Policy on personal data processing
1. General provisions
This policy on processing of personal data is made in accordance with the requirements of the Federal Law of 27.07.2006. No. 152-FZ "On Personal Data" and defines the procedure for processing personal data and measures to ensure security of personal data undertaken by Five Stars (hereinafter the "Operator").
1.1 The Operator sets as its main goal and condition of its activities the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the rights to privacy, personal and family secrets.
1.2. The present Operator's policy regarding the processing of personal data (hereinafter - the Policy) applies to all information that the Operator can obtain about the visitors of the website http://fivestars.agency/.
2. Basic Concepts Used in the Policy
2.1. Automated processing of personal data means processing of personal data by means of computer equipment;
2.2.Blocking of personal data - temporary termination of personal data processing (except when processing is necessary to clarify personal data);
2.3. Website - a set of graphic and informational materials, as well as programs for computers and databases, making them available on the Internet at the network address http://fivestars.agency/;
2.4. Information system of personal data is a set of personal data contained in databases of personal data, and providing information technology and technical means for its processing;
2.5. Depersonalization of personal data - actions that make it impossible to determine, without the use of additional information, whether the personal data belongs to a particular user or another subject of personal data;
2.6. Processing of personal data - any action (operation) or set of actions (operations) performed with or without the use of automation with personal data, including the collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), anonymization, blocking, removal, destruction of personal data;
2.7. Operator - a state body, municipal authority, legal entity or individual, independently or together with other persons organizing and (or) carrying out processing of personal data, as well as defining the purpose of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data;
2.8. Personal Data - any information relating directly or indirectly to a specific or identifiable User of the http://fivestars.agency/ website;
2.9. User - any visitor to the http://fivestars.agency/ website;
2.10. Provision of personal data - actions aimed at disclosure of personal data to a certain person or a certain circle of people;
2.11. Dissemination of personal data - any action aimed at the disclosure of personal data to an indefinite range of persons (transfer of personal data) or to familiarize with personal data to an unlimited number of persons, including the publication of personal data in the media, placing in information and telecommunications networks or provide access to personal data in any other way;
2.12. Cross-border transfer of personal data - transfer of personal data to the territory of a foreign country to a foreign authority, a foreign individual or a foreign legal entity;
2.13. Destruction of personal data - any action resulting in the destruction of personal data irretrievably with the inability to further restore the content of personal data in the information system of personal data and (or) the destruction of the material media personal data.
3. The operator can process the following personal data of the User
3.1. Surname, first name, patronymic;
3.2. Email address;
3.3. Phone numbers;
3.4. The site also collects and processes impersonal data about visitors (including cookies) using Internet statistical services (Yandex Metrika and Google Analytics and others).
3.5. The above-mentioned data further in the text of the Policy are combined under the general term Personal Data.
4. Purposes of personal data processing
4.1. The purpose of processing of personal data of the User - informing the User by sending emails; providing access to the User to the services, information and/or materials contained on the website.
4.2. The Operator also has the right to send the User notifications about new products and services, special offers and different events. The User can always refuse to receive information messages by sending an email to the Operator at firstname.lastname@example.org with the note "Refuse notifications about new products and services and special offers".
4.3. Anonymized User data collected through Internet statistical services is used to collect information about Users' actions on the site, to improve the quality of the site and its content.
5. Legal basis for processing personal data
5.1. The Operator processes the User's personal data only in case the User fills them in and/or sends them by himself through the special forms located on the website http://fivestars.agency/. By filling out the relevant forms and/or sending his personal data to the Operator the User expresses his consent to this Policy.
6. Procedure for collecting, storing, transferring and other processing of personal data
The security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully meet the requirements of applicable laws in the field of personal data protection.
6.1. The operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorized persons.
6.2. The User's personal information will never, under any circumstances, be disclosed to third parties, except in cases related to the execution of applicable law.
6.3. In case of detection of inaccuracies in the personal data, the User can update them independently, by sending a notice to the Operator's e-mail address email@example.com with a note "Updating of personal data".
6.4. The period of processing of personal data is unlimited. The user may withdraw his or her consent to the processing of personal data at any time by sending a notice by e-mail to the Operator's e-mail address firstname.lastname@example.org marked "Withdrawal of consent to the processing of personal data".
7. Cross-border transfer of personal data
7.1. Before transborder transfer of personal data, the operator must ensure that the foreign country to whose territory the transfer of personal data is to be carried out, provides reliable protection of the rights of personal data subjects.
7.2. Cross-border transfer of personal data in foreign countries that do not meet the above requirements may be carried out only if the consent in writing of the subject of personal data on the cross-border transfer of his personal data and / or performance of the contract, to which the subject of personal data.
8. Concluding Provisions
8.1. The user can get any clarifications on questions of interest concerning the processing of his personal data by contacting the Operator via e-mail email@example.com.
8.2. This document will reflect any changes to the Operator's personal data processing policy. The policy is valid indefinitely until replaced by a new version.
8.3. The current version of the Policy is freely available on the Internet at http://fivestars.agency/policy.html.