Privacy policy

1. General Provisions

1.1. This policy on personal data processing (hereinafter – the Policy) has been drawn up in accordance with the requirements of the Federal Law of the Russian Federation “On personal Data” No 152-FL paragraph 2 part 1, article 18.1 dated July 27, 2006 (hereinafter – the Law) and defines the position of LLC “Insight Expo” PSRN 1197746332695 (hereinafter – the Operator) in terms of processing and protection of personal data.

1.2. Basic concepts used in the Policy:
– Personal data is any information related directly or indirectly specific or identifiable individual(citizen);
– Personal data subject is any capable individual(in respect of whom the Operator processes personal data) whose personal data is processed by the Operator;
– Processing of personal data is any action (operation) or set of actions (operations) with personal data performed with and without automation tools. Such actions (operations) are the following: collection, receiving, recording, systematization, storage, refinement (update, changing), mining, usage, transfer (diffusion, provision, access), anonymization, blocking, deletion, destruction of personal data;
– Website is a web resource obtained by the Operator at www.insightexpo.com;
– A website user(User) – any visitor to the Website, including but not limited, by means of submitting the Application;
– Application is an expression of the User’s will to consider the possibility of purchasing the Operator’s services or works with the purpose of concluding a contract with the Operator.
1.3. The Policy is applied to the processing of personal data which the Operator may receive in the course of and as a result of interaction with the User, in particular in the course of using the Website, as well as any other means of communication with the Operator.
1.4. By submitting an Application on the Website, the User provides consent to the processing of their personal data in accordance with the terms and conditions stipulated by the Policy and the current legislation of the Russian Federation. The use of the Site by the User also means their unconditional consent to the Policy and the terms of personal data processing specified therein. If the User does not agree with the terms of this Policy, the User should refrain from using the Site.
1.5. The Policy applies to personal data collected both before and after this Policy is put into effect.

2. Purposes and legal grounds for processing personal data

2.1 Processing of personal data is subject to legal grounds for such processing, in particular:
– the consent of the User, expressed in any form that allows to confirm the fact of obtaining consent, including by the means specified in paragraph. 1.4. hereof;
– personal data processing is necessary for performance of the contract, to which the User is a party, as well as for conclusion of the contract on the initiative of the User;
– personal data processing is necessary for the implementation and performance of the functions, powers and duties assigned to the Operator by the legislation of the Russian Federation;
– personal data processing is necessary for the execution of rights and legitimate interests of the Operator (e.g. processing of cookies for the purposes of proper functioning of the Site and its improvement).

2.2 The Operator processes the User’s personal data only in case when the User provides it(filled in and (or) sent ) through a special form on the Website or in other cases when the User submits their data to the Operator to make an Application or other actions related to the conclusion, execution or termination of the contract.

2.3. The Operator processes the User’s anonymised data if it is allowed in the User’s browser settings.

2.4. TheOperator Processes the User’s Personal Data for the following purposes:
– to form and send a commercial offer in the User’s Application, to conclude and/or execute any contract between the Operator and the User or between the Operator and a third party, whose interests are represented by the User;
– to exercise the rights and legitimate interests of the Operator or third parties or to achieve socially significant purposes, provided that the rights of the User are not violated;
– for statistical or other marketing and research purposes, subject to mandatory anonymisation of personal data.

3. Categories of Personal Data processed

3.1. The Operator processes the following categories of Users’ Personal Data: last name, name, patronymic, phone number, e-mail address, cookies. By visiting the Website, the User agrees to the processing of cookies by the Operator until they change/restrict the use of cookies in the settings of their browser.

3.2. The Operator automatically receives certain types of information in the course of Users’ interaction with the Site, through the use of technologies and services such as web protocols, cookies, webtags, as well as third party applications and tools.
In this case, web tags, cookies and other monitoring technologies do not allow you to automatically receive personal data. If the User of the Website at their discretion provides their personal data, for example, when completing the Application, then only then the processes of automatic collection of detailed information for the convenience of using the websites and (or) to improve interaction with Users are launched.

4. Procedure for processing personal data

4.1. The Operator does not process personal data concerning race, nationality, political views, religious, philosophical and other beliefs, state of health, personal life, membership in public associations, including trade unions or biometric data.

4.2. The operator processes personal data using databases located in the Russian Federation and does not transfer personal data across borders.
4.3. The Operator has the right to entrust the processing of personal data to third parties with the consent of the User on the basis of the contract concluded with such third parties for the processing of Users’ requests.

4.4. Persons processing personal data on the basis of the contract concluded with the Operator, undertake to comply with the principles and rules of processing and protection of personal data, provided by the current legislation of the Russian Federation. For each third party, the contract shall specify the list of actions (transactions) with personal data and the purposes of processing to be performed by the third party processing personal data. This third party is also obliged to respect the confidentiality and security of personal data when processing them. Requirements for the protection of personal data processed are specified in accordance with the current legislation of the Russian Federation.

4.5. The Operator has the right to transfer personal data to third parties with the consent of the subject of personal data in the following cases:
4.5.1 In order to protect the rights and legitimate interests of the Operator or third parties in cases where the subject of personal data violates any terms and conditions of the user documents of the Site and (or) of this Policy.

4.5.2 According to a court decision that has entered into force or in cases stipulated by the current legislation of the Russian Federation:
4.6 The operator has the right to transfer personal data to third parties in cases where the possibility of transferring personal data to third parties is expressly provided by the legislation of the Russian Federation and does not require the consent of the subject of personal data.

4.7 In order to meet the requirements of the current legislation of the Russian Federation and its contractual obligations, the Operator shall process personal data both with and without the use of automation tools. The set of processing operations includes collection, recording, systematisation, accumulation, storage, clarification (updating, modification), extraction, use, transfer (granting, access), anonymisation, blocking, deletion, destruction of personal data. The Operator may only process personal data authorised by the User for dissemination if proper consent is obtained or if there are legal grounds, as well as if other requirements of the Law are met.

4.8 The Operator does not check and, as a rule, does not have the opportunity to check the relevance and reliability of the information provided by the User, received through the Website. The Operator assumes that the User, acting reasonably and in good faith, provides reliable and sufficient personal data and maintains its up-to-date state.

5. The User’s rights

5.1 The User has the right:
5.1.1 At any time, change (update, supplement) the personal data provided by them by contacting the Operator by any available means (by filling out the Application, by sending an e-mail, etc.).
5.1.2 Delete the personal data provided by sending a written notice to the Operator indicating the personal data to be deleted.
5.1.3 Receive information from the Operator regarding the processing of their personal data.
5.1.4 Require that the Operator clarify, block or destroy personal data if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing.
5.1.5 To withdraw their consent to the processing of personal data at any time by sending a written notice to the Operator’s address. Upon receipt of such notice, the processing of the User’s personal data will be terminated and their personal data will be deleted, except for cases when the processing may be continued in accordance with the legislation of the Russian Federation.
5.2. The Rights under para. 5.1. of this Policy may be restricted in accordance with the requirements of the legislation of the Russian Federation and (or) in cases when the Operator performs processing of personal data on legal grounds other than the consent of the User.

6. Obligations of the Operator

6.1 In accordance with the requirements of the Law, the Operator shall:
6.1.1 To provide the User, upon request, with information relating to the processing of their personal data, or to provide a legal refusal within thirty days from the date of receipt of the User’s request.

6.1.2 Upon request of the User to clarify, block or delete the processed personal data, if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing within the term, not exceeding seven working days from the date of submission by the User of information confirming these facts.

6.1.3 If the User withdraws consent to the processing of personal data, the Operator shall terminate the processing of personal data and destroy the personal data within a period not exceeding thirty days from the date of receipt of the said withdrawal, unless otherwise provided by agreement between the Operator and the User.

7. Personal Data Protection

7.1. The Operator, when processing personal data, takes the necessary legal, organisational and technical measures to protect personal data from unlawful and (or) unauthorised
access to it, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions in relation to the personal data of the User.

8. The terms of processing (storage) of Personal Data

8.1. The processing time for personal data is determined on the basis of the purposes of processing personal data and the user’s consent in accordance with the validity period of the contracts with the User and the requirements of the legislation of the Russian Federation:
– personal data of Users, who have left the Application, shall be kept for three years from the date of sending the Application, unless another storage period arises from the term of the contract with the User or other person whose interests are represented by the User;

– personal data of other persons applying to the Operator for the alleged violation of their rights shall be kept for the entire period of processing and consideration of the respective claims, as well as for three years from the date of completion of processing and (or) processing of the claim, if the legislation of the Russian Federation does not provide for another period of limitation for the relevant disputes.

9. Other provisions

9.1. The Operator may periodically make changes to this Policy, including to reflect changes in the scope of services provided by the Operator or changes in the functionality of the Site, as well as changes in the legislation of the Russian Federation. The new version of the Policy shall enter into force on the date of its publication unless it specifies another date of entry into force.