Regulation on the processing of personal data
1. GENERAL PROVISIONS
Regulation on the processing of personal data (Further - “Location”, “Present Regulations”) issued and applied by LLC “Integrator” (Further - “Operator”) in accordance with p. 2 h. 1 Art. 18.1 Federal law dated 27.07.2006 N 152-ФЗ “About personal data”.
This Regulation is an official document of LLC “Integrator” TIN 7839366070, Legal address: 190121, D. SAINT PETERSBURG, VN.TER.G. MUNICIPAL DISTRICT KOLOMNA, ALEXANDRA BLOCK STR., D. 5, LITERA A, OFFICE 129, and determines the order of processing and protection (enforceable security requirements) personal data of individuals, using the services of the cluster-mining.com Service, located at the network address: cluster-mining.com (hereinafter referred to as "Site", "Service") and its services (hereinafter - Users).
This Regulation defines the policy, the procedure and conditions of the Operator regarding the processing of personal data, establishes procedures, aimed at preventing and detecting violations of the legislation of the Russian Federation, elimination of the consequences of such violations, related to the processing of personal data.
The purpose of this Statement is to ensure proper protection of information about users, including their personal data, from unauthorized access and disclosure.
Relationship, related to collection, storage, dissemination and protection of information about users of the Service, governed by this Regulation, other official documents of the Operator and the current legislation of the Russian Federation.
The current version of this Regulation, being a public document, published and available to any Internet user in the form of unlimited access by clicking on the link: https://cluster-mining.com.
The operator has the right to make changes to these Regulations. When making changes to the Regulations, the Operator notifies users of this by posting (publications) new version of the Regulations on the Site at the permanent address https://cluster-mining.com not later, than for 10 days prior to the entry into force of the relevant changes. Previous versions of the Regulations are stored in the Operator's documentation archive.
This Regulation is developed and used in accordance with the Rules for using the cluster-mining.com service. In case of contradictions between these Regulations and other official documents of the Operator, these Regulations shall apply..
By registering and using the Service, The user expresses his unconditional consent to the terms of this Regulation.
If the User disagrees with the terms of this Regulation, the use of the Site and its services must be immediately terminated.
All questions, related to the processing of personal data, not regulated by these Regulations, are permitted in accordance with the current legislation of the Russian Federation in the field of personal data.
2. PURPOSE OF PROCESSING PERSONAL DATA
The processing of personal data is carried out in compliance with the principles and rules, stipulated by the Federal Law dated 27.07.2006 N 152-ФЗ “About personal data” and this Regulation.
The Operator processes information about Users, including their personal data, in order to fulfill the obligations of the Operator to Users regarding the use of the Site and its services.
The Operator processes the personal data of the Users in order to fulfill the contract between the Operator and the User for the provision of the Site Services (p. 2.2 Rules for using the cluster-mining.com service). By virtue of para. 2 p. 2 articles 22 of the said law, the Operator has the right to process personal data without notifying the authorized body for the protection of the rights of subjects of personal data.
3. PRINCIPLES OF PERSONAL DATA PROCESSING
Processing is organized by the Operator on the principles:
– legality of the purposes and methods of processing personal data, integrity and fairness in the activities of the Operator;
– reliability of personal data, their sufficiency for the purposes of processing, inadmissibility of personal data processing, excessive in relation to goals, declared when collecting personal data;
processing only personal data, that meet the purposes of their processing;
compliance of the content and scope of the processed personal data with the stated purposes of processing. Processed personal data should not be excessive in relation to the stated purposes of their processing;
database merging is not allowed, containing personal data, processed for the purposes of, incompatible with each other;
ensuring the accuracy of personal data, their sufficiency, and, where necessary, relevance to the purposes of personal data processing. The operator takes the necessary measures or ensures their adoption to remove or clarify incomplete or inaccurate data;
storage of personal data in the form, allowing to determine the subject of personal data, no longer, than required by the purposes of processing personal data.
4. COMPOSITION OF PERSONAL DATA
4.1. Users' personal data includes:
provided by Users and the minimum required for registration on the Site: Name, Mobile phone number, type of activity in relation to the use of the Site and e-mail address;
additionally provided by the Users at the request of the Operator in order to fulfill the obligations of the Operator to the Users, arising from the contract for the provision of the Website Services. The operator has the right, in particular, ask the User for a copy of the document, identity card, or other document, containing the name, last name, User's photo, as well as other additional information, which, at the discretion of the Operator, will be necessary and sufficient to identify such a User and will allow to exclude abuses and violations of the rights of third parties.
4.2. Other information about Users, processed by the Operator.
The Operator may also process other information about Users, which includes:
4.2.1. Additional information, received when accessing the Site, including data on technical means (devices), technological interaction with the Site (including. host IP address, type of operating system of the user, browser type, geographical position, ISP) and subsequent actions of the User on the Site.
4.2.2. information, received as a result of the User's actions on the Site.
5. PROCESSING OF PERSONAL DATA
5.1. The processing of personal data of Users is carried out by the Operator on the basis of the principles of processing personal data, established by section 3 of this Regulation.
5.2. The Operator processes the personal data of the Users in order to fulfill the contract between the Operator and the User for the provision of the Site Services (p. 2.2 Terms of use of the service https://cluster-mining.com). By virtue of para. 2 p. 2 articles 22 of the said law, the Operator has the right to process personal data without notifying the authorized body for the protection of the rights of subjects of personal data.
5.3. Conditions for processing personal data by the Operator.
5.3.1. The processing of personal data is carried out with the consent of the subject of personal data (User) to the processing of his personal data, issued by the User to the Operator on the terms of this provision. The subject of personal data decides to provide his personal data and agrees to their processing to the Operator freely, by his own will and in his own interest by performing the following implicit actions by the User: putting a symbol in a special field under the heading "I agree to the processing of my personal data" in each registration form, located on the Internet at the network address: cluster-mining.com. The performance by the User of the named implicit actions indicates that, that the User's consent to the processing of his personal data is specific, informed and conscious. Consent to the processing of personal data can be withdrawn by the subject of personal data (User) at any time by sending a corresponding notice by the User to the Operator's e-mail address: office@cluster-mining.com
5.3.2. Collection of personal data.
The collection of the User's personal data is carried out on the Site during registration, as well as in the future when the user enters, on his own initiative, additional information about himself using the tools of the Site. Personal Information, stipulated by. 4.1.1. of this Regulation, provided by the User and are the minimum required for registration. Personal Information, stipulated by. 4.1.2. of this Annex, are additional information provided by the Users at the request of the Operator in order to fulfill the obligations of the Operator to the Users, arising from the contract for the provision of the Website Services.
5.3.3. Storage and use of personal data.
Users' personal data is stored exclusively on electronic media and processed using automated systems, except in cases, when non-automated processing of personal data is necessary in connection with the fulfillment of legal requirements. When collecting personal data, including through the information and telecommunications network “Internet”, The operator provides a record, systematization, accumulation, storage, clarification (update, change), extraction of personal data of Users using databases, located on the territory of the Russian Federation.
5.3.4. Transfer of personal data.
Personal data of Users is not transferred to any third parties, except in cases, expressly provided for in these Regulations.
When specifying the user or with the consent of the user, it is possible to transfer the user's personal data to third parties-counterparties of the Operator, subject to the assumption by such counterparties of obligations to ensure the confidentiality of the information received. The operator, on the basis of an agreement, may entrust the processing of personal data to a third party. An essential condition of such an agreement is the right of this person to process personal data, the obligation to ensure the confidentiality of personal data and the security of personal data during their processing by the specified person.
Provision of personal data of Users at the request of state authorities (local authorities) carried out in order, provided by the current legislation of the Russian Federation.
In order to fulfill the agreement between the User and the Operator and provide the User with access to use the functionality of the Service, The operator develops the services and products provided, develops and implements new services and products, optimizes the quality of services and products, improves the available functionality of the Site and services. To ensure the implementation of these goals, the User agrees that the Operator, in compliance with applicable law, collects, storage, accumulation, systematization, extraction, comparisons, use, filling (clarifications) their data, as well as to receive and transfer to affiliates and partners the results of automated processing of such data using various information evaluation models, as integer and/or text values and identifiers, corresponding to the evaluation criteria specified in the requests, for the processing of data by the Operator and / or persons, referred to in this paragraph.
Interaction with federal executive authorities on the processing and protection of personal data of subjects, whose personal data is processed by the Operator, carried out within the framework of the legislation of the Russian Federation.
The storage of personal data is carried out by the Operator in the form, allowing to determine the subject of personal data, no longer, than required by the purposes of their processing, and they are subject to destruction upon achievement of the purposes of processing or in case of loss of the need to achieve them in the manner, in the manner prescribed by this Regulation.
When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with Art.. 19 Federal law dated 27.07.2006 N 152-ФЗ “About personal data”.
6. PROCEDURE FOR PROVIDING THE RIGHTS OF THE PERSONAL DATA SUBJECT BY THE OPERATOR/INFORMATION ON THE IMPLEMENTED REQUIREMENTS TO PROTECTION OF THE PERSONAL DATA OF USERS
6.1. Subjects of personal data or their representatives have the rights, stipulated by the Federal Law No. 27.07.2006 N 152-ФЗ “About personal data” and other regulatory legal acts, regulating the processing of personal data.
6.2. The operator ensures the rights of personal data subjects in the manner, established by the heads 3 and 4 Federal law dated 27.07.2006 N 152-ФЗ “About personal data”.
6.3. The authority of the representative to represent the interests of each subject of personal data is confirmed by a power of attorney, drawn up in accordance with Art.. Art. 185 and 185.1 Civil Code of the Russian Federation, h. 2 Art. 53 of the Civil Procedure Code of the Russian Federation or certified by a notary in accordance with Art.. 59 Fundamentals of the legislation of the Russian Federation on notaries. Scanned copy of the representative's power of attorney, kept by the Operator for at least three years, and in case, if the period of storage of personal data is more than three years, – at least the period of storage of personal data.
6.4. When processing personal data, the Operator applies legal, organizational and technical measures to ensure the security of personal data in accordance with Art.. 19 Federal law dated 27.07.2006 N 152-ФЗ “About personal data”. Actual threats to the security of personal data are understood as a set of conditions and factors, creating an actual danger of unauthorized, including random, access to personal data during their processing in the information system, which may result in the destruction, change, blocking, copying, providing, dissemination of personal data, as well as other illegal actions.
The Operator takes technical, organizational and legal measures to ensure the protection of the User's personal data from unauthorized or accidental access to them, destruction, changes, blocking, copying, dissemination, as well as other illegal actions. Login is used to authorize access to the Service. (E-mail address) and user password. The User is responsible for the safety of this information.. The user is not entitled to transfer his own login and password to third parties, and is also obliged to take measures to ensure their confidentiality.
6.5. In order to ensure more reliable protection of personal data of Users, The Operator ensures that the Users can use the two-factor authorization system through the Google Authenticator mobile application., as well as additional password list systems, to be implemented by Users by performing the following actions: connection of the appropriate protection method through the account management tools in the User's personal account on the Site.
7. USER RIGHTS (SUBJECT OF PERSONAL DATA)
7.1. Based on request, The User has the right to receive in an accessible form from the Operator the entire amount of information / information on the merits of the processing of his personal data by the Operator, somehow:
1) confirmation of the fact of processing personal data by the operator;
2) legal grounds and purposes of personal data processing;
3) purposes and methods used by the operator for processing personal data;
4) name and location of the operator, information about persons (except for the operator's employees), who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the operator or on the basis of federal law;
5) processed personal data, relating to the respective personal data subject, source of their receipt, unless a different procedure for submitting such data is provided for by federal law;
6) terms of personal data processing, including their retention periods.;
7) the procedure for the exercise by the subject of personal data of the rights, provided for by this Federal Law;
8) information about the performed or proposed cross-border data transfer;
9) name or surname, Name, patronymic and address of the person, processing personal data on behalf of the operator, if the processing is or will be entrusted to such person;
10) other information, provided by the current legislation of the Russian Federation in the field of personal data.
The right of the subject of personal data to access his personal data may be limited in accordance with federal laws, including if:
1) processing of personal data, including personal data, obtained as a result of operational-search, counterintelligence and intelligence activities, carried out for the defense of the country, state security and law enforcement;
2) processing of personal data is carried out by authorities, those who detained the subject of personal data on suspicion of committing a crime, or who charged the subject of personal data in a criminal case, or applied to the subject of personal data a measure of restraint before bringing charges, except for the cases provided for by the criminal procedure legislation of the Russian Federation, if it is allowed to familiarize the suspect or the accused with such personal data;
3) processing of personal data is carried out in accordance with the legislation on combating legalization (laundering) income, obtained by criminal means, and financing of terrorism;
4) access of the subject of personal data to his personal data violates the rights and legitimate interests of third parties;
5) processing of personal data is carried out in cases, provided for by the legislation of the Russian Federation on transport security, in order to ensure the sustainable and safe functioning of the transport complex, protecting the interests of the individual, society and the state in the field of the transport complex from acts of unlawful interference.
7.2. User The subject of personal data has the right to require the operator to clarify his personal data, their blocking or destruction in case of, if personal data is incomplete, obsolete, inaccurate, unlawfully obtained or not necessary for the stated purpose of processing, and take legal measures to protect their rights. On time, not exceeding seven working days from the date of provision by the subject of personal data or his representative of information, confirming, that personal data is incomplete, inaccurate or out of date, the operator is obliged to make the necessary changes to them. On time, not exceeding seven working days from the date of submission by the subject of personal data or his representative of information, confirming, that such personal data is illegally obtained or not necessary for the stated purpose of the processing, the operator is obliged to destroy such personal data. The operator is obliged to notify the subject of personal data or his representative about the changes made and the measures taken and take reasonable measures to notify third parties, to whom the personal data of this subject were transferred.
7.3. The user has unlimited access and the right to edit his personal data at any time through the web interface, provided by the Service.
7.4. If the subject of personal data considers, that the operator processes his personal data in violation of the requirements of this Federal Law or otherwise violates his rights and freedoms, the subject of personal data has the right to appeal against the actions or inaction of the operator to the authorized body for the protection of the rights of subjects of personal data or in court.
8. INQUIRIES FROM USERS
8.1. Users have the right to send their requests to the Operator, including requests regarding the use of their personal data, stipulated by. 7.1. of this Regulation, in writing to: RF, 115419,123112, Mr. Moscow, Presnenskaya embankment, 12, building 2 IQ-apartments, office 181 or in the form of an electronic document, signed with a qualified electronic signature in accordance with the legislation of the Russian Federation, by email address: office@cluster-mining.com.
8.2. Request, directed by the User, must contain the following information: name surname e-mail address signature of the user or his representative.
8.3. The operator undertakes to consider and send a response to the user's request within 30 days from receipt of application.
8.4. All correspondence, received by the Operator from Users (appeals in writing or electronic form), refers to information of limited access and is not disclosed without the written consent of the User. Personal data and other information about the User, requester, cannot be used otherwise without the express consent of the User, as for a reply on the subject of a request received or in cases, expressly provided by law.
9. FINAL PROVISIONS
9.1. The site may contain links to other Internet resources, who act independently of the Operator and do not act on behalf of or on behalf of the Operator. Users are obliged to independently familiarize themselves with the rules for the provision of services and the personal data protection policy of such third parties before using the respective sites. (Internet resources). This Regulation does not apply to the actions and Internet resources of third parties.
9.2. The Operator provides unlimited access to this Regulation, determining its policy regarding the processing of personal data, to information about the implemented requirements for the protection of personal data by publishing these Rules in the information and telecommunications network at the network address: https://cluster-mining.com.
9.3. All questions, related to the processing of personal data, not regulated by these Regulations, are permitted in accordance with the current legislation of the Russian Federation in the field of personal data.
* If you have questions or suggestions regarding the Privacy Policy, Please, write to us at: office@cluster-mining.com.
