Privacy policy

PRIVACY POLICY

REGARDING THE PROCESSING OF PERSONAL DATA

 

1.      General terms


1.1. This privacy Policy concerning the processing of personal data (hereinafter the "Policy") prepared in accordance with the requirements of the Federal law of 27.07.2006 №152-FZ "On personal data" (hereinafter – the "Federal law") and governs the processing of personal data and measures to ensure the security of personal data by the owner of the website  https://embroiderydreams.club (the "Site") Individual Entrepreneur Bocharova I.V. OGRNIP  319508100302919 (further reading – «Operator.)

1.2. The Operator sets its most important goal and condition for the implementation of its activities to respect the rights and freedoms of man and citizen in the processing of his personal data, including the protection of the rights to privacy, personal and family secrets.

1.3. This Operator's policy regarding the processing of personal data applies to all information that the Operator may obtain about users of the Site.

1.4. The User agrees to the processing of personal data in accordance with this Policy by using the Site and providing his personal data to the Operator. The User confirms that he is familiar with all the paragraphs of this Policy and accepts it without exceptions and stipulations.

1.5. The User expresses his complete agreement to the terms of the Policy. In case of disagreement with any of the paragraphs of the Policy, the User has no right to use the Site. Also, the User is prohibited from using the Site if he has not reached the legal age when he has the right to enter into agreements with the Site.

1.6. The user grants the Operator the right to receive, store, process, use and disclose the User's personal data under the terms of the Policy in the case of:

·  placing an order for the purchase of goods on the Site;

·  entering personal data on the order page and / or providing these data to the Operator in another way;

·  taking any action on the Site and / or using any part of the Site.

 

2.      Basic terms used in Politics.


2.1. Site – a website located at an https network address https://embroiderydreams.club   administered by the Operator.  

2.2. Processing of personal data – any action (operation) or set of actions (operations) of the Operator performed with personal data with the use of automation tools or without the use of such tools, including the collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.3. Operator IP Bocharova I.V., independently or jointly with other persons (employees) organizing and (or) carrying out the processing of personal data, as well as determining the purpose of processing personal data, the content of personal data to be processed, actions (operations) performed with personal data.

2.4. Personal data – any information relating directly or indirectly to a particular or identifiable User of the Site.
2.5. User – a visitor of the Site (seller or buyer) who wants to use and/or uses the services of the Operator through the Site.
2.6. Services – services for providing an Internet platform for the purchase and sale of goods between sellers and buyers (marketplace), information services provided by the Operator.
2.7. A cookie is a file that is stored on a User's computer or mobile device that a web client or web browser sends to a web server each time in an HTTP request when trying to open a page of the relevant website.

 

 3.      Personal data of the User that the Operator processes


3.1. The Operator processes personal information that the User provides about himself / herself in the process of using the Site, including personal data of the User. The Operator receives and processes the following User data sent to them by filling out forms posted on the Site:
·  F. I. O.;
·  address of residence/location (for the User-seller);
·  delivery address (place of residence of the User-buyer);
·  passport data;
·  email address;
·  payment account data (Bank or payment system)

3.2. The Site collects and processes impersonal visitors’ data (including cookies, IP-address of the User). This data is used to personalize materials, configure and measure advertising performance, to ensure the safety of the Site and its Users, to improve and simplify the process of visiting the Site. The Operator processes impersonal data about the User in case it is allowed in the User's browser settings (the saving of cookies and the use of JavaScript technology is enabled). The Operator does not use cookies to store personal information or disclose information to third parties.

3.3. The Operator uses Google Analytics and Yandex.Metrics for the Site traffic analysis and performance testing. Google Analytics and Yandex.Metrics generates statistical and other information about the Site using cookies that are stored in the User's computers. This information is used to compile reports on the use of the Site, its attendance (conversion). The data is stored in Google and Yandex.
3.4. In addition, the Operator collects information about website errors and User’s behavior on the Website.
3.5. The Operator does not process personal data of a special category, including data on political, religious and other beliefs, membership in public associations and trade Union activities, private and intimate life of the User.
3.6. In General, the Operator does not verify the accuracy of personal information provided by the User, and does not exercise control over their legal capacity. However, the Operator assumes that the User provides reliable and sufficient personal information on the issues proposed in the registration data form, feedback and maintains this information up to date.

4.      Purposes of personal data processing


4.1. The operator collects and stores only personal data that are necessary to provide services to Users.

4.2.  Purposes of personal data processing:
·   User's Identification as part of the use of the Site (this data can be displayed on the pages of the Site);
·   Site mailings to notify the User about new features, site news;
·   Provision and offer of Services;
·   Improving the quality of Services;
·   Improving the quality and ease of use of the Site;
·  Targeting of advertising materials;
·  Providing the User with access to the information kept on the Site;
·   Carrying out statistical and other researches based on impersonalized data.


5.      Legal bases for personal data processing.User’s agreement and rights.

 

5.1. The Operator processes the User's personal data only if it is filled in and / or sent by the User independently through special forms placed on the Website.
5.2. By voluntarily filling in the relevant forms and / or sending your personal data to the Operator, the User agrees to this Policy. The User's agreement to the processing of personal data is specific, informed and conscious. This User agreement is declared to be executed in a simple written form.
5.3. The User as a person of personal data has the right to receive information concerning his personal data processing, including information containing:
·         confirmation of personal data processing;
·         legal bases and purposes of personal data processing;
·         purposes and methods of personal data processing used by the Operator;
·         the name and location of the Operator, information about persons (except for employees of the Operator) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Operator or on the basis of Federal law;
·         processed personal data relating to the relevant person, the source of it receipt, unless a different procedure for the submission of such data is provided by Federal law;
·         time constraints of processing of personal data, including time constraints of their storage;
·         the procedure for the exercising rights provided for by the Federal law;
·         information on cross-border data transfers that has taken place or is expected to take place;
·         name or surname, name, patronymic and address of the person processing personal data on behalf of the Operator, if the processing is entrusted or will be entrusted to such person;
·         other information provided by Federal law or other Federal laws.

 

6.      Security, procedure and conditions of collection, storage, transfer and other types of personal data processing

 6.1. The security of personal data processed by the Operator is ensured through the implementation of legal, organizational and technical measures necessary to fulfill the requirements of the current legislation in the field of personal data protection.
6.2. Processing of personal data is carried out in any legal way, including in information systems of personal data using means of automation or without using such means.
6.3. Confidentiality of the User's personal information is maintained, except in cases of voluntary provision by the User of information about himself for General access to all users of the Site.
6.4. The Operator ensures the safety of personal data and takes all possible measures to exclude access of unauthorized persons to personal data.
6.5.  Personal data of the User will never, under any circumstances, be transferred to third parties, except of the following cases:
· The user has expressed his consent to such actions.
· The transfer is necessary as part of the User's use of the Site or to provide services to the User.
· The transfer is provided by Russian or other applicable legislation within the framework of the procedure established by the legislation.
· This transfer occurs as a part of a sale or other transfer of the business (in whole or in part), with the acquirer passing all obligations to comply with the terms of this Policy in relation to the personal information received by him.
6.6. All data collected by the Operator is stored on one or several secure servers.
6.7. Only authorized employees and partners of the Operator have access to personal data.  All employees of the Operator, partners who have access to personal data must adhere to the Policy. In order to ensure the confidentiality of information and the protection of personal data, the Operator takes all measures necessary to prevent unauthorized access.
6.8. The user agrees that the Operator has the right to transfer personal data to partners only for the purpose of providing services to the User.
6.9. In case of inaccuracies in personal data revealed, the User can update (change, supplement) it independently by sending a notification letter to the Operator's e-mail Address embroiderydreamclub@gmail.com marked "Updating / changing personal data".
6.10. The period of personal data processing is unlimited. The User may withdraw his agreement to the personal data processing at any time by sending a notification letter to the Operator's e-mail address embroiderydreamclub@gmail.com marked "Withdrawal of agreement to the processing of personal data".
6.11. Notification letters referred to in paragraphs 6.9.-6.10 of the Policy may also be sent by the User in hard copy to: ____________________________________.
6.12. Deletion and destruction of personal data shall be carried out in the procedure prescribed by the current legislation and regulations of the Operator. Removal, destruction of personal data is carried out by responsible persons:
· in cases provided by law;
· at the request of the User, public authority or court;
· at the expiration of the shelf life;
· at the expiration of the need.

 

7.      Responsibility

 7.1. Officials of the Operator, guilty of violating the rules governing the processing and protection of personal data, bear all kinds of responsibility in the procedure prescribed by Federal laws of the Russian Federation.
7.2.This Policy applies only to the services of the Site. The Operator does not control and is not responsible for the websites of third parties to which the User can click on the links available on the Site.
7.3. The privacy Policy does not regulate and the Operator is not responsible for the receipt, storage, processing, use and disclosure of personal data of the User by third parties who are not in the possession or control of the Site, and individuals who are not employees of the Site, even if the User has access to the websites of the goods or services of these persons through the Site or mailing list.
7.4.  In case of loss or disclosure of confidential information, the Operator is not responsible if this information:
· became public domain before its loss or disclosure;
· was received from a third party prior to its receipt by the Operator;
· was disclosed with the consent of the User;
7.5. The Site is not liable for any damage or losses suffered by the User and / or third parties as a result of a mistaken understanding or misunderstanding of the terms of the Policy, instructions or instructions on how to use the Site, regarding the placement of data and other technical issues.

 

8.      Final statements


8.1. The User can get any clarifications on issues of interest relating to the processing of his personal data by contacting the Operator by e-mail embroiderydreamclub@gmail.com .

8.2. The Operator has the right to make changes to this Policy at any time and at its discretion. When changes are made in the current edition, the date of the last update is indicated. The new version of the Policy enters into force from the moment of its posting on the Site, unless otherwise provided by the new version of the Policy.
8.3. The current version is always on the pages of the Site and is called “Privacy Policy regarding the processing of personal data”.
8.4. This Policy applies only to the Site.
8.5.  The Policy applies to the User from the moment when during the use of the Site, he / she has agreed to the terms of the Policy while transferring his / her personal data, and is valid as long as any information about the User, including personal data, is stored on the Site.
8.6. The Operator does not accept offers from Users regarding changes to this Policy.
8.7. All disputes between the parties are resolved through negotiations. The claim procedure for resolving disputes is mandatory, the period of response to the claim is 10 (ten) working days.
8.8. If it is impossible to reach an agreement through negotiations, disputes are resolved in court at the location of the Operator.

 

Date of publication: «07» December 2019