Personal Data Processing Policy
This Personal Data Processing Policy (hereinafter referred to as the "Policy") has been prepared in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006, "On Personal Data" (hereinafter referred to as the "Personal Data Law"), and defines the procedure for processing personal data and measures to ensure the security of such data taken by LLC "DOCLINX".
This Policy applies to all information that the Operator may obtain from users of the website https://doclinx.ru during the use of the Site, its programs, and its products.
1. Terms and Definitions
1.1. "Personal Data" means any information relating directly or indirectly to an identified or identifiable natural person (personal data subject).
1.2. "Personal Data Processing" means any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), depersonalization, blocking, deletion, destruction of personal data.
1.3. "Personal Data Confidentiality" means a mandatory requirement for the Operator or other person who has gained access to personal data to prevent their distribution without the consent of the personal data subject or other legal grounds.
1.4. "Website" means a collection of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://doclinx.ru
1.5. "Website User" means a person who has access to the Website through the Internet and uses the information, materials, and products of the Website.
1.6. "Personal Data Operator" or "Operator" means LLC "DOCLINX" (INN: 9723229906), located at: 109044, Moscow, Krutitsky Val st., 14, office 303.
1.7. "Cross-border Transfer of Personal Data" means the transfer of personal data to the territory of a foreign state, to an authority of a foreign state, a foreign natural person, or a foreign legal entity.
2. General Provisions
2.1. Use of the Website by the User implies consent to this Policy and the terms of processing the User's personal data.
2.2. If the User disagrees with the terms of the Policy, the User must cease using the Website.
2.3. The Policy establishes the Operator's obligations regarding non-disclosure and ensuring the confidentiality protection regime of personal data that the User provides at the Operator's request.
2.4. Personal data authorized for processing under this Policy is provided by the User by filling out forms on the Website and includes the following information:
- 2.4.1. User's surname, first name, patronymic;
- 2.4.2. User's contact phone number;
- 2.4.3. User's email address;
- 2.4.4. Other data specified in forms on the Website.
2.5. The Operator does not process special categories of personal data.
3. Principles of Personal Data Processing
3.1. Personal data processing is carried out on a lawful and fair basis.
3.2. Personal data processing is limited to achieving specific, predetermined, and legitimate purposes established by this Policy. Processing of personal data incompatible with the purposes of personal data collection is not allowed.
3.3. Only personal data that meets the purposes of its processing shall be processed.
3.4. The content and volume of processed personal data correspond to the stated processing purposes. Excessive processing of personal data in relation to the stated purposes of their processing is not allowed.
3.5. When processing personal data, the accuracy of personal data, their sufficiency, and, where necessary, relevance in relation to the purposes of personal data processing is ensured. The Operator takes necessary measures and/or ensures their implementation to delete or clarify incomplete or inaccurate data.
4. Purposes of Collecting User's Personal Information
4.1. The Operator may use the User's personal data for the following purposes:
- 4.1.1. identification of the User registered on the Website for their subsequent authorization and other actions related to the website;
- 4.1.2. providing the User with access to personalized Website data;
- 4.1.3. establishing feedback with the User, including sending notifications, requests regarding the use of the Website, and processing requests and applications from the User;
- 4.1.4. creating an account for using parts of the Website if the User has consented to create an account;
- 4.1.5. providing the User with special offers, information about the Operator's goods and services, Operator's partners, and news updates.
5. Methods and Terms of Personal Information Processing
5.1. The User's personal data is processed without time limitation, by any lawful means, including in personal data information systems using automation tools or without using such tools.
5.2. The User's personal data may be processed by a third party based on an agreement with the Operator or upon its instructions, provided that such party complies with the principles and rules of personal data processing stipulated by the Personal Data Law and obtains prior written consent from the User.
5.3. The Operator takes necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.
5.4. In case of cross-border transfer of personal data, the Operator must ensure, before initiating such transfer, that the foreign state to whose territory the personal data is intended to be transferred provides reliable protection of personal data subjects' rights.
5.5. Cross-border transfer of personal data to territories of foreign states that do not meet the above requirements may be carried out only if there is written consent from the personal data subject for the cross-border transfer of their personal data and/or for the execution of an agreement to which the personal data subject is a party.
6. Responsibilities of the Parties
6.1. The Operator, having culpably failed to fulfill its obligations, shall be liable for actual damages incurred by the User in connection with the unlawful use of personal data, in accordance with the legislation of the Russian Federation.
6.2. The Operator shall not be liable to the User for any losses occurring due to: use or inability to use the Website; unauthorized access to User communications; behavior of any third party on the Website.
6.3. The Operator is not responsible for any information posted by the User on the Website.
7. Final Provisions
7.1. The User has the right to withdraw their consent to personal data processing by sending a notification to the Operator at: 109044, Moscow, Krutitsky Val st., 14, office 303, for the attention of the General Director of LLC "DOCLINX", info@doclinx.ru.
7.2. In cases where the User's personal data is necessary for the Operator to fulfill obligations to the User, upon withdrawal of consent, the User agrees that their request to withdraw consent for personal data processing serves as a proper basis for termination of the Operator's obligations at the User's request.
7.3. The Operator has the right to make changes to this Policy without the User's consent.
7.4. The Policy comes into force from the moment of its placement on the Website and is valid indefinitely until it is replaced by a new version in accordance with clause 7.3. or completely deleted due to the termination of personal data processing.