Privacy policy regarding the processing of personal data

This Policy on Personal Data Processing (hereinafter referred to as the Policy) is drawn up in accordance with Art. 18.1 para. 2 of the Federal Law of the Russian Federation “On Personal Data” No. 152-FZ of 27 July 2006 (revision of 21.07.2014) and other legal acts of the Russian Federation in the field of protection and processing of personal data and applies to all personal data (hereinafter referred to as the Data) that the Organisation (hereinafter referred to as the Operator, the Centre, the Company) may receive from the personal data subject during the use of the website located on the following website

The Operator ensures protection of processed personal data from unauthorised access and disclosure, misuse or loss in accordance with the requirements of the Federal Law dated 27.07.2006 N 152-FZ “On Personal Data”, the Resolution of the Government of the Russian Federation dated 01.11.2012 N 1119 “On Approval of Requirements for Protection of Personal Data during their Processing in Information Systems of Personal Data”, regulatory documents of authorised bodies.

1. Definition of terms.

The following terms are used in this Privacy Policy:

1.1. “Administration of the website of VIRA-NCH LLC (hereinafter referred to as Administration)” - Authorised employees acting on behalf of VIRA-NCH LLC, who organise and (or) carry out processing of personal data, as well as determine the purposes of personal data processing, composition of personal data subject to processing, actions (operations) performed with personal data.

1.2 “Personal Data” means any information relating to a directly or indirectly defined or identifiable natural person (subject of personal data).

1.3 “Processing of personal data” means any action (operation) or set of actions (operations) performed with or without the use of automation means with personal data, including collection, recording, systematisation, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion, destruction of personal data.

1.4. “Confidentiality of personal data” - a requirement mandatory for the Operator or any other person who has access to personal data not to allow their dissemination without the consent of the subject of personal data or other legal basis.

1.5. “Personal data made publicly available by the subject of personal data” - personal data to which an unlimited number of persons have access by the subject of personal data or at his/her request;

1.6. “Operator” means an organisation processing personal data.

1.7. “User of the website of VIRA-NCH LLC (hereinafter referred to as “User”)” - a person who has access to the Website via the Internet and uses the Company's Website.

1.8. “Dissemination of personal data” - actions aimed at disclosure of personal data to an indefinite number of persons.

1.9. “Provision of personal data” - actions aimed at disclosure of personal data to a certain person or a certain circle of persons.

1.10. “Blocking of personal data” - temporary cessation of personal data processing (except for cases when processing is necessary to clarify personal data);

1.11. “Destruction of personal data” - actions, as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed;

1.12. “Impersonalisation of personal data” - actions, as a result of which it becomes impossible to determine the belonging of personal data to a particular subject of personal data without using additional information.

2. General Provisions.

2.1 The User's use of the VIRA-NCH LLC website means agreement with this Privacy Policy and the terms of processing the User's personal data.

2.2 In case of disagreement with the terms of the Privacy Policy, the User should stop using the website of VIRA-NCH LLC.

2.3 This Privacy Policy applies only to the website of VIRA-NCH LLC. The site does not control and is not responsible for the sites of third parties, to which the User can go through the links available on the company's site.

2.4 The Administration of the site does not verify the accuracy of personal data provided by the User of the site of VIRA-NCH Ltd.

3. Subject of the Privacy Policy.

3.1 This Privacy Policy establishes the obligations of the Administration on non-disclosure and ensuring the confidentiality protection regime of personal data, which the Subject of personal data provides to LLC “VIRA-NCH”.

3.2 The personal data allowed to be processed within the framework of this Privacy Policy shall be provided by the User by filling in the form on the website of VIRA-NCH LLC and shall include the following information:

• Subject's surname, first name, patronymic;
• Subject's date of birth;
• Subject's contact phone number;
• Subject's email address;
• Other similar information on the basis of which it is possible to identify the Subject of personal data.

3.3 Anonymised data that are automatically transmitted by the Site services during their use with the help of the software installed on the User's device, including IP-address, cookie data, information about the User's browser (or other programme with the help of which the services are accessed), technical characteristics of the equipment and software used by the User, date and time of access to the services, addresses of the requested pages and other similar information; Information about the User's personal data. The confidentiality regime with regard to personal data is cancelled in cases stipulated by the legislation.

3.4 The Operator has the right to carry out with the received personal data of users all lawful necessary actions related solely to the achievement of the purpose for which the Site is created and used.

3.5 Any other personal information not specified above shall be stored securely and not disclosed.

4. Purposes of collecting Personal Data.

4.1 The Site collects only those Personal Data that are necessary to provide services to the User.

4.2 The Operator processes the User's personal data for the following purposes:

4.2.1. identification of the User when using certain services;

4.2.2. provision of services, processing of requests and applications from the User;

4.2.3. establishing feedback with the User, including sending notifications and requests;

4.2.4. confirmation of the completeness of personal data provided by the User;

4.2.5. collection of statistics.

5. Methods and terms of Personal Data processing

5.1 The source of information about all Personal Data of the User is the User of the Operator's Website itself. The Operator does not receive and does not process Personal Data from other sources. By filling in any form on the Operator's Website, the User consents to the processing of his/her Personal Data for the purposes specified in clause 4 of this Policy.

5.2 The User's personal information is kept confidential, except for cases when the User voluntarily provides information about himself/herself for public access to an unlimited number of persons. When using certain services, the User agrees that a certain part of his/her personal information becomes publicly available.

5.3 Processing of the User's personal data shall be carried out without time limit by any lawful means, including in personal data information systems with or without the use of automation tools. Processing of Users' personal data is carried out in accordance with the Federal Law dated 27.07.2006 N 152-FZ “On Personal Data”.

5.4 User's Personal Data may be transferred to authorised state authorities of the Russian Federation only on the grounds and in accordance with the procedure established by the legislation of the Russian Federation.

5.5 In case of loss or disclosure of personal data, the Website Administration informs the User about the loss or disclosure of personal data.

5.6 The Administration of the site takes the necessary organisational and technical measures to protect the User's personal information from unlawful or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.

6. Obligations of the parties.

6.1 The User is obliged to:

6.1.1 Provide correct information about personal data required for the purposes specified in clause 4 of this Policy.

6.2 The site administration is obliged to:

6.2.1 Use the received information exclusively for the purposes specified in clause 4 of this Privacy Policy.

6.2.2 Ensure confidentiality of confidential information, not to disclose without prior written permission of the User, as well as not to sell, exchange, publish or disclose by other possible means the transferred personal data of the User, except for clauses 5.4. of this Privacy Policy. 5.4. of this Privacy Policy.

6.2.3 Block personal data related to the respective User from the moment of application or request of the User or his/her legal representative or authorised body for protection of the rights of personal data subjects for the period of verification, in case of detection of inaccurate personal data or unlawful actions.

7. Responsibilities of the parties.

7.1. The website Administration, which has not fulfilled its obligations, shall be liable for losses incurred by the User in connection with the unauthorised use of Personal Data, in accordance with the laws of the Russian Federation, except as provided for in clauses 5.4. and 7.2. of this Privacy Policy. 5.4. and 7.2. of this Privacy Policy.

7.2 In case of loss or disclosure of Confidential Information the Administration of the site is not responsible if this confidential information:

7.2.1 Became public domain before its loss or disclosure.

7.2.2. was received from a third party before it was received by the Website Administration.

7.2.3. has been disclosed with the User's consent.

8. Dispute Resolution.

8.1. In case of any disputes or disagreements related to the execution of this Privacy Policy, the User and the Operator will make every effort to resolve them through negotiations between them. If the disputes are not resolved through negotiations, the disputes shall be resolved in accordance with the procedure established by the current legislation of the Russian Federation.

8.2 Before filing a claim with the court on disputes arising from the relations between the User and the Operator, it is obligatory to submit a claim (a written proposal for voluntary dispute settlement).

8.3 Within 30 calendar days from the date of receipt of the claim, the recipient of the claim shall notify the claimant in writing of the results of consideration of the claim.

8.4 In case of failure to reach an agreement, the dispute will be referred to the judicial authority of Naberezhnye Chelny in accordance with the current legislation of the Russian Federation.

8.5 The current legislation of the Russian Federation shall apply to this Privacy Policy and relations between the User and the Operator.

9. Additional terms and conditions.

9.1 This consent to the conditions of personal data processing is valid for an indefinite period of time until revoked by the user by personal application or by sending a written application to the legal address of the Operator's organisation. The chosen method of contact should ensure that the Operator can reliably identify the person contacted.

9.2 The Operator has the right to amend this Privacy Policy without the User's consent.

9.3 The new version of the Policy comes into effect from the moment of its posting on the website, unless otherwise provided for by the new version of the Policy. The current version is stored electronically on the Operator's website at: https://www.vira-nch.ru.