, as well as technologies and means for their processing.
Automated Processing of PD — data processing using computer means.
Blocking of PD — temporary suspension of data processing (except in cases of data clarification).
Depersonalization of PD — actions leading to the impossibility of determining the ownership of data to a specific person without additional information.
Internet Website (Website) — an automated information system available on the Internet at: https://dexarmarket.ru.
Processing of PD — any actions with personal data, including collection, recording, storage, updating, use, transfer, destruction, and other operations.
Operator — a state or private body that independently or jointly organizes the processing of personal data.
Provision of PD — transfer of data to a specific person or group of persons.
Distribution of PD — disclosure of data to an indefinite number of persons, including publication in the media or on the Internet.
Cross-border Transfer of PD — transfer of data to foreign authorities, companies, or individuals.
Destruction of PD — actions leading to the loss of the ability to recover data or destruction of material carriers.
PD Subject — an individual whose information is being processed.
Confidentiality of PD — the Operator's obligation to protect data from distribution without the consent of the subject or a legal basis.
Seller (Contractor) — a person offering goods or services on the website https://dexarmarket.ru.
User — a person visiting or using resources managed by the Operator, including the website https://dexarmarket.ru.
Order — an order for goods or services placed by the User on the website.
Cookies — small files saved on the user's device to remember preferences and actions during subsequent visits to the website.
3.1. The legal basis for PD Processing, depending on the purposes of the process involving PD Processing, may be:
3.1.2. The Operator's Charter.
3.1.3. Contracts concluded between the Operator and the Personal Data Subject, including in cases where the Operator exercises its right to assign rights (claims) under such contracts, between the Operator and another person who has entrusted the Operator with PD Processing, as well as for the conclusion of contracts of which Personal Data Subjects are parties.
3.1.4. Consent to PD Processing (in cases not directly provided for by the legislation of the Russian Federation, but corresponding to the Operator's powers), including the consent of applicants for vacant positions to PD Processing, the consent of interns to PD Processing, the consent of employees to PD Processing; the consent of clients to PD Processing, the consent of Users of the relevant Website, the consent of other Personal Data Subjects.
3.1.5. A contract between the operator and a third party, in which the latter entrusts the Operator with the processing of personal data of the Personal Data Subject or transfers personal data of the Personal Data Subject on the basis of a concluded contract.
4.1. The Operator processes PD obtained in accordance with the law, belonging to:
5.1. The Operator processes the following categories of PD of Users and Order recipients:
5.2. The Operator processes the following categories of PD of Personal Data Subjects who contact the Operator with claims of alleged violation of their rights: surname, first name, actual address, contact information (phone number and/or email address) of the rights holder or other person whose right was allegedly violated, and/or the applicant, if acting as an authorized representative of the rights holder or other person whose right was allegedly violated, information about received claims, the progress and results of their consideration.
5.3. Personal data specified in the paragraphs of this section above may be obtained by the Operator in one of the following ways:
PD Processing by the Operator is carried out on the basis of the following principles:
Employees of the Operator authorized to Process Personal Data are obliged to:
6.3. The Operator is obliged to ensure that the Operator's employees who directly carry out the Processing of Personal Data are familiarized with the provisions of Russian legislation on Personal Data, including the requirements for PD protection, local acts on the Processing and protection of Personal Data, and training of the Operator's employees.
The Operator processes PD if at least one of the following conditions is met:
6.5. The Operator carries out PD Processing using automated and non-automated means, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (Distribution, Provision, access), Depersonalization, Blocking, deletion, Destruction of Personal Data within the timeframes necessary to achieve the purposes of Personal Data Processing.
6.6. The Operator is prohibited from making decisions based solely on the Automated Processing of Personal Data that produce legal consequences with respect to the Personal Data Subject, or otherwise affect their rights and legitimate interests, except in cases and conditions provided for by the legislation of the Russian Federation in the field of Personal Data.
6.7. Representatives of state authorities (including controlling, supervisory, law enforcement, inquiry, investigation, and other authorized bodies on grounds provided for by the current legislation of the Russian Federation) obtain access to PD Processed by the Operator in the scope and manner established by the legislation of the Russian Federation.
6.8. The Processing of Personal Data by the Operator is carried out with the consent of the Personal Data Subject, except in cases established by the legislation of the Russian Federation, in compliance with the requirements for PD Confidentiality established by Art. 7 of FZ-152, as well as the adoption of measures aimed at ensuring the fulfillment of obligations for the Processing and protection of Personal Data established by the legislation of the Russian Federation.
6.9. The condition for the termination of Personal Data Processing may be the achievement of Personal Data Processing purposes, the expiration of the consent of the Personal Data Subject to the Processing of their PD, or the withdrawal of consent by the Personal Data Subject to the Processing of their PD, as well as the identification of unlawful PD Processing.
6.10. Personal Data is stored in a form that allows identifying the Personal Data Subject for no longer than required by the purposes of Personal Data Processing, except in cases where the storage period of Personal Data is established by FZ-152, a contract to which the Personal Data Subject is a party, beneficiary, or guarantor.
6.11. In the event of confirmation of the fact of inaccuracy of Personal Data or unlawfulness of their Processing, the Personal Data is subject to updating by the Operator, and the Processing must be terminated, respectively.
6.12. The Operator does not verify and, as a rule, does not have the ability to verify the relevance and reliability of the information provided by Personal Data Subjects obtained through each of the Operator's Websites. The Operator assumes that Personal Data Subjects, acting reasonably and in good faith, provide reliable and sufficient PD and maintain them in an up-to-date state.
The Operator provides the Personal Data Subject or their representative with information regarding the Processing of their Personal Data upon the appropriate request or inquiry of the Personal Data Subject or their representative in an accessible form.
6.14. The request of the Personal Data Subject for obtaining information regarding the Processing of their PD by the Operator must contain:
6.15. The request may be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.
6.16. The appeal of the Personal Data Subject or their legal representative to the Operator for the purpose of exercising their rights established by FZ-152 is carried out in writing in the form established by the Operator or in free form at the Operator's registered address.
6.17. The Operator considers the appeal of the Personal Data Subject/withdrawal of consent to PD Processing and provides a response to it in accordance with the legislation of the Russian Federation. The form for the appeal of the Personal Data Subject/withdrawal of consent to PD Processing is posted on the Internet at https://dexarmarket.ru.
Personal data is not disclosed to third parties and is not distributed otherwise without the consent of the Personal Data Subject, unless otherwise provided by the legislation of the Russian Federation. When disclosing (providing) Personal Data to third parties, the requirements for the protection of Processed Personal Data are observed.
For information purposes, the Operator may create publicly available sources of PD of PD Subjects, including directories and address books. With the written consent of the PD Subject, their surname, first name, place of birth, contact phone number, email address, and other Personal Data communicated by the PD Subject may be included in publicly available PD sources.
Information about the PD Subject must be excluded from publicly available PD sources at any time at the request of the PD Subject, the authorized body for the protection of PD Subjects' rights, or by court order.
Processing of special categories of PD by the Operator is permitted in the cases specified in Article 10 of FZ-152. Processing of PD about criminal records may be carried out by the Operator exclusively in cases and in the manner determined in accordance with the legislation of the Russian Federation.
Information that characterizes the physiological and biological features of a person, on the basis of which their identity can be established — biometric Personal Data — may be processed by the Operator only with the written consent of the PD Subject.
The Operator has the right to entrust PD Processing to another person with the consent of the PD Subject, unless otherwise provided by federal law, on the basis of a contract concluded with that person. The person carrying out PD Processing on behalf of the Operator is obliged to comply with the principles and rules of PD Processing provided for by FZ-152 and this Policy.
In accordance with Article 2 of Federal Law No. 242-FZ of July 21, 2014, when collecting PD, including through the information and telecommunications network "Internet", the Operator is obliged to ensure the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of PD of citizens of the Russian Federation using databases located on the territory of the Russian Federation, except in cases established by legislation.
The Operator is obliged to ensure that the foreign state to whose territory PD is intended to be transferred provides adequate protection of the rights of PD Subjects before carrying out such transfer.
Cross-border transfer of PD to the territories of foreign states that do not provide adequate protection of the rights of PD Subjects may be carried out in the following cases:
The PD Subject makes the decision to provide their PD and gives consent to their Processing freely, of their own will and in their own interest. Consent to PD Processing may be given by the PD Subject or their representative in any form that allows confirmation of the fact of receiving it, unless otherwise established by FZ-152.
Processing of PD for the purpose of promoting goods, works, services on the market by making direct contacts with the PD Subject (potential consumer) using communication means, as well as for political campaigning, is permitted only upon prior consent of the PD Subject.
The PD Subject has the right to obtain from the Operator information regarding the Processing of their PD, if such a right is not restricted in accordance with the legislation of the Russian Federation, including information containing:
The Operator is obliged to immediately cease Processing of PD at the request of the PD Subject.
If the PD Subject believes that the Operator is Processing their PD in violation of the requirements of FZ-152 or otherwise violates their rights and freedoms, the PD Subject has the right to appeal the actions or inaction of the Operator to the authorized body for the protection of PD Subjects' rights or in court.
The PD Subject has the right to protect their rights and legitimate interests, including compensation for losses and/or moral damages.
The PD Subject has the right to demand correction of their Personal Data if inaccuracies are found in the PD processed by the Operator, as well as to supplement the PD, including by providing an additional statement.
The PD Subject has the right to withdraw their Consent to Personal Data Processing and to demand the deletion of their PD from the Operator's systems if the PD is no longer required for the purposes for which it was obtained. You can withdraw your consent to Personal Data Processing at any time by sending an electronic message with an electronic signature to the email address: info@dexarmarket.ru, or by sending a written notice to the Operator's registered address.
The Personal Data Subject has the right to demand the restriction of Processing of their Personal Data for the purposes of the Operator's advertising offers.
The Personal Data Subject also has other rights established by FZ-152.
The Personal Data Subject whose PD is Processed by the Operator has the right at any time to change (update, supplement) the PD they have provided by logging into their personal account in cases where the functionality of the relevant Website allows this.
8.1. In cases established by the legislation of the Russian Federation in the field of Personal Data, the Operator is obliged to provide the Personal Data Subject or their representative, upon request or upon receipt of a request from the Personal Data Subject or their representative, with the information provided for in clause 7.2 of this Policy.
8.2. When collecting Personal Data, including through the information and telecommunications network "Internet", the Operator ensures the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of Personal Data of citizens of the Russian Federation using databases located in the territory of the Russian Federation, except in cases provided for by Federal Law No. 152-FZ.
8.3. The Operator bears other obligations established by Federal Law No. 152-FZ.
9.1. The Operator independently determines the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations provided for by Federal Law No. 152-FZ and regulatory legal acts adopted in accordance with it.
9.2. The security of PD Processed by the Operator is ensured by the implementation of legal, organizational, and technical measures necessary to meet the requirements of federal legislation in the field of PD protection.
9.3. To prevent unauthorized access to PD, the Operator applies the following organizational and technical measures:
10.1. Persons guilty of violating the norms regulating the Processing of Personal Data and the protection of Personal Data Processed by the Operator bear liability as provided by the legislation of the Russian Federation.
11.1. The Operator always Processes PD for specific purposes and only the PD that is relevant to the achievement of such purposes. In particular, the Operator processes PD for the following purposes:
12.1. The Operator has the right to collect and Process, including information that is not PD:
12.2. The Operator automatically receives certain types of information obtained in the process of User interaction with the Websites. This refers to technologies and services such as web protocols, cookies, web beacons, as well as third-party applications and tools. At the same time, web beacons, cookies, and other monitoring technologies do not allow the automatic collection of PD.
12.3. If the Operator can reasonably associate the information specified in this section with the personal account of a specific User, then such information may be processed together with the PD and other personal information of such User.