Privacy Policy

1.1. In this Policy, «the User’s personal information» means the following:

1.1.1. Personal information the User provides about themselves when filling in and submitting request forms, subscribing to updates or using the Services. This information includes the User’s personal data. Some information required to provide the Services is marked accordingly. At the same time, the User may provide any other information at their own discretion.

1.1.2. Data transmitted to the Website’s services automatically during their use by the software installed on the User’s device. This data includes the IP address, cookie information, details of the User’s browser (or other programme used to access the services), technical characteristics of the hardware and software used by the User, as well as the date and time of access, the addresses of the requested pages and similar information.

1.1.3. Other information about the User whose processing is provided for by the Website Terms of Use.

1.1.4. This Privacy Policy applies to the Website only. The Company does not control and is not responsible for third-party websites the User may reach through links available on the Website.

We use the collected information for the following purposes:

• Providing the services you request and getting back to you.
• Personalising your experience of our website and services.
• Improving the quality of our services and developing new products and services.
• Informing you about our products, offers and events.

We do not sell, exchange or transfer your personal information to third parties without your consent, except in the cases provided for by law.

3.1. The Operator has the right to:

• — receive from the data subject accurate information and/or documents containing personal data;
• — continue processing personal data without the data subject’s consent where the subject has withdrawn consent or requested that processing be stopped, provided there are grounds specified in the Personal Data Law;
• — determine independently the composition and list of measures necessary and sufficient to fulfil the obligations set out in the Personal Data Law and the regulations adopted thereunder, unless the Personal Data Law or other federal laws provide otherwise.

3.2. The Operator is obliged to:

• — provide the data subject, upon their request, with information concerning the processing of their personal data;
• — organise the processing of personal data in the manner established by the applicable law of the country;
• — reply to enquiries and requests from data subjects and their legal representatives in accordance with the Personal Data Law;
• — provide the authorised body for the protection of data subjects’ rights with the necessary information upon its request within 10 days of receiving such a request;
• — publish or otherwise provide unrestricted access to this Policy on the processing of personal data;
• — take legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, provision, distribution, as well as against other unlawful actions in relation to personal data;
• — stop transferring (distributing, providing, granting access to) personal data, stop processing and destroy personal data in the manner and in the cases provided for by the Personal Data Law;
• — fulfil other obligations provided for by the Personal Data Law.

4.1. Personal data is processed on a lawful basis.

4.2. Only personal data that matches the purposes of processing is processed.

4.3. The content and volume of the personal data processed correspond to the stated purposes of processing. Personal data that is excessive in relation to the stated purposes is not processed.

4.4. When processing personal data, its accuracy and sufficiency are ensured, and where necessary its relevance to the purposes of processing. The Operator takes the necessary measures and/or ensures that they are taken to delete or correct incomplete or inaccurate data.

4.5. Personal data is stored in a form that allows the data subject to be identified no longer than the purposes of processing require, unless the storage period is established by federal law or by a contract to which the data subject is a party, a beneficiary or a guarantor.

4.6. The personal data processed is destroyed or anonymised once the purposes of processing have been achieved, or if the need to achieve them has been lost, unless federal law provides otherwise.

5.1. The Operator keeps personal data safe and takes every possible measure to prevent unauthorised persons from accessing it.

5.2. The User’s personal data will never, under any circumstances, be transferred to third parties, except where this follows from applicable law or where the data subject has given the Operator consent to transfer the data to a third party in order to fulfil obligations under a civil law contract.

5.3. If inaccuracies in personal data are discovered, the User may correct them independently by sending the Operator a notice to the email address info@sbmsk.com marked «Updating personal data».

5.4. The User may withdraw their consent to the processing of personal data at any time by sending the Operator a notice by email to info@sbmsk.com marked «Withdrawal of consent to the processing of personal data».

5.5. Processing of personal data may be terminated when the purposes of processing have been achieved, when the data subject’s consent has expired, when the data subject withdraws consent or requests that processing be stopped, or when unlawful processing of personal data is discovered.

6.1. The Operator collects, records, systematises, accumulates, stores, updates (amends, changes), retrieves, uses, transfers (distributes, provides, grants access to), anonymises, blocks, deletes and destroys personal data.

The Operator and other persons who have gained access to personal data are obliged not to disclose it to third parties and not to distribute it without the data subject’s consent, unless federal law provides otherwise.

The User may obtain any clarification on questions concerning the processing of their personal data by contacting the Operator by email at info@sbmsk.com.

Any changes to the Operator’s personal data processing policy will be reflected in this document. The Policy is valid indefinitely until it is replaced by a new version.

The current version of the Policy is freely available at security-union.vercel.app.