PRIVACY POLICY
1. General Provisions
This policy for the processing of Personal Data is drawn up in accordance with the requirements of the Federal Law of July 27, 2006. No. 152-FZ “On Personal Data” (hereinafter referred to as the Law on Personal Data) and determines the procedure for processing Personal Data and measures to ensure the security of Personal Data taken by _______ LLC (OGRN _______, INN: ________, address: _____________) (hereinafter referred to as the Operator). 1.1. The Operator sets as its most important goal and condition for carrying out its activities the observance of the rights and freedoms of man and citizen when processing his Personal Data, including the protection of the rights to privacy, personal and family secrets. 1.2. This Operator’s policy regarding the processing of Personal data (hereinafter referred to as the Policy) applies to all information that the Operator can receive about visitors to the website https://multido.fun. 1.3. The purpose of the Policy is to ensure adequate protection of Users’ Personal Data from unauthorized access and disclosure. 1.4. This Privacy Policy applies exclusively to the website https://multido.fun, as well as its subdomains. The site https://multido.fun does not control and is not responsible for third party sites that the User can access via links available on the Site. 1.5. Use of the Site, as well as filling out feedback forms posted on the Site by the User, and in addition the acquisition of the Operator’s services by the User, means agreement with this Policy and the terms of processing of the User’s Personal Data. 1.6. In case of disagreement with the provisions of the Policy, the User must immediately stop using the Site and using the services of the Operator. 1.7. The Operator does not verify the accuracy of the Personal data provided by the User. 1.8. When processing Personal Data, the Operator, acting reasonably and in good faith, believes that the User: - has all the necessary rights allowing him to register on the Site (if applicable), use the Site, as well as order and purchase the Operator's goods; - acts voluntarily, in his own interests or on the basis of authority;— is familiar with this Policy.
2. Basic concepts used in the Policy
2.1. Automated processing of Personal data – processing of Personal data using computer technology; 2.2. Blocking of Personal Data – temporary cessation of processing of Personal Data (except for cases where processing is necessary to clarify Personal Data); 2.3. Website / Site – a collection of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://multido.fun; 2.4. Information system of Personal data - a set of Personal data contained in databases, and information technologies and technical means that ensure their processing; 2.5. Depersonalization of Personal Data - actions as a result of which it is impossible to determine without the use of additional information the ownership of Personal Data to a specific User or other subject of Personal Data; 2.6. Processing of Personal Data – any action (operation) or set of actions (operations) performed using automation tools or without the use of such means with Personal Data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of Personal Data; 2.7. Operator - a state body, municipal body, legal or natural person, independently or jointly with other persons organizing and (or) carrying out the processing of Personal Data, as well as determining the purposes of processing Personal Data, the composition of Personal Data to be processed, actions (operations) performed with Personal Data; 2.8. Personal data – any information relating to a directly or indirectly identified or identified User of the Website https://multido.fun; 2.9. User – any visitor to the Website https://multido.fun; 2.10. Providing Personal Data – actions aimed at disclosing Personal Data to a certain person or a certain circle of persons; 2.11. Distribution of Personal Data - any actions aimed at disclosing Personal Data to an unspecified number of persons (transfer of Personal Data) or familiarization with Personal Data to an unlimited number of persons, including publication of Personal Data in the media, posting in information and telecommunication networks or providing access to Personal Data in any other way; 2.12. Cross-border transfer of Personal Data – transfer of Personal Data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity; 2.13. Destruction of Personal Data – any actions as a result of which Personal Data are destroyed irrevocably with the impossibility of further restoration of the content of Personal Data in the Personal Data information system and (or) the material media of Personal Data are destroyed.
3. The Operator may process the following Personal Data of the User
3.1. Full Name; 3.2. Phone numbers; 3.3. Email address (e-mail); 3.4. The site also collects and processes anonymized data about visitors (including cookies) using Internet statistics services (Yandex Metrica and Google Analytics and others). 3.5. The above data below in the text of the Policy are united by the general concept of Personal Data.
4. Purposes of processing Personal data
4.1. The Operator may use the User’s personal data for the purposes of: 4.1.1. identification of the User who contacted the Operator through the Site; 4.1.2. establishing feedback with the User, including sending him notifications, requests, proposals regarding the sale of goods by the Operator, use of the Site, processing requests and applications from the User, including, but not limited to, by telephone, email, etc. provided to the Operator. ; 4.1.3. concluding agreements or contracts with the User, fulfilling obligations under concluded contracts and agreements, including sending notifications, issuing invoices, submitting documents and performing other necessary actions to fulfill such obligations; 4.1.4. confirmation of the accuracy and completeness of the Personal data provided by the User; 4.1.5. conducting statistical and other studies based on anonymized data; 4.1.6. determining the User’s location to ensure security and prevent fraud; 4.1.7. providing the User with effective technical support if problems arise related to the use of the Site; 4.1.8. providing the User with special offers, sending the User mailings, including advertising, containing information, including, but not limited to, about goods and services, the availability of special offers, promotions in relation to them, conditions related to the purchase and use of the Operator’s goods, holding events, presentations, offers from partners, as well as mailings prepared as personal recommendations for the User, taking into account the analysis of his purchasing behavior through e-mail mailings (sending messages to the e-mail specified by the User) and other information on behalf of the Site, subject to obtaining separate consent User. The User can always refuse to receive information messages by sending the Operator an email to _________ with the subject “Opt-out of notifications about new products and services and special offers.” 4.2. Anonymized data of Users, collected using Internet statistics services, serves to collect information about the actions of Users on the site, improve the quality of the site and its content.
5. Legal grounds for processing Personal data
5.1. The legal basis for the processing of Personal Data is a set of regulatory legal acts, in pursuance of which and in accordance with which the Operator processes Personal Data, including: - Constitution of the Russian Federation; - Civil Code of the Russian Federation; - Federal Law dated 02/08/1998 No. 14- Federal Law “On Limited Liability Companies”;— charter of the Operator;— contracts and agreements concluded between the Operator and the User;— other regulatory legal acts regulating relations related to the activities of the Operator;— consent to the processing of Personal Data (in cases not expressly provided for by the legislation of the Russian Federation, but corresponding to the powers of the Operator).
6. Procedure for collecting, storing, transferring and other types of processing of Personal Data
The security of Personal Data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of current legislation in the field of Personal Data protection. 6.1. The Operator ensures the safety of Personal Data and takes all possible measures to prevent access to Personal Data by unauthorized persons. 6.2. The processing of Users' Personal Data is carried out in any legal way, including in Personal Data information systems using automation tools or without the use of such tools. 6.3. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the implementation of current legislation and/or with the consent of the User. 6.4. The User agrees that the Operator has the right to transfer Personal Data to third parties in the following cases: 6.4.1. The User has expressed his consent to such actions, including cases where the User uses settings of the software used that do not limit the provision of certain information; 6.4.2. the transfer is necessary as part of the User’s use of the functionality of the Site; 6.4.3. the transfer is necessary for the User to use a certain service or to fulfill a certain agreement or contract with the User; 6.4.4. in case of transfer of rights to the Site by any means, all rights and obligations to comply with the terms of this Policy in relation to Personal Data received by the Operator pass to the acquirer of such right; 6.4.5. to protect the rights and legitimate interests of the Operator in connection with violations committed by the User; 6.4.6. The User's personal data may be transferred to authorized government bodies of the Russian Federation only on the grounds and in the manner established by the legislation of the Russian Federation. 6.5. The Operator does not process special categories of Personal Data relating to race, nationality, political views, religious or philosophical beliefs, health status, intimate life and other categories of Personal Data that require the organization and application of special protection measures in accordance with the legislation of the Russian Federation. 6.6. The Operator, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s Personal Data. In case of loss or disclosure of Personal Data, the Operator informs the User about the loss or disclosure of Personal Data. 6.7. If it is confirmed that the Personal Data is inaccurate or that its processing is illegal, the Personal Data must be updated by the Operator, or their processing must be terminated accordingly. The fact of inaccuracy of Personal data or illegality of their processing can be established either by the User or by the competent government authorities of the Russian Federation. 6.8. If inaccuracies are identified in the Personal Data, the User may update it independently by sending a notification to the Operator to the Operator's email address info@agritechbio.com or in writing to the address specified in Article 1 of this Policy, marked “Updating Personal Data.” If the application is sent on paper, the application must be signed by the User in his own hand. The application must contain: - the number of the main document identifying the subject of personal data or his representative, information about the date of issue of the specified document and the issuing authority; - information confirming the participation of the subject of personal data in relations with the Operator (agreement number, date of conclusion of the agreement, conditional verbal designation and (or) other information), or information otherwise confirming the fact of processing of Personal Data by the Operator; - information subject to change (update, addition) or destruction. 6.9. The processing of the User's Personal Data is carried out without a time limit (until the Operator achieves the purpose of processing Personal Data or until the Operator receives the User's consent to process Personal Data), in any legal way, including in Personal Data information systems using automation tools or without the use of such tools .The User may at any time withdraw his consent to the processing of Personal Data by sending a notification to the Operator via email to the Operator's email address info@agritechbio.com or in writing to the address specified in Article 1 of this Policy, marked “Withdrawal of consent to processing Personal data. If an application is sent on paper, the application must be signed by the User in his own hand. The application must contain: - the number of the main document identifying the subject of personal data or his representative, information about the date of issue of the specified document and the issuing authority; - information, confirming the participation of the subject of personal data in relations with the Operator (contract number, date of conclusion of the contract, conventional verbal designation and (or) other information), or information otherwise confirming the fact of processing of Personal data by the Operator; - information subject to change (updating, addition) or destruction. The Operator, within ten working days from the date of receipt of the relevant request, stops processing Personal Data or ensures the termination of such processing (if such processing is carried out by the person processing personal data), except for the cases provided for in paragraphs 2 - 11 of Part 1 of Article 6, Part 2 Article 10 and part 2 of Article 11 of the Law on Personal Data. This period may be extended by the Operator by no more than five working days if a motivated notification is sent to the User indicating the reasons for extending the period for providing the requested information. 6.10. At the written request of the User or his representative, the Operator is obliged to provide information about the processing of Personal Data of the specified subject by him. The request must contain the number of the main document identifying the User and (or) his representative, information about the date of issue of the specified document and the issuing authority, information confirming the User's participation in relations with the Operator (agreement number, date of conclusion of the agreement, conventional verbal designation and ( or) other information), or information otherwise confirming the fact of processing of Personal Data by the Operator, the signature of the User or his representative. The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation. If the User's request does not reflect all the necessary information or the subject of personal data does not have access rights to the requested information, then a reasoned refusal is sent to him. A response to the request of the User or his representative, containing all the necessary information in accordance with the requirements of the Law on Personal Data, is provided by the Operator within ten working days from the date of application or receipt by the Operator of such a request. For objective reasons, the Operator has the right to increase the period for providing a response to such a request to five working days. The response to a request from the User or his representative is provided in the form in which the relevant appeal or request was sent, unless otherwise specified in the appeal or request of the User or his representative. 6.11. The User has the right to demand that the Operator clarify his Personal Data, block it or destroy it if the Personal Data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as take measures provided by law to protect his rights. 6.12. When the purposes of processing Personal Data are achieved, as well as in the event that the User withdraws consent to their processing, Personal Data is subject to destruction within a period not exceeding thirty days from the date of achieving the purpose of processing Personal Data, if: 6.12.1. otherwise is not provided for by the agreement to which the User is a party, beneficiary or guarantor; 6.12.2. The Operator has no right to carry out processing without the consent of the User on the grounds provided for by the Law on Personal Data or other federal laws; 6.12.3. otherwise is not provided for by another agreement or contract between the Operator and the User. 6.13. Personal data of personal data subjects is stored no longer than required by the purposes of their processing, and is subject to destruction upon achieving these purposes or if the need to achieve them is no longer necessary, but no more than thirty days from the date of termination of their processing. 6.14. Destruction of Personal Data must meet the following requirements: - must be as reliable and confidential as possible, excluding the possibility of subsequent recovery; - destruction must concern only those Personal Data that are subject to destruction in connection with the achievement of the purposes of processing the specified Personal Data, or the loss of the need to achieve them; - formalized legally in the form of an act on the deletion of Personal Data; - carried out by a commission for the destruction of Personal Data. 6.15. Carriers of Personal data of personal data subjects are destroyed upon achieving the goals of their processing or in case of loss of the need to achieve them as part of a commission using the following means: - destruction of Personal data stored in information systems of Personal data is carried out by deleting the corresponding values in the database using operational means computer system, excluding the possibility of restoring this data; - destruction of Personal data contained on paper is carried out by shredding into small parts (shredder), excluding the possibility of subsequent recovery of information.
7. Cross-border transfer of Personal Data
7.1. The storage of Users' Personal Data is carried out by the Operator on the territory of the Russian Federation. Cross-border transfer of Personal Data is carried out by the Operator with prior notice and consent of Users to such transfer. 7.2. Before the start of cross-border transfer of Personal Data, the Operator is obliged to ensure that the foreign state into whose territory the transfer of Personal Data is supposed to take place ensures reliable protection of the rights of the subjects of Personal Data. 7.3. Cross-border transfer of Personal Data to the territory of foreign states that do not meet the above requirements can only be carried out if there is written consent of the Personal Data subject to the cross-border transfer of his Personal Data and/or execution of an agreement to which the Personal Data subject is a party.
8. Rights and obligations of the parties
8.1. The user has the right: 8.1.1. decide to provide your Personal Data necessary to use the Site and consent to their processing; 8.1.2. update, supplement the information provided about Personal Data if this information changes; 8.1.3. demand termination of processing of Personal Data; 8.1.4. request and receive from the Operator information regarding the processing of his Personal Data, unless such right is limited in accordance with federal laws; 8.1.5. require the Operator to clarify his Personal Data, block it or destroy it if the Personal Data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, and also take measures provided by law to protect their rights. 8.2. The operator is obliged: 8.2.1. use the information received solely for the purposes specified in Article 4 of this Policy; 8.2.2. ensure that Personal Data is kept secret, not disclosed without the prior written permission of the User, and also not sell, exchange, publish, or disclose in other possible ways the transferred Personal Data of the User, except for the cases provided for in clause 6.4. this Policy; 8.2.3. take precautions to protect the confidentiality of the User's Personal Data in accordance with the procedure usually used to protect this type of information in existing business transactions; 8.2.4. block Personal data relating to the relevant User from the moment of application or request from the User, or his legal representative or the authorized body for the protection of the rights of personal data subjects for the period of verification, in the event of detection of unreliable Personal data or unlawful actions; 8.2.5. notify the authorized body for the protection of the rights of personal data subjects in the event of establishing the fact of unlawful or accidental transfer (provision, distribution, access) of Personal Data, which entailed a violation of the rights of personal data subjects, within the time limits established by the Law on Personal Data - about the incident that occurred - about the alleged reasons that led to the violation of the rights of personal data subjects, and the alleged harm caused to the rights of personal data subjects - about the measures taken to eliminate the consequences of the relevant incident, - about the results of the internal investigation of the identified incident, as well as to carry out other necessary actions provided for by the current legislation on personal data data. 8.3. The User, who is a legal entity or individual entrepreneur, transferring Personal Data of his employees to ensure interaction with the Operator, including for the purpose of purchasing the Operator’s goods, thereby instructs the Operator to perform the following actions with the Personal Data of persons in respect of whom the User is the operator of Personal Data: collection, recording, systematization, accumulation, storage, clarification (updating, changing), use, transfer (provision, access), depersonalization, blocking, deletion, destruction of Personal Data. 8.4. The user, who is a legal entity or individual entrepreneur, who has transferred the Personal Data of his employees to the Operator, assures and guarantees that: - he has received written consent of the subject(s) of personal data for the processing of their Personal Data by the personal data operator for the purpose of purchasing the Operator's goods; - the subject (s) of personal data are notified about the name, INN, OGRN, location of the Operator, as well as about the processing of their Personal data by the personal data operator for the purpose of purchasing the Operator’s goods;— the validity period of the consent of the subject(s) of personal data is not expired. 8.5. The operator has the right: 8.5.1. Transfer Personal Data of Users to their employees and professional consultants in order to provide services to the User, with whom appropriate contracts and confidentiality agreements have been concluded. Persons to whom Personal Data is transferred follow all organizational and technical security measures taken by the Operator to protect Users’ personal data. If it is necessary for the Operator to transfer the User's Personal Data to other persons, except for the persons specified in this clause 8.5, in order to fulfill the contract for the provision of services between the Operator and the User, as well as in cases of transfer of Personal Data to third parties for other purposes, the User's consent to the transfer of Personal Data will be obtained in writing. 8.5.2. Use personal data for the purpose of concluding and fulfilling obligations under contracts concluded between the Operator and the User, including sending notifications, issuing invoices, submitting documents and performing other actions in fulfillment of such obligations.
9. Responsibility of the parties
9.1. An operator who fails to fulfill its obligations is liable for losses incurred by the User in connection with the unlawful use of Personal Data, in accordance with the legislation of the Russian Federation, except for the cases provided for in paragraphs. 6.4. of this Policy. 9.2. The Operator is not liable to the User for any loss or damage incurred by the User as a result of the deletion, failure or inability to store any content and other communication data contained on or transmitted through the Site. 9.3. The Operator is not responsible for any direct or indirect losses resulting from: the use or inability to use the Site or individual services; unauthorized access to the User's communications; statements or conduct of any third party on the Site.
10. Dispute resolution
10.1. Disputes are considered in accordance with and in the manner prescribed by the current legislation of the Russian Federation. 10.2. The current legislation of the Russian Federation applies to this Privacy Policy and the relationship between the User and the Operator.
11. Final provisions
11.1. The User can receive any clarification on issues of interest regarding the processing of his Personal Data by contacting the Operator via email __________ 11.2. This document will reflect any changes to the Operator’s Personal Data processing policy. The Policy is valid indefinitely until it is replaced by a new version by posting a new version on the Site, unless otherwise provided by the new version of the Policy. 11.3. The Operator has the right to make changes to this Policy at any time unilaterally without prior notice to the User. Users must independently and regularly refer to the Policy in order to familiarize themselves with the most current version. 11.4. The current version of the Policy is freely available on the Internet at https://agritechbio.com/privacy-policy