Privacy Policy
Last updated:
Contents
- 1. General provisions
- 2. Basic concepts used in the policy
- 3. Operator’s main rights and obligations
- 4. Basic rights and obligations of data subjects
- 5. Personal data processing principles
- 6. Purposes of processing personal data
- 7. Conditions for the processing of personal data
- 8. Procedures for collection, storage, transmission and other processing
- 9. List of operations performed by the Operator
- 10. Cross-border transfer of personal data
- 11. Confidentiality of personal data
- 12. Final provisions
1. General provisions
The present Personal Data Processing Policy is prepared in accordance with the requirements of the Federal Law dated 27.07.2006 No. 152-FZ “On Personal Data” (hereinafter the “Law on Personal Data”) and defines the procedure of processing personal data and measures taken by World-World (hereinafter the “Operator”) to ensure the security of personal data.
1.1 The Operator sets as the main goal and condition of its activity the observance of human and civil rights and freedoms during the processing of personal data, including the protection of the right to privacy, personal and family secrecy.
1.2 This Policy applies to all information that the Operator may obtain about visitors to https://immigration-world.com.
2. Basic concepts used in the policy
- Automated processing of personal data — processing of personal data by means of computer equipment.
- Blocking of personal data — temporary cessation of processing of personal data (except for cases when processing is necessary to clarify personal data).
- Website — a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at https://immigration-world.com.
- Personal data information system — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
- Personalization (de-personalization) of personal data — actions as a result of which it is impossible to determine, without using additional information, whether personal data belong to a particular user or other subject of personal data.
- Processing of personal data — any action (operation) or set of actions performed with or without the use of automated means with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, communication (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
- Processor (Operator) — a state authority, a local authority, a legal entity or a natural person who, independently or jointly with others, organizes and/or carries out the processing of personal data, determines the purposes of processing, the categories of personal data that are subject to processing, and the operations that are carried out with personal data.
- Personal data — any information directly or indirectly related to a specific or identified user of the Website.
- Personal data authorized for disclosure by the data subject — personal data to which the data subject has granted access to an unlimited number of persons by giving consent as prescribed by the Law on Personal Data.
- User — any visitor to the Website.
- Disclosure of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.
- Dissemination of personal data — any actions aimed at disclosure of personal data to an unlimited number of persons (transfer of personal data) or making personal data known to an unlimited number of persons, including publication in mass media, placement on the Internet or providing access in any other way.
- Cross-border transfer of personal data — transfer of personal data to the territory of a foreign country to a foreign authority, a foreign natural or legal person.
- Destruction of personal data — actions as a result of which personal data are irretrievably destroyed with the impossibility of further recovery, and/or material carriers of personal data are destroyed.
3. Operator’s main rights and obligations
3.1 The Operator has the right to:
- receive from the personal data subject reliable information and/or documents containing personal data;
- in case of withdrawal of consent or a request to stop processing, continue processing without consent on the grounds specified by the Law on Personal Data;
- independently determine the measures necessary and sufficient to fulfill obligations under the Law on Personal Data.
3.2 The Operator is obliged to:
- provide the data subject, upon request, with information about the processing of his/her personal data;
- organize the processing in accordance with applicable legislation;
- respond to complaints and requests of data subjects and their legal representatives;
- provide the competent authority with necessary information within the prescribed period;
- publish or otherwise provide unrestricted access to this Policy;
- take legal, organizational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful acts;
- cease communication (dissemination, provision, access) of personal data, cease processing and destroy personal data in the manner and cases provided by law;
- fulfil other obligations provided for by the Law on Personal Data.
4. Basic rights and obligations of data subjects
4.1 Data subjects have the right to:
- receive information regarding the processing of personal data, except in cases provided for by federal laws; such information shall not contain personal data of other subjects unless there are legal grounds for disclosure;
- request clarification, blocking or destruction of personal data if incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose, and take measures to protect their rights;
- make marketing processing subject to prior consent; withdraw consent and request termination of processing;
- appeal to the competent authority or courts against unlawful acts/omissions of the Operator;
- exercise other rights provided by the legislation of the Russian Federation.
4.2 Data subjects are obliged to:
- provide the Operator with reliable data about themselves;
- inform the Operator about updates/changes to their personal data.
4.3 Persons who provided false information about themselves or about another subject without consent shall be liable in accordance with the law.
5. Personal data processing principles
- Personal data will be processed on a lawful and fair basis.
- Processing is limited to specific, predetermined and legitimate purposes; incompatible processing is not allowed.
- It is not allowed to merge databases processed for incompatible purposes.
- Only personal data necessary for the purposes shall be processed; redundancy is not permitted.
- Accuracy, adequacy and relevance shall be ensured; incomplete/inaccurate data shall be deleted or clarified.
- Storage shall not exceed what is necessary for the purposes or as required by law/contract; data shall be destroyed or anonymized upon achievement of purposes.
6. Purposes of processing personal data
Purpose of processing: informing the user by e-mail.
Legal grounds: Operator’s statutory documents.
Types of processing: transfer/communication of personal data.
7. Conditions for the processing of personal data
- processing with the consent of the data subject;
- processing necessary to achieve purposes provided by international treaty or law and to fulfil Operator’s functions/powers;
- processing necessary for justice and execution of acts subject to enforcement;
- processing necessary for performance/formation of a contract to which the data subject is a party or beneficiary/guarantor;
- processing necessary for legitimate interests of the Operator or third parties provided rights and freedoms are not violated;
- processing of publicly available personal data;
- processing of data subject to publication or mandatory disclosure in accordance with federal law.
8. Procedures for collection, storage, transmission and other types of processing
The security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary for full compliance with applicable legislation.
- The Operator ensures the security of personal data and takes measures to prevent unauthorized access.
- Personal data is not transferred to third parties except as required by law or with the data subject’s consent to fulfil contractual obligations.
- To update data, email valerijbegunk@gmail.com with subject “Personal data update”.
- Processing duration is determined by the purposes or applicable law/contract. Consent may be withdrawn at any time by emailing valerijbegunk@gmail.com with subject “Withdrawal of consent to the processing of personal data”.
- Information collected by third-party services (payments, communications, etc.) is stored/processed by those providers under their own Terms and Privacy Policies; the Operator is not responsible for their actions.
- Prohibitions set by the data subject on disclosure/processing of data authorized for disclosure do not apply where processing is carried out in state/public interests as defined by law.
- The Operator ensures confidentiality of personal data.
- Personal data is stored no longer than necessary; processing may terminate upon achievement of purposes, consent expiry/withdrawal, request to stop processing, or detection of unlawful processing.
9. List of operations performed by the Operator
- Collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction.
- Automated processing with or without transmission via networks.
10. Cross-border transfer of personal data
- The Operator shall notify the competent authority of its intention to perform a cross-border transfer before commencing such transfer.
- Before submitting the notification, the Operator obtains relevant information from foreign recipients.
11. Confidentiality of personal data
The Operator and other persons who have access to personal data shall not disclose or disseminate them without the data subject’s consent unless otherwise provided by law.
12. Final provisions
- For questions, contact: valerijbegunk@gmail.com.
- Any changes to this Policy will be reflected in this document. The Policy is valid until replaced by a new version.
- The current version is available at https://immigration-world.com/privacy/.