Personal Data Processing Policy

1. General provisions
This personal data processing policy is drawn up in accordance with the requirements of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" (hereinafter referred to as the "Personal Data Law") and defines the procedure for processing personal data and measures to ensure the security of personal data taken by SPORTPERSON LLC (hereinafter referred to as the "Operator").
1.1. The operator sets as its most important goal and condition for the implementation of its activities the observance of the rights and freedoms of a person and a citizen in the processing of his personal data, including the protection of the rights to privacy, personal and family secrets.
1.2.This Operator's Personal Data Processing Policy (the "Policy") shall apply to all information that Operator may obtain about website visitors https://www.sportpersona.ru.

2. Basic concepts used in the Policy
2.1. Automated processing of personal data - processing of personal data using computer equipment.
2.2. Blocking of personal data - temporary termination of the processing of personal data (except if processing is necessary to clarify personal data).
2.3. Website - a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at a network address https://www.sportpersona.ru.
2.4. Personal data information system - a set of personal data contained in databases and providing their processing by information technologies and technical means.
2.5. Depersonalization of personal data - actions as a result of which it is impossible to determine, without the use of additional information, the ownership of personal data to a particular User or other personal data subject.
2.6. Personal data processing - any action (operation) or a set of actions (operations) performed using automation means or without using such means with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
2.7. Operator - a state body, municipal body, legal entity or individual, independently or together with other persons, organizing and/or processing personal data, as well as determining the purpose of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.
2.8. "Personal Data" means any information relating directly or indirectly to a particular or defined Website User https://www.sportpersona.ru.
2.9. Personal data allowed by the personal data subject for distribution - personal data, access of an unlimited number of persons to which is provided by the personal data subject by giving consent to the processing of personal data allowed for distribution in the manner prescribed by the Law.
2.10. user - any visitor to the website https://www.sportpersona.ru.
2.11. provision of personal data - actions aimed at disclosure of personal data to a certain person or a certain circle of persons.
2.12. distribution of personal data - any actions aimed at disclosing personal data to an indefinite number of persons (including publication, placement, provision of access).
2.13. Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to an authority, individual or legal entity.
2.14. Destruction of personal data - actions in which personal data are destroyed beyond recovery.

3. Basic rights and obligations of the Operator
3.1. the operator has the right:
- receive reliable information and/or documents containing personal data from the personal data subject;
- in case of withdrawal of consent to continue processing if there are legal grounds;
- independently determine measures to comply with the law.
3.2. the operator shall:
- provide the subject with information about the processing of his data;
- organize processing in accordance with the legislation;
- respond to the subject's requests;
- send information to authorized bodies upon request;
- publish this Policy;
- protect personal data;
- stop processing in cases stipulated by law;
- perform other duties according to the law.

4. Basic rights and obligations of personal data subjects
4.1. The subject has the right:
- receive information on processing of their data;
- require clarification, blocking, deletion of personal data;
- withdraw consent to processing;
- appeal against the Operator's actions;
- exercise other rights provided by law.
4.2. The subject shall:
- provide reliable information;
- report on their updating.
4.3. Persons who provided false information shall be liable.

5. Principles of personal data processing
5.1. Processing is carried out on a legal and fair basis.
5.2. Processing is limited to the achievement of specific, legitimate goals. Incompatible processing is not allowed.
5.3. It is not allowed to combine databases, processing in which is carried out for incompatible purposes.
5.4. only personal data corresponding to the purposes of processing are processed.
5.5. The volume of processed data corresponds to the stated goals. Redundancy is not allowed.
5.6. Ensure accuracy, sufficiency, relevance of data. Measures have been taken to remove or clarify inaccurate data.
5.7. Shelf life is limited to processing purposes. Data is destroyed or depersonalized upon achievement of goals or upon loss of necessity, unless otherwise provided by law.

6. Purposes of personal data processing
Handling cases through site forms
sending informational and marketing messages
6.1. Personal data to be processed:
NAME
Email
Telephone
IP address and cookie
Company name

7. Conditions of personal data processing
7.1. Processing is carried out with the consent of the personal data subject.
7.2. Processing is necessary to comply with the requirements of the law and international treaties.
7.3. Processing is necessary for the execution of court decisions and acts of authorized bodies.
7.4. Processing is necessary for the execution or conclusion of an agreement with the personal data subject.
7.5. Processing is necessary to protect the rights and legitimate interests of the Operator or third parties, subject to the rights of the subject.
7.6. Personal data made publicly available by the personal data subject are processed.
7.7. Personal data subject to publication or mandatory disclosure in accordance with the law are processed.
7.8. Processing is carried out on the following legal grounds:
consent of the personal data subject
obligations established by the legislation of the Russian Federation

8. Procedure for collection, storage, transfer and other types of personal data processing
8.1. The security of personal data is ensured by the implementation of legal, organizational and technical measures that meet the requirements of the law.
8.2. The operator ensures the safety of data and excludes access to them by unauthorized persons.
8.3. Transfer to third parties is carried out only if there are legal grounds or the consent of the subject.
8.4. In case of inaccuracies, the subject may send a request for updating to the opt-sportpersona@mail.ru marked "Updating personal data."
8.5. The processing period is determined by the goals, unless otherwise provided. The subject can withdraw consent at any time by sending a notice to the opt-sportpersona@mail.ru marked "Withdrawal of consent."
8.6. Data of third-party services (payment, postal, etc.) are processed by them according to their own policies. The operator is not responsible for the actions of these third parties.
8.7. The prohibitions on transfer and processing established by the subject do not apply in case of processing in the public or state interests.
8.8. Data is stored until the goals are achieved or the storage period expires, after which they are destroyed or depersonalized.
8.9. Grounds for termination of processing: achievement of goals, withdrawal of consent, expiration, illegal processing.

9. List of actions performed by the Operator with the received personal data
9.1. The operator shall perform the following actions: collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
9.2. The operator can perform automated processing with or without transmission of information over networks.
9.3. Types of processed actions:
collection, recording, systematization, accumulation, storage, refinement, extraction, use, transfer, depersonalization, blocking, deletion, destruction

10. Cross-border transfer of personal data
10.1 Prior to the start of cross-border transfer, the Operator shall notify the authorized body for the protection of the rights of personal data subjects.
10.2. the Operator shall obtain the necessary supporting information from the foreign party prior to filing the notification.

11. confidentiality of personal data
11.1 The operator and other persons who have gained access to personal data are obliged not to disclose to third parties and not to distribute data without the consent of the subject, unless otherwise provided by federal law.

12. Final provisions
12.1. The user can get clarification on the processing of personal data by sending a request to email opt-sportpersona@mail.ru.
12.2. All changes in the Policy will be reflected in this document. The policy is valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is available at: https ://https ://sportpersona.ru/privacypolicyeng.