Personal dataprocessingpolicy

1.    General dispositions
This personal data processing policy is drawn up in accordance with the requirements of the Federal Law of 27.07.2006.  152-FL «About personal data» (hereinafter - the Law about personal data) and defines the procedure for processing of personal data and measures to ensure the security of personal data taken by LLC "TEMA" (hereinafter - the Operator).
1.1.    The Operator has as its primary objective and condition for carrying out its activities the respect of human and civil rights and freedoms in the processing of his personal data, including protection of privacy and personal secrets.
1.2.   This Operator’s Personal Data Processing Policy (hereinafter - Policy) applies to all information that the Operator may obtain about visitors of the website https://i-bg-federation.com.

2. Basic concepts used in Policy.
2.1. Automated personal data processing - processing of personal data with the computer technology.
2.2. Personal data blocking - temporary suspension of personal data processing (except in cases where the processing is necessary for personal dataclarification).
2.3. Website – is a set of graphic and information materials, as well as programs for computers and databases, ensuring their accessibility in the Internet at the address https://i-bg-federation.com.
2.4. Personal data information system - the aggregate of personal data contained in databases and information technologies and other technical means, providing their processing.
2.5. Anonymization of personal data - actions, which make impossible to determine without the use of additional information the ownership of personal data to a particular User or other subject of personal data.
2.6. Personal data processing – is any action (operation) or set of actions (operations) with personal data,using automated means or without the use of such means, including collection, recording, systematization, accumulation, storage, updating (update, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
2.7. Operator – is a government agency, municipal authority, legal entity or individual, alone or jointly with others organizing and/or carrying out the processing of personal data, as well as determining the purposes of processing personal data, composition of personal data to be processed, actions (operations), performed with personal data.
2.8. Personal data - any information directly or indirectly related to a particular or defined User of the website https://i-bg-federation.com.
2.9. Personal data permitted by the subject of the personal data for distribution- personal data, access of an unlimited number of persons to whom the subject of the personal data is provided by giving consent to the processing of personal data, personal data authorized by the subject for distribution in accordance with the Personal Data Act (hereinafter, personal data authorized for distribution).
2.10. The user is any visitor of the website https://i-bg-federation.com.
2.11. Provision of personal data - actions aimed at providing personal data to a specific person or group of persons.
2.12. Distribution of personal data - any action aimed at the disclosure of personal data to an unspecified number of persons (transfer of personal data) or the disclosure of personal data to an unlimited number of persons, including disclosure of personal data in the media, placement on information and telecommunications networks or provision of access to personal data by other means.
2.13. Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state to government agency of a foreign state, a foreign individualor legal person.
2.14. Destruction of personal data - any action which destroys irrevocably with the inability to further restore the content of personal data in the information system of personal data and/or the physical storage containing the data.

3. Basic rights and obligations of the Operator.
3.1. The operator has the right to:
- receive from the subject of personal data reliable information and/or documents containing personal data;
- independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided with the Law about personal data and the regulatory acts adopted in accordance therewith, unless otherwise provided with the Law about personal data or other federal laws.
3.2. The operator is obliged to:
- provide the subject of personal data upon request with information concerning the processing of their personal data;
- organize the processing of personal data in the manner established by the current legislation of the Russian Federation;
- respond to requests and inquiries of the subjects of personal data and their legal representatives in accordance with the requirements of the personal dataLaw;
- to report the necessary information to the authorized agency for the protection of rights of subjects of personal data upon request of this agency within 10 days from the date of receipt of such request;
- publish or otherwise provide unrestricted access to this Policy;
- take legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, distribution, as well as from other unlawful acts in relation to personal data;
- stop the transfer (distribution, provision, access) of personal data, stop processing and destroy personal data in the manner and cases provided with the Law about personal data;
- to perform other obligations provided with the Law about personal data.

4. Basic rights and obligations of the of the personal data subjects.
4.1. The personal data subjects have the rights to:
- receive information regarding the processing of their personal data, except in cases provided for by federal laws. The data is provided to the personal data subject by the Operator in an accessible form and should not contain personal data relating to other personal data subjects, unless there are legal grounds for disclosure of such personal data. The list of information and the procedure for obtaining it is established with the Law about personal data;
- require the Operator to update his personal data, block it or destroy it if the personal data is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose of processing, as well as taking the measures provided for by law to protect their rights;
- to provide a condition of prior consent when processing personal data for the purpose of marketing goods, works and services;
- withdraw consent to the processing of personal data, as well as send a request to stop the processing of personal data;
- appeal to the authorized agency for the protection of the rights of personal data subjects or in court proceedings unlawful acts or omissions of the Operator when processing his personal data;
- exercise other rights provided for by the legislation of the Russian Federation.
4.2. Personal data subjects are obliged to:
- provide the Operator with reliable data about themselves;
- inform the Operator about clarification (updating, changing) of their personal data.
4.3. Persons who provide the Operator with inaccurate information about themselves, or information about another personal data subject without the latter’s consent are liable in accordance with the legislation of the Russian Federation.

5. Principles of personal data processing.
5.1. The personal data processing is carried out on a lawful and fair basis.
5.2. The personal data Processing is limited to the achievement of specific, predetermined and lawful purposes. The personal data Processing for purposes incompatible with the collection of personal data is not permitted.
5.3. Databases containing personal data processed for incompatible purposes may not be combined.
5.4 Personal data shall be processed only for the purposes for which they are collected.
5.5. The content and volume of personal data processed correspond to the stated purposes of collecting. The personal data processed shall not be redundant in relation to the stated purposes of their collecting.
5.6. When processing personal data, the accuracy of personal data, and their adequacy and, where necessary, relevance to the purposes of processing personal data are ensured. The operator takes and/or ensures that necessary measures are taken to remove or correct incomplete or inaccurate data.
5.7. Storage of personal data is carried out in a form that allows the identification of the subject of the personal data, no longer than required for the purposes of processing the personal data, if the retention period of the personal data is not set by federal law, the contract to which the beneficiary or guarantor for which the subject of personal data is. Processed personal data are destroyed or de-identified when the purposes of processing have been achieved, or if it is no longer necessary to achieve those purposes, unless otherwise provided for by federal law.

6. Purpose of personal data processing:
·    surname, firstname, patronymic;
·    E-mail address;
·    phonenumbers.
·    Contracts concluded between the operator and the personal data subject.
·    Collection, recording, systematization, accumulation, storage, destruction and depersonalization;
·    Sending information letters to the e-mail address.

7. Conditions of personal data processing.
7.1. The personal data Processing is carried out with the consent of the personal data subject for the processing of their personal data.
7.2. The personal data processing is necessary to achieve the goals provided by international treaties of the Russian Federation or federal laws, as well as to perform the functions, powers and duties assigned to the operator by the legislation of the Russian Federation.
7.3. The personal data processing is required for the administration of justice, as well as for the execution of judicial acts, acts of other bodies and officials that are subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. The personal data processing is necessary for the execution of a contract to which either the beneficiary or the guarantor is the personal data subject, as well as for the conclusion of a contract at the initiative of the personal data subject or the contract, for which the personal data subject will be the beneficiary or guarantor.
7.5. The personal data processing is necessary for the exercise of rights and legitimate interests of the operator or third parties or to achieve purposes of public interest, provided that the rights and freedoms of the personal data subject are not violated.
7.6. The personal data Processing access to an unlimited number of persons provided by the personal data subject or at his request (hereinafter - publicly available personal data).
7.7. The processing of personal data subject to publication or mandatory disclosure in accordance with federal law is also not subject to restrictions.

8. The collection, storage, transfer and other processing of personal data.
The security of personal data processed by the Operator is ensured through the implementation of legal, organizational and technical measures, necessary to fully comply with the requirements of current legislation in the field of personal data protection.
8.1. The Operator ensures the security of personal data and takes all possible measures to prevent access to personal data of unauthorized persons.
8.2. The personal data of the User will never, under any conditions, be transferred to third parties, except in cases related to the execution of the current legislation or in case, if the subject of the personal data has given consent to the Operator to transfer data to a third party for the performance of obligations under the civil contract.
8.3. In case of detection of inaccuracies in personal data, the User can update them independently by sending a notification to the e-mail address of the Operator: info@i-bg-federation.com with the remark «Updating personal data».
8.4. The term of personal data processing is determined by the achievement of the purposes for which the personal data were collected, unless a different period is provided for in the contract or applicable law.
The User may at any time withdraw his consent to the personal data processing by sending a notification to the e-mail address of the Operator: info@i-bg-federation.com with the remark «Withdrawal of consent to the processing of personal data».
8.5. All information collected by third-party services, including payment systems, communication facilities and other service providers, is stored and processed by the specified persons (Operators) in accordance with their The User Agreement and Privacy Policy and/or with the specified documents. The Operator is not responsible for the actions of third parties, including the service providers specified in this paragraph.
8.6. The prohibitions established by the personal data subject on the transfer (other than granting access), as well as on the processing or conditions of processing (other than gaining access) of personal data permitted for distribution, do not apply in cases of personal data processing in the state, public and other public interests defined by the legislation of the Russian Federation.
8.7. The Operator ensures the confidentiality of personal data during the personal data processing.
8.8. The Operator stores personal data in a form that allows the identification of the subject of the personal data for no longer than is required by the purposes of the personal data processing, if the retention period of the personal data is not set by federal law, an agreement to which the personal data subject is a party, beneficiary or guarantor.
8.9. The termination of personal data processing may be conditional upon the fulfillment of the purposes for which the personal data are processed, the expiration of the period of validity of the consent of the personal data subject, the withdrawal of the consent of the personal data subject or the termination of the processing, as well as the detection of improper processing of personal data.

9. List of actions performed by the Operator with personal data obtained.
9.1. The operator collects, records, systematizes, accumulates, stores, edits (updates, changes), extracts, uses, transfers (distribution, provision, access), depersonalizes, blocks, deletes and destroys personal data.
9.2. The operator carries out automated personal data processing with receipt and/or transmission of the information received via information and telecommunications networks or otherwise.

10. Cross-border personal data transfer.
10.1. Prior to the start of activities on the cross-border personal data transfer, The Operator is obliged to notify the competent authority which are protecting the rights of the personal data subjects about its intention to carry out a cross-border personal data transfer before starting cross-border transfer activities (such notice is sent separately from the notice of intention to process personal data).
10.2. Prior to the above-mentioned notification, the operator is obliged to obtain information from the authorities of a foreign state, foreign individuals and foreign legal entities to which the cross-border transfer of personal data is planned.

11. The Privacy of Personal Data.
The Operator and other persons who have access to personal data are obliged not to disclose personal data to third parties or to disseminate personal data without the consent of the personal data subject, unless otherwise provided by federal law.

12. Final regulations.
12.1. The User may obtain any clarification on matters of interest relating to the processing of his personal data by contacting the Operator via e-mail info@i-bg-federation.com.
12.2. This document will reflect any changes in the personal data processing policy of the Operator. The policy is valid indefinitely until it is replaced by a new version.
12.3. The current version of the Free Access Policy is available on the Internet at https://i-bg-federation.com/privacy.
12.4. In case of discrepancies between the Russian and the English texts of the contract, the Russian version shall prevail.