Personal data law

1. General provisions

1.1. This Personal Data Processing Policy (hereinafter referred to as the "Policy") defines the procedure and conditions for processing personal data (hereinafter referred to as the "PD") by the Operator when using the website at https://swissnutritiontechnology.com/ru (hereinafter referred to as the "Site").

1.2. PD operator: FITNESS FORMULA Limited Liability Company. OGRN 5167746281930. TAX ID 7726390434. Checkpoint 222201001. Location: 89 Malakhova Street, Barnaul, 656039, Altai Territory. h1. The e-mail address for personal data subjects: buh-law@list.ru .

1.3. The Operator ensures the confidentiality and security of personal data and processes them in strict accordance with the legislation of the Russian Federation: Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" (hereinafter "FZ No. 152"), subordinate regulatory legal acts in the field of personal data security.

1.4. By using the Website and/or providing personal data to the Operator through the Website, the User confirms familiarization with this Policy. If the User does not agree with the terms of the Policy, he is obliged to stop using the Site.

2. Terms and definitions

"User" is a person who visits a Website and/or submits personal data through the forms posted on the Website.

"Personal data processing" means any actions of the Operator with the User's personal data (collection, recording, systematization, accumulation, storage, clarification, updating, modification, extraction, use, transfer, blocking, deletion, destruction).

 

"Cookies" are unique Internet browser identifiers stored as files on the client's device, which are used to interact with the Site and store user preferences and user settings.

3. The composition of the processed personal data

3.1. Technical data when visiting the Site (cookies): IP address, browser and device information, location information, date and time of access, source of access to the Site, history and statistics of visits, traffic addresses, history of requests and views within the sections of the Site, information collected through Russian metrics web analytics programs and systems.

3.2. Site users are buyers and/or potential buyers and / or other counterparties who have filled out the appropriate forms on the Site: last name, first name, patronymic, phone number, email address, composition and history of orders (purchases), order delivery address, history of accrual and use of bonuses (in case of participation in loyalty programs), other information provided by Users voluntarily and sent in the feedback form.

3.3. Special categories of personal data and biometric personal data are not processed by the Operator.

4. Purposes and legal grounds of processing

4.1. Personal data is processed for the purposes of: ensuring the correct operation of the Website and improving the service; receiving and processing requests for orders of goods, executing the purchase and sale agreement (delivery), including notifying customers of the order status; providing feedback and advice; ensuring the operation of the loyalty program; sending news/information about promotions/ personal offers among the loyalty program participants; protection of the rights and legitimate interests of the Operator and/or third parties.

4.2. Legal grounds (Article 6 of Federal Law No. 152):

4.2.1. Personal data is processed with the consent of the personal data subject;

4.2.2. Personal data are processed because they are necessary for the execution of an agreement to which the PD subject is a party or beneficiary, as well as for the conclusion of an agreement on the initiative of the PD subject or an agreement under which the PD subject will be the beneficiary;

4.2.3. The processing of personal data is necessary for the exercise of the rights and legitimate interests of the Operator or third parties.

4.3. Consent to the processing of personal data is provided by affixing an appropriate mark (checkbox) and (or) performing actions that clearly indicate the User's will to process personal data (by clicking the "I agree" / "Ask a question" / "Issue" buttons in the relevant sections of the Site after entering personal data).

4.4. When processing personal data, the Operator collects, records, systematizes, accumulates, stores, clarifies (updates, changes), extracts, uses, transfers (provides, accesses), blocks, deletes and destroys personal data.

5. Terms of PD processing and storage

The period of PD processing is determined by the achievement of the purposes for which the PD was collected, unless another period is stipulated by the agreement with the User or the current legislation. Personal data required for the purposes of concluding and executing a purchase and sale (supply) agreement are stored for five years from the date of its execution, unless otherwise provided by the legislation of the Russian Federation.

6. Transfer of personal data to third parties

Personal data can be transferred to: postal delivery operators and courier services (Russian Post JSC, SDEK); persons providing delivery of orders at pick-up points (when registering the Pickup order method); acquiring banks (legal entities providing payment acceptance and processing); as well as government agencies authorities and other persons in cases expressly provided for by law.

 

7. Place of PD processing

Personal data processing is carried out only on the territory of the Russian Federation. There is no cross-border transfer of personal data by the Operator.

8. Personal data protection measures

Legal and organizational measures, information and physical security measures are being taken to protect personal data. The above measures include, inter alia, the appointment of a person responsible for the organization of PD processing; approval of the list of processed PD; access control; backup; antivirus protection and updates.

9. The rights of the PD subject and the procedure for their implementation

9.1. The PD subject has the right to: receive information about processing; request clarification, blocking or destruction of PD if there are grounds; revoke consent; appeal against the actions / omissions of the Operator.

9.2. Any requests and applications regarding the processing of personal data are sent to the following email address: buh-law@list.ru . The operator has the right to request information to confirm the identity of the applicant.

9.3. In case of detection of illegal PD processing, the Operator, within a period not exceeding three working days from the date of this detection, stops the illegal PD processing or ensures the termination of the illegal PD processing, and if it is impossible to ensure the legality of PD processing, within a period not exceeding ten working days from the date of detection of illegal PD processing, destroys such PD or ensures their destruction. 

9.4. If the purpose of PD processing is achieved, the Operator destroys the PD or ensures their destruction within a period not exceeding thirty days from the date of achievement of the purpose of PD processing, unless otherwise provided by an agreement to which the User is a party or beneficiary, or by another agreement between the Operator and the User.

9.5. The withdrawal of consent to the processing of personal data is sent by written e-mail buh-law@list.ru . The operator has the right to request information to confirm the identity of the applicant. If the User withdraws consent to the processing of his personal data and if the storage of personal data is no longer required for the purposes of processing personal data, the Operator destroys the personal data or ensures their destruction within a period not exceeding thirty days from the date of receipt of the said withdrawal, unless otherwise provided by the agreement to which the User is a party or beneficiary, otherwise an agreement between the Operator and the User.

10. Final provisions

10.1. The Operator has the right to make changes to the Policy without the User's consent. When making changes to the Policy, the Operator notifies Users by posting a new version of the Policy on the Website in the specialized section "Personal Data Processing Policy". The new version of the Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new version of the Policy. The new version of the Policy applies to relationships that have arisen after its approval and posting on the Website.

 

10.2. The current version of the Policy is always available on the Website.

10.3. Compliance with the requirements of this Policy is monitored by the person responsible for organizing the processing of personal data at FITNESS FORMULA LLC.