Privacy Policy for Personal Data Processing1. General ProvisionsThis Privacy Policy for Personal Data Processing (hereinafter referred to as the "Policy") has been developed in accordance with the requirements of the Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006 (hereinafter referred to as the "Personal Data Law") and determines the procedure for processing personal data and the measures taken to ensure its security by the Operator, Volkov Andrey Alexandrovich (hereinafter referred to as the "Operator").
1.1. The primary purpose and condition for the Operator's activities is to ensure the rights and freedoms of individuals and citizens when processing their personal data, including the protection of privacy rights, personal, and family secrets.
1.2. This Policy for Personal Data Processing (hereinafter referred to as the "Policy") applies to all information that the Operator may receive about users of the website
https://prothai-invest.com.
2. Key Terms Used in the Policy2.1.
Automated Personal Data Processing — processing of personal data using computing equipment.
2.2.
Blocking of Personal Data — temporary suspension of personal data processing (except when processing is necessary for the clarification of personal data).
2.3.
Website — a set of graphic and information materials, as well as computer programs and databases, ensuring their availability on the Internet at the web address
https://prothai-invest.com.
2.4.
Personal Data System — a set of personal data contained in databases, and information technologies and technical means ensuring their processing.
2.5.
Anonymization of Personal Data — actions that make it impossible to determine which user or other subject the anonymized data belongs to, without using additional information.
2.6.
Personal Data Processing — any action (operation) or a set of actions (operations) performed with personal data, with or without the use of automated means, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (dissemination, provision, access), anonymization, blocking, deletion, destruction of personal data.
2.7.
Operator — a state or municipal body, a legal or natural person organizing and/or carrying out personal data processing independently or jointly with other persons, determining the purposes of personal data processing, the composition of personal data subject to processing, and actions (operations) performed with personal data.
2.8.
Personal Data — any information related directly or indirectly to a defined or definable user of the website
https://prothai-invest.com.
2.9.
Personal Data Allowed for Distribution — personal data, the access to which is provided by the subject of personal data to an indefinite circle of persons through consent to the processing of personal data, allowed by the subject of personal data for distribution in the prescribed manner.
3. Principles of Personal Data Processing3.1. The Operator processes personal data in accordance with the following principles:
3.1.1. Legality and fairness of personal data processing.
3.1.2. Processing only in connection with specific, legitimate purposes.
3.1.3. Ensuring that the content and volume of personal data correspond to the purposes of processing.
3.1.4. Ensuring that personal data is accurate and, if necessary, updated.
3.1.5. Ensuring that personal data is stored in a form that allows identifying the subject of personal data no longer than is required by the purposes of processing.
3.1.6. Ensuring the integrity and confidentiality of personal data.
4. Purposes of Personal Data Processing4.1. The personal data of users may be processed for the following purposes:
4.1.1. Providing access to the website.
4.1.2. Communicating with users (sending messages, answering requests, etc.).
4.1.3. Performing contractual obligations.
4.1.4. Improving the quality of services and products offered by the Operator.
4.1.5. Complying with legal obligations.
5. Rights of Data Subjects5.1. Users have the following rights concerning their personal data:
5.1.1. To request clarification of their personal data.
5.1.2. To block or delete inaccurate data.
5.1.3. To withdraw consent for processing personal data at any time (if applicable).
5.1.4. To request the destruction of their personal data in case of non-compliance with the terms of processing.
6. Confidentiality and Security of Personal Data6.1. The Operator ensures the confidentiality and security of personal data through the implementation of appropriate organizational and technical measures to protect personal data from unauthorized access, alteration, destruction, or disclosure.
6.2. The Operator’s employees, agents, or partners are obliged to maintain the confidentiality of personal data and are subject to legal liability in case of violations.
7. Terms of Personal Data Processing7.1. The Operator processes personal data for no longer than is necessary to fulfill the purposes outlined in this Policy.
7.2. Personal data is deleted upon the expiration of the processing period or at the request of the data subject, unless otherwise required by law.
8. Final Provisions8.1. This Policy is effective from the moment of its publication on the website and is valid until it is replaced with a new version.
8.2. The Operator reserves the right to amend or update this Policy at any time without prior notice to users.
8.3. In case inaccuracies are found in personal data, the User may update it independently by sending a notification to the Operator’s email address
info@prothai-invest.com with the subject line “Personal Data Update.”
8.4. The processing period for personal data is determined by the achievement of the purposes for which the personal data were collected, unless a different period is provided by the contract or applicable law. The User may revoke their consent for processing personal data at any time by sending a notification to the Operator via email at
info@prothai-invest.com with the subject line “Revocation of Consent for Personal Data Processing.”
8.5. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by these entities (Operators) in accordance with their User Agreement and Privacy Policy. The data subject may refer to the aforementioned documents. The Operator is not responsible for the actions of third parties, including the service providers mentioned in this section.
8.6. Any restrictions imposed by the data subject on the transfer (except for providing access) or processing conditions (except for receiving access) of personal data allowed for distribution are not applicable in cases of processing personal data in the public, social, or other public interests defined by Russian legislation.
8.7. The Operator ensures the confidentiality of personal data during processing.
8.8. The Operator stores personal data in a form that allows identifying the data subject for no longer than is necessary for the purposes of processing the personal data, unless a different retention period is set by federal law, the contract, or a party to which the data subject is a beneficiary or principal.
8.9. The processing of personal data may cease once the processing purposes are achieved, the consent of the data subject expires, the consent is revoked by the data subject, or a request is made to stop processing personal data, as well as when unauthorized processing of personal data is identified.
9. Actions Performed by the Operator with Personal Data9.1. The Operator collects, records, systematizes, accumulates, stores, clarifies (updates, modifies), extracts, uses, transfers (disseminates, provides access to), anonymizes, blocks, deletes, and destroys personal data.
9.2. The Operator performs automated processing of personal data with the receiving and/or transferring of the information through information and telecommunication networks, or without such transmission.
10. Cross-border Transfer of Personal Data10.1. Before beginning activities for cross-border transfer of personal data, the Operator must notify the authorized body for the protection of personal data subjects' rights about the intention to carry out the transfer (this notification is sent separately from the notification about the intention to process personal data).
10.2. Before submitting the above-mentioned notification, the Operator must obtain the necessary information from the foreign authorities, foreign individuals, and foreign legal entities to whom the personal data will be transferred.
11. Confidentiality of Personal DataThe Operator and other persons who have access to personal data are obliged not to disclose personal data to third parties or distribute it without the consent of the data subject, unless otherwise provided by federal law.
12. Final Provisions12.1. The User may obtain any clarifications on questions related to the processing of their personal data by contacting the Operator via email at
info@prothai-invest.com.
12.2. This document will reflect any changes to the Operator's personal data processing policy. The policy is valid indefinitely until replaced by a new version.
12.3. The current version of the Policy is freely available on the Internet at
https://prothai-invest.com/en/privacy.