Privacy Policy
 

PRIVACY POLICY. FULL VERSION

Privacy Policy and

work with personal data

April 15, 2023

 

The Privacy and Personal Data Policy (Policy) applies to information posted on the website on the Internet at: www.picbykate.ru and its English version - www.picbykate.com (Website), which website users, operator (administration) site) can get about the User during the use of the Site, its services and products, as well as information that is provided by the User for concluding agreements with the Operator.

Using the Site means the User's unconditional consent to the Policy and the conditions for processing his personal data specified therein; in case of disagreement with these conditions, the User must refrain from using the site.

The policy was drawn up in accordance with the requirements of the Federal Law of 27.07.2006. No. 152-FZ "On Personal Data" (Law on Personal Data).

 

TERMS

 

Personal data (personal information) - any information relating directly or indirectly to a specific or identifiable User of the Site.

User - any visitor to the Site.

Automated processing of personal data - processing of personal data using computer technology.

Blocking of personal data - temporary suspension of the processing of personal data (exception: if the processing is necessary to clarify personal data).

Site - a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at www.picbykate.ru

Personal data information system - a set of personal data contained in databases, and information technologies and technical means that ensure their processing.

Depersonalization of personal data - actions as a result of which it is impossible to determine, without the use of additional information, the ownership of personal data by a specific User or other subject of personal data.

Processing of personal data - any action (operation) or a combination of them performed using automation tools (or without them) with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

Operator (Website Administration) - a legal or natural person, independently or jointly with other persons organizing and / or carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data .

The operator is the individual entrepreneur Samoilova Ekaterina Mikhailovna TIN 770970346640, OGRNIP 313774614900663.

Personal data permitted by the subject of personal data for dissemination - personal data, access to an unlimited number of persons to which is provided by the subject of personal data by giving consent to their processing, permitted by the subject of personal data for distribution in the manner prescribed by the Law on Personal Data (hereinafter referred to as personal data allowed for distribution).

Providing personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons.

Dissemination of personal data - any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or familiarizing with personal data of an unlimited number of persons, including the disclosure of personal data in the media, placement in information and telecommunication networks or providing access to personal data in any other way.

Cross-border transfer of personal data is the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity.

Destruction of personal data - any actions as a result of which personal data is irretrievably destroyed with the impossibility of further restoration of the content of personal data in the information system of personal data and (or) material carriers of personal data are destroyed.

 

  1. GENERAL PROVISIONS

 

1.1. Within the framework of this Policy, the User's personal information means:

1.1.1. Personal data that the User provides about himself independently when registering (creating an account) or in the process of using the Site. The information required for the use of the Site services is marked in a special way. Other information is provided by the User at his discretion.

1.1.2. Data that is automatically transmitted to the services of the Site in the course of their use using the software installed on the User's device, including IP address, cookie data, tracking bugs, information about the User's browser (or other program that accesses the services ), technical characteristics of the equipment and software used by the User, date and time of access to the services, addresses of the requested pages and other similar information.

1.1.3. Other information about the User, the processing of which is provided for by the User Agreement.

1.2. The Operator does not control and is not responsible for the websites of third parties, to which the User can follow the links available on the Website.

 

  2. PURPOSES AND PRINCIPLES OF PROCESSING PERSONAL DATA OF USERS

 

2.1. The Operator collects and stores personal data that is necessary for the provision of services or the execution of agreements and contracts with the User (exception: the legislation provides for the mandatory storage of personal data for a certain period).

2.1.1. The Operator may process the following personal and other data of the User:

- Full Name,

- email address,

phone number,

information about purchased goods,

information about the services provided,

2.2. The purposes of processing the User's personal data.

2.2.1. Identification of the User registered on the Site.

2.2.2. Providing the User with access to services, information and/or materials contained on the Site.

2.2.3. Establishing feedback with the User, including sending notifications, requests regarding the use of the Site, the provision of services, processing requests and applications from the User.

2.2.4. Determining the location of the User to ensure security, prevent fraud.

2.2.5. Confirmation of the accuracy and completeness of personal data provided by the User.

2.2.6. Creating an account for making purchases / sales on the site, if the User has agreed to create an account.

2.2.7. Notifying the User of the Site about events, discounts, promotions and other informing the User by sending emails, SMS in other ways.

The Operator has the right to send notifications to the User about new products and services, special offers and various events. The user can always opt out of receiving informational messages by sending an email to hello@picbykate.com with the note “Notification opt-out”.

2.2.8. Providing the User with effective customer and technical support in case of problems related to the use of the Site.

2.2.9. Implementation of advertising activities. The site collects and processes anonymous data about visitors (including cookies) using Internet statistics services (Yandex Metrika, Google Analytics and others).

Impersonal data of Users collected using Internet statistics services are used to collect information about the actions of Users on the site, improve the quality of the site and its content.

2.2.10. Conclusion, execution and termination of civil law contracts.

2.2.11. Accounting and tax accounting, reporting.

2.3. Principles of personal data processing.

2.3.1. Data processing is carried out on a lawful and fair basis.

2.3.2. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. It is not allowed to process personal data that is incompatible with the purposes of collecting personal data.

2.3.3. It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other.

2.3.4. Processing is subject to personal data that meet the purposes of their processing.

2.3.5. The content and scope of the processed personal data correspond to the stated purposes of processing.

2.3.6. When processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of processing personal data, is ensured.

2.3.7. The storage of personal data is carried out in a form that allows determining the subject of personal data, no longer than required by the purposes of processing personal data (exceptions: if the period for storing personal data is established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor) .

The processed personal data is destroyed or depersonalized upon reaching the goals of processing or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.]

  3. CONDITIONS FOR PROCESSING PERSONAL DATA AND THEIR TRANSFER TO THIRD PARTIES

 

3.1. The Site stores personal data of Users in accordance with the internal regulations of specific services.

3.1.1. The operator collects, records, systematizes, accumulates, stores, clarifies (updates, changes), extracts, uses, transfers (distributes, provides, accesses), depersonalizes, blocks, deletes and destroys personal data.

3.1.2. The operator carries out automated processing of personal data with the receipt and / or transmission of the received information via information and telecommunication networks or without it.

3.1.2. Before the start of the cross-border transfer of personal data, the operator is obliged to make sure that the foreign state to whose territory the transfer of personal data is supposed to be carried out provides reliable protection of the rights of subjects of personal data.

3.2. With respect to the User's personal data, their confidentiality is maintained, except in cases where the User voluntarily provides information about himself for general access to an unlimited circle of persons.

When using individual services, the User agrees that a certain part of his personal information becomes publicly available.

3.3. The operator has the right to transfer personal data to third parties in the following cases:

3.3.1. The user has agreed to such actions.

3.3.2. The transfer is necessary for the User to use a certain service or to fulfill a certain agreement or contract with the User.

3.3.3. For their processing by persons who send messages via e-mail / mobile operators, debit / credit funds from / to a bank card (s) / current account - to credit organizations (banks), from an account opened in the payment system - to payment agents, payment systems, mobile operators), including cross-border transfer of the User's personal data in written or electronic form.

3.3.4. The transfer is provided for by Russian or other applicable legislation within the framework of the procedure established by law.

3.3.5. In the event of the sale of the Site, the acquirer shall transfer all obligations to comply with the terms of this Policy in relation to the personal information received by him.

3.4. The processing of personal data is carried out without time limit in any legal way in accordance with the Law on Personal Data.

3.5. In case of loss or disclosure of personal data, the Operator informs the User about the loss or disclosure of personal data.

3.6. The Operator takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties.

3.7. The Operator, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.

4. OBLIGATIONS AND RIGHTS OF THE PARTIES

 

4.1. The user is obliged:

4.1.1. Provide information about personal data necessary to use the Site.

4.1.2. Update / supplement the information provided if it changes.

4.2. The user has the right:

4.2.1. Receive information regarding the processing of his personal data, except as otherwise provided by federal laws. The information is provided to the Personal Data Subject by the Operator in an accessible form, and it should not contain personal data relating to other Personal Data Subjects, except when there are legal grounds for disclosing such personal data. The list of information and the procedure for obtaining it are established by the Law on Personal Data.

4.2.2. Require the Operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take legal measures to protect their rights.

4.2.3. Appeal against illegal actions or inaction of the Operator when processing his personal data.

4.3. The operator is obliged:

4.3.1. Use the information received solely for the purposes specified in this Policy.

4.3.2. Ensure that confidential information is kept secret, not disclosed without the prior written permission of the User, and also not to sell, exchange, publish or disclose in other possible ways the transferred personal data of the User, except as provided for in this Policy.

4.3.3. Take precautions to protect the confidentiality of the User's personal data in accordance with the procedure usually used to protect this kind of information in existing business transactions.

4.3.4. Block personal data relating to the relevant User from the moment the User or his legal representative or authorized body for the protection of the rights of personal data subjects applied or requested for the period of verification in case of revealing inaccurate personal data or illegal actions.

4.4. The operator has the right:

4.4.1. Independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations provided for by the Law on Personal Data and the regulatory legal acts adopted in accordance with it, unless otherwise provided by the legislation of the Russian Federation.

4.4.2. Entrust the processing of personal data to another person, unless otherwise provided by federal law, on the basis of an agreement concluded with this person. A person who processes personal data on behalf of the Operator is obliged to comply with the principles and rules for the processing of personal data.

4.4.3. If the Subject of Personal Data withdraws consent to the processing of personal data, the Operator has the right to continue processing personal data without the consent of the Subject of Personal Data if there are grounds specified in the Law on Personal Data.

4.5. Persons who have provided the Operator with false information about themselves or information about another subject of personal data without the consent of the latter shall be liable in accordance with the legislation of the Russian Federation.

 

  5. RESPONSIBILITIES OF THE PARTIES

 

5.1. The Operator, who has not fulfilled its obligations, is liable for losses incurred by the User in connection with the unlawful use of personal data, in accordance with the legislation of the Russian Federation.

5.2. In case of loss or disclosure of confidential information, the Operator is not responsible if this information:

5.2.1. Became public property before its loss or disclosure.

5.2.2. Was received from a third party prior to its receipt by the Operator.

5.2.3. Was disclosed with the consent of the User.

 

  6. DISPUTES RESOLUTION

 

6.1. The claim procedure is mandatory (a written proposal for voluntary settlement of the dispute).

6.2. The recipient of the claim, within 30 (thirty) calendar days from the date of receipt of the claim, notifies in writing (to the e-mail address and / or to the postal address (if any) of the applicant about the results of the consideration of the claim.

6.3. If an agreement is not reached, the dispute will be referred to the court in accordance with the current legislation of the Russian Federation.

6.4. The current legislation of the Russian Federation applies to this Policy and the relationship between the User and the Operator.

 

  7. ADDITIONAL TERMS

 

7.1. The Operator has the right to make changes to this Policy without the consent of the User.

7.2. The new Policy comes into force from the moment it is posted on the Site, unless otherwise provided by the new version of the Policy.

7.3. Any suggestions or questions regarding this Policy should be directed to hello@picbykate.com

7.4. The current Policy is posted on the page at:

7.5. This Policy is an integral part of the User Agreement posted on the page at: