Privacy Policy

1 General provisions

1.1. This document defines the policy of the Production and Commercial Firm "Acryl" (hereinafter - the Operator) regarding the processing of personal data (hereinafter - the Policy).

1.1.1. This Policy applies to all information that IBF AKRYL LTD (OGRN: 1023601312987, TIN: 3628007099, registration address: 396950, Voronezh region, Semiluk district, Latnaya, 1 Komsomolskaya St. ) and/or its affiliates, can obtain about the user while using the site. 7color.ru .

1.1.2. Use of the website by the personal data subject 7color.ru

means the unconditional consent of the subject of personal data with this Policy and the conditions for the processing of their personal data specified in it; in case of disagreement with these conditions, the subject of personal data should refrain from using this resource.

1.1.3. This Policy applies only to the website 7color.ru

The Operator does not control and is not responsible for third party sites to which the subject of personal data may access via links available on the site 7color.ru

. On such sites, other personal information may be collected or requested from the user, and other actions may be taken.

1.2. This Policy is developed in accordance with the current legislation of the Russian Federation on personal data.

1.3 This Policy applies to all processes for the collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data carried out using automation tools and without the use of such means.

1.4 The Policy contains information to be disclosed in accordance with Part 1 of Article 14 of the Federal Law "On Personal Data", and is a publicly available document.

1.5 The Operator operates at the address: 396950, Voronezh region, Semiluk district, Latnaya, 1 Komsomolskaya St.

1.6 Oleg Zaitsev has been appointed responsible for organizing the processing of personal data (phone +7 (47372) 2-27-21, e-mail: akril2010@yandex.ru

).

2. Basic concepts used in the Policy

2.1. Personal data - any information relating directly or indirectly to a specific or identifiable natural person (personal data subject).

2.2. Operator - a state body, municipal body, legal or natural person, independently or together with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.

2.3 Personal data processing - any action (operation) or set of actions (operations) performed with or without the use of such means with personal data, including the collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.4 Provision of personal data – actions aimed at disclosing personal data to a certain person or a certain circle of persons;

2.5 Destruction of personal data - actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed.

2.6 Blocking of personal data means the temporary termination of the processing of personal data (unless the processing is necessary to clarify personal data).

3. Purposes of personal data processing

3.1. The Operator processes personal data for the following purposes:

3.1.1 for the performance of a contract to which either the beneficiary or the guarantor, under which the subject of personal data is a party;

3.1.2 to conclude a contract on the initiative of the subject of personal data or a contract under which the subject of personal data will be a beneficiary or guarantor;

3.1.3 to process incoming requests of natural persons in order to provide information services;

3.1.4 to achieve the goals provided for by an international treaty of the Russian Federation or by law, to implement and perform the functions, powers and duties assigned to the Operator by the legislation of the Russian Federation;

3.1.5 to promote the goods, works, services of the Operator on the market by making direct contacts with the subject of personal data through means of communication.

4. Legal basis for the processing of personal data

4.1. The legal basis for the processing of personal data is:

4.1.1 Legislation of the Russian Federation in the field of personal data based on the Constitution of the Russian Federation and international treaties of the Russian Federation and consisting of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" and other determining cases and features of processing personal data of federal laws;

4.1.2 consent to the processing of personal data, the conditions of which are confirmed by the personal data subject when working with the feedback form on the Operator's website;

4.1.3 civil law contracts concluded by the Operator with contractors, annexes to these contracts.

5. Categories of personal data subjects

5.1. The categories of personal data subjects whose personal data are processed by the Operator include:

5.1.1 individuals in employment or civil-law relations with the Operator;

5.1.2 individuals in employment or civil-law relations with the Operator’s counterparties;

5.1.3 personal data subjects using the feedback form on the website of the Operator 7color.ru .

5.2. For all categories of personal data subjects, personal data are processed by the Operator within the framework of legal relations with the Operator, regulated by part two of the Civil Code of the Russian Federation.

5.3 For all categories of personal data subjects, personal data are processed by the Operator with the consent of the personal data subjects provided either in writing or through affirmative actions on the Operator's website. 7color.ru .

5.4 The Operator processes the following personal data of personal data subjects:

5.4.1. Name, first name, middle name;

5.4.2 Type, series and number of the identity document;

5.4.3 Date of issue of the identity document and information on the issuing authority;

5.4.4 Year of birth;

5.4.5 Month of birth;

5.4.6 Date of birth;

5.4.7 Place of birth;

Address;

Contact telephone number;

5.4.10 E-mail address;

5.4.11 Taxpayer identification number;

5.4.12 Number of the state pension insurance certificate;

5.4.13 Job title;

Location;

5.4.15 IP address.

5.5 The Operator may process other personal data directly necessary to fulfill the purposes of processing personal data.

6. Terms of processing and storage of personal data

6.1. The Operator processes and stores personal data until the operator achieves the goals of processing personal data or until the need to achieve these goals is lost.

7. Transfer of personal data to third parties

7.1. To achieve the purposes of personal data processing and with the consent of the personal data subjects, the Operator provides personal data or entrusts their processing to the following persons:

7.1.1. public authorities;

7.1.2 to individuals who are in labor and civil relations with counterparties of the Operator.

7.1.3 to individuals who are in labor and civil relations with the Operator.

7.2 In order to fulfil contractual obligations or federal-law requirements, the Operator receives personal data from the following third parties:

7.2.1 Partners or other persons in accordance with a civil law contract.

8. Principles of personal data processing

8.1. The processing of personal data is carried out on the basis of the following principles:

● The processing of personal data is carried out on a lawful and fair basis;

● The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. Personal data processing incompatible with the purposes of personal data collection is not allowed;

● It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other;

● Only those personal data that meet the purposes of their processing are subject to processing;

● The content and scope of the personal data processed correspond to the stated purposes of processing. The personal data processed are not excessive in relation to the stated purposes of processing;

● When processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, their relevance in relation to the stated purposes of their processing are ensured.

● Storage of personal data is carried out in a form that allows to determine the subject of personal data no longer than the purpose of processing personal data requires, unless the period of storage of personal data is established by federal law, a contract to which the beneficiary or guarantor is the subject of personal data. The processed personal data are subject to destruction or depersonalization upon achievement of the purposes of processing or in case of loss of the need to achieve these goals, unless otherwise provided by federal law.

9. Conditions for processing personal data

9.1 Personal data are processed in compliance with the principles and rules established by the Federal Law “On Personal Data”. Processing is permitted in the following cases:

● The processing of personal data is carried out with the consent of the subject of personal data to the processing of their personal data;

● The processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or by law, for the implementation and performance of the functions, powers and duties assigned to the operator by the legislation of the Russian Federation;

● The processing of personal data is necessary for the implementation of justice, the execution of a judicial act, an act of another body or official, subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings;

● The processing of personal data is necessary for the execution of a contract to which the beneficiary or guarantor is a personal data subject, as well as for the conclusion of a contract on the initiative of the personal data subject or a contract under which the personal data subject will be a beneficiary or guarantor;

● The processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data, if it is impossible to obtain the consent of the subject of personal data;

● The processing of personal data is necessary to exercise the rights and legitimate interests of the operator or third parties, or to achieve socially significant goals, provided that the rights and freedoms of the personal data subject are not violated;

● The processing of personal data is carried out for statistical or other research purposes, subject to mandatory depersonalization of personal data. The exception is the processing of personal data in order to promote goods, works, services on the market through direct contacts with a potential consumer through means of communication, as well as for the purpose of political agitation;

● Processing of personal data is carried out, access of an unlimited number of persons to which is provided by the subject of personal data, or at his request (hereinafter - personal data made publicly available by the subject of personal data);

● Personal data subject to publication or mandatory disclosure in accordance with federal law is processed.

9.2 The Operator may include personal data of subjects in publicly available sources of personal data, while the Operator obtains written consent of the subject to the processing of their personal data.

9.3 The Operator may process special categories of personal data relating to race, nationality, health status, and the Operator undertakes to take the written consent of the subject to the processing of their personal data.

9.4 Biometric personal data (information that characterizes the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity and which are used by the operator to establish the identity of the subject of personal data) are not processed by the Operator.

9.5 The Operator does not carry out cross-border transfer of personal data.

9.6 The adoption on the basis of exclusively automated processing of personal data of decisions that generate legal consequences for the subject of personal data or otherwise affect their rights and legitimate interests is not carried out.

9.7 The Operator’s constituent documents do not prohibit entrusting personal-data processing to third parties with the written consent of the personal data subject.

9.8 In the absence of the need for the written consent of the subject to the processing of their personal data, the consent of the subject may be given by the subject of personal data or his representative in any form that provides a record that consent was given.

9.9 The Operator has the right to entrust the processing of personal data to another person with the consent of the personal data subject, unless otherwise provided by federal law, on the basis of a contract concluded with this person (hereinafter - the Operator's order). At the same time, the Operator in the contract obliges the person processing personal data on behalf of the Operator to comply with the principles and rules for processing personal data provided for by this federal law.

9.10 If the Operator entrusts personal-data processing to another person, the Operator remains responsible to the data subject for that person’s actions. The person processing data on behalf of the Operator is responsible to the Operator.

9.11 The Operator undertakes and obliges other persons who have access to personal data not to disclose to third parties and not to distribute personal data without the consent of the personal data subject, unless otherwise provided by federal law.

9.12 Databases of information containing personal data of citizens of the Russian Federation are located on the territory of the Russian Federation.

10. Information on ensuring the security of personal data

10.1 The Operator appoints a person responsible for organising personal-data processing and fulfilling the obligations established by the Federal Law “On Personal Data” and related regulations.

10.2 The Operator applies legal, organisational and technical measures to protect personal data, maintain confidentiality and their protection from illegal actions:

10.2.1 provides unlimited access to the Policy, a copy of which is posted on the Operator's website at the address 7color.ru

;

10.2.2 allows employees to access personal data processed in the information system of the Operator, as well as to their material carriers only for the performance of work duties;

10.2.3 establishes the rules for access to personal data processed in the Operator’s information system, as well as ensures registration and accounting of all actions with them;

10.2.4 assesses the damage that may be caused to personal data subjects in case of violation of the Federal Law “On Personal Data”;

10.2.5 determines threats to the security of personal data when processed in

information system of the Operator;

10.2.6 applies organizational and technical measures and uses information protection tools necessary to achieve the established level of protection of personal data;

10.2.7 detects the facts of unauthorized access to personal data and takes measures to respond, including the restoration of personal data modified or destroyed due to unauthorized access to them;

10.2.8 evaluates the effectiveness of the measures taken to ensure the security of personal data before the Operator’s information system is put into operation;

10.2.9 carries out internal control over the compliance of personal-data processing with the Federal Law “On Personal Data”, related regulations, requirements for the protection of personal data, the Policy, the Regulations and other local acts, including control over the measures taken to ensure the security of personal data and their level of protection during processing in the information system of the Operator.

11. Rights of personal data subjects

11.1 The personal-data subject has the right to:

11.1.1 to obtain personal data relating to this subject and information relating to their processing;

11.1.2 to clarify, block or destroy their personal data if they are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing;

11.1.3 to withdraw the consent given to the processing of personal data; - to protect their rights and legal

interests, including for damages and compensation for moral damage in court;

11.1.4 to appeal against the actions or omissions of the Operator to the authorised body for the protection of the rights of personal data subjects or in court.

11.2 To exercise their rights and legitimate interests, personal data subjects have the right to contact the Operator personally or with the help of a representative.

11.3 The request shall contain the information specified in Part 3 of Article 14 of the Federal Law “On Personal Data” and should be sent to the address specified in paragraph 1.5 of the Policy.

12. Final provisions

12.1 The Operator may amend this Personal Data Processing Policy unilaterally by publishing a new version online at 7color.ru .

12.2 In case of discrepancy between the Terms of the Policy and the provisions of the contract, the provisions of the contract shall prevail.