Согласие на обработку персональных данных

PRIVACY POLICY

1. General Provisions

This privacy policy has been drawn up in accordance with the requirements of the Federal Law of 27.07.2006 152-FZ "On Personal Data" and the General Data Protection Regulation (GDPR) and defines the procedure for processing personal data and measures to ensure the security of personal data on the Internet site www.candymachinery.ru of individual entrepreneur Dmitry Leonidovich Konovalov (TIN 312200851455, OGRN 318312300063367, hereinafter referred to as the Operator).

1.1. The Operator sets as its most important goal and condition for the implementation of its activities the observance of the rights and freedoms of man and citizen when processing his personal data, including the protection of the rights to privacy, personal and family secrets.

1.2. This privacy policy (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to websites located on the domains candymachinery.ru as well as on any of their subdomains.

2. Concepts and definitions

2.1. The Policy uses the following basic concepts:

Automated processing of personal data — processing of personal data using computer technology;

Blocking of personal data — temporary cessation of processing of personal data (except in cases where processing is necessary to clarify personal data);

Website — a collection of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at network addresses (domains) candymachinery.ru, as well as on any of their subdomains;

Administration — employees authorized to manage the Site, acting on behalf of Dmitry Leonidovich Konovalov, an individual entrepreneur, who organize and (or) process personal data, and determine the purposes of processing personal data, the composition of personal data to be processed, and actions (operations) performed with personal data.

Personal data information system — a set of personal data contained in databases and the information technologies and technical means that ensure their processing;

Depersonalization of personal data — actions that make it impossible to determine, without the use of additional information, the ownership of personal data by a specific User or other subject of personal data;

Personal data processing — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

Operator — a government agency, municipal agency, legal entity or individual that independently or jointly with other persons organizes and/or carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, and actions (operations) performed with personal data;

Personal data — any information related to a directly or indirectly defined or determinable User of the Site;

User — any visitor to the Site;

Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons;

Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or familiarizing an unlimited number of persons with personal data, including disclosure of personal data in the media, posting in information and telecommunication networks or providing access to personal data in any other way;

Destruction of personal data — any actions that result in the irreversible destruction of personal data with the impossibility of further restoration of the content of personal data in the personal data information system and (or) as a result of which the tangible media of personal data are destroyed.
3. Categories of personal data processing

The above data are hereinafter referred to in the text of the Policy as Personal Data.

4. Purposes of personal data processing

4.1. The purpose of processing the User’s personal data is the preparation, conclusion and execution of a civil law contract with clients-buyers of goods posted on the Site. The Operator also has the right to send the User notifications about new products and services, special offers, promotions, etc. The User can always opt out of receiving informational messages by sending the Operator an email to info@candymachinery.ru.

Additionally, personal data is processed for the following purposes:

4.1.1. Identification of the User registered on the Site,

4.1.2. Providing the User with access to the personalized resources of the Site,

4.1.3. Establishing feedback with the User, including sending notifications, requests regarding the use of the Site, provision of services, processing requests and applications from the User.

4.1.4. Confirming the accuracy and completeness of the personal data provided by the User.

4.1.5. Providing the User with access to the sites or services of the Site's partners in order to receive products, updates and services.

4.2. Anonymized data of Users collected using Internet statistics services is used to collect information about the actions of Users on the Site, improve the quality of the Site and its content.

5. Legal grounds for processing personal data

5.1. The Operator processes the User's personal data only if they are filled in and/or sent by the User independently through special forms located on the Site. By filling in the relevant forms and/or sending their personal data to the Operator, the User expresses their consent to this Policy.

5.2. The Operator processes anonymized data about the User if this is allowed in the User's browser settings (the storage of cookies and/or the use of JavaScript technology is enabled).

6. Procedure for collecting, storing, transferring and other types of processing of personal data

The security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.

6.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized persons from accessing personal data.

6.2. The User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to compliance with current legislation.

6.3. In the event of inaccuracies in personal data, the User can update them independently by sending a notification to the Operator's email address info@candymachinery.ru with the subject line "Updating personal data"

6.4. The period for processing personal data is determined by the duration of the period necessary to achieve the purpose of processing personal data provided for in Section 4 of the Policy.

6.5. The User may revoke their consent to the processing of personal data at any time by sending a notification to the Operator via e-mail to the Operator's e-mail address info@candymachinery.ru with the subject line "Revocation of consent to the processing of personal data".

6.6. The main ways in which the Administration receives personal data from the User:

The User provides personal data directly (for example, when sending a request or placing an order);
Personal data is collected automatically when the User views or uses the Site, for example, using cookies. Cookies are a small piece of text sent by the server and stored on the User's computer. Cookies perform many functions, for example, they save the settings made by the User, allow you to navigate between pages after authorization and generally simplify the work with the Site.

The Administration uses cookies for:
Identification - cookies allow you to recognize the device and User Account if he has entered the login and password and not request them each time you go to another page;
Statistics — cookies allow you to collect data on viewing certain pages.

6.7. The Administration may disclose the User's personal data within the framework of the law or to protect rights and interests, if such disclosure is necessary to comply with the law, protect the rights of the Administration or third parties, as well as protect property and / or interests (for example, compliance with the terms of the User Agreement) or prevent fraud. In particular, the Administration may disclose the User's personal data in response to official requests from government agencies, for example, to meet the requirements of national security or law enforcement agencies.

The Administration may exchange personal data with third parties in order to provide the User with individual advertising, analysis and control of its effectiveness. For example, the Administration may use an encrypted email address to customize advertising on a social network so as not to show advertising to people who are already Users of the Site.

The processing of the User's personal data is carried out without time limitation, by any legal means, including in personal data information systems using automation tools or without using such tools.

The User agrees that the Site Administration has the right to transfer personal data to third parties, in particular, courier services, postal organizations, telecommunications operators, solely for the purpose of fulfilling the User's order placed on the Site.
7. Cross-border transfer of personal data

7.1. The operator, in the process of processing personal data, may transfer it across borders using the Yandex Metrica and Google Analytics website visitor statistics service.

8. Final Provisions

8.1. The User can receive any clarifications on issues of interest regarding the processing of his personal data by contacting the Operator via e-mail info@candymachinery.ru.

8.2. The User can update, change or delete the Personal Data that he has provided by sending a corresponding request to the e-mail address info@candymachinery.ru. For technical reasons, information may not be deleted immediately, but with a delay. It is also necessary to take into account that it is possible to save some information to the extent that it is necessary to fulfill legal obligations, resolve disputes, prevent fraud and protect the legitimate interests of the Administration.

8.3. This document will reflect any changes to the Operator's personal data processing policy. The policy is valid indefinitely until it is replaced by a new version.

8.4. The current version of the Policy is freely available on the Internet at https://candymachinery.ru/registraciya/agreement