Free consultation

Privacy policy and processing of personal data of the website

Moscow "10" September 2023

This Personal Data Privacy Policy (hereinafter referred to as the Policy) applies to all information posted on the website on the Internet at the address: www.albelex.group (hereinafter referred to as the Site), which can be obtained about visitors, other users and other persons while using the Site, its services, programs and products.
Use of the Site’s services means the User’s unconditional consent to this Policy and the conditions for processing his personal information specified therein; in case of disagreement with these conditions, the User must refrain from using the services.
The privacy policy on working with personal data of clients, contractors and site users was developed in accordance with the Constitution, the Labor Code, Federal Law dated July 27, 2006 No. 152-FZ, Federal Law dated December 30, 2020 No. 519-FZ, Federal Law dated April 6, 2011 No. 63-FZ "On Electronic Signature" and other regulatory legal acts in force in Russia.
Whenever possible, the Policy also takes into account sections of other legislation applicable to the site’s activities in the field of personal data processing, for example, the European General Data Protection Regulation (hereinafter referred to as GDPR), or local legislation of individual countries to the extent that does not contradict 152-FZ.

1. GENERAL PROVISIONS

1.1. Within the framework of this Policy, the User’s personal information means:
1.1.1. Personal information that the User provides about himself independently when registering (creating an account) or in the process of using the Services, including the User’s personal data. Information required for the provision of Services is marked in a special way. Other information is provided by the User at his discretion.
1.1.2. Data that is automatically transferred to the Site services during their use using the software installed on the User’s device, including IP address, cookie data, information about the User’s browser, technical characteristics of the equipment and software used by the User, date and time of access to services, addresses of requested pages and other similar information.
1.1.3.In some cases of processing of personal data to resolve possible contradictions between different laws of individual states, the procedure and principles for the processing of personal data may, in addition to the Policy, be regulated and detailed in special sections of ALBELEX documents (for example, contracts, agreements) relating to such individual cases and fulfilling for such cases, the role of data processing agreements (DPA) in GDPR terminology.
1.2. This Regulation determines the procedure for collecting, recording, processing, accumulating, using, distributing and storing personal data of personal data subjects and guaranteeing the confidentiality of information about individuals: clients and/or representatives of client companies, counterparties and/or representatives of counterparty companies and site users who provided their personal data.
1.3. The purpose of this Policy is to protect the personal data of clients, counterparties and website users from unauthorized access and disclosure. The personal data of the above persons is confidential, strictly protected information.
1.4. This Privacy Policy applies only to the Website www.albelex.group. The website www.albelex.group does not control and is not responsible for third party sites that the User can access via links available on the Website www.albelex.group.

2. PURPOSES OF PROCESSING USERS' PERSONAL INFORMATION

2.1. The site collects and stores only that personal information that is necessary to provide services or fulfill agreements and contracts with the User, except in cases where the law provides for mandatory storage of personal information for a period specified by law.
2.2. The Site processes the User’s personal information for the following purposes:
2.2.1. Identification of the User registered on the Site for the provision of services and/or conclusion of an agreement.
2.2.2. Providing the User with access to personalized resources of the Site.
2.2.3. Establishing feedback with the User, including sending notifications, requests regarding the use of the Site, provision of services, processing requests and applications from the User.
2.2.4. Determining the location of the User to ensure security and prevent fraud.
2.2.5. Confirmation of the accuracy and completeness of personal data provided by the User.
2.2.6. Providing the User with effective customer and technical support if problems arise related to the use of the Site.
2.2.7. Carrying out advertising activities with the consent of the User.
2.3. ALBELEX engaged in processing personal data of citizens of the Russian Federation are each individually registered in the register of the Authorized Body of the Russian Federation for the Protection of the Rights of Personal Data Subjects (hereinafter referred to as Roskomnadzor) as personal data operators. Any person can obtain information about the operator via the Internet by searching the register at https://pd.rkn.gov.ru/operators-registry/operators-list/.

3. CONDITIONS FOR PROCESSING USERS' PERSONAL INFORMATION

AND ITS TRANSFER TO THIRD PARTIES

3.1. The site stores personal information of Users in accordance with the internal regulations of specific services.
3.2. With regard to the User’s personal information, its confidentiality is maintained, except in cases where the User voluntarily provides information about himself for general access to an unlimited number of persons. When using certain services, the User agrees that a certain part of his personal information becomes publicly available.
3.3. The site has the right to transfer the User’s personal information to third parties in the following cases:
3.3.1. The user agreed to such actions.
3.3.2. The transfer is necessary for the User to use a certain service or to fulfill a certain agreement or contract with the User.
3.3.4. The transfer is provided for by Russian or other applicable legislation within the framework of the procedure established by law.
3.3.5. In the event of the sale of the Site, all obligations to comply with the terms of this Policy in relation to the personal information received by him are transferred to the acquirer.
3.4. The processing of the User’s personal data is carried out without a time limit in any legal way, including in personal data information systems using automation tools or without the use of such tools. The processing of Users' personal data is carried out in accordance with Federal Law dated July 27, 2006 N 152-FZ "On Personal Data".
3.5. In case of loss or disclosure of personal data, the Site Administration informs the User about the loss or disclosure of personal data.
3.6. The Site Administration takes the necessary organizational and technical measures to protect the User’s personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.
3.7. The Site Administration, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s personal data.
3.8. The main categories of personal data subjects whose data is processed in ALBELEX include:
• visitors and users of websites, applications and information resources;
•individuals who are or have been in labor and civil relations with ALBELEX, their immediate relatives, recommenders, as well as persons who intend to enter into such relations, for example, candidates for vacant positions;
• individuals who are or have been in labor and civil relations with counterparties, as well as persons who intend to enter into such relations;
• individuals undergoing internships and practices from educational institutions at ALBELEX;
• individuals indicated in various state registers, databases, publicly available and other sources that are obtained legally and are used in the provision of services and in ALBELEX products as data sources;
• individuals who contacted ALBELEX with requests, messages, statements, complaints, proposals using contact information or feedback collection tools;
• individuals participating in interviews, surveys, analytical and marketing research on the subject of ALBELEX activities;
• participants in events organized by ALBELEX or partner organizations;
• visitors to ALBELEX offices;
• founders and partners.
2.2.1. For the specified categories of subjects the following may be processed in accordance with the purposes of processing:

• personal information (last name, first name, patronymic, including previous ones; gender; year, month, date of birth; age; place of birth, nationality, citizenship);
• contact information (mailing address, telephone numbers, email addresses, pseudonyms, identifiers in social networks and communication services); addresses of registration and actual residence;
• information about identity documents; driver’s license; information about the subject’s identification numbers in state accounting systems (for example, TIN, SNILS, etc.); information about compulsory and voluntary health insurance policies;
• professional activity (place of work; position; structural unit; personnel number; length of service; participation in legal entities; powers);
• skills and qualifications (education received; profession; assigned specialties; knowledge of foreign languages; completed training courses, internships and internships); • information about the family (marital status; family composition; legal representatives, immediate relatives);
• social status; property status; information about vehicles;
• information about contracts and agreements, their statuses; information about participation in affiliate and bonus programs; referral promotional codes; information about the products and services used;
• recommendations and reviews; information about personnel assessment;
• financial condition; payment details; income; information on tax and other contributions to state funds; information on accruals and deductions of funds, remuneration in other forms; information about purchases made, orders of goods and services; information about payments;
• information about presence in individual state registers, databases and lists;
• information about military registration; information about migration registration;
• photo and video image; speech information (voice recording);
• electronic user data (user IDs, network addresses, cookies, device IDs, screen sizes and resolutions, hardware and software information such as browsers, operating system, installed applications, geolocation, language settings, time zone, time and usage statistics applications and information resources, user actions in services, sources of transitions to web pages, sent search and other requests, user-created content); electronic signature certificates;
• hobbies and hobbies; personal interests; tastes and preferences; subscriptions to newsletters;
• health status; information about disability, incapacity for work;
• information about incentives, awards, penalties and prosecution;
• other information provided for by standard forms, established procedures and purposes of processing.

2.3. The subject of personal data provides the Company with reliable information about himself. During processing, the accuracy of personal data, its sufficiency and relevance in relation to the purposes of processing personal data are ensured. If inaccurate or incomplete personal data is detected, it may be clarified and updated. In cases where the updating of personal data is outside the area of ​​responsibility of ALBELEX, processing may be suspended until updating. Duties and responsibilities for the timely updating of personal data for individual cases of processing may be established by agreements or local acts of ALBELEX.
2.4. Consent to the processing of personal data can be withdrawn by the subject of personal data at any time. To do this, written notice of withdrawal of consent must be sent. In case of withdrawal of consent to the processing of personal data, ALBELEX has the right to continue processing personal data without consent if there are grounds specified in paragraphs 2−11 of part 1 of article 6, part 2 of article 10 and part 2 of article 11 of the Federal Law of July 27, 2006 No. 152-FZ, as well as if there is another agreement with the subject of personal data.
2.5. Actions with personal data include: collection; recording; systematization; accumulation; storage; clarification (update, change); extraction; usage; transmission (distribution, provision, access); depersonalization; blocking; removal, destruction.
2.6. Consent can be expressed in the form of the subject of personal data performing implicit actions, for example:
2.6.1. acceptance of the terms of the offer agreement, license agreement, rules for using information resources and ALBELEX products;
2.6.2. continued use of applications, services, information resources, ALBELEX websites, interaction with their user interfaces after notifying the user about data processing;
2.6.3. making marks, filling out the appropriate fields in forms and forms;
2.6.4. maintaining email correspondence regarding processing;
2.6.5. entering the territory after reading the warning signs and signs;
2.6.6. other actions performed by the subject, by which one can judge his will.
2.7. In cases of processing of personal data received not from the subject directly, but from other persons on the basis of a contract or order for processing, the obligation to obtain the consent of the subject may be assigned to the person from whom the personal data was received.
2.8. If the subject refuses to provide the necessary and sufficient amount of his personal data, ALBELEX will not be able to take the necessary actions to achieve the purposes relevant to the processing. For example, in this case, the user’s registration in the software product may not be completed, services under the contract may not be provided, work may not be completed, goods may not be delivered, the applicant’s resume for the vacancy will not be considered, etc.
3. Storage of personal data
3.1. ALBELEX ensures the protection of personal data of personal data subjects from misuse or loss.
3.2. Personal data of subjects of personal data are stored electronically on a local computer network. Access to electronic databases containing personal data of personal data subjects is provided by a two-stage password system: at the local computer network level and at the database level.
3.3. Passwords are changed at least once every six months.
3.4. The site owner and partners have access to personal data.
4. Use of personal data
4.1. Personal data is used for purposes related to the interaction of the subject of personal data with the Company: concluding an agreement, exchanging letters, subscribing to ALBELEX mailings, receiving ALBELEX services.
4.2. Personal data provided by the subject of personal data is processed in automated and non-automated ways. Personal data is stored as long as necessary to achieve the purposes of its processing
4.3. After the expiration of the regulatory storage period for documents containing personal data of personal data subjects, the documents are subject to destruction. For this purpose, an expert commission is created to determine the value of the documents. During the examination, the commission selects cases with expired storage periods and, based on the results of the selection, draws up an act on the allocation for destruction of cases that are not subject to storage. After which the documents are destroyed in a shredder. Personal data is electronically erased from information media, or the media on which the information is stored is physically destroyed.
4.4. ALBELEX, if necessary, may involve third parties in the processing of personal data as subcontractors, subject to compliance with the principles of processing and the existence of an appropriate contract or agreement with them.
5.1. The consent of the subject of personal data to the distribution of personal data is terminated from the moment ALBELEX receives the request specified in clause 5.2 of these Regulations.
5.2. The subject of personal data has the right to request to stop the transfer (distribution, provision, access) of his personal data, previously permitted for distribution, to any person processing his personal data, in case of non-compliance with the provisions of the Federal Law of July 27, 2006 No. 152-FZ or contact with such a requirement to the court. The company or a third party is obliged to stop the transfer (distribution, provision, access) of personal data within three working days from the receipt of the request or within the period specified in the court decision that has entered into legal force. If such a period is not specified in the court decision, then the Company or a third party is obliged to stop transferring personal data within three working days from the date the court decision enters into legal force.
5.3. Processed personal data is subject to destruction or depersonalization when the following conditions occur:
5.3.1. achievement of the purposes of processing personal data or maximum storage periods — subject to destruction or depersonalization within 30 days;
5.3.2. loss of the need to achieve the purposes of processing personal data — within 30 days;
5.3.3. provision by the subject of personal data or his legal representative of confirmation that the personal data was illegally obtained or is not necessary for the stated purpose of processing — within 7 days;
5.3.4. impossibility of ensuring the legality of the processing of personal data — within 10 days;
5.3.5. withdrawal by the subject of personal data of consent to the processing of personal data, if the storage of personal data is no longer required for the purposes of processing personal data — within 30 days;
5.3.6. withdrawal by the subject of personal data of consent to the use of personal data for contacts with potential clients when promoting software products, goods, works and services — within 2 days;
5.3.7. expiration of the statute of limitations for legal relations within the framework of which the processing of personal data is carried out or was carried out;
5.4. When carrying out cross-border transfer of personal data, before such transfer begins, ALBELEX makes sure that the foreign state to whose territory the transfer will take place provides adequate protection of the rights of personal data subjects or that this foreign state is a party to the Council of Europe Convention for the Protection of Individuals with Automatic Processing of Personal Data data.
5.4.1. Cross-border transfer to the territory of foreign states that do not provide adequate protection of the rights of personal data subjects may be carried out in cases provided for by 152-FZ and the GDPR.
6. Processing of electronic user data, including cookies
6.1. ALBELEX, for the purpose of processing personal data established by the Regulations, can collect electronic user data on its websites automatically, without the need for the user to participate or perform any actions to send data.
6.2. The reliability of electronic data collected in this way is not checked in ALBELEX; ​​the information is processed "as is" in the form it received from the client device.
6.3. Visitors and users of ALBELEX websites may be shown pop-up notifications about the collection and processing of cookie data with a link to the Statement and buttons for accepting the terms of processing or closing the pop-up notification.
6.4. Such notifications mean that when you visit and use ALBELEX sites, information resources and web applications or a device, you will remember your session or save some user settings and preferences specific to these specific sites. Such information, after being saved to the browser and until it expires or is deleted from the device, will be sent with each subsequent request to the site on behalf of which it was saved, along with this request for processing on the ALBELEX side.
6.5. The processing of these cookies is necessary for ALBELEX to ensure the correct operation of the sites, in particular their functions related to the access of registered users of ALBELEX software products, services, works and resources; user personalization; increasing the efficiency and convenience of working with websites, as well as other purposes provided for by the Regulations.
6.6. In addition to the processing of cookie data set by the ALBELEX websites themselves, cookies related to third-party websites may be set to users and visitors, for example, in cases where the ALBELEX websites use third-party components and software. The processing of such cookies is subject to the provisions of the respective sites to which they belong and may change without notice to users of ALBELEX sites.
Such cases may include posting on sites:
6.6.1. visit counters, analytical and statistical services, such as Yandex. Metrica or Google Analytics to collect statistics on traffic to publicly accessible website pages;
6.6.2. widgets for auxiliary services for collecting feedback, organizing chats and other types of communications with users;
6.6.3. contextual advertising systems, banners and other marketing networks;
6.6.4. authorization buttons on websites using social network accounts;
6.6.5. other third-party components used by ALBELEX on its websites.
6.7. Acceptance by the user of the conditions for processing cookies or closing the pop-up notification in accordance with the Regulations is regarded as consent to the processing of these cookies on the ALBELEX websites
6.8. If the user does not agree to the processing of cookies, he must accept the risk that in this case the functions and capabilities of the site may not be fully available, and then follow one of the following options:
6.8.1. independently configure your browser in accordance with the documentation or help so that it does not permanently allow the acceptance and sending of cookie data for any site or for a specific ALBELEX site or a third-party component site;
6.8.2. switch to a special "incognito" browser mode for the site to use cookies until closing the browser window or switching back to normal mode;
6.8.3. Leave the site to avoid further processing of cookies.
6.9. The user can independently manage the stored data through the tools built into browsers for working with these cookies, including deleting or viewing information about cookies installed by websites, including:
6.9.1. addresses of sites and paths to them where cookies will be sent;
6.9.2. names and values ​​of parameters stored in cookies;
Such measures, in particular, include:
7.2.1. appointment of individuals or legal entities responsible for organizing the processing and ensuring the security of personal data in specific Companies;
7.2.2. publication of local regulations on the processing of personal data, information security, familiarization of employees with them;
7.2.3. training employees on the processing of personal data and ensuring information security;
7.2.4. ensuring physical security of premises and processing facilities, access control, security, video surveillance;
7.2.5. restriction and delimitation of access of employees and other persons to personal data and processing means, monitoring of actions with personal data;
7.2.6. the use of security tools (anti-virus tools, firewalls, protection against unauthorized access, cryptographic information protection tools), including, where necessary, those that have undergone the conformity assessment procedure in the prescribed manner;
7.2.7. accounting and storage of information media, excluding their theft, substitution, unauthorized copying and destruction;
7.2.8. backing up information for recovery;
7.2.9. carrying out internal control over compliance with the established procedure, checking the effectiveness of measures taken, responding to incidents;
7.2.10. checking the availability of contracts, including, if necessary, clauses in contracts to ensure confidentiality and security of personal data;
7.2.11. other measures in accordance with local regulations of ALBELEX.
8. Rights of personal data subjects
8.1. The subject of personal data has the right to withdraw consent to the processing of personal data by sending a corresponding request to the Company or authorized representatives of ALBELEX in other countries, by mail or in person.
8.2. The subject of personal data has the right to receive information regarding the processing of his personal data, including containing:
8.2.1. confirmation of the fact of processing of personal data by ALBELEX Companies;
8.2.2. legal grounds and purposes of processing personal data;
8.2.3. the purposes and methods of processing personal data used in ALBELEX;
8.2.4. name and location of the ALBELEX Company, information about persons (except for employees) who have access to personal data or to whom personal data may be disclosed on the basis of a contract, agreement with the Company or on the basis of federal law;
8.2.5. processed personal data related to the relevant subject of personal data, the source of their receipt, unless a different procedure for the presentation of such data is provided for by federal law;
8.2.6. terms of processing of personal data, including periods of their storage;
8.2.7. the procedure for the exercise by the subject of personal data of the rights provided for by 152-FZ;
8.2.8. information about completed or intended cross-border data transfers;
8.2.9. name or surname, first name, patronymic and address of the person processing personal data on behalf of ALBELEX, if the processing has been or will be assigned to such a person;
8.2.10. other information provided for by 152-FZ or other federal laws.
8.3. The subject of personal data has the right to demand that ALBELEX clarify his personal data, block it or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as take measures provided for by applicable law to protect his right
8.4. If the subject of personal data believes that ALBELEX is processing his personal data in violation of the requirements of 152-FZ or otherwise violates his rights and freedoms, the subject of personal data has the right to appeal the actions or inaction of the Company, which is part of ALBELEX, to Roskomnadzor, another authorized supervisory body or judicially.
8.5. The subject of personal data has the right to protect his rights and legitimate interests, including compensation for losses and (or) compensation for moral damage in court.

4. OBLIGATIONS OF THE PARTIES

4.1. The user is obliged:
4.1.1. Provide information about personal data necessary to use the Site.
4.1.2. Update and supplement the provided information about personal data if this information changes.
4.2. The Site Administration is obliged to:
4.2.1. Use the information received solely for the purposes specified in this Privacy Policy.
4.2.2. Ensure that confidential information is kept secret, not disclosed without the prior written permission of the User, and also not sell, exchange, publish or disclose in other possible ways the transferred personal data of the User, except as provided for in this Privacy Policy.
4.2.3. Take precautions to protect the confidentiality of the User’s personal data in accordance with the procedure generally used to protect this type of information in existing business transactions.
4.2.4. Block personal data relating to the relevant User from the moment of application or request from the User or his legal representative or the authorized body for the protection of the rights of personal data subjects for the period of verification in the event of detection of unreliable personal data or unlawful actions.

5. RESPONSIBILITY OF THE PARTIES

5.1. The Site Administration, which has not fulfilled its obligations, is responsible for losses incurred by the User in connection with the unlawful use of personal data, in accordance with the legislation of the Russian Federation.
5.2. In case of loss or disclosure of confidential information, the Site Administration is not responsible if this confidential information:
5.2.1. Became public property until lost or disclosed.
5.2.2. Was received from a third party prior to its receipt by the Site Administration.
5.2.3. Was disclosed with the consent of the User.

6. DISPUTE RESOLUTION

6.1. Before filing a claim in court regarding disputes arising from the relationship between the Site User and the Site Administration, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute).
6.2. The recipient of the claim within 30 calendar days from the date of receipt of the claim notifies the claimant in writing of the results of consideration of the claim.
6.3. If an agreement is not reached, the dispute will be referred to the court in accordance with the current legislation of the Russian Federation.
6.4. The current legislation of the Russian Federation applies to this Privacy Policy and the relationship between the User and the Site Administration.

7. MISCELLANIOUS

7.1. The Site Administration has the right to make changes to this Privacy Policy without the User’s consent.
7.2. The new Privacy Policy comes into force from the moment it is posted on the Site, unless otherwise provided by the new edition of the Privacy Policy.
7.3. Any suggestions or questions regarding this Privacy Policy should be reported to info@abelex.group .
7.4. The current Privacy Policy is posted on the page at: www.albelex.group.