1. General provisions

1.1. This document (hereinafter - "Policy") defines the policy of LLC "Altai Eco Product" (hereinafter - the "Operator") in relation to the processing of personal data and contains, in addition to other information about the requirements for the protection of personal data implemented by the Operator.

1.2. The policy was approved and published on the website https://altay-eco.shop/ , (hereinafter - "Site") in pursuance of the Operator provided for in Part 2 of Article 18.1 of the Federal Law of 27.07.2006 N 152-FZ "On Personal Data" (hereinafter - "Federal Law") obligations to publish in information and telecommunications network of the document defining the Operator's policy in relation to processing of personal data, and information about the requirements for the protection of personal data, and also to ensure the possibility of access to the specified document using the means of the appropriate information and telecommunication network.

1.3. The policy was developed taking into account the requirements of the legislation Of the Russian Federation in the field of personal data. The terms used in the Policy should be understood in the meaning defined for them in the Federal Law, unless otherwise expressly stated in the Policy.

1.4. The policy is available to any Internet user when navigating link https://altay-eco.shop/ .

1.5. The operator processes the personal data of users taking into account the following principles:

• the processing of personal data is carried out by the Operator on a legal and fair basis;
• the processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. The operator is not allowed to process personal data, incompatible with the purposes of collecting personal data;
• it is not allowed to merge databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
• only personal data that meet the purposes of their processing;
• content and volume of personal data processed by the Operator correspond to the stated purposes of processing. The processed personal data is not redundant in relation to the stated purposes of their processing;
• accuracy must be ensured when processing personal data personal data, their sufficiency, and, if necessary, relevance in relation to the goals processing of personal data.

The operator takes the necessary measures to remove or clarify incomplete or inaccurate data;

Personal data is stored in a form that allows determine the subject of personal data, no longer than required by the purpose of processing personal data, if the storage period for personal data is not established by federal law, agreement, party which, the beneficiary or guarantor of which is the subject of personal data. The processed personal data are subject to destruction or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.

2. The rights of the subject of personal data to access his personal data

2.1. The personal data subject has the right to receive the following information:

• confirmation of the fact of personal data processing by the Operator;
• legal grounds and purposes of personal data processing;
• purposes and methods of processing used by the Operator
• personal data;
• name and location of the Operator, information about persons (for excluding the Operator's employees) who have access to personal data or who may be disclosed personal data on the basis of an agreement with the Operator or on the basis of a federal law;
• processed personal data related to the respective to the subject of personal data, the source of their receipt, unless another procedure for submitting such data is provided by federal law;
• terms of processing personal data, including the terms of their storage;
• the procedure for exercising rights by the subject of personal data, stipulated by the Federal Law;
• information about implemented or proposed cross-border data transmission;
• name or surname, name, patronymic and address of the person carrying out processing of personal data on behalf of the Operator, if the processing is entrusted or will be entrusted to such a person;
• other information provided by the legislation of the Russian Federation.

2.2. The right of the subject of personal data to access his personal data may be limited in cases stipulated by the legislation of the Russian Federation.

3. Requirements for the protection of personal data implemented by the operator

3.1. The operator uses a personal data protection system that neutralizes the current threats identified in accordance with the Federal Law. The personal data protection system includes organizational and technical measures determined taking into account the current threats to the security of personal data and information technologies used in information systems.

3.2. The operator ensures an appropriate level of protection of personal data processing.