POLICY FOR PROCESSING PERSONAL DATA
1. General Provisions
1.1. This Personal Data Processing Policy on the www.kraftgroup.ru website (hereinafter referred to as the Policy), adopted by the Site Administration in accordance with the provisions of the User Agreement (hereinafter referred to as the Agreement), establishes the goals, principles, conditions and methods of processing personal data, as well as the rights of personal data subjects, measures to protect personal data.
1.2. This Policy has been developed in accordance with the Constitution of the Russian Federation, Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”, Federal Law No. 149-FZ of July 27, 2006 “On Information, Information Technologies and Information Protection”, as well as other regulatory legal acts, including relevant by-laws of sectoral departments and other state bodies, whose competence includes policy development, control and supervision of compliance with legislation in the field of information circulation, in particular in the field of personal data processing.
1.3. The purpose of this Policy is to ensure proper protection of information about Users, including their personal data, from unauthorized access and disclosure.
1.4. By registering and using the Site, the User agrees to the terms of this Policy.
1.5. If the User disagrees with the terms of this Policy, the use of the Site and its services must be immediately terminated.
1.6. The protection of the Personal Data of Users and other persons filling out the appropriate forms when registering on the site www.kraftgroup.ru is carried out by the Site Administrator in accordance with the User Agreement, the current legislation of the Russian Federation, as well as this Policy.
2. Terms and Definitions
2.1. Administrator - Kraft Group Limited Liability Company (PSRN 1157847304383, ITN 7814278470, Legal address: 197341, Russian Federation, St. Petersburg, Afonskaya street 2 Liter- A, office 2-306
2.2. Postal address for sending postal correspondence in a valuable letter with a description of the attachment: 197341, Russian Federation, St. Petersburg, Afonskaya street 2, office 142, a legal entity established under the legislation of the Russian Federation, carrying out its business activities using the Site located in the public information and telecommunication network Internet via the network www.kraftgroup.ru
2.3. Personal data - any information relating directly or indirectly to a specific or identifiable individual, including the Site User (subject of personal data), including any such data that the Site User or other persons specified in Section 4 of this Policy provides about yourself independently, including when registering (creating a Personal Account account) or in the process of otherwise using the Site, including any data automatically transmitted to the Administrator in connection with the use by the persons specified in Section 4 of this Policy of devices that provide access to the Site , software used for the specified purposes, etc.
2.4. Processing of personal data - any action (operation) or a set of actions (operations) performed by the Administrator, as well as by third parties using automation tools or without using such tools with personal data, including the collection, recording, systematization, accumulation, storage, clarification (updating , change), extraction, use, transfer (distribution, provision, access), cross-border transfer, depersonalization, blocking, deletion, destruction of personal data.
2.5. Site - an Internet resource hosted on the site on the Internet at the address: www.kraftgroup.ru under the name Kraft Group site (including all levels of the specified domain, both functioning on the date of acceptance of this Agreement by the User, and launched and put into operation during the entire period of its validity), available to the User from various devices connected to the Internet, and containing, among other things, information about the Goods and / or Services, the Seller and / or the Service Provider, which is managed by the Site Administrator.
2.6. User - an individual who has accessed the Site, who has reached the age allowed in accordance with the legislation of the Russian Federation to accept the relevant user agreement or other rules in accordance with which the Site operates, and using the Site.
3. Basic principles of personal data processing
3.1. The processing of the Personal Data of the Site Users is carried out on the basis of Article 5 of the Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”, in particular, it is based on the following principles:
3.1.1. conscientiousness;
3.1.2. compliance of the purposes of processing personal data with the purposes predetermined and declared during the collection of Personal data, as well as the powers of the Site Administrator;
3.1.3. compliance of the volume and nature of the processed personal data, methods of processing personal data with the purposes of processing personal data;
3.1.4. processing of personal data is carried out on a legal and fair basis;
3.1.5. storage of personal data is carried out in a form that allows to determine the subject of personal data, no longer than required by the purposes of processing personal data;
3.1.6. adoption of technical, organizational and legal measures aimed at ensuring the security (protection) of personal data to prevent unauthorized access by third parties.
4. Subjects of Personal Data
4.1. The Website processes the Personal Data of the following Personal Data subjects:
4.1.1. Site users www.kraftgroup.ru
4.1.2. other personal data subjects who provide their personal data to the Administrator, including by filling out special forms posted on the Site and being elements of the Site interfaces, as well as as a result of automatic transmission of certain personal data in connection with the use of access devices to the Site.
4.2. Specified in clause 4.1. of this Policy, persons are referred to as Personal Data Subjects.
5. Purposes and terms of personal data processing
5.1. The Administrator, through the Site, processes the Personal Data of the subjects of personal data, as well as the persons specified in Section 4 of this Policy, in order to comply with the requirements of the legislation on the processing of personal data.
5.2. The website www.kraftgroup.ru performs automated and non-automated processing of Personal Data.
5.3. The Administrator, through the website www.kraftgroup.ru, processes Personal Data of Personal Data Subjects for the following purposes:
- identification of Personal Data Subjects in connection with the use of the Site;
- provision of personal services and services to the Subjects of personal data using the Site;
- communication with the Subjects of personal data, including for the purposes of sending notifications, requests and information regarding the use of the Site, the provision of services, as well as for processing requests and applications from these persons;
- promotion of services provided through the Site, including services to Users;
- reporting and conducting statistical and other studies based on the data provided;
- transfer of data to third parties in order to carry out activities using the Site;
- Administration of the Site.
5.4. The Administrator processes Personal Data – i.e. any actions (operations) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
5.5. The term for the processing of Personal Data is determined by the achievement of the purpose of processing Personal Data, with the exception of cases when the subject of personal data refuses to process personal data and sends a document demanding to stop processing personal data, destroy personal data.
5.6. Cross-border transfer of personal data of personal data subjects is allowed for the same purposes as specified in clause 5.3. of this Policy, while the main purpose of such a transfer will be to provide the Personal Data Subject with the opportunity to use the opportunities available on the Site in full, since the computing power and equipment that ensure the operation of the Site may be located outside the Russian Federation.
6. List of processed Personal data
6.1. The list of Personal data processed by the Administrator is determined by the current legislation and this Policy. The processed personal data may include: name, surname, gender, mobile phone number, e-mail address, as well as any information automatically transmitted to the Administrator in connection with the use by the User of devices that provide access to the Site and software used for these purposes.
7. The procedure for granting consent to the processing of Personal data
7.1. Subjects of personal data, by clicking the button "I consent to the processing of my personal data", located in the relevant section of the Site, and / or under a special form that requires the input of personal data, and / or under the feedback form, voluntarily agree with this Policy. , as well as their own will, express their unconditional consent to the processing of Personal Data in accordance with this Policy.
7.2. If the Personal Data Subject does not agree with this Policy, or will not agree with it later, such Personal Data Subject must stop using the Site, its Services, as well as in writing by the methods specified in clause 8.2. of this Policy, notify the Administrator of the specified by sending an appropriate application for withdrawal of consent and destruction of personal data to the Administrator.
8. Final provisions
8.1. The subject of personal data has the rights in accordance with the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data", as well as other regulatory legal acts that determine the procedure for processing personal data.
8.2. The subject of personal data has the right to revoke previously granted consent to the processing of Personal data by sending an appropriate application for withdrawal of consent and / or destruction of personal data:
- to the email address info@kraftgroup.ru;
- to the postal address of the Administrator in the form of a valuable letter with a description of the attachment, namely to the address: 197341, Russian Federation, St. Petersburg, Afonskaya street 2, office 142.
8.3. Upon receipt of an application for withdrawal of consent and / or destruction of personal data, the Administrator takes the necessary and sufficient measures to fulfill the said application, including by deleting the Personal Account of the Personal Data Subject. Meanwhile, this Policy allows the Administrator to keep a duplicate of Personal Data for internal (own) purposes and continue to use it.
8.4. The administrator takes sufficient and necessary technical, organizational and legal measures aimed at ensuring the security (protection) of personal data of personal data subjects in order to prevent unauthorized access by third parties, as well as destruction, modification, blocking, copying, distribution of such data, in in particular:
8.4.1. use of anti-virus software on the computers of the Site;
8.4.2. use of the Site Users authentication system and the use of a login-password pair;
8.4.3. restriction of access to the premises used by the Administrator for conducting its activities;
8.4.4. appointment of a person responsible for organizing the processing of Personal Data by the Administrator;
8.4.5. establishment of local rules for access to Personal data.
8.5. This Policy comes into force from the moment it is approved by the Site Administrator, namely from July 15, 2022.
8.6. The Site Administrator reserves the right to unilaterally change this Policy. When making changes to the Policy, the date of the last change is indicated. The new Policy is valid from the moment it is posted, unless otherwise provided by the Policy itself. The current version of the Policy is always placed in the public domain at: www.kraftgroup.ru
8.7. The laws of the Russian Federation apply to this Policy and any relations related to it.