I, in accordance with paragraph 4 of article 9, articles 6, 7, 8, 9, 10 of the Federal Law of 27.07.2006 №152-FZ "On Personal Data", give specific, substantive, informed, conscious and unambiguous consent to the processing of my personal data to the Limited Liability Company "DiDi", INN 7801579135, OGRN 1127847377052 (hereinafter - Operator) for the processing of my personal data.
My consent is expressed by using the site through any web browser that accepts cookies, filling out a feedback form, applying for a service, purchasing a product, or any other form/questionnaire on the Operator's website https://didigallery.com and all of its subdomains.
I understand that checking the box (the "checkmark") to the left of the phrase "I agree to the processing of my personal data in accordance with the Terms" or any other similar phrase, or clicking the corresponding "button" (for example, "Pay" or "Submit") on the website means my written consent to the conditions described in this Consent. I authorize the operator to carry out automated processing as well as processing without the use of automation of my personal data, namely: collection, recording, systematization, accumulation, storage, clarification (updating, changing), use, distribution (including transfer), anonymization, blocking, destruction of personal data.
List of my personal data to the processing of which I give consent:
First Name, Last Name, Patronymic,
Phone number
Email address (e-mail),
Passport details,
INN,
Shipping Address
Other information required when completing the questionnaire on the website or provided in any other way.
I agree that the Personal Data Operator has the right to use my data for purposes defined by the Privacy Policy and other documents governing the processing of personal data, as well as for the fulfillment of civil and other contracts, analysis of purchasing behavior and improvement of service quality, to provide me with information through any communication channels, including via SMS, email, and telephone. I consent to the transfer of personal data, including cross-border transfer, to third parties (in particular, those specified in the Appendix to the Agreement) and to receiving such data from third parties in cases established by current legislation and/or this consent. I confirm that I am familiar with the provisions of the Federal Law of the Russian Federation № 152-FZ "On Personal Data" of 07/27/2006 and the website's privacy policy. https://didigallery.com and all its subdomains, my rights and obligations in the field of personal data protection are clear to me. By expressing my consent, I confirm that I am acting of my own free will and in my own interest, and I undertake to provide accurate data. The period during which the consent is valid is determined (except in cases provided for by the legislation of the Russian Federation) by the expiration of the statute of limitations (the statute of limitations is determined in accordance with the norms of current legislation); by the date of receipt by the Operator of the User's consent withdrawal for processing of his personal data; by the termination (restriction) of the legal capacity of the Operator; or upon the occurrence of circumstances under which the processing of personal data must be terminated, in accordance with the requirements of the legislation of the Russian Federation. I confirm that I am aware that at any time during the entire validity period of this Consent, I have the right to withdraw my consent to this agreement by sending a request to the email address admin@didigallery.comI am informed that the Operator has the right to continue processing the User's personal data after the withdrawal of Consent, as well as after the expiration of the Consent period, in the presence of grounds specified in paragraphs 2-11 of part 1 of article 6, part 2 of article 10 and part 2 of article 11 of the Federal Law of the Russian Federation № 152-FZ "On Personal Data" of 27.07.2006.
Operator's Details
LIMITED LIABILITY COMPANY "DIDI"
INN 7801579135
OGRN 1127847377052
Date of OGRN assignment: 16.07.2012
Email address: admin@didigallery.com working hours: from 12:00 to 19:00 Moscow time
From this document (hereinafter - Policy) you will learn:
What are personal data;
For what purposes are they processed by the Limited Liability Company "DiDi" (hereinafter – the Operator);
To whom the Operator transfers personal data and how ensures their security.
This Policy applies to personal data processing relationships that have arisen with the Operator both before and after the approval of this Policy.
Personal data – these are any data by which a Personal Data Subject can be identified.
Counterparties – are individuals and legal entities with which the company has entered into a civil law contract, including employees (staff) of such entities, the sole executive body and other representatives.
Candidates – these are individuals who potentially could become employees of the company.
Website – the Operator's website https://didigallery.com
Website user — a natural person, to one degree or another using the functionality of the site.
You can familiarize yourself with other terms and definitions at the following link:
http://www.consultant.ru/document/cons_doc_LAW_61801/4f41fe599ce341751e4e34dc50a4b676674c1416
A. Purposes of personal data processing and the composition of personal data that the Operator receives and processes
Goals:
Client Identification
Email and phone number confirmation
Processing applications submitted from the website
Carrying out mailings, including of an advertising nature
Direction of documents and information in electronic form
Providing the website user with the ability to use the site's functionality.
Personal data:
Full Name
Email address
Phone number
Processing period: until the goal is achieved or consent to processing is withdrawn.
Destruction procedure: deletion from the database.
Goals:
Site administration and protection
Personal data:
IP;
browser type;
device type for website login;
User's geographical location;
User's region time;
information automatically obtained when accessing the Site using bookmarks (cookies - you can read about them in the appendix);
User's internet service provider;
data obtained as a result of access to the camera, microphone and other devices.
Processing period: until the purpose is achieved or consent to processing is withdrawn.
Destruction procedure: deletion from the database.
Goals:
Conclusion and fulfillment of civil law contracts
Providing feedback, consulting support
Service Quality Analysis
Target audience research
Personal data:
Full Name
Email address
Phone number
Order Information
Address
Other data that you provide to us
Processing period: until the purpose is achieved or consent to processing is withdrawn.
Destruction order: deletion from the database.
Goals:
Making a decision to conclude an employment contract with a candidate.
Personal data:
Full Name,
date and place of birth,
passport data or data of another document certifying identity,
,
address of actual place of residence,
address of registration at place of residence or stay,
marital status,
SNILS,
INN,
information about education,
work experience information,
contact details (e-mail, subscriber number),
any other information provided by the candidate at his own initiative for the stated purposes.
Processing period: until the goal is achieved or consent to processing is withdrawn.
Destruction procedure: deletion from the database.
Goals:
The implementation of the Operator's rights and obligations arising from labor relations, in particular, from the requirements of current legislation, the employment contract, as well as local regulatory acts.
Personal data:
Full Name,
date and place of birth,
passport data or data of another document confirming identity,
gender,
position,
employee number,
information about income,
bank details,
address of actual place of residence,
address of registration at place of residence or stay,
information about military registration,
marital status,
SNILS,
INN,
information about education,
work experience information,
contact details (e-mail, phone number),• any other information provided by the candidate at his own initiative for the stated purposes.
Processing period: until the purpose is achieved or consent to processing is withdrawn.
Destruction procedure: deletion from the database.
B. Procedure for processing personal data
The operator uses a mixed method of processing personal data (Processing of data by a person with the use of technology).
Processing periods of personal data
Start of processing: Date of consent to the processing of personal data.
Processing end time:
Date of withdrawal of consent to the processing of personal data;
Date of achieving the personal data processing goal;
Date of cessation of Operator's activities.
Bases for processing personal data
The operator will process your personal data if you:
Website user,
Subscribed to the mailing list or left their details in the feedback form,
You sign a contract with him,
Are you applying for an employment contract,
We have forwarded your complaint, application, or other appeal, or that of the person you represent.
The legal basis for processing personal data is a set of regulatory legal acts, in pursuance of which and in accordance with which the Operator processes personal data, including:
Constitution of the Russian Federation;
Civil Code of the Russian Federation;
Labor Code of the Russian Federation;
Tax Code of the Russian Federation;
Federal Law of 08.02.1998 N 14-FZ "On Limited Liability Companies";
Federal Law of 06.12.2011 N 402-FZ "On Accounting";
Federal Law of 15.12.2001 N 167-FZ "On Mandatory Pension Insurance in the Russian Federation";
other regulatory legal acts governing relations related to the activities of the Operator;
charter of LLC "Didi";
agreements concluded between the Operator and personal data subjects;
consent of personal data subjects to the processing of their personal data.
Operator Rights
The Operator has the right to carry out the following actions with your personal data:
collection,
recording,
systematization,
accumulation,
storage,
clarification (update, amendment),
use, transfer (distribution, provision, access),
removal,
destruction of personal data.
Operator
They won't verify the accuracy of your website users' data and
Does not check the legal capacity of Users and Counterparties.
The Operator may not transfer your data to third parties without your consent, except in cases where the law requires such transfer (for example, a court or police request). To fulfill contracts, the Operator may transfer data of Contractors and Employees to its partners, service providers, contractors, agents, and other parties who provide services to the Operator, for example, processing payments, data analysis, transportation services, email and hosting services, telecommunications operators, as well as customer service and support. These parties may access personal data and are required to use them solely at our direction for the provision of the services we have requested.
C. Procedure for ensuring data security
To ensure the protection of personal data during processing, the following legal, organizational, and technical measures have been taken to prevent unauthorized, unlawful, or accidental access to personal data, as well as their destruction, modification, blocking, copying, provision, distribution, and other unlawful actions in relation to personal data:
local documents have been developed that implement the requirements of Russian Federation legislation, including this policy, and its placement on the website;
rejection of any processing methods that do not comply with predetermined purposes;
limiting the circle of persons having access to personal data;
appointment of the person responsible for organizing the processing;
restricting the number of operator employees with access to personal data and organizing an authorization system for access to such data;
briefing and familiarization of the operator's employees engaged in processing with the provisions of the Russian Federation legislation on personal data, including the requirements for the protection of personal data, with the local acts of the operator regulating the procedure for processing personal data;
periodic risk assessment related to the processing procedure;
regular verification of processing compliance with the requirements of the legislation of the Russian Federation.
prevention, including through conducting internal investigations, of unauthorized access to systems in which personal data is stored;
backup and restoration of personal data, functionality of technical means and software, information protection tools in personal data information systems;
other necessary security measures.
In case of a leak, Operator:
Within 24 hours, Roskomnadzor will notify about this,
Within 72 hours, it will conduct its own investigation and notify Roskomnadzor about it.
For more information about security measures, you can read at the following link:
http://www.consultant.ru/document/cons_doc_LAW_61801/ca9e5658710519f09ab2fdb8196fcb3eb024a051
D. Rights of the personal data subject (website user).
The right to obtain from the Operator information about oneself that is stored by the Operator.
The right to update your data in case your data has changed or you provided it with
a mistake.
The right to block and delete his personal data.
The right to information about the processing of your personal data.
Right to withdraw consent.
The right to appeal the actions of the operator:
The subject has the right to appeal the actions (inaction) of the Operator by submitting a statement to Roskomnadzor or even to court.
You can read more about your rights at the following link: http://www.consultant.ru/document/cons_doc_LAW_61801/3ec53031c47840d320df01e8cfd03c8090c7a3fb
The subject gives their consent to the processing of personal data when:• Uses the Operator's website;
Fills out order forms for services, products, or newsletter subscriptions;
He himself provides the Operator with his data.
At any time, you may withdraw this consent to the processing of personal data by sending a request to the Operator in any form. The request should be sent to the email address: admin@didigallery.com It's important to remember that after you withdraw your consent, the Operator will no longer be able to provide you with services or deliver the product to you.
How to contact the operator?
For any inquiries and questions to the Operator, use the electronic address
mail: admin@didigallery.com
The operator will respond to you within 10 days.
Operator Details
LIMITED LIABILITY COMPANY "DIDI"
INN 7801579135
ОГРН 1127847377052
Date of OGRN assignment: 16.07.2012
Email address: admin@didigallery.com
working hours: from 12:00 to 19:00 Moscow time
Application:
1. Consent to the processing of personal data
2. Collection of non-personal information (cookies)
Collection of non-personal information (cookies)
1. Upon entering the website https://didigallery.com Some non-personal information (such as browser type, device type used to log in to the website, User's geographical location, time in the User's region and others) may be recorded automatically. This information is used to improve the query, content and functionality of the website and may be further used by the Operator or transferred to third parties.
2. The website may use cookies — these are small files temporarily stored on the hard drive that allow the User's computer to be recognized during subsequent visits to the site. The website uses cookies exclusively for the purpose of obtaining information about site usage. The data in cookies is anonymous and does not contain personal data.
3. The user can disable cookies or change the cookie settings for the browser.
4. The Operator is entitled to use the services of Yandex.Metrica. The User undertakes to familiarize themselves with the terms of operation of this service at the following address: Yandex.Metrica: https://yandex.ru/legal/confidential/
5. For general information about target cookies and how to disable them, visit www.allaboutcookies.org (in English, Spanish, German, and French).
© St. Petersburg, 2005, all rights reserved
