1. Purpose and scope
1.1. This document (hereinafter — the Policy) defines the purposes and principles of processing personal data, as well as measures to protect the rights of personal data subjects by the Operator — Individual Entrepreneur Paranichev Dmitry Alexandrovich, TIN 860319715652 (hereinafter — the «Operator»).
1.2. The Policy applies to the Operator, its employees (if any), and persons engaged by the Operator under contracts to ensure the operation of the service, in the part related to the processing of personal data.
1.3. The Policy is taken into account in the Operator's interactions with partners, contractors, and counterparties in the course of processing personal data on the basis of agreements and contracts.
1.4. The Operator's details and contacts are listed in Section 9 of this Policy.
2. Compliance with legislation
2.1. The Policy is developed in accordance with the legislation of the Russian Federation, including Federal Law No. 152-FZ «On Personal Data» (hereinafter — 152-FZ).
2.2. In the cases and in the manner prescribed by the legislation of the Russian Federation, the Operator submits a notification on the processing of personal data to the authorized body for the protection of personal data subjects' rights (Roskomnadzor), or carries out processing without notification if permitted by law.
3. Principles of personal data processing
3.1. Processing of personal data by the Operator is carried out on a lawful and fair basis and in accordance with the following regulatory acts:
- the Constitution of the Russian Federation;
- the Labor and Civil Codes of the Russian Federation;
- Federal Law «On Personal Data» No. 152-FZ;
- other regulatory acts and agreements.
3.2. Processing of personal data is limited to the achievement of specific purposes, such as user registration, the provision of services, marketing activities, and the protection of the Operator's legitimate interests.
3.3. The Operator does not process special categories of personal data relating to race, nationality, political views, or religious beliefs.
3.4. No cross-border transfer of personal data is carried out.
3.5. Users' personal data is stored and processed using databases located on the territory of the Russian Federation, in accordance with the requirements of Federal Laws No. 152-FZ and No. 242-FZ.
3.6. The Operator takes all necessary measures to protect personal data, including physical and technical safeguards.
4. Consent to data processing
4.1. Data processing is carried out on the basis of the data subject's consent. Consent may be expressed by accepting the terms of use of the Operator's website or services.
4.2. The data subject has the right to withdraw consent to processing at any time by sending a request to the Operator.
4.3. If the data subject refuses to provide data, the Operator cannot provide the corresponding services or complete user registration.
6. Rights of data subjects
6.1. In accordance with Article 14 of 152-FZ, a personal data subject has the right to:
- receive confirmation that the Operator processes their data, along with the legal grounds and purposes of such processing;
- obtain a list of the personal data being processed, information about its source, and processing time frames;
- demand correction, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated processing purpose;
- withdraw previously given consent to the processing of personal data at any time;
- receive a copy of the personal data being processed in a form suitable for further processing;
- appeal the actions or inaction of the Operator to the authorized body for the protection of personal data subjects' rights (Roskomnadzor) or through the courts.
6.2. Requests to exercise these rights should be sent to the Operator at policy@palert.io or to the postal address listed in Section 9. The Operator responds within the time frame established by 152-FZ.
7. Confidentiality and security
7.1. The Operator takes the necessary measures to protect data, including appointing responsible persons, physical and technical data protection, the use of encryption, and data backups.
7.2. In the event of an incident involving unlawful or accidental transfer of personal data, the Operator notifies Roskomnadzor within 24 hours of detecting the incident and submits the results of an internal investigation within 72 hours, in the manner prescribed by Article 21 of 152-FZ.
8. Updates to the Policy
8.1. The Operator has the right to make changes to this Policy. The current version is published at the address of the privacy page on the Operator's website. Material changes affecting the rights of personal data subjects are communicated to Users by posting a notice on the website and/or sending a message to the email address provided at registration, no later than 7 (seven) calendar days before the changes take effect.
8.2. Questions and inquiries regarding the Policy, as well as requests from personal data subjects, may be sent to the Operator by email at policy@palert.io and/or to the postal address.
9. Operator's details and contacts
- Individual Entrepreneur Paranichev Dmitry Alexandrovich
- TIN 860319715652
- OGRNIP: 326237500029568
- Postal address: 354375, Krasnodar Territory, Sirius federal territory, Sirius settlement, Trubacheva St., 29, apt. 60
- Email: policy@palert.io