Personal Data Processing Policy
1.General Provisions
This personal data processing policy is prepared in accordance with Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006 (hereinafter referred to as the "Personal Data Law") and determines the procedure for processing personal data and the measures to ensure the security of personal data undertaken by LLC "LSD" (hereinafter referred to as the "Operator").
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family secrets, as one of its most important goals and conditions for its activities.
1.2. This policy of the Operator regarding the processing of personal data (hereinafter referred to as the "Policy") applies to all information that the Operator may obtain about visitors to the website https://lsd.ru.
2. Basic Terms Used in the Policy
2.1. Automated processing of personal data – processing of personal data using computing technology.
2.2. Blocking of personal data – temporary cessation of the processing of personal data (except where processing is necessary to clarify personal data).
2.3. Website – a collection of graphic and informational materials, as well as software and databases, providing their accessibility on the Internet at the network address https://lsd.ru.
2.4. Personal data information system – a collection of personal data contained in databases and information technologies and technical means that ensure its processing.
2.5. Depersonalization of personal data – actions that result in it being impossible to determine the specific user or subject of personal data without additional information.
2.6. Processing of personal data – any action or set of actions performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
2.7. Operator – a government authority, municipal authority, legal or natural person that, independently or in conjunction with others, organizes and/or performs the processing of personal data, as well as determines the purposes of processing, the scope of personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal data – any information relating directly or indirectly to a specific or identifiable user of the website https://lsd.ru.
2.9. Personal data permitted by the personal data subject for distribution – personal data to which an unlimited circle of persons has access, granted by the personal data subject through consent in accordance with the Personal Data Law (hereinafter referred to as "personal data permitted for distribution").
2.10. User – any visitor to the website https://lsd.ru.
2.11. Provision of personal data – actions directed at disclosing personal data to a specific person or group of persons.
2.12. Distribution of personal data – any actions directed at disclosing personal data to an indefinite group of persons, including making personal data public in the media, placing it in information and telecommunication networks, or providing access in any other way.
2.13. Cross-border transfer of personal data – the transfer of personal data to a foreign country, foreign governmental body, foreign individual, or foreign legal entity.
2.14. Destruction of personal data – actions resulting in the permanent elimination of personal data, making it impossible to recover personal data in the personal data information system and/or physical media of personal data.
3. Main Rights and Obligations of the Operato
3.1. The Operator has the right to:
-Obtain reliable information and/or documents from the personal data subject containing personal data;
-Continue processing personal data without the subject's consent if necessary according to the Personal Data Law;
-Independently determine the measures needed to ensure compliance with the Personal Data Law unless otherwise required by federal law.
3.2. The Operator is obliged to:
-Provide the subject with information regarding the processing of their personal data upon request;
-Organize the processing of personal data in accordance with current Russian legislation;
-Respond to requests and inquiries from data subjects and their legal representatives;
-Provide the authorized body for personal data protection with the necessary information within 10 days of receiving a request;
-Publish or otherwise provide unrestricted access to this Policy regarding the processing of personal data;
-Take legal, organizational, and technical measures to protect personal data;
-Cease the transfer, processing, and destruction of personal data in accordance with the Personal Data Law.
4. Main Rights and Obligations of Personal Data Subjects
4.1. Personal data subjects have the right to:
-Access information regarding the processing of their personal data, except as provided by federal law;
-Demand that the Operator clarify, block, or destroy their data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated processing purpose;
-Withdraw consent to the processing of their personal data;
-Appeal to the authorized personal data protection authority or court against unlawful actions or inaction by the Operator;
-Exercise other rights as provided by Russian law.
4.2. Personal data subjects are obliged to provide the Operator with accurate data about themselves and to notify the Operator of any updates to their personal data.
4.3. Individuals providing inaccurate data about themselves or others without consent are responsible in accordance with Russian law.
5.Principles of Personal Data Processing
5.1. Processing of personal data is carried out lawfully and fairly.
5.2. Processing is limited to specific, predefined, and lawful purposes.
5.3. Personal data that does not serve the purposes of collection is not subject to processing.
5.4. Only personal data that meets the purposes of processing is subject to processing.
5.5. The content and volume of processed data are consistent with the stated purposes of processing.
5.6. Processing ensures accuracy, adequacy, and relevance of personal data relative to the purposes of processing.
5.7. Personal data is stored in a form that allows the identification of the personal data subject only for as long as necessary to fulfill the purposes of processing.
6. Purposes of Personal Data Processing
Purpose of Processing: Consultation and provision of services offered by LLC "LSD"
Personal Data Processed: Basic browser and device information necessary for the correct functioning of the website
Legal Basis: Founding documents of the Operator
Types of Data Processing: Data processing for optimal website display and personalization of content (e.g., website language settings)
7. Conditions for Personal Data Processing
7.1. Processing is carried out with the consent of the personal data subject.
7.2. Processing is necessary to fulfill obligations under a contract to which the personal data subject is a party.
7.3. Processing is necessary for judicial, executive, or other purposes as required by Russian law.
7.4. Processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, provided it does not violate the subject’s rights and freedoms.
7.5. Publicly available personal data is processed according to federal law.
8. Procedure for Collecting, Storing, Transmitting, and Other Types of Personal Data Processing
The security of personal data processed by the Operator is ensured by implementing legal, organizational, and technical measures.
8.1. The Operator ensures the confidentiality of personal data.
8.2. Personal data will not be transferred to third parties except as required by law or with the subject’s consent.
8.3. Users can update their personal data by notifying the Operator at lsd@contact.ru.
8.4. The processing period of personal data is determined by the purpose of its collection.
9. List of Actions Performed with Received Personal Data
9.1. The Operator collects, records, organizes, accumulates, stores, clarifies, retrieves, uses, transmits, depersonalizes, blocks, deletes, and destroys personal data.
9.2. Automated processing of personal data may occur through information and telecommunications networks.
10. Cross-Border Transfer of Personal Data
10.1. The Operator must notify the authorized body before cross-border data transfer.
10.2. The Operator must obtain necessary information from foreign authorities before proceeding.
11. Confidentiality of Personal Data
The Operator and other persons who gain access to personal data must not disclose personal data without the subject’s consent unless otherwise required by law.
12. Final Provisions
12.1. Users can request clarifications on personal data processing by contacting the Operator at lsd@contact.ru.
12.2. This Policy will reflect any changes in personal data processing.
12.3. The current version of the Policy is freely available at https://lsd.ru/privacy-policy.
