1. General provisions
This personal data processing policy has been prepared in accordance with Federal Law No. 152-FZ of 27.07.2006, “On Personal Data” (the Personal Data Law), and sets out the procedures for processing personal data and the measures taken by Chempiony Vselennoi LLC (the Operator) to ensure the security of personal data.
1.1. The Operator considers respect for human and civil rights and freedoms when processing personal data, including the protection of privacy and personal and family confidentiality, to be a primary objective and a condition of its activities.
1.2. This policy of the Operator regarding the processing of personal data (the Policy) applies to all information that the Operator may obtain about visitors to the website https://mechanicsfilms.com/.
2. Key terms used in this Policy
2.1. Automated processing of personal data means the processing of personal data using computer equipment.
2.2. Blocking of personal data means the temporary suspension of personal data processing, except where processing is necessary to verify or correct the personal data.
2.3. Website means the collection of graphical and informational materials, computer programs and databases that make them available on the internet at https://mechanicsfilms.com/.
2.4. Personal data information system means the personal data contained in databases, together with the information technologies and technical equipment used to process them.
2.5. Anonymisation of personal data means actions that make it impossible, without additional information, to determine whether personal data belong to a particular User or another personal data subject.
2.6. Processing of personal data means any action or operation, or set of actions or operations, performed on personal data, with or without automated means, including collection, recording, organisation, accumulation, storage, clarification (updating or modification), retrieval, use, transfer (dissemination, disclosure or access), anonymisation, blocking, deletion and destruction.
2.7. Operator means a state authority, municipal authority, legal entity or individual that, independently or jointly with others, organises and/or carries out the processing of personal data and determines the purposes of such processing, the personal data to be processed, and the actions or operations to be performed on them.
2.8. Personal data means any information relating directly or indirectly to an identified or identifiable User of the website https://mechanicsfilms.com/.
2.9. Personal data authorised by the personal data subject for dissemination means personal data to which the subject has granted access to an unlimited number of persons by consenting to the processing of personal data authorised for dissemination in accordance with the Personal Data Law (personal data authorised for dissemination).
2.10. User means any visitor to the website https://mechanicsfilms.com/.
2.11. Disclosure of personal data means actions intended to disclose personal data to a particular person or a defined group of persons.
2.12. Dissemination of personal data means any actions intended to disclose personal data to an undefined group of persons (transfer of personal data) or to make personal data available to an unlimited number of persons, including publication in the media, placement on information and telecommunications networks, or provision of access by any other means.
2.13. Cross-border transfer of personal data means the transfer of personal data to the territory of a foreign state, to an authority of that state, a foreign individual or a foreign legal entity.
2.14. Destruction of personal data means any actions that irreversibly destroy personal data so that their content cannot be restored in the personal data information system, and/or destroy the physical media on which personal data are stored.
3. Principal rights and obligations of the Operator
3.1. The Operator has the right to:
— obtain accurate information and/or documents containing personal data from the personal data subject;
— continue processing personal data without the subject’s consent if the subject withdraws consent or requests that processing cease, provided that grounds specified in the Personal Data Law apply;
— independently determine the measures necessary and sufficient to fulfil the obligations established by the Personal Data Law and the regulations adopted pursuant to it, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator is obliged to:
— provide the personal data subject, upon request, with information concerning the processing of their personal data;
— organise the processing of personal data in accordance with the applicable laws of the Russian Federation;
— respond to enquiries and requests from personal data subjects and their legal representatives in accordance with the Personal Data Law;
— provide the authorised body responsible for protecting the rights of personal data subjects with the necessary information upon its request within 10 days of receiving that request;
— publish this Policy or otherwise provide unrestricted access to it;
— take legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, disclosure, dissemination and other unlawful actions;
— cease the transfer of personal data (dissemination, disclosure or access), stop processing and destroy personal data in the manner and in the circumstances prescribed by the Personal Data Law;
— fulfil the other obligations established by the Personal Data Law.
4. Principal rights and obligations of personal data subjects
4.1. Personal data subjects have the right to:
— obtain information concerning the processing of their personal data, except in cases provided for by federal laws. The Operator must provide this information in an accessible form. It must not contain personal data relating to other subjects unless there are lawful grounds for disclosing those data. The information to be provided and the procedure for obtaining it are established by the Personal Data Law;
— require the Operator to clarify, block or destroy their personal data if the data are incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose of processing, and take the measures provided by law to protect their rights;
— require prior consent as a condition for the processing of personal data for the promotion of goods, works and services;
— withdraw consent to the processing of personal data and submit a request that processing cease;
— challenge the Operator’s unlawful actions or omissions in processing their personal data before the authorised body responsible for protecting personal data subjects’ rights or in court;
— exercise other rights provided by the laws of the Russian Federation.
4.2. Personal data subjects are obliged to:
— provide the Operator with accurate information about themselves;
— inform the Operator of any clarification, update or change to their personal data.
4.3. Persons who provide the Operator with inaccurate information about themselves, or information about another personal data subject without that person’s consent, are liable under the laws of the Russian Federation.
5. Principles of personal data processing
5.1. Personal data are processed lawfully and fairly.
5.2. Personal data processing is limited to achieving specific, predetermined and lawful purposes. Processing that is incompatible with the purposes for which the data were collected is not permitted.
5.3. Databases containing personal data processed for mutually incompatible purposes must not be combined.
5.4. Only personal data relevant to the purposes of processing may be processed.
5.5. The content and volume of personal data processed must correspond to the stated purposes of processing. Processing data in excess of what is necessary for those purposes is not permitted.
5.6. When personal data are processed, their accuracy, sufficiency and, where necessary, currency in relation to the purposes of processing are ensured. The Operator takes the necessary measures, and/or ensures that they are taken, to delete or clarify incomplete or inaccurate data.
5.7. Personal data are stored in a form that allows the subject to be identified for no longer than necessary for the purposes of processing, unless a storage period is established by federal law or by a contract to which the subject is a party, beneficiary or guarantor. Processed personal data are destroyed or anonymised when the purposes of processing have been achieved or are no longer necessary, unless otherwise provided by federal law.
6. Purposes of personal data processing
| Purpose of processing | providing the User with access to services, information and/or materials on the website |
|---|---|
| Personal data |
|
| Legal grounds |
|
| Types of personal data processing |
|
7. Conditions for personal data processing
7.1. Personal data are processed with the personal data subject’s consent to the processing of their personal data.
7.2. Personal data processing is necessary to achieve purposes provided for by an international treaty of the Russian Federation or by law, and to perform the functions, powers and duties imposed on the Operator by the laws of the Russian Federation.
7.3. Personal data processing is necessary for the administration of justice or the enforcement of a court decision or an act of another body or official that is enforceable under the laws of the Russian Federation on enforcement proceedings.
7.4. Personal data processing is necessary to perform a contract to which the subject is a party, beneficiary or guarantor, or to conclude a contract at the subject’s initiative or a contract under which the subject will be a beneficiary or guarantor.
7.5. Personal data processing is necessary to exercise the rights and legitimate interests of the Operator or third parties, or to achieve objectives of public importance, provided that the subject’s rights and freedoms are not infringed.
7.6. Personal data to which the subject has granted access to an unlimited number of persons, or for which such access has been granted at the subject’s request, are processed (publicly available personal data).
7.7. Personal data subject to publication or mandatory disclosure under federal law are processed.
8. Procedures for collecting, storing, transferring and otherwise processing personal data
The security of personal data processed by the Operator is ensured through legal, organisational and technical measures necessary to comply fully with the applicable laws governing personal data protection.
8.1. The Operator safeguards personal data and takes all possible measures to prevent unauthorised persons from accessing them.
8.2. The User’s personal data will never, under any circumstances, be transferred to third parties except where required to comply with applicable law or where the subject has consented to the Operator transferring data to a third party to fulfil obligations under a civil-law contract.
8.3. If inaccuracies in personal data are identified, the User may update them by sending a notification to the Operator’s email address info@thechamps.pro with the subject line “Personal data update”.
8.4. The period of personal data processing is determined by the achievement of the purposes for which the data were collected, unless a different period is established by a contract or applicable law.
The User may withdraw consent to personal data processing at any time by sending a notification to the Operator’s email address info@thechamps.pro with the subject line “Withdrawal of consent to personal data processing”.
8.5. All information collected by third-party services, including payment systems, communications services and other service providers, is stored and processed by those persons (Operators) in accordance with their User Agreement and Privacy Policy. The personal data subject and/or with the documents referred to above. The Operator is not responsible for the actions of third parties, including the service providers referred to in this clause.
8.6. Restrictions imposed by the subject on the transfer (other than provision of access) or processing of personal data authorised for dissemination, or conditions imposed on such processing (other than obtaining access), do not apply where personal data are processed in state, public or other public interests established by the laws of the Russian Federation.
8.7. The Operator ensures the confidentiality of personal data when processing them.
8.8. The Operator stores personal data in a form that allows the subject to be identified for no longer than necessary for the purposes of processing, unless a storage period is established by federal law or by a contract to which the subject is a party, beneficiary or guarantor.
8.9. Personal data processing may cease when its purposes have been achieved, the subject’s consent expires, the subject withdraws consent or requests that processing cease, or unlawful processing is identified.
9. Actions performed by the Operator on the personal data received
9.1. The Operator collects, records, organises, accumulates, stores, clarifies (updates or modifies), retrieves, uses, transfers (disseminates, discloses or provides access to), anonymises, blocks, deletes and destroys personal data.
9.2. The Operator carries out automated processing of personal data, with or without the receipt and/or transmission of the resulting information over information and telecommunications networks.
10. Cross-border transfer of personal data
10.1. Before beginning cross-border transfers of personal data, the Operator must notify the authorised body responsible for protecting the rights of personal data subjects of its intention to carry out such transfers. This notification is submitted separately from the notification of the intention to process personal data.
10.2. Before submitting the notification referred to above, the Operator must obtain the relevant information from the foreign authorities, foreign individuals and foreign legal entities to which personal data are to be transferred.
11. Confidentiality of personal data
The Operator and other persons who have obtained access to personal data must not disclose them to third parties or disseminate them without the subject’s consent, unless otherwise provided by federal law.
12. Final provisions
12.1. The User may obtain clarification on any questions concerning the processing of their personal data by contacting the Operator by email at info@thechamps.pro.
12.2. Any changes to the Operator’s personal data processing policy will be reflected in this document. The Policy remains in force indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available on the internet at https://mechanicsfilms.com/privacy.
