Privacy Politics

The periods for PD processing are determined by the achievement of the purposes for which the PD were collected, unless a different period is provided for by contract or the legislation of the Russian Federation.

Conditions for terminating PD processing may include:

Liquidation of the Operator;
Achievement of the processing purposes or the loss of necessity to achieve such purposes;
Expiration of the Consent or withdrawal of the Consent by the Subject;
Detection of unlawful PD processing.

Storage of PD shall be carried out in a form that permits identification of the PD Subject for no longer than required by the purposes of PD processing, unless the storage period is established by the legislation of the Russian Federation or by a contract to which the Subject is a party, beneficiary, or guarantor.
Subjects' PD are stored as hard copies (paper media) in accordance with the Operator's LNAs, on external (removable) electronic media, and in secure information systems owned by the Operator or used by the Operator on a legal basis.

Access to information systems containing personal data is provided using protection tools against unauthorized access.
Physical media containing Subjects' PD are stored in locked safes or metal cabinets in premises equipped with security and fire alarm systems.
The Operator stores PD in a form that permits identification of the Subject for no longer than required by the purposes of processing and the requirements of the normative documents of the Russian Federation related to document retention, after which the data are destroyed.
PD storage is carried out exclusively using databases located within the territory of the Russian Federation.

Processed PD are subject to destruction or anonymization upon achievement of the processing purposes or in case of loss of necessity to achieve these purposes, unless otherwise provided for by the Operator's LNAs or the requirements of the legislation of the Russian Federation.
Destruction or anonymization of personal data is carried out by a Commission established by the Company. The destruction of PD on electronic media at the end of their processing period is performed by mechanical damage to their integrity, preventing the reading and recovery of personal data, or by deletion from electronic media using methods and tools for the guaranteed removal of residual information.

The Company shall:

Ensure the protection of personal data (PD) against unlawful use or loss in accordance with the procedure established by the legislation of the Russian Federation;
When collecting PD, including via the Internet, ensure the recording, systematization, accumulation, storage, clarification (updating, modification), and extraction of PD of citizens of the Russian Federation using databases located within the territory of the Russian Federation, except as otherwise provided by the Federal Law on Personal Data;
Provide the PD subject, upon their request, with information regarding the processing of their PD, or provide a legally justified refusal;
Explain to the PD subject the legal consequences of refusing to provide their PD, in cases where the provision of such data is mandatory under the legislation of the Russian Federation;
Ensure free access for the PD subject to their PD, including the right to obtain copies of any record containing their PD, except as otherwise provided by the legislation of the Russian Federation;
In the event that PD is confirmed to be inaccurate based on information provided by the PD subject, their representative, or the authorized body for the protection of PD subjects' rights (or other necessary documents), rectify the PD or ensure its rectification (if processed by a third party on behalf of the Company) within 7 (seven) business days from the date such information is provided and lift any blocking of the PD;
Monitor the receipt and processing of requests from PD subjects and their representatives;
Upon achievement of the processing purposes, immediately cease PD processing and destroy the relevant PD within a period not exceeding 30 (thirty) days from the date the purpose was achieved, unless otherwise provided by federal laws or the Company’s local normative acts (LNA).
In the event that unlawful PD processing is identified, within a period not exceeding 3 (three) business days from the date of such identification, cease the processing of PD or ensure the cessation of PD processing by any person acting on behalf of the Company;
In the event that it is impossible to ensure the lawfulness of PD processing, within a period not exceeding 10 (ten) business days from the date the unlawful processing was identified, destroy such PD or ensure its destruction;
In the event of the destruction of unlawfully processed PD, notify the PD subject or their representative; if the request from the PD subject (or their representative) or the inquiry from the authorized body for the protection of PD subjects' rights was submitted via said authorized body, the Company shall also notify that body;
In the event that the PD subject withdraws their consent to the processing of their PD, cease PD processing and destroy the PD within a period not exceeding 30 (thirty) days from the date such withdrawal is received, unless otherwise provided by an agreement between the Company and the PD subject or by the legislation of the Russian Federation;
Disclose the PD of a subject only to authorized persons and only to the extent necessary for them to perform their labor or other duties in accordance with the legislation of the Russian Federation and the Policy.

Upon request of the personal data subject, the Company shall:
Provide information regarding the processing of their personal data (PD), including:

confirmation of the fact of PD processing by the Company;
legal grounds and purposes of PD processing;
methods of PD processing employed by the Company;
the name and location of the Company, information about persons (excluding Company employees) who have access to PD or to whom PD may be disclosed based on an agreement with the Company or by law;
the processed PD related to the respective PD subject and the source of its collection, unless a different procedure for providing such data is stipulated by the legislation of the Russian Federation;
timeframes for PD processing, including storage periods;
the procedure for the PD subject to exercise their rights as provided by law;
the name or full name and address of any person processing PD on behalf of the Company, if the processing is or will be outsourced to such a person;
other information as provided by law.

Correct incomplete, outdated, or inaccurate personal data;

Ensure the blocking or destruction of personal data if it is illegally obtained, is not necessary for the stated processing purpose, or the personal data subject's consent has been revoked;

Stop, at the personal data subject's request, the transfer (distribution, provision, or access) of personal data previously authorized for distribution.

The Operator has the right to:

Process personal data (PD) provided that there are legal grounds, the processing procedures correspond to the declared purposes of processing, the requirements of the legislation of the Russian Federation, the provisions of this Policy, and other local normative acts (LNAs) of the Company;
Store Subjects' PD in cloud data storage facilities for which the Operator has concluded usage agreements, in compliance with the requirements of the legislation of the Russian Federation;
Provide Subjects' PD to third parties, provided that such parties comply with the requirements of the Federal Law "On Personal Data";
Require the PD Subject to provide accurate PD necessary for the performance of a contract, identification of the PD Subject, and in other cases provided for by the PD legislation of the Russian Federation;
Restrict the PD Subject's access to their PD if the processing is carried out in accordance with the legislation of the Russian Federation on anti-money laundering and combating the financing of terrorism (AML/CFT), or if the PD Subject's access to their personal data violates the legal rights and interests of third parties, as well as in other cases provided by the legislation of the Russian Federation;
Process publicly available PD;
Process PD authorized by the PD Subject for distribution, in compliance with the requirements of the Federal Law "On Personal Data";
Process PD subject to publication or mandatory disclosure in accordance with the legislation of the Russian Federation;
Delegate PD processing to another person with the consent of the PD Subject;
Provide Subjects' PD to third parties in cases provided by the legislation of the Russian Federation (upon requests from judicial, law enforcement, and other government authorities).

Personal Data Subjects and/or their representatives have the right to:

Receive full information regarding their PD and the processing of such data;
Have free access to their PD, including the right to receive copies of any record containing the subject's PD, except as provided by the current legislation of the Russian Federation;
Request the exclusion or rectification of incorrect or incomplete PD, as well as data processed in violation of the legislation of the Russian Federation, and request the clarification, blocking, or erasure (destruction) of their PD;
Submit a written statement of disagreement with appropriate justification if the Company or its authorized person refuses to exclude or rectify the Subject's PD;
Withdraw consent to the processing and/or distribution of PD;
Request the Company or its authorized person to notify all parties to whom incorrect or incomplete PD of the subject were previously disclosed about all changes made or exclusions therefrom;
Appeal in court any unlawful actions or omissions by the Company or its authorized person committed during the processing and protection of the subject's PD.

A PD Subject may submit requests to the Company regarding the processing of their PD (including requests for rectification / blocking / erasure / termination of processing) in both hard copy and electronic form to the following email address: info@0630club.ru
Hard copy requests include any written communications sent to the Company’s address, including those sent via postal services.
A PD Subject's request may be submitted as an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.
The date of receipt of a request is deemed to be the date the request is registered as incoming correspondence. The registration period for a request is 3 (three) business days from the date of its receipt by the Company.
The Company does not process requests related to the transfer or disclosure of PD received via telephone or fax, as it is impossible to verify the identity of the PD Subject through these channels.
The timeframe for providing a response regarding PD processing to the PD Subject or their representative shall not exceed 10 (ten) business days from the moment the request is received.
This period may be extended by no more than 5 (five) business days, provided that the Company sends a reasoned notification to the PD Subject stating the reasons for the extension.
A request for information concerning PD processing (as specified in Clause 7, Article 14 of the PD Law) may be submitted in free form and must contain the following information: Series and number of the identity document of the PD Subject or their representative; Date of issue of the document and the issuing authority; Information confirming the PD Subject's relationship with the Company (contract number, date of contract, codename, and/or other details) or other information confirming the fact of PD processing by the Company; The signature of the PD Subject or their representative.

A request/demand to terminate the transfer (distribution, provision, access) of PD authorized by the Subject for distribution must include: Full name (surname, first name, and patronymic, if any); Contact information (phone number, email address, or postal address); A list of the PD for which processing must be terminated; The information resource (URL) where the data is published.

Only requests executed in accordance with the requirements of the legislation of the Russian Federation will be accepted for processing.
The Company shall provide information to the PD Subject or their representative in the same form as the received inquiry or request, unless otherwise specified in said inquiry or request.

The system of measures implemented by the Operator to protect the personal data of Subjects includes all organizational and technical measures necessary and sufficient to ensure the fulfillment of obligations stipulated by personal data protection legislation, determined taking into account current threats to the security of personal data and the information technologies used by the Operator. Such measures include, in particular:

Personal Data (PD) Protection Measures Applied by the Company:

A person responsible for organizing PD processing has been appointed;
Documents defining the Operator's policy regarding personal data processing have been issued, including local acts on personal data processing and local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation and eliminating the consequences of such violations;
The application of legal, organizational, and technical security measures has been ensured in accordance with Article 19 of the Federal Law "On Personal Data";
Internal control is carried out to ensure compliance of personal data processing with the Federal Law "On Personal Data," associated normative legal acts, personal data protection requirements, the Operator's privacy policy, and the Operator's local acts;
An assessment of the harm that may be caused to personal data subjects in case of violation of the Federal Law "On Personal Data" has been conducted, including the correlation of such harm with the measures taken to ensure the fulfillment of obligations provided by the Federal Law "On Personal Data";
Employees directly involved in personal data processing are familiarized with the provisions of the legislation of the Russian Federation on personal data, including requirements for personal data protection, the Operator's privacy policy, and local acts on personal data processing; training has been provided to said employees.

Security Tools and Means:

Security threats to personal data during its processing in personal data information systems have been identified;
Models of current threats are applied, and measures to neutralize them are implemented;
Accounting of physical storage media for personal data is ensured;
Monitoring of the measures taken to ensure personal data security and the security level of personal data information systems is carried out;
Access by unauthorized persons to premises intended for personal data processing is restricted.

Public offer

Web services	The Operator's website, all other information resources, including instant messengers.
Counterparty	A legal entity or individual with whom the Company enters into contractual relations, with the exception of employment relations.
Society, Operator	Limited Liability Company "Mechtateli", abbreviated name LLC "Mechtateli".
Web Services User	Visitors to the Site and other information resources of the Operator, as well as those who have registered an account on the Site's resources.
Employee	An individual who has entered into an employment relationship with an employer (Company).

Employer	A company that has entered into an employment relationship with an employee.
Roskomnadzor	The Federal Service for Supervision of Communications, Information Technology, and Mass Media, which is the authorized body for the protection of the rights of personal data subjects.

Cookies	Data that is automatically transferred to the Operator during the use of the Web Services using the software installed on the User's device.
Family members and close relatives	Spouse, children, parents, brothers, sisters