Policy on the Processing of Personal Data
1. General Provisions
- 1.1 This document sets forth the Policy of LIMITED LIABILITY COMPANY "HELICON" regarding the processing of personal data (hereinafter referred to as the Policy).
- 1.2 This Policy uses the terms and definitions set forth in Table 1. Other terms used in this Policy are used in the meanings defined by the legislation of the Russian Federation, other regulatory legal acts, and national standards in the field of personal data processing and protection.
Table 1 – List of Terms and Definitions
Term Definition Source Automated processing of personal data The processing of personal data using computer technology Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Blocking of personal data Temporary suspension of personal data processing (except in cases where processing is necessary to verify personal data) Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Personal Data Information System The aggregate of personal data contained in databases and the information technologies and technical means ensuring their processing Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Anonymization of personal data Actions that make it impossible to determine the ownership of personal data by a specific data subject without the use of additional information Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Processing of personal data Any action (operation) or set of actions (operations) performed with or without the use of automated means on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), de-identification, blocking, deletion, and destruction of personal data Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Controller A state body, municipal body, legal entity, or individual that, independently or jointly with other persons, organizes and/or carries out the processing of personal data, as well as determines the purposes of personal data processing, the scope of personal data subject to processing, and the actions (operations) performed on personal data Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Personal Data Any information relating directly or indirectly to an identified or identifiable natural person (data subject) Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Provision of personal data Actions aimed at disclosing personal data to a specific person or a specific group of persons Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Disclosure of Personal Data Actions aimed at disclosing personal data to an indefinite group of persons Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Computing equipment A set of software and hardware components of data processing systems capable of functioning independently or as part of other systems GOST R 50739-95 Destruction of personal data Actions that render it impossible to restore the content of personal data in a personal data information system and/or that result in the destruction of physical media containing personal data Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" Processing of personal data without the use of automated means Actions involving personal data, such as the use, clarification, dissemination, or destruction of personal data with respect to each data subject, which are carried out with the direct participation of a person Decree of the Government of the Russian Federation No. 687 of September 15, 2008, "On the Approval of the Regulations on the Specifics of Personal Data Processing Carried Out Without the Use of Automation Tools" - 1.3 This Policy has been developed based on the following regulatory legal acts:
- Federal Law No. 152-FZ of July 27, 2006, "On Personal Data";
- Decree of the Government of the Russian Federation No. 1119 dated November 1, 2012 "On the Approval of Requirements for the Protection of Personal Data During Their Processing in Personal Data Information Systems";
- Decree of the Government of the Russian Federation No. 687 dated September 15, 2008, "On the Approval of the Regulations on the Specifics of Personal Data Processing Carried Out Without the Use of Automation Tools."
- 1.4 This Policy, along with all amendments and changes thereto, is approved by order of LIMITED LIABILITY COMPANY "HELICON."
- 1.5 The Policy shall be published on the official website of LIMITED LIABILITY COMPANY "HELICON".
- 1.6 The provisions of the Policy apply to all matters related to the processing of personal data carried out at LIMITED LIABILITY COMPANY "HELICON," whether using automated means or not.
- 1.7 This Policy applies to all employees of LIMITED LIABILITY COMPANY "HELICON".
2. Purposes of Personal Data Processing
- 2.1 The purposes of processing personal data at LIMITED LIABILITY COMPANY "HELICON" are:
- collecting data on website user activity;
- maintaining the company's accounting and tax records and records of business operations;
- analyzing data on website user activity;
- obtaining data on website traffic and other user activities;
- sending email newsletters and informational materials;
- conducting surveys; registering for events;
- collecting information through feedback forms and obtaining data on website traffic and other user activities;
- using the platform to host online events and collecting data on website traffic and other user activities;
- purchasing tickets, booking hotels, and organizing employee business trips;
- HR record-keeping, payroll processing, and preparation of regulatory reports;
- automating document management;
- identifying, recognizing, and supporting talented students; obtaining information and participating in the project by filling out feedback forms (submitting an application, asking a question);
- promoting goods and services; registering (creating a personal account) on the website, as well as filling out other feedback forms;
- inventory management, settlements with counterparties, management (financial) accounting, product catalog management;
- automation of the company's organizational processes;
- cloud file storage;
- providing communication services to employees;
- real-time exchange of information and messages, and conducting business correspondence.
3. Legal basis for the processing of personal data
- 3.1 The basis for the processing of personal data at LIMITED LIABILITY COMPANY "HELICON" is the following legislation and documents:
- Consent of the data subject to the processing of personal data;
- Consent of the data subject to the processing of special categories of personal data;
- User consent obtained when visiting the website via a cookie banner;
- Consent to receive advertising and informational newsletters;
- Consent of the legal representative to the processing of a minor's personal data;
- Consent of the data subject to the cross-border transfer of personal data;
- Consent to the processing of personal data authorized by the data subject for dissemination;
- Labor Code of the Russian Federation;
- Tax Code of the Russian Federation;
- Civil Code of the Russian Federation;
- Federal Law No. 402-FZ of December 6, 2011, "On Accounting";
- Federal Law No. 326-FZ of November 29, 2010, "On Compulsory Health Insurance in the Russian Federation";
- Federal Law No. 165-FZ of July 16, 1999, "On the Fundamentals of Compulsory Social Insurance";
- Federal Law No. 255-FZ of December 29, 2006, "On Compulsory Social Insurance for Temporary Disability and Maternity";
- Federal Law No. 53-FZ of March 28, 1998, "On Military Duty and Military Service";
- Federal Law No. 27-FZ of April 1, 1996, "On Individual (Personalized) Records in the Systems of Mandatory Pension Insurance and Mandatory Social Insurance";
- Decree of the Government of the Russian Federation No. 719 of December 27, 2006, "On the Approval of the Regulations on Military Registration";
- Order of the Federal Archival Agency No. 236 of December 20, 2019;
- Federal Law No. 565-FZ of December 12, 2023, "On Employment of the Population in the Russian Federation";
- Letter of the Ministry of Labor of Russia dated April 1, 2025 No. 16-3/OOH-455;
- Order of the Ministry of Labor of Russia No. 195n dated April 16, 2024;
- The processing of personal data is necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, as well as for the conclusion of a contract at the initiative of the data subject or a contract under which the data subject will be a beneficiary or guarantor. A contract concluded with the data subject may not contain provisions restricting the rights and freedoms of the data subject, establishing cases for the processing of personal data of minors, unless otherwise provided by the legislation of the Russian Federation, as well as provisions permitting the inaction of the data subject as a condition for concluding the contract;
- other regulatory acts governing relations related to the activities of LIMITED LIABILITY COMPANY "HELICON."
4. Scope and categories of personal data processed, categories of data subjects
- 4.1 In accordance with the purposes of personal data processing specified in Section 2 of this Policy of LIMITED LIABILITY COMPANY "HELICON," the following categories of data subjects are processed:
- employees;
- former employees;
- relatives of employees;
- website users;
- job applicants;
- contractors;
- representatives of contractors;
- beneficiaries under contracts;
- clients.
- 4.2 For each purpose of processing personal data processed by LIMITED LIABILITY COMPANY "HELICON," orders of LIMITED LIABILITY COMPANY "HELICON COMPANY," the scope, categories, and lists of personal data being processed, the categories of data subjects processed in personal data information systems, the methods and timeframes for their processing and storage, and the procedure for destroying personal data upon achieving the processing purposes or upon the occurrence of legal grounds are approved.
5. Principles and Conditions for the Processing of Personal Data
- 5.1 When processing personal data at LIMITED LIABILITY COMPANY "HELICON," the following principles are observed:
- the processing of personal data is carried out on a lawful and fair basis;
- the processing of personal data is limited to the achievement of specific, predefined, and legitimate purposes;
- The processing of personal data that is incompatible with the purposes for which the personal data was collected is not permitted;
- It is not permitted to merge databases containing personal data that are processed for purposes that are incompatible with one another;
- Only personal data that is relevant to the purposes of processing may be processed;
- The content and scope of the personal data being processed must correspond to the stated purposes of processing;
- The personal data being processed is not excessive in relation to the stated purposes of its processing;
- When processing personal data, the accuracy, adequacy, and, where necessary, relevance of the personal data in relation to the purposes of processing are ensured;
- necessary measures are taken to delete or correct incomplete or inaccurate personal data;
- personal data is stored in a form that allows the identification of the data subject for no longer than is necessary for the purposes of processing personal data, unless the retention period for personal data is established by federal law, a contract to which the data subject is a party, or a contract under which the data subject is a beneficiary or guarantor; Processed personal data shall be destroyed or anonymized upon achievement of the purposes of processing or in the event that the need to achieve these purposes ceases to exist, unless otherwise provided by the legislation of the Russian Federation.
- 5.2 LIMITED LIABILITY COMPANY "HELICON" carries out both automated processing of personal data and processing without the use of automation tools. The set of personal data processing operations at LIMITED LIABILITY COMPANY "HELICON" includes: collection, recording, systematization, accumulation, storage, retrieval, use, deletion, clarification (updating, modification), destruction, blocking, transfer (provision, access).
- 5.3 When collecting personal data, LIMITED LIABILITY COMPANY "HELICON" ensures the recording, systematization, accumulation, storage, clarification (updating, modification), and retrieval of personal data using databases located within the territory of the Russian Federation.
- 5.4 LIMITED LIABILITY COMPANY "HELICON" transfers personal data to third parties in accordance with the requirements of the legislation of the Russian Federation regarding the processing and protection of personal data. LIMITED LIABILITY COMPANY "HELICON" is entitled, in the course of its activities, to entrust the processing of personal data to another person with the consent of the data subject, unless otherwise provided by federal law, on the basis of a contract concluded with that person. In this regard, a mandatory condition for the provision and/or entrustment of personal data processing to another party is the parties' obligation to maintain confidentiality and ensure the security of personal data during its processing. The entrustment/contract concluded with such a person shall specify the list of personal data, the list of actions (operations) with personal data to be performed by the person processing the personal data, the purposes of such processing, and shall establish the obligation of such a person to maintain the confidentiality of personal data, as required by Part 5 of Article 18 and Article 18.Article 1 of Federal Law No. 152-FZ of July 27, 2006, "On Personal Data" (hereinafter referred to as the "Federal Law"), the obligation to provide, upon request, to LIMITED LIABILITY COMPANY "HELICON COMPANY" to provide, during the term of the assignment/contract, including prior to the processing of personal data, documents and other information confirming the implementation of measures and compliance with the requirements for ensuring the security and protection of personal data during their processing in accordance with the Federal Law, for the purpose of fulfilling the assignment/contract.
- 5.5
In cases where LIMITED LIABILITY COMPANY "HELICON COMPANY" entrusts the processing of personal data to another person, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall be liable to the data subject for the actions of said person.
LIMITED LIABILITY COMPANY "HELICON" entrusts the processing of personal data to:
-
5.5.1. LLC "YANDEX" (TIN 7736207543, OGRN 1027700229193) (119021, Moscow, Lva Tolstogo St., 16),
- Purpose of processing personal data: to obtain data on website traffic and other user activities;
- List of data: cookies: data on visits, users, behavioral factors, goal achievement, and parameter data that allow for highly accurate tracking of the source, channel, and effectiveness of traffic on the website; collection of statistics using the "Yandex.Metrica" service.
-
5.5.2. Tilda Publishing JSC (TIN 9707041449, OGRN 1247700830354) (107031, MOSCOW, VN.TER.G. Tverskoy Municipal District, Petrovskie Linii St., Bldg. 2, Prem. 4/1),
- the purpose of the processing of personal data is to obtain information through the completion of feedback forms and to collect data on website traffic and other user activities;
- List of data: last name, first name, patronymic (if applicable), phone number, email address, type of study program, academic year, name of the university, city, name of the laboratory, working title of the project, project objectives, project description file, expected results, cookies: visit data, user data, behavioral factors, goal achievement, parameter data that allows for highly accurate tracking of the source, channel, and effectiveness of website traffic.
-
5.5.3. LLC " UNISENDER SMART " (TIN 9731091240, OGRN 1227700213180) (, MOSCOW, MUNICIPAL DISTRICT OF BUTYRSKY, 23 BOLSHAYA NOVODMITROVSKAYA STREET, APT. 2/46),
- Purpose of processing personal data: email newsletters, sending informational materials.
- List of data: last name, first name, patronymic (if applicable), phone number, email address, form of study at the university, academic year at the university, name of the university, city, name of the laboratory, working title of the project, project objectives, project description file, expected results, TIN, KPP.
-
5.5.4. Webinar Technologies LLC (TIN 7707340808, OGRN 1157746417575) (127055, MOSCOW, PRIYUTSKY LANE, 3, BUILDING 1),
- purpose of the personal data processing order--- : use of the platform to conduct online events and collection of data on website traffic and other user activities on;
- List of data: last name, first name, patronymic (if applicable), phone number, email address, city, organization, laboratory name, cookies: login date and time, session connection parameters and IP address, visit duration, source of the first visit to the online event page, user ID, browser information.
-
5.5.5. IOM Ankétolog LLC (TIN 5406827672, OGRN 1225400049753) (630099, NOVOSIBIRSK REGION, NOVOSIBIRSK CITY DISTRICT, NOVOSIBIRSK, KRASNY PROSPECT, 29, OFFICE 54)
- Purpose of the personal data processing order: conducting surveys; registration for events;
- List of data: last name, first name, patronymic (if applicable), phone number, email address, date and year of birth, TIN, photo, and video image.
-
5.5.6. 1C-BITRIX LLC (TIN 7717586110, OGRN 5077746476209) (109544, MOSCOW, 2 Entuziastov Blvd., 13th Floor, Rooms 8-19),
- purpose of the personal data processing order: analysis of data on website user activity;
- List of data: cookies: collection of analytics on website usage (user ID; IP address; information about the user's actions within the product; device information); analytics on website user behavior (visit duration; client ID; device information; location; gender; number of visits; browser information; OS information; interest information; IP address; traffic information; age).
-
5.5.7. LLC "COMPANY VK" (TIN 7714789489, OGRN 1097746572813), (125167, Moscow, Leningradsky Prospekt, 39, bldg. 79),
- purpose of the personal data processing order: collection of data on website user activity;
- list of data: cookies: IP address, browsing history, device data.
-
5.5.8. Agentika Travel LLC (TIN 7703403951, OGRN 5157746182446) (127030, Moscow, Inner City Area, Tverskoy Municipal District, Novoslobodskaya St., 16, Room 1/1),
- The purpose of processing personal data is to purchase tickets, book hotels, and arrange business travel for employees,
- List of data: last name, first name, patronymic (if applicable), date of birth, month of birth, year of birth, gender, citizenship, TIN, SNILS, residential address, registration address, email address, phone number, details of an identity document, details of an identity document issued outside the Russian Federation.
The cookie policy is posted on the Operator's website.
-
5.5.1. LLC "YANDEX" (TIN 7736207543, OGRN 1027700229193) (119021, Moscow, Lva Tolstogo St., 16),
- 5.6 The processing of personal data shall be terminated upon the cessation of operations of LIMITED LIABILITY COMPANY "HELICON" (liquidation or reorganization); upon the achievement of the purposes of personal data processing; upon the data subject's withdrawal of consent to the processing of their personal data; upon the detection of unlawful actions involving personal data; as well as in other cases provided for by the current legislation of the Russian Federation.
- 5.7
Cross-border transfer of personal data is carried out in accordance with the requirements of Article 12 of Federal Law No. 152-FZ of June 27, 2006, "On Personal Data" for the purposes of:
- purchasing tickets, booking hotels, and organizing business trips for employees of LIMITED LIABILITY COMPANY "HELICON."
- 5.8 LIMITED LIABILITY COMPANY "HELICON" ensures the confidentiality of personal data. Employees of LIMITED LIABILITY COMPANY "HELICON" who have access to personal data shall not disclose such data to third parties or disseminate it without the consent of the data subject, unless otherwise provided by federal law.
- 5.9
The processing of other categories of personal data is carried out by LLC "HELICON COMPANY" in compliance with the following conditions:
- the processing of personal data is carried out with the consent of the data subject to the processing of their personal data,
- the processing of personal data is necessary for the performance of a contract to which the data subject is a party, beneficiary, or guarantor, as well as for the conclusion of a contract at the initiative of the data subject or a contract under which the data subject will be a beneficiary or guarantor. A contract concluded with the data subject may not contain provisions restricting the rights and freedoms of the data subject, establishing cases for the processing of minors' personal data, unless otherwise provided by the legislation of the Russian Federation, nor may it contain provisions permitting the inaction of the data subject as a condition for concluding the contract.
- 5.10 The processing of special categories of personal data is permitted by LIMITED LIABILITY COMPANY "HELICON" in the cases specified in Article 10 of the Federal Law "On Personal Data."
6. Implementation of personal data security measures adopted by LIMITED LIABILITY COMPANY "HELICON"
- 6.1
LIMITED LIABILITY COMPANY "HELICON COMPANY" adopts or ensures the adoption of necessary and sufficient legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, disclosure, or distribution of personal data, as well as from other unlawful actions regarding personal data.
Such measures at LIMITED LIABILITY COMPANY "HELICON" include:
- appointing a person responsible for organizing the processing of personal data;
- issuing local regulations of "" regarding the processing of personal data, which define for each purpose of processing the categories and list of personal data to be processed, the categories of data subjects whose personal data is processed, the methods, the terms of their processing and storage, the procedure for destroying personal data upon the achievement of the purposes of their processing or upon the occurrence of other legal grounds, as well as local regulations establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation in the field of personal data processing and protection, and eliminating the consequences of such violations;
-
the application or ensuring the application of legal, organizational, and technical measures to ensure the security of personal data in accordance with Article 19 of the Federal Law "On Personal Data," in particular:
- identifying threats to the security of personal data during its processing in the personal data information systems of LIMITED LIABILITY COMPANY "HELICON";
- implementing technical and organizational measures to protect personal data processed in the personal data information systems of LIMITED LIABILITY COMPANY "HELICON COMPANY," based on the requirements approved by Resolution of the Government of the Russian Federation No. 1119 dated November 1, 2012 "On the Approval of Requirements for the Protection of Personal Data During Its Processing in Personal Data Information Systems" and the requirements of Order No. 21 of the Federal Service for Technical and Export Control of Russia dated February 18, 2013, "On the Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data During Its Processing in Personal Data Information Systems," developed based on the results of:
- the identification of categories of personal data processed in the personal data information systems of LIMITED LIABILITY COMPANY "HELICON";
- determining the level of personal data security during processing in personal data information systems based on an analysis of current threats to personal data security and the potential harm to data subjects in the event of such threats;
- organizing security measures for the premises housing personal data information systems to prevent unauthorized entry or presence in these premises by persons without access rights;
- ensuring the proper record-keeping and security of physical media containing personal data;
- organizing access to personal data processed in personal data information systems;
- using information security measures that have undergone conformity assessment procedures in accordance with Russian Federation legislation on information security;
- implementing antivirus monitoring and detection;
- deploying network firewalls (filters);
- timely installation of updates for the software used in personal data information systems and information security tools;
- organizing the protection of technical equipment for personal data information systems;
- conducting internal compliance monitoring of personal data processing with the legislation of the Russian Federation on personal data, requirements for the protection of personal data, and the internal documents of LIMITED LIABILITY COMPANY "HELICON" in the field of personal data processing and protection;
- assessing the harm that may be caused to data subjects in the event of a violation of the Federal Law "On Personal Data," the relationship between the aforementioned harm and the measures taken by LIMITED LIABILITY COMPANY "HELICON" to ensure compliance with the obligations set forth in the Federal Law "On Personal Data";
- familiarizing employees of LIMITED LIABILITY COMPANY "HELICON" with the provisions of the legislation of the Russian Federation on personal data, the internal documents of LIMITED LIABILITY COMPANY "HELICON COMPANY" regarding the processing of personal data and requirements for the protection of personal data;
- the publication (posting) on the official website of LIMITED LIABILITY COMPANY "HELICON" of a document defining the policy regarding the processing of personal data.
- 6.2 LIMITED LIABILITY COMPANY "HELICON" ensures, in accordance with established procedures, cooperation with the state system for the detection, prevention, and mitigation of the consequences of cyberattacks on the information resources of the Russian Federation, including notifying the federal executive authority responsible for security matters regarding cyber incidents that have resulted in the unlawful transfer (disclosure, dissemination, or access) of personal data.
7. Processing of personal data carried out without the use of automation tools
- 7.1 When processed without the use of automated means, personal data shall be separated from other information, in particular by recording it on separate physical media for personal data (hereinafter "physical media") in dedicated sections.
- 7.2 When recording personal data on physical media, it is not permitted to record on a single physical medium personal data whose processing purposes are known to be incompatible. For the processing of different categories of personal data carried out without the use of automated means, a separate physical medium is used for each category of personal data.
- 7.3 Persons processing personal data without the use of automated means (including employees of LIMITED LIABILITY COMPANY "HELICON COMPANY" or persons performing such processing under a contract with LIMITED LIABILITY COMPANY "HELICON COMPANY"), are informed of the fact that they are processing personal data, the processing of which is carried out by LIMITED LIABILITY COMPANY "HELICON COMPANY" without the use of automated means, the categories of personal data being processed, as well as the specifics and rules for such processing established by the regulatory legal acts of the Russian Federation and the local legal acts of LIMITED LIABILITY COMPANY "HELICON."
- 7.4
When using standard document forms, the nature of the information contained therein implies or permits the inclusion of personal data (hereinafter referred to as the "standard form"), the following conditions shall be observed:
- the standard form or related documents (instructions for filling it out, cards, registers, and logs) contain information about the purpose of processing personal data carried out without the use of automated means, the name (legal name) and address of LIMITED LIABILITY COMPANY "HELICON," the surname, first name, patronymic, and address of the data subject, the source of the personal data, the duration of personal data processing, a list of actions involving personal data that will be performed during processing, and a general description of the methods of personal data processing used by LIMITED LIABILITY COMPANY "HELICON";
- the standard form includes a checkbox where the data subject may give their consent to the processing of personal data carried out without the use of automated means, if written consent for the processing of personal data is required;
- the standard form is designed so that each data subject listed in the document has the opportunity to review their personal data contained in the document without infringing upon the rights and legitimate interests of other data subjects;
- the standard form shall not combine fields intended for entering personal data whose processing purposes are known to be incompatible.
- 7.5
In the event of incompatibility of the purposes of processing personal data recorded on a single physical medium, if the physical medium does not allow for the processing of personal data separately from other personal data recorded on the same medium, measures shall be taken to ensure the separate processing of personal data, in particular:
- if it is necessary to use or disseminate certain personal data separately from other personal data located on the same physical medium, the personal data subject to dissemination or use shall be copied in a manner that excludes the simultaneous copying of personal data not subject to dissemination or use, and a copy of the personal data shall be used (disseminated);
- If it is necessary to destroy or block part of the personal data, the physical storage medium shall be destroyed or blocked after first copying the information not subject to destruction or blocking in a manner that prevents the simultaneous copying of personal data subject to destruction or blocking.
- 7.6 The destruction or anonymization of a portion of personal data, if permitted by the physical medium, may be performed in a manner that precludes further processing of such personal data while preserving the ability to process other data recorded on the physical medium (deletion, erasure). The provisions set forth in this paragraph and in paragraph 7.5 of this Policy also apply in cases where it is necessary to ensure the separate processing of personal data and information that is not personal data recorded on a single physical medium.
- 7.7 When personal data is processed without the use of automated means, corrections are made by updating or modifying the data on the physical medium; if this is not possible due to the technical characteristics of the physical medium, by recording details of the changes on the same physical medium, or by creating a new physical medium containing the corrected personal data.
- 7.8
Measures to ensure the security of personal data during processing carried out without the use of automated means:
- The processing of personal data without the use of automated means is carried out in such a way that, for each category of personal data, the storage locations of the personal data (physical media) can be identified and a list of persons who process the personal data or have access to it can be established;
- separate storage of personal data (physical media) processed for different purposes is ensured;
- the storage of physical media complies with conditions that ensure the security of personal data and prevent unauthorized access to it. The list of measures necessary to ensure such conditions, the procedure for their adoption, as well as the list of persons responsible for implementing these measures, are established by LIMITED LIABILITY COMPANY "HELICON."
8. Updating, correcting, deleting, and destroying personal data; responding to data subjects' requests for access to personal data
- 8.1
Rights of data subjects:
- 8.1.1
The right of a data subject to access their personal data:
-
1) The data subject has the right to receive information (hereinafter referred to as "information requested by the data subject") regarding the processing of their personal data, including:
- confirmation of the fact that personal data is being processed by LIMITED LIABILITY COMPANY "HELICON";
- the legal grounds and purposes of the processing of personal data;
- the purposes and methods of processing personal data used by LIMITED LIABILITY COMPANY "HELICON";
- the name and location of LIMITED LIABILITY COMPANY "HELICON", information about persons (excluding employees of LIMITED LIABILITY COMPANY "HELICON"), who have access to personal data or to whom personal data may be disclosed on the basis of a contract with LIMITED LIABILITY COMPANY "HELICON" or on the basis of federal law;
- the personal data being processed relating to the relevant data subject, and the source of such data, unless federal law provides for a different procedure for disclosing such data;
- the terms of personal data processing, including the terms of its storage;
- the procedure for the data subject to exercise the rights provided for by the Federal Law "On Personal Data";
- information regarding any cross-border data transfers that have taken place or are planned;
- the name or surname, first name, patronymic, and address of the person processing personal data on behalf of LIMITED LIABILITY COMPANY "HELICON," if such processing has been or will be entrusted to that person;
- information on the methods by which the operator fulfills the obligations established by Article 18.1 of the Federal Law "On Personal Data";
- other information provided for by the Federal Law "On Personal Data" or other federal laws.
- 2) The data subject has the right to receive the information requested by the data subject, except in cases where the data subject's access to their personal data violates the rights and legitimate interests of third parties.
- 3) The data subject has the right to request from LIMITED LIABILITY COMPANY "HELICON COMPANY" to correct, block, or destroy their personal data if such data is incomplete, outdated, inaccurate, obtained unlawfully, or unnecessary for the stated purpose of processing, as well as to take measures provided for by law to protect their rights.
- 4) The information requested by the data subject must be provided to the data subject by LIMITED LIABILITY COMPANY "HELICON COMPANY" in an accessible form, and it must not contain personal data relating to other data subjects, except where there are lawful grounds for disclosing such personal data.
- 5) The requested information shall be provided to the data subject or their representative by LIMITED LIABILITY COMPANY "HELICON" within 10 business days from the date of the request or upon receipt of the request from the data subject or their representative. This period may be extended, but by no more than 5 business days, if LIMITED LIABILITY COMPANY "HELICON" sends a reasoned notice to the data subject specifying the reasons for extending the deadline for providing the requested information. The request must include the number of the primary document verifying the identity of the data subject or their representative, information regarding the date of issuance of said document and the issuing authority, information confirming the data subject's relationship with LIMITED LIABILITY COMPANY "HELICON COMPANY" (contract number, date of contract conclusion, contractual designation, and/or other details), or information otherwise confirming the fact of personal data processing by LIMITED LIABILITY COMPANY "HELICON COMPANY," the signature of the data subject or their representative (hereinafter referred to as the information required for the request). The request may be submitted in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation. LIMITED LIABILITY COMPANY "HELICON" provides information to the data subject or their representative in the same form in which the relevant application or request was submitted, unless otherwise specified in the application or request.
- 6) If the information requested by the data subject, as well as the personal data being processed, was previously provided to the data subject for review at their request, the data subject has the right to submit a new request to LIMITED LIABILITY COMPANY "HELICON COMPANY" or submit a repeat request to obtain the information requested by the data subject and to review such personal data no earlier than 30 days after the initial contact or submission of the initial request, unless a shorter period is established by federal law, a regulatory legal act adopted in accordance therewith, or a contract, to which the data subject is a party, or under which the data subject is a beneficiary or guarantor.
- 7) The data subject has the right to contact LIMITED LIABILITY COMPANY "HELICON" again or submit a repeat request in order to obtain the information requested by the data subject, as well as to review the processed personal data before the expiration of the period specified in subparagraph 6 of paragraph 8.1.1 of these Regulations, in the event that such information and/or the processed personal data were not provided to the data subject for review in full following the consideration of the initial request. The repeat request, along with the information required for the request, must include a justification for submitting the repeat request.
- 8) LIMITED LIABILITY COMPANY "HELICON" has the right to refuse to fulfill a repeat request from a data subject if it does not meet the conditions for a repeat request. Such a refusal must be justified. The burden of proof regarding the validity of the refusal to fulfill the repeat request lies with LIMITED LIABILITY COMPANY "HELICON."
-
1) The data subject has the right to receive information (hereinafter referred to as "information requested by the data subject") regarding the processing of their personal data, including:
- 8.1.2
Right to appeal the actions or inaction of LIMITED LIABILITY COMPANY "HELICON":
- 1) If the data subject believes that LIMITED LIABILITY COMPANY "HELICON COMPANY" is processing their personal data in violation of the requirements of the Federal Law "On Personal Data" or is otherwise violating their rights and freedoms, the data subject has the right to appeal the actions or inaction of LIMITED LIABILITY COMPANY "HELICON COMPANY" to the authorized body for the protection of the rights of data subjects or through legal proceedings.
- 2) The data subject has the right to protect their rights and legitimate interests, including the right to recover damages and/or compensation for moral harm through legal proceedings.
- 8.1.3 LIMITED LIABILITY COMPANY "HELICON" does not process personal data for the purpose of promoting goods, works, or services on the market by establishing direct contact with potential consumers via means of communication, nor for the purpose of political campaigning.
- 8.2
Obligations of the controller:
- 8.2.1
The operator's obligations when collecting personal data:
- 1) When collecting personal data, LIMITED LIABILITY COMPANY "HELICON COMPANY" provides the data subject, upon their request, with the requested information regarding the processing of their personal data in accordance with Part 7 of Article 14 of the Federal Law "On Personal Data."
- 2) If the provision of personal data and/or the LIMITED LIABILITY COMPANY "HELICON" obtaining consent to the processing of personal data are mandatory in accordance with federal law, LIMITED LIABILITY COMPANY "HELICON" explains to the data subject the legal consequences of refusing to provide their personal data and/or to give consent to its processing.
- 3)
If personal data is obtained from a source other than the data subject, LIMITED LIABILITY COMPANY "HELICON" shall, prior to the processing of such personal data, provide the data subject with the following information (hereinafter referred to as "information provided when personal data is obtained from a source other than the data subject"):
- the name or surname, first name, patronymic, and address of LIMITED LIABILITY COMPANY "HELICON";
- the purpose of processing personal data and its legal basis;
- a list of personal data;
- intended users of the personal data;
- the rights of the data subject as established by the Federal Law "On Personal Data";
- the source of the personal data.
- 4)
LIMITED LIABILITY COMPANY "HELICON" does not provide the data subject with information disclosed upon receipt of personal data not directly from the data subject in cases where:
- the data subject has been notified of the processing of their personal data by LIMITED LIABILITY COMPANY "HELICON";
- the personal data was obtained by LIMITED LIABILITY COMPANY "HELICON" pursuant to federal law or in connection with the performance of a contract to which the data subject is a party, beneficiary, or guarantor;
- the processing of personal data authorized by the data subject for disclosure is carried out in compliance with the prohibitions and conditions set forth in Article 10.1 of Federal Law No. 152-FZ dated June 27, 2006, "On Personal Data";
- LIMITED LIABILITY COMPANY "HELICON COMPANY" processes personal data for statistical or other research purposes, for the performance of professional journalistic activities or scientific, literary, or other creative activities, provided that this does not violate the rights and legitimate interests of the data subject;
- providing the data subject with information disclosed when personal data is obtained from a source other than the data subject violates the rights and legitimate interests of third parties.
- 8.2.2
The controller's obligations when contacted by the data subject or upon receiving a request from the data subject or their representative, as well as from the authorized body for the protection of data subjects' rights:
- 1) LIMITED LIABILITY COMPANY "HELICON" shall, in accordance with established procedures, inform the data subject or their representative of the existence of personal data relating to the relevant data subject, and shall provide the opportunity to review such personal data upon a request from the data subject or their representative, or within 10 business days from the date of receipt of the request from the data subject or their representative. This period may be extended, but by no more than 5 business days, if LIMITED LIABILITY COMPANY "HELICON" sends a reasoned notice to the data subject stating the reasons for extending the deadline for providing the requested information.
- 2) In the event of a refusal to provide information regarding the existence of personal data pertaining to the relevant data subject, or to provide such personal data to the data subject or their representative upon their request, or upon receipt of a request sent to by the data subject or their representative, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall provide a written, reasoned response within a period not exceeding 10 business days from the date of the request by the data subject or their representative, or from the date of receipt of the request from the data subject or their representative. This period may be extended, but by no more than 5 business days, if LIMITED LIABILITY COMPANY "HELICON" sends a reasoned notice to the data subject stating the reasons for the extension of the deadline for providing the requested information.
- 3) LIMITED LIABILITY COMPANY "HELICON" provides the data subject or their representative, free of charge, with the opportunity to review the personal data pertaining to that data subject. Within a period not exceeding 7 business days from the date the data subject or their representative provides information confirming that the personal data is incomplete, inaccurate, or out of date, LIMITED LIABILITY COMPANY "HELICON" shall make the necessary changes to such data. Within a period not exceeding 7 business days from the date the data subject or their representative provides information confirming that such personal data was obtained unlawfully or is not necessary for the stated purpose of processing, LIMITED LIABILITY COMPANY "HELICON" shall destroy such personal data. LIMITED LIABILITY COMPANY "HELICON" notifies the data subject or their representative of the changes made and the measures taken, and takes reasonable steps to notify third parties to whom the data subject's personal data has been transferred.
- 4) LIMITED LIABILITY COMPANY "HELICON" shall provide the authorized body for the protection of the rights of data subjects with the necessary information upon request from such body within 10 business days from the date of receipt of such request. This period may be extended, but by no more than 5 business days, if LIMITED LIABILITY COMPANY "HELICON COMPANY" to the authorized body for the protection of personal data subjects, stating the reasons for the extension of the deadline for providing the requested information.
- 8.2.3
The controller's obligations to remedy violations of the law committed during the processing of personal data, and to correct, block, and destroy personal data:
- 1) In the event of the detection of unlawful processing of personal data upon a request from the data subject or their representative, or at the request of the data subject or their representative, or the authorized body for the protection of the rights of data subjects, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall block the unlawfully processed personal data relating to that data subject or ensure its blocking (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") from the moment of such a request or receipt of the specified request for the duration of the verification. In the event of the discovery of inaccurate personal data upon a request from the data subject or their representative, or at their request, or at the request of an authorized body for the protection of the rights of data subjects, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall block the personal data relating to this data subject or ensure its blocking (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") from the moment of such a request or receipt of the specified request for the duration of the verification, provided that the blocking of personal data does not violate the rights and legitimate interests of the data subject or third parties.
- 2) If the inaccuracy of the personal data is confirmed, LIMITED LIABILITY COMPANY "HELICON COMPANY," based on information provided by the data subject or their representative, or by the authorized body for the protection of data subjects' rights, or other necessary documents, shall correct the personal data or ensure its correction (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") within 7 business days from the date of submission of such information and unblocks the personal data.
- 3) In the event of the detection of unlawful processing of personal data carried out by LIMITED LIABILITY COMPANY "HELICON" or a person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY," LIMITED LIABILITY COMPANY "HELICON COMPANY" shall, within a period not exceeding 3 business days from the date of such discovery, cease the unlawful processing of personal data or ensure that the unlawful processing of personal data is ceased by a person acting on behalf of LIMITED LIABILITY COMPANY "HELICON". If it is impossible to ensure the lawfulness of the processing of personal data, LIMITED LIABILITY COMPANY "HELICON" shall, within a period not exceeding 10 business days from the date of detection of the unlawful processing of personal data, destroy such personal data or ensure its destruction. LIMITED LIABILITY COMPANY "HELICON COMPANY" shall notify the data subject or their representative, and if the request from the data subject or their representative, or the request from the authorized body for the protection of data subjects' rights, was forwarded by the authorized body for the protection of data subjects' rights, then that body as well.
-
4) In the event that an unlawful or accidental transfer (disclosure, dissemination, or access) of personal data is established, resulting in a violation of the rights of data subjects, LIMITED LIABILITY COMPANY "HELICON COMPANY" is obligated, from the moment such an incident is detected by the operator, the authorized body for the protection of the rights of data subjects, or any other interested party, to notify the authorized body for the protection of the rights of data subjects:
- within 24 hours of the incident, including the alleged causes leading to the violation of the rights of data subjects and the alleged harm caused to the rights of data subjects, of the measures taken to mitigate the consequences of the incident, as well as provide information regarding the person authorized by LIMITED LIABILITY COMPANY "HELICON COMPANY" to interact with the authorized body for the protection of the rights of data subjects on issues related to the identified incident;
- within 72 hours, the results of the internal investigation into the identified incident, as well as information regarding the individuals whose actions caused the identified incident (if applicable).
- 5) Once the purpose of processing personal data has been achieved, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall cease processing personal data or ensure its cessation (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") and destroys the personal data or ensures its destruction (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") within a period not exceeding 30 days from the date the purpose of processing personal data is achieved, unless otherwise provided by a contract, to which the data subject is a party, beneficiary, or guarantor, or by another agreement between LIMITED LIABILITY COMPANY "HELICON COMPANY" and the data subject, or if LIMITED LIABILITY COMPANY "HELICON COMPANY" is not entitled to process personal data without the consent of the data subject on the grounds provided for by the Federal Law "On Personal Data" or other federal laws.
- 6) In the event that the data subject revokes their consent to the processing of their personal data, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall cease such processing or ensure that such processing is ceased (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") and, if the retention of personal data is no longer necessary for the purposes of processing personal data, destroys the personal data or ensures its destruction (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") within a period not exceeding 30 days from the date of receipt of the specified withdrawal, unless otherwise provided by a contract, to which the data subject is a party, beneficiary, or guarantor, or by any other agreement between LIMITED LIABILITY COMPANY "HELICON COMPANY" and the data subject, or unless LIMITED LIABILITY COMPANY "HELICON COMPANY" is not entitled to process personal data without the consent of the data subject on the grounds provided for by the Federal Law "On Personal Data" or other federal laws.
- 7) If the data subject contacts LIMITED LIABILITY COMPANY "HELICON" with a request to cease processing personal data, the controller is obligated, within a period not exceeding 10 business days from the date the controller receives the relevant request, to cease such processing or ensure that such processing is ceased (if such processing is carried out by a processor), except in cases provided for by the Federal Law "On Personal Data." This period may be extended, but by no more than 5 business days, if the operator sends the data subject a reasoned notice specifying the grounds for extending the deadline for providing the requested information.
- 8) If it is not possible to destroy the personal data within the specified period, LIMITED LIABILITY COMPANY "HELICON COMPANY" shall block such personal data or ensure its blocking (if the processing of personal data is carried out by another person acting on behalf of LIMITED LIABILITY COMPANY "HELICON COMPANY") and ensures the destruction of personal data within a period not exceeding 6 months, unless a different period is established by federal laws.
- 8.2.1
The operator's obligations when collecting personal data:
- 8.3 The rules for handling requests from data subjects or their representatives at LIMITED LIABILITY COMPANY "HELICON COMPANY," as well as the forms for processing such requests from data subjects or their representatives, are approved by order of LIMITED LIABILITY COMPANY "HELICON COMPANY."
- 8.1.1
The right of a data subject to access their personal data:
9. Liability
- 9.1 Persons guilty of violating the requirements of the Federal Law "On Personal Data" shall bear the liability provided for by the legislation of the Russian Federation.
- 9.2 Moral harm caused to a data subject as a result of a violation of their rights, a violation of the rules for processing personal data established by the Federal Law "On Personal Data," as well as the requirements for the protection of personal data established in accordance with the Federal Law "On Personal Data," is subject to compensation in accordance with the legislation of the Russian Federation. Compensation for moral harm is provided independently of compensation for property damage and losses incurred by the data subject.
List of personal data processed in the personal data information system "COMPANY VK"
The purpose of processing personal data in the "COMPANY VK" personal data information system: collection of data on website user activities
| No. | Content of information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: cookie files: IP address, browsing history, device information |
Mixed | Other | User consent obtained when visiting the website (cookie banner), Consent of the data subject to the processing of personal data | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the "1C-Bitrix" personal data information system
The purpose of processing personal data in the "1C-Bitrix" personal data information system: analysis of data on website user activity
| No. | Content of information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: Cookie files: collection of analytics on website usage (user ID; IP address; information about the user's actions within the product; device information); analytics on website user behavior (visit duration; client ID; device information; location; gender; number of visits; browser information; OS information; interest information; IP address; traffic information; age) |
mixed | Other | User consent obtained upon visiting the website (cookie banner), consent of the data subject to the processing of personal data | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "Yandex"
Purpose of processing personal data in the personal data information system: to obtain data on website traffic and other user activities
| No. | Content of information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | User of the website : Cookie files: data on visits, users, behavioral factors, goal achievement, and parameter data that allow for highly accurate tracking of the source, channel, and effectiveness of website traffic; collection of statistics using the "Yandex.Metrica" service |
Mixed | Other | User consent obtained when visiting the website (cookie banner), consent of the data subject to the processing of personal data | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "UNISENDER SMART"
Purpose of processing personal data in the "UNISENDER SMART" personal data information system: electronic newsletters, sending informational materials
| No. | Content of information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: last name, first name, patronymic (if applicable), phone number, email address, form of study at the university, academic year at the university, name of the university, city, name of the laboratory, working title of the project, project objectives, project description file, expected results, TIN, KPP |
mixed | other | Consent of the data subject to the processing of their personal data; Consent to receive advertising and informational mailings; Civil Code of the Russian Federation | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "IOM Ankétolog"
The purpose of processing personal data in the "IOM Ankétolog" personal data information system: conducting surveys; registration for events
| No. | Content of information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: last name, first name, patronymic (if applicable), phone number, email address, date and year of birth, TIN, photo and video image |
Mixed | Other | Consent of the data subject to the processing of personal data | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "Tilda Publishing"
The purpose of processing personal data in the "Tilda Publishing" personal data information system: to collect information through the completion of feedback forms and to obtain data on website traffic and other user activities
| No. | Content of Information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: last name, first name, patronymic (if applicable), phone number, email address, form of study at the university, academic year at the university, name of the university, city, name of the laboratory, working title of the project, project objectives, project description file, expected results, Cookie files: visit data, user data, behavioral factors, goal achievement, parameter data that allows for highly accurate tracking of the source, channel, and effectiveness of website traffic |
mixed | other | User consent obtained upon visiting the website (cookie banner), consent of the data subject to the processing of personal data | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "Webinar Technologies"
The purpose of processing personal data in the "Webinar Technologies" personal data information system: to use the platform for conducting online events and to collect data on website traffic and other user activities
| No. | Content of Information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: last name, first name, patronymic (if applicable), phone number, email address, city, organization, laboratory name, cookie files: date and time of login, session connection parameters and IP address, time of visit, source of the first visit to the online event page, user ID, browser information |
Mixed | other | User consent obtained upon visiting the website (cookie banner), consent of the data subject to the processing of personal data | withdrawal by the data subject of consent to the processing of their personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "Website - grant.helicon.ru"
The purpose of processing personal data in the personal data information system "Website - grant.helicon.ru": to identify, recognize, and support talented students; to obtain information and participate in the project by filling out feedback forms (submit an application, ask a question)
| No. | Content of information (category of personal data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for processing personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | Website user: last name, first name, patronymic (if applicable), phone number, email address, form of study at the university, academic year at the university, name of the university, city, organization, name of the laboratory, working title of the project, project objectives, project description file, expected results, date and year of birth, TIN, photo and video image, cookies: (1) visit data, user data, behavioral factors, goal achievement, parameter data that allows for highly accurate tracking of the source, channel, and effectiveness of website traffic, collection of statistics using the "Yandex.Metrica" service; (2) visit data, user data, behavioral factors, goal achievement, parameter data allowing for highly accurate tracking of the source, channel, and effectiveness of website traffic; (3) login date and time, session connection parameters and IP address, visit duration, source of the first visit to the online event page, user ID, browser information |
Mixed | Other | Consent of the data subject to the processing of their personal data, Consent to receive advertising and informational newsletters | expiration of the consent to process personal data; cessation of operations (liquidation or reorganization); achievement of the purposes of personal data processing; withdrawal by the data subject of consent to process their personal data; detection of unlawful actions involving personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |
List of personal data processed in the personal data information system "Websites - helicon.ru, shop.helicon.ru, lk.helicon.ru"
Purpose of processing personal data in the personal data information system "Websites - helicon.ru, shop.helicon.ru, lk.helicon.ru": promotion of goods and services; registration (creation of a personal account) on the website, as well as filling out other feedback forms
| No. | Content of information (category of data subjects: list of personal data) |
Methods of processing personal data | Category of personal data (other, publicly available, special, biometric) |
Legal basis for the processing of personal data in the personal data information system | Term (conditions for termination) of personal data processing, including storage |
|---|---|---|---|---|---|
| 1 | User of the website : last name, first name, patronymic (if applicable), phone number, email address, city, organization, TIN, KPP, cookies: (1) data on visits, users, behavioral factors, goal achievement, and parameter data that allow for highly accurate tracking of the source, channel, and effectiveness of website traffic; collection of statistics using the "Yandex.Metrica" service; (2) collection of analytics on website usage (user ID; IP address; information about user actions within the product; device information); analytics on website user behavior (visit duration; client ID; device information; location; gender; number of visits; browser information; OS information; interest information; IP address; traffic information; age); (3) IP address, visit history, device data |
mixed | other | Consent of the data subject to the processing of their personal data, Consent to receive advertising and informational newsletters | expiration of the consent to the processing of personal data; cessation of operations (liquidation or reorganization); achievement of the purposes of personal data processing; withdrawal by the data subject of consent to the processing of their personal data; detection of unlawful actions involving personal data, as well as in other cases provided for by the current legislation of the Russian Federation. |