Basharatyan V POLICY REGARDING THE PROCESSING AND SECURITY OF PERSONAL DATA
Basic concepts
Website Administration — authorized employees to manage the Website https://basharatyanv.com acting on behalf of Individual Entrepreneur Basharatyan V.
Personal data processing is any action or set of actions with personal data performed using automation tools or without their use, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution), depersonalization, blocking, deletion, destruction of personal data.
Personal data is any information related directly or indirectly to a specific or identifiable User. Such information, in particular, can include:
● Information about your computer, including your IP address, geographic location, browser type, version, and operating system;
● Information about your visits and use of our Website, including the referral source, the duration of the visit, page views and navigation paths on the Website;
● Your email address, name, phone number, address that you enter when placing an order on our Website;
● information that is generated when using our Website, including when, how often and under what circumstances you use it;
● Information related to the services you use or the transactions you make through our Website, which includes your name, address, phone number, email address and credit card details;
● Any other personal information that you send to us.
Website User — a person who has access to the Website via the Internet and uses the Website https://basharatyanv.com .
Dissemination of personal data — actions aimed at disclosing personal data to an indefinite circle of persons.
A website is an information system created on the basis of a web server of a communication node identified by a domain name https://basharatyanv.com , designed for posting information on the Internet, means of its visual design and interaction with users through web clients.
Consent to the processing of personal data is the permission of the Website User, which he gives to the interested party to receive, collect, store and use personal information about himself.
Personal data subjects are a person who is directly or indirectly identified or determined using personal data.
Cross—border transfer of personal data is the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity.
Purpose and scope of the document
The Basharatyan V Policy on the Processing and Security of Personal Data (hereinafter referred to as the Policy) defines the position and intentions of the Individual Entrepreneur Basharatyan V (hereinafter also referred to as Basharatyan V) in the field of processing and ensuring the security of personal data, in order to respect and protect the rights and freedoms of every person and, in particular, the right to privacy, personal and family secrets, protection of one’s honor and good name.
In order to maintain business reputation and ensure compliance with the requirements of current international standards in the field of personal data, Basharatyan V considers it the most important task to ensure the legitimacy of processing and security of personal data of subjects in business processes. To solve this problem, a personal data protection system has been introduced, is functioning and is undergoing periodic review (control).
The policy is strictly enforced by the heads and employees of all structural divisions and branches of Basharatyan V.
The Policy applies to all personal data of subjects processed in Basharatyan V with and without the use of automation tools.
This document defines the policy of Basharatyan V in the field of processing and protection of personal data and is available at https://basharatyanv.com . Any personal data subject has access to this Policy.
The policy is developed and used in conjunction with the Consent to the processing of personal data, which is also posted at https://basharatyanv.com.
Principles and conditions of personal data processing
The processing and security of personal data in Basharatyan V is carried out in accordance with the requirements of international standards in the field of personal data, European Union Regulation 2016/679 (General Data Protection Regulation) and the legislation of the Russian Federation in the field of personal data protection.
When processing personal data, Basharatyan V adheres to the following principles:
● legality and fair basis;
● restrictions on the processing of personal data to achieve specific, predetermined and legitimate goals;
● reliability of personal data, their relevance and sufficiency for processing purposes;
● preventing the processing of personal data that is incompatible with the purposes of personal data collection;
● preventing the consolidation of databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
● the legitimacy of organizational and technical measures to ensure the security of personal data;
● processing of personal data that meet the purposes of their processing;
● Content compliance.
Basharatyan V processes personal data only if at least one of the following conditions is met:
● the processing of personal data is carried out with the consent of the personal data subject to the processing of his personal data;
● the processing of personal data is necessary to achieve the goals provided for by law, to implement and fulfill the functions, powers and duties assigned to the operator by international standards in the field of personal data;
● the processing of personal data is necessary for the execution of an agreement to which either the beneficiary or the guarantor, under which the subject of personal data is, as well as for the conclusion of an agreement on the initiative of the subject of personal data or an agreement under which the subject of personal data will be the beneficiary or guarantor;
● the processing of personal data is necessary to exercise the rights and legitimate interests of Basharatyan V or third parties or to achieve socially significant goals, provided that the rights and freedoms of the personal data subject are not violated;
● processing of personal data is necessary when receiving feedback, analyzing how to improve the quality of Services and services, as well as when receiving information about loyalty and satisfaction with Basharatyan V Services and services, further research and processing of this information;
● personal data is processed, access to which is provided to an unlimited number of persons by the subject of personal data or at his request;
● personal data subject to publication or mandatory disclosure is processed in accordance with international standards in the field of personal data.
In cases established by international standards in the field of personal data, Basharatyan V has the right to transfer personal data of Users.
Basharatyan V destroys or depersonalizes personal data upon achievement of the processing goals or in case of loss of the need to achieve the processing goal.
Purposes of personal data processing
Basharatyan V processes the personal data of the personal data subject solely for the following purposes:
● carrying out activities to facilitate the organization of contacts and consultations by Users of the Website;
● identification of the User and/or his representative;
● informing about the advertising and (or) marketing campaigns, surveys, questionnaires, market research conducted by Basharatyan V and (or) third parties in whose interests Basharatyan V acts, in relation to services provided by Basharatyan V and/or persons in whose interests Basharatyan V acts;
● communicating with the User, if necessary, including sending notifications, requests and information related to the use of the Website, the provision of services, as well as processing requests and requests from the User;
● improving the quality of services provided, the convenience of their use, the development of new services and services;
● conducting statistical and other research based on depersonalized data.
The rights of personal data subjects
The user whose personal data is processed by Basharatyan V has the right to:
1. Receive from Basharatyan V:
● confirmation of the processing of personal data by Basharatyan V.;
● Legal grounds and purposes of personal data processing;
● information about the methods of processing personal data used by Basharatyan V.;
● information about persons who have access to personal data or to whom personal data may be disclosed in accordance with international standards in the field of personal data;
● a list of processed personal data related to the User from whom the request was received and the source of their receipt, unless another procedure for providing such data is provided by law;
● information about the terms of processing of personal data, including the terms of their storage;
● information about the ongoing or proposed cross-border transfer of personal data;
● name and address of the person processing personal data on behalf of Basharatyan V.;
● other information provided for by international standards in the field of personal data.
2. to demand clarification of their personal data, their blocking or destruction if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
3. appeal the actions or omissions of Basharatyan V to the body for supervision and control in the field of personal data protection or in court if a citizen believes that Basharatyan V processes his personal data in violation of the requirements of international standards in the field of personal data or otherwise violates his rights and freedoms;
4. to protect their rights and legitimate interests, including compensation for damages and/or compensation for moral damage in court.
Revocation of consent to the processing of personal data does not affect the legality of data processing based on your consent prior to its revocation. If you want to send a request, you should contact Basharatyan V in writing using the contact information provided on the Contacts page. Basharatyan V will make a decision on your request within four weeks.
The user has the right to receive personal data about him or her, which he or she has provided to Basharatyan V, in a structured, commonly used and machine-readable format and has the right to transfer this data to another operator without objection by Basharatyan V if:
● Processing is based on consent in accordance with this Policy;
● Processing is carried out by automatic means.
In exercising their right to data portability, the User has the right to transfer personal data directly from Basharatyan V to another operator, where technically possible.
The exercise of rights does not prejudice the right to delete User data. This right does not apply to processing necessary for a task performed in the public interest or in the exercise of official powers granted by Basharatyan V.
These rights should not adversely affect the rights and freedoms of third parties.
The procedure, conditions and methods of processing personal data
The processing of personal data of the Website User is carried out in accordance with this Policy, the User Agreement, as well as the User’s consent to the processing of personal data.
Basharatyan V processes personal data both in an automated way and without the use of automation tools.
Basharatyan V stops processing personal data in the following cases:
● achieving the goals of personal data processing;
● revocation of the consent of the personal data subject;
● identification of illegal processing of personal data;
● Termination of Basharatyan V.
The processing of the User’s personal data is carried out by Basharatyan V in the following possible ways: collection, recording (including on electronic media), systematization, accumulation, storage, compilation of lists, labeling, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction, cross-border transfer of personal data, obtaining an image by photographing, as well as performing any other actions with the User’s personal data, taking into account applicable law.
Cross-border transfer of personal data
In order to achieve the goals set out in the Policy, Basharatyan V reserves the right to transfer personal data to countries other than the country from which they were originally received. User data may be transferred to countries that do not have data protection laws equivalent to those in force in the European Economic Area. However, before the start of the cross-border transfer of personal data, Basharatyan V is obliged to make sure that the foreign state into whose territory the transfer of personal data is carried out ensures adequate protection of your rights as a subject of personal data.
In the case of cross-border transfer of personal data, Basharatyan V protects the data in accordance with this Policy, the User Agreement and consent to the processing of personal data.
You expressly agree to the transfer of the personal information described in this section.
Ensuring the security of personal data
Basharatyan V applies necessary and sufficient organizational and technical measures, including the use of information security tools, the detection of unauthorized access, the recovery of personal data, the establishment of rules for access to personal data, as well as monitoring and evaluating the effectiveness of the measures applied.
All persons authorized by Basharatyan V to process personal data are familiar with the provisions of the legislation of the Russian Federation on personal data, including international requirements for the protection of personal data, documents defining the policy of Basharatyan V regarding the processing of personal data, local acts on the processing of personal data.
The following organizational measures apply in Basharatyan V.:
● persons responsible for organizing the processing and ensuring the security of personal data have been appointed;
● Local acts on personal data processing have been developed;
● Internal control is carried out over the compliance of personal data processing with the requirements for personal data protection.
The following technical measures apply in Basharatyan V.:
● the buildings have security and fire alarms, as well as video surveillance systems;
● Hard copy information is stored in safes or lockable cabinets, access to which is limited;
● physical security is provided, providing for the control of access to the premises of unauthorized persons, the presence of reliable obstacles to unauthorized entry into the premises;
● the exchange of personal data during their processing in information systems is carried out through communication channels, the protection of which is ensured through the implementation of appropriate organizational measures and through the use of technical means (anti-virus information protection tools, inter-network shielding and other technical means are used).
When collecting personal data of Users, Basharatyan V undertakes to ensure the recording, systematization, accumulation, storage, clarification (updating, modification), extraction of personal data of Users using databases.
Cookies and Web beacons
A cookie is a file that is stored on your computer’s hard drive in your browser. Cookies can be “persistent” or “session cookies”: a persistent cookie will be stored in the web browser and will remain valid until it expires, unless it is deleted by the User before it expires; the cookie session expires at the end of the User’s session when the web browser is closed. Cookies usually do not contain information that personally identifies the User, but the personal information we store about you may be related to information stored and obtained from cookies.
A web beacon, also called an internet tag or pixel tag, is used to collect information about your internet usage. Thanks to this, Basharatyan V can provide you with more specific information. When using the Website, Basharatyan V informs you about which cookies and web beacons relate to the Website, and you are asked to consent to the placement of these cookies and web beacons.
Blocking or deleting all cookies negatively affects the usability of many Websites. If you block/delete cookies, you will not be able to use all the features on our Website.
Third-party sites
Our Website includes hyperlinks to third-party websites. We do not control and are not responsible for their privacy policies and activities.
Responsibility
In case of non-compliance with the provisions of this Policy, Basharatyan V is liable in accordance with the current legislation of the Russian Federation.
To receive clarification on the issues of personal data processing, you must send an official request to the e-mail address pr@basharatyanv.com
In case of sending an official request to the administration of the Website, it is necessary to specify in the text of the request:
● FULL name;
● the number of the main document certifying the identity of the personal data subject or his representative, information on the date of issue of the specified document and the issuing authority;
● information confirming the processing of your personal data by Basharatyan V.;
● Signature.
Official requests and complaints are submitted in writing and to the specified address of Basharatyan V., previously sent in a reliable way. To resolve any dispute in accordance with the legislation of the Russian Federation.
Limitation of the Privacy Policy
Personal data subjects are obliged to take a reasonable and responsible approach to placing their own personal data in the public domain, including on the Website in case of leaving feedback and comments.
Basharatyan V is not responsible for the actions of third parties who have gained access to the personal data of the subject through the fault of the latter.
Basharatyan V reserves the right, at its sole discretion, to make changes to this Policy at any time without any special notice. The new version of this Policy comes into force from the moment it is posted on the Website.
