1. General Provisions
This Policy on the processing of personal data has been prepared in accordance with the requirements of Federal Law No. 152-FZ dated 27.07.2006 “On Personal Data” (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and the measures taken by Eduix (hereinafter referred to as the Operator) to ensure the security of personal data.
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data—especially the right to privacy, personal and family secrets—to be a fundamental objective and condition of its activities.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website http://glassmorphismui.tilda.ws.
2. Key Terms Used in This Policy
2.1. Automated processing of personal data – processing using computer technology.
2.2. Blocking of personal data – temporary suspension of processing (except where processing is required for data clarification).
2.3. Website – a collection of graphic and informational materials, as well as computer programs and databases, made available online at http://glassmorphismui.tilda.ws.
2.4. Personal data information system – a system that includes personal data contained in databases and the technologies and tools used for processing.
2.5. Depersonalisation of personal data – actions making it impossible to determine the identity of the data subject without additional information.
2.6. Processing of personal data – any operation or set of operations performed with or without automation tools involving personal data, including collection, recording, categorisation, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion, and destruction.
2.7. Operator – a government body, municipal body, legal or natural person who independently or jointly organises and/or conducts personal data processing, and determines the purpose and content of data to be processed.
2.8. Personal data – any information relating directly or indirectly to a specific or identifiable User of the website http://glassmorphismui.tilda.ws.
2.9. Personal data authorised by the data subject for dissemination – personal data provided by the data subject for public access through consent as stipulated in the Personal Data Law.
2.10. User – any visitor to the website http://glassmorphismui.tilda.ws.
2.11. Provision of personal data – actions aimed at disclosing data to a specific person or group.
2.12. Dissemination of personal data – any actions to disclose data to an indefinite circle of persons or to make data publicly available (e.g., via mass media, online, or other means).
2.13. Cross-border data transfer – transfer of personal data to a foreign country, its authorities, foreign individuals, or legal entities.
2.14. Destruction of personal data – actions resulting in the irreversible destruction of personal data, rendering it impossible to restore it, and/or destruction of physical storage media.
3. Rights and Duties of the Operator
3.1. The Operator is entitled to:
– receive accurate data and/or documents from the data subject;
– continue processing personal data without consent if there are lawful grounds as set out in the Personal Data Law, even if consent is withdrawn;
– independently determine the necessary and sufficient measures to ensure compliance with the Personal Data Law unless otherwise stated by law.
3.2. The Operator must:
– provide data subjects with information about the processing of their personal data upon request;
– organise data processing according to current Russian Federation legislation;
– respond to enquiries from data subjects or their legal representatives in accordance with the Personal Data Law;
– provide required information to the authorised data protection authority within 10 days of receiving a request;
– publish or otherwise provide unrestricted access to this Policy;
– implement legal, organisational, and technical safeguards to protect personal data from unauthorised or accidental access, destruction, alteration, blocking, copying, dissemination, and other unlawful acts;
– stop dissemination and processing of personal data and destroy it as stipulated in the Personal Data Law;
– fulfil other obligations under the Personal Data Law.
4. Rights and Duties of Data Subjects
4.1. Data subjects have the right to:
– obtain information regarding the processing of their personal data, except as provided by federal law. The Operator must provide this information in an accessible form and ensure that no data relating to other individuals is included unless there is legal justification;
– request correction, blocking, or deletion of their data if it is incomplete, outdated, inaccurate, obtained unlawfully, or unnecessary for the declared purpose;
– require prior consent for the processing of their data for marketing purposes;
– withdraw consent to the processing of their personal data and demand the cessation of processing;
– lodge complaints with the authorised data protection authority or the courts regarding unlawful acts or inaction by the Operator;
– exercise other rights under Russian law.
4.2. Data subjects must:
– provide the Operator with accurate information;
– notify the Operator of any changes or updates to their personal data.
4.3. Individuals who provide false data or disclose data of others without consent bear liability under Russian law.
5. Principles of Personal Data Processing
5.1. Data must be processed lawfully and fairly.
5.2. Data must be processed only to achieve specified, lawful, and legitimate purposes.
5.3. It is prohibited to combine databases with incompatible processing purposes.
5.4. Only data relevant to the purposes of processing may be processed.
5.5. The volume and nature of the data must match the declared processing purposes and must not be excessive.
5.6. Data must be accurate and updated as necessary. The Operator shall take measures to correct or delete incomplete or inaccurate data.
5.7. Personal data shall not be stored longer than required to fulfil processing purposes unless a longer retention period is mandated by federal law or contract. Data must be deleted or anonymised upon achieving the purpose or when it is no longer necessary, unless otherwise stated by law.
6. Purpose of Personal Data Processing
Purpose: Providing the User with access to the services, information and/or materials on the website.
Personal data:
– Surname, first name, patronymic
– Email address
– Telephone numbers
Legal basis: The Operator’s founding documents
Types of processing: Collection, recording, categorisation, accumulation, storage, destruction, and depersonalisation
7. Conditions for Processing Personal Data
7.1. Processing is carried out with the data subject’s consent.
7.2. Processing is required to meet objectives defined by international treaties or law, or to fulfil legal obligations imposed on the Operator.
7.3. Processing is required for judicial purposes or enforcement of legal acts.
7.4. Processing is necessary for the execution of a contract involving the data subject, or for concluding such a contract at the request of the data subject.
7.5. Processing is required to protect the Operator’s or third parties’ legitimate interests or to achieve public goals, provided it does not infringe on the data subject’s rights and freedoms.
7.6. Processing of publicly available data or data disclosed at the data subject’s request is carried out.
7.7. Processing is carried out in accordance with federal law if the data is subject to publication or mandatory disclosure.