General provisions
This document is a consequence of https://7piers.com/ (hereinafter referred to as the Company) in relation to the processing and confidentiality of planetary data and information and sets out the main principles in relation to the processing of information in the Organization. The company also collects information about users.
The Policy governs the relationship between the Company and:
(1) in relation to individuals (the applicant, the employee representing the client and other persons detained in paragraph 3 of the Policy) for the processing of tourism data provided to individuals;
(2) a private private entrepreneur, individual and legal entity, users of 1C-Bitrix software products and sites (hereinafter referred to as the User) for the processing of personal information provided by the User and / or information collected from the User.
The effect of the Policy is evaluated for all operations for the processing of Personal Data, amounts in the total amount, as well as for the entire set of data that I and / or its affiliates or other authorized persons acting on behalf of the Owner receive about the Use during the use of any of the 1C products - Bitrix.
Mandatory for familiarization and execution by all persons admitted to the processing of vegetation data in general, as well as by persons participating in organizations for processing and ensuring the security of data on resources in general.
The use of unique access to the Policy is implemented by publishing it on sites on the Internet at https://7piers.com/agreement/ (hereinafter referred to as the Site).
Application for initiation of a criminal case on the facts:
- changes in the legislation of the Russian Federation on French data;
- identification of inconsistencies, penetration of processing and (or) environmental protection, based on the results of control of environmental protection and (or) environmental protection;
- by decision of the Company's management.
Basic terms
(1) Personal data (PD) - any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data);
(2) User Content - any information posted/uploaded (contributed) by the User to the site, including:
(a) personal data of clients / employees and other persons in respect of which the User acts as an operator or processor;
(b) data that is stored and processed through the use of the site, such as text, text messages, documents, voice and video media, images, e-mail text messages, etc.
(3) Personal information - information (including, but not limited to, User Content, Personal Data) that the user independently provides to the Company when performing actions aimed at registering on the site (including activation) or as part of their use (in including creating an account, contacting support). Information is provided by the User filling out the relevant forms, while the amount of information provided when filling out the optional fields of these forms is determined by the User independently.
(4) Site Products - services, programs and products of the Site, the use of which may require the provision of personal data.
This Policy may use other terms not defined above, the interpretation of which will be made in accordance with the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data" (hereinafter referred to as the Law).
Processing of Personal Data by the Company as an Operator
3.1. Legal Basis for the Processing of Personal Data
(1) applicants for filling vacant positions - in the composition and within the timeframe necessary for the Company to make a decision on hiring or refusing to hire, with the consent of the subjects of personal data;
(2) employees who are or were in an employment relationship with the Company - in the composition and on time, both with the consent of the subject and, if necessary, to achieve the goals provided for by the legislation of the Russian Federation, to exercise and fulfill the functions, powers and duties assigned by the legislation of the Russian Federation to the Company, and also for the conclusion and execution of an agreement, the party to which or the beneficiary or guarantor of which is the subject of personal data, the provision of benefits, compensation and additional guarantees at the expense of the Company, in order to realize the legitimate interest of the Company;
(3) relatives of the Company's employees - in the composition and for the period necessary to achieve the goals stipulated by the legislation of the Russian Federation, to exercise and fulfill the functions, powers and duties assigned to the Company by the legislation of the Russian Federation, as well as to provide the Company's employees with additional guarantees, compensations and benefits;
(4) foreign employees of the Company (hereinafter referred to as "expats") - in the composition and within the timeframe necessary to achieve the goals stipulated by the legislation of the Russian Federation, to exercise and fulfill the functions, powers and duties assigned to the Company by the legislation of the Russian Federation, to assist expats in obtaining invitations, visas and for migration registration, obtaining a work permit, a patent, as well as for concluding and executing an agreement to which the personal data subject is a party or beneficiary or guarantor, including for the purpose of providing insurance with the consent of the personal data subjects data;
(5) relatives of the Company's expats - in the composition and within the timeframe necessary to achieve the goals stipulated by the legislation of the Russian Federation, to exercise and fulfill the functions, powers and duties assigned to the Company by the legislation of the Russian Federation, to assist in issuing invitations, visas and for migration registration , exercising the rights and legitimate interests of the Company, as well as for the conclusion and execution of an agreement to which the personal data subject is a party or beneficiary or guarantor, including for the purpose of providing insurance with the consent of the personal data subjects;
(6) persons involved in accidents - in the composition and within the timeframe necessary to achieve the goals stipulated by the legislation of the Russian Federation, to exercise and fulfill the functions, powers and duties assigned by the legislation of the Russian Federation to the Company;
(7) office visitors - in the composition and within the timeframe required for a single pass of the PD subject to the territory of the Company's office;
(8) clients, representatives of potential and existing clients - in the composition and within the timeframe necessary for interacting with potential and existing clients, concluding, executing, amending and terminating an agreement to which the PD subject is a party, achieving the goals provided for by the law of the Russian Federation, implementing and the fulfillment of the obligations imposed by the legislation of the Russian Federation on the Company, the implementation of information support, the provision of services via the Internet, in order to conduct statistical or other research activities, conduct consultations, carry out information and advertising mailings with the consent of the subject of personal data, conduct marketing research;
(9) partners and representatives of partners - in the composition and within the timeframe necessary to interact with potential and existing partners, conclude, execute, amend and terminate an agreement to which the subject of the PD is a party, achieve the goals provided for by the law of the Russian Federation, implement and fulfill the assigned by the legislation of the Russian Federation on the Company of obligations, implementation of information support, provision of services via the Internet, in order to conduct statistical or other research activities, conduct consultations, carry out information and advertising mailings with the consent of the subject of personal data, conduct marketing research, realize the legitimate interest of the Company (verification of partners );
(10) partners' clients - in the composition and the period necessary to collect data on entities that have passed certification;
(11) users of the Company's websites - in the composition and for the period necessary to provide information support, provide an opportunity to use the company's website;
(12) participants of webinars / seminars and conferences - in the composition and for the period necessary to provide access to the Company's event, carry out statistical and other research activities, conduct marketing research and send information and promotional materials with the consent of the subject of personal data;
(13) counterparties and representatives of counterparties - in the composition and within the timeframe necessary for interaction with counterparties, for the conclusion, execution,
amendment and termination of an agreement to which the PD subject is a party or beneficiary, in order to achieve the goals provided for by the law of the Russian Federation, the implementation and the fulfillment of the functions, powers and obligations assigned by the legislation of the Russian Federation to the Company, the processing of personal data is necessary for the implementation of the rights and legitimate interests of the operator (verification of counterparties);
(14) participants of the Olympiads - in the composition and within the timeframe necessary for conducting competitive tests (Olympiads), paying remuneration for winning the Olympiads (taking prizes), achieving the goals stipulated by the law of the Russian Federation, exercising and fulfilling the obligations imposed by the legislation of the Russian Federation on the Company, implementation of information and advertising mailings with the consent of the subject of personal data;
(15) representatives of authorized bodies - in the composition and terms necessary to achieve the goals stipulated by the law of the Russian Federation, the implementation and implementation of the functions, powers and duties assigned by the legislation of the Russian Federation to the Company, the formation of responses to requests from authorized bodies.
3.1.2. The company does not process biometric personal data
3.1.3. The Company processes special categories of personal data of persons involved in accidents, employees and expats (health data in the framework of labor relations). At the same time, the Company complies with the requirements for the processing of special categories of personal data provided for by the Law and the Labor Code of the Russian Federation.
3.1.4. The terms for processing personal data are determined taking into account:
(1) the established purposes for processing personal data;
(2) the duration of contracts with personal data subjects and/or consents of personal data subjects to the processing of their personal data;
(3) the terms determined by the Order of the Ministry of Culture of the Russian Federation dated August 25, 2010 No. 558 “On Approval of the “List of Typical Management Archival Documents Formed in the Process of Activities of State Bodies, Local Self-Government Bodies and Organizations, Specifying the Storage Periods”.
3.2. Principles, procedure and conditions for the processing of personal data in the Company
3.2.1. The Company processes Personal Data on a lawful and fair basis.
3.2.2. When processing Personal Data, their accuracy, sufficiency, relevance in relation to the purposes of Personal Data Processing are ensured.
3.2.3. The Company does not make decisions that give rise to legal consequences in relation to the subject of Personal data or otherwise affect his rights and legitimate interests, based solely on automated processing of personal data.
3.2.4. The Company carries out the Processing of Personal Data using automation tools and without their use. At the same time, the Company complies with the requirements for automated and non-automated processing of personal data provided for by the Law and regulations adopted in accordance with it.
3.2.5. The Company entrusts the Processing of Personal Data to other persons. At the same time, the Company fulfills all the requirements for commissioning the processing of personal data provided for by the Law.
3.2.6. The Company does not disclose or distribute Personal Data to third parties, except in the following cases:
(1) The PD subject has expressed its consent to such disclosure in advance.
(2) The transfer is necessary for the performance of an agreement to which the Personal Data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement initiated by the Personal Data subject or an agreement under which he will be the beneficiary or guarantor.
(3) The transfer is necessary to protect the rights and legitimate interests of the Company or third parties;
(4) The transfer is necessary for connection and/or registration of third-party software products (see the section Catalog of Third-Party Applications "Applications") in the name of the User or the organization whose interests the User represents.
(5) The transfer is necessary for the administration of justice, the execution of a judicial act, an act of another body or official subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings or in other cases provided for by the current legislation of the Russian Federation.
3.2.7. In order to ensure the proper fulfillment by the Company of its obligations to the User to provide access to the site, ensuring their stable operation, the Company carries out cross-border transfer of personal data of Site Users via the encrypted HTTPS protocol using SSL certificates to the territory of Ireland (a country that has ratified the Convention for the Protection of the Rights of Individuals). persons in the automated processing of personal data of January 28, 1981 ETS No. 108 and recognized by a country that provides adequate protection of personal data).
3.3. Conditions and restrictions on the processing of personal data permitted by the subject for distribution.
3.3.1. The Operator, on the basis of a separate consent of the subject of Personal data, processes certain categories of Personal data permitted by the subject for distribution and granting access to an unlimited number of persons by posting them on the Site: https://7piers.com/, including in widgets and section "Support"; in chats of "Open Lines" of support; in presentations, articles; in photo, audio and other works; in advertising on the Internet; in social networks - in official groups or accounts.
3.3.2. Personal data is placed for the purpose of (1) increasing the loyalty of users of the Sites and software products of the 1C-Bitrix family;
(2) formation of a positive attitude of users towards the products of the 7Piers family;
(3) promotion of 7Piers family products,
(4) as well as any goods, works and services related to the said products.
3.3.3. The processing is carried out during the period of validity of the consent of the subject of the Personal Data permitted for dissemination.
3.4. Rights of Personal Data Subjects
3.4.1. The subject of Personal data has the following rights:
(1) The right to receive information regarding the processing of his Personal Data;
(2) The right to clarify, block or destroy data if the Personal Data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing;
(3) The right to revoke previously granted consent to the processing of Personal Data.
3.4.2. In order to exercise the right to withdraw consent to the processing of Personal Data, it is necessary to send a corresponding notice to the Company's email address [email protected] marked "Withdrawal of consent to the processing of personal data". Termination of the Processing of Personal Data by the Company may make it impossible to continue using the site. The Company terminates the Processing of Personal Data within 30 days, unless the Company has the right to continue the Processing of Personal Data if there are grounds established by the legislation of the Russian Federation (clauses 2-11, part 1, article 6, part 2, article 10 and part 2 article 11 of the Federal Law No. 152-FZ of July 27, 2006 "On Personal Data").
3.4.4. To comply with the provisions in clause 3.4.1. and 3.4.3. It may be required by Company policy to confirm the identity of the subject of Personal Data by requesting the provision of such confirmation in any form consistent with the law.
3.5. Fulfillment of the obligations of the operator by the Company
3.5.1. In order to ensure the fulfillment of the obligations stipulated by the Federal Law of the Russian Federation “On Personal Data” No. 152-FZ dated July 27, 2006 and the regulatory legal acts adopted in accordance with it, the Company has taken the following measures:
(1) a person responsible for organizing the processing of personal data has been appointed;
(2) local acts were issued on the processing and security of personal data, as well as local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation, eliminating the consequences of such violations: Regulations on the processing of personal data; this Policy; other local acts on the processing and security of personal data;
(3) legal, organizational and technical measures have been taken to ensure the security of personal data;
(4) internal control over the compliance of the processing of personal data with the requirements of the Law and the regulatory legal acts adopted in accordance with it, this Policy, local acts of the Company is carried out;
(5) an assessment was made of the harm that may be caused to personal data subjects in the event of a violation of the requirements of federal legislation on personal data, the ratio of the specified harm and the measures taken by the Company aimed at ensuring the fulfillment of the obligations stipulated by the requirements of the Law and the regulatory legal acts adopted in accordance with it ;
(6) the employees of the Company directly involved in the processing of personal data are familiar with the provisions of the Law and the regulatory legal acts adopted in accordance with it, this Policy and local acts of the Company on the processing of personal data.
3.5.2. As the Operator of the Company, the following measures are implemented to ensure confidentiality and security in the Processing of Personal Data:
(1) A security regime has been organized for the premises where information systems are located, preventing the possibility of uncontrolled entry or stay in these premises of persons who do not have the right to access these premises;
(2) The head of the Company approved a document defining the list of persons whose access to personal data processed in the information system is necessary for the performance of their official (labor) duties;
(3) Information security tools are used that have passed the procedure for assessing compliance with the requirements of the legislation of the Russian Federation in the field of information security;
(4) The requirements established by Decree of the Government of the Russian Federation dated September 15, 2008 No. 687 “On Approval of the Regulations on the Specifics of Personal Data Processing without the Use of Automation Tools” have been implemented.
3.6. Procedure for terminating the Processing of Personal Data
3.6.1. The Company stops processing personal data in the following cases:
(1) upon the occurrence of conditions for the termination of the processing of personal data or after the expiration of the established deadlines;
(2) upon the achievement of the purposes of their processing or in the event that it is no longer necessary to achieve these purposes;
(3) at the request of the subject of personal data, if the personal data processed by the Company is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing;
(4) in the event of unlawful processing of personal data, if it is impossible to ensure the legality of the processing of personal data;
(5) in case of withdrawal by the personal data subject of consent to the processing of his personal data or the expiration of such consent (if personal data is processed by the Company solely on the basis of the consent of the personal data subject);
(6) in the event of liquidation of the Company.
Processing of personal data by the Company as a Processor
4.1 Legal grounds for the processing of personal data as a Processor
4.1.1. With regard to personal data posted by the User on the site in accordance with its / their functionality, the User is the owner and / or operator or processor of the specified personal data.
In doing so, the Company:
does not identify/isolate personal data in the User Content;
carries out processing in the form of storage of User Content and distributes the security and confidentiality regime in accordance with the User's instructions set out in the Order for the processing of personal data.
4.1.2. When placing (for the purpose of storing) personal data of third parties, the User guarantees that he has received all the necessary permissions and consents for these actions.
4.1.3. User Content is stored in accordance with the functional purpose of specific 7Piers Products, their technical documentation, as well as the license agreement for their use and instructions for the processing of personal data.
4.1.4. The Company is not responsible for the collection, storage and other processing of personal data by third party software included in the 7Piers Products.
4.2 Measures to ensure the confidentiality of User Content
4.2.1. 7Piers takes the necessary legal, organizational and technical measures or ensures that they are taken to protect User Content from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution.
4.2.2. The Company does not initiate the placement of User Content when using the site, does not control its accuracy and relevance, however, the Company reserves the right to require confirmation of the accuracy of the information transmitted to him by the User.
4.2.3. The Company does not guarantee the confidentiality of the User Content, public access to which is provided by the User himself due to the functional purposes of the relevant site; The User agrees that when using the site (for example, the "forum" section on the Company's website), a certain part of his User Content becomes available to an unlimited circle of people.
4.2.4. has all the necessary premises and equipment, production and material resources for the independent performance of its obligations under the Contract, including personnel of appropriate qualifications with duly formalized labor relations. In the absence of the above resources, the Counterparty undertakes to obtain permission from the Company to engage third parties to perform obligations under the Agreement, and provide, at the first request of the Company, all necessary information, including confirmation of all guarantees provided for by the Terms and the Agreement, in relation to such third parties.
Collection and processing of cookies
5.1. When the User visits the Sites, data may be stored in his browser, or the browser may transmit such data, mainly in the form of cookies. Such data usually does not directly identify the User, but may provide the Company with a personalized Internet experience.
5.2. Cookies are small text files placed on a storage device and read by a web server in the domain in which they were created. We use cookies to store and maintain your preferences and settings for logging in, providing relevant advertising, anti-fraud, analyzing how our products work, and performing other lawful procedures.
5.3. The user can change the behavior of cookies by changing the settings of his web browser. However, this may result in some inconvenience when using the Site. For example, you can use web browser controls to limit the use of cookies by websites and revoke consent to their use.
5.4. All data collected by these cookies is aggregated and therefore anonymous.
5.5. The Company provides access to the received non-personalized data to contextual advertising and remarketing services Google Ads and Yandex Direct, Facebook Pixel / Google Tag Manager in order to show the User the most appropriate advertising for his interests, as well as Google Analytics and Yandex Metric statistics services in order to improve our Sites and advertising campaigns.
Final provisions
6.1. This Policy may be changed by the Company unilaterally by posting its new version on the Internet at https://7piers.com/agreement/
6.2. Contact information of the Company:
Email: [email protected]