1. General provisions
1.1. This document (hereinafter - "Policy") defines the policy of LLC
"Altai Eco Product" (hereinafter - the "Operator") in relation to the processing of personal data and contains, in addition to
other information about the requirements for the protection of personal data implemented by the Operator.
1.2. The policy was approved and published on the website https://altay-eco.shop/ , (hereinafter -
"Site") in pursuance of the Operator provided for in Part 2 of Article 18.1 of the Federal Law of 27.07.2006
N 152-FZ "On Personal Data" (hereinafter - "Federal Law") obligations to publish in
information and telecommunications network of the document defining the Operator's policy in relation to
processing of personal data, and information about the requirements for the protection of personal data, and
also to ensure the possibility of access to the specified document using the means of the appropriate
information and telecommunication network.
1.3. The policy was developed taking into account the requirements of the legislation
Of the Russian Federation in the field of personal data. The terms used in the Policy should be understood in
the meaning defined for them in the Federal Law, unless otherwise expressly stated in the Policy.
1.4. The policy is available to any Internet user when navigating
link https://altay-eco.shop/ .
1.5. The operator processes the personal data of users taking into account
the following principles:
- the processing of personal data is carried out by the Operator on a legal and
fair basis;
- the processing of personal data is limited to the achievement of specific,
predetermined and legitimate purposes. The operator is not allowed to process personal data,
incompatible with the purposes of collecting personal data;
- it is not allowed to merge databases containing personal data,
the processing of which is carried out for purposes incompatible with each other;
- only personal data that
meet the purposes of their processing;
- content and volume of personal data processed by the Operator
correspond to the stated purposes of processing. The processed personal data is not redundant
in relation to the stated purposes of their processing;
- accuracy must be ensured when processing personal data
personal data, their sufficiency, and, if necessary, relevance in relation to the goals
processing of personal data.
The operator takes the necessary measures to remove or clarify incomplete
or inaccurate data;
Personal data is stored in a form that allows
determine the subject of personal data, no longer than required by the purpose of processing personal
data, if the storage period for personal data is not established by federal law, agreement, party
which, the beneficiary or guarantor of which is the subject of personal data.
The processed personal data are subject to destruction or depersonalization upon achievement of the processing goals
or in case of loss of the need to achieve these goals, unless otherwise provided by federal
law.
2. The rights of the subject of personal data to access his personal
data
2.1. The personal data subject has the right to receive the following
information:
- confirmation of the fact of personal data processing by the Operator;
- legal grounds and purposes of personal data processing;
- purposes and methods of processing used by the Operator
- personal data;
- name and location of the Operator, information about persons (for
excluding the Operator's employees) who have access to personal data or who may be
disclosed personal data on the basis of an agreement with the Operator or on the basis of a federal
law;
- processed personal data related to the respective
to the subject of personal data, the source of their receipt, unless another procedure for submitting such data is
provided by federal law;
- terms of processing personal data, including the terms of their storage;
- the procedure for exercising rights by the subject of personal data,
stipulated by the Federal Law;
- information about implemented or proposed cross-border
data transmission;
- name or surname, name, patronymic and address of the person carrying out
processing of personal data on behalf of the Operator, if the processing is entrusted or will be entrusted
to such a person;
- other information provided by the legislation of the Russian Federation.
2.2. The right of the subject of personal data to access his personal
data may be limited in cases stipulated by the legislation of the Russian Federation.
3. Requirements for the protection of personal data implemented by the operator
3.1. The operator uses a personal data protection system that neutralizes the current threats identified in accordance with the Federal Law. The personal data protection system includes organizational and technical measures determined taking into account the current threats to the security of personal data and information technologies used in information systems.
3.2. The operator ensures an appropriate level of protection of personal
data processing.
