Privacy Policy Regarding the Processing of Personal Data
1.General Provisions
This Personal Data Processing Policy is drafted in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006, "On Personal Data" (hereinafter — the Law on Personal Data) and defines the procedures for processing personal data and the measures taken by LLC "VFBS," TIN 7709963942, OGRN 5147746167135 (hereinafter — the Operator) to ensure the security of personal data.
1.1. The Operator's primary goal and condition for conducting its activities is to comply with the rights and freedoms of individuals and citizens when processing their personal data, including protecting rights to privacy, personal, and family secrets.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors of the website http://farm-in-russia.ru.
2.Basic Concepts Used in the Policy
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary cessation of processing of personal data (except when processing is necessary for clarifying personal data).
2.3. Website — a collection of graphic and informational materials, as well as computer programs and databases that ensure their accessibility via the Internet at the network address http://farm-in-russia.ru.
2.4. Information system of personal data — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.5. Anonymization of personal data — actions resulting in the inability to identify a specific User or other subject of personal data without using additional information.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction.
2.7. Operator — a state body, municipal body, legal or natural person organizing and/or carrying out processing of personal data independently or jointly with others, as well as determining purposes of processing, composition of processed data, actions (operations) performed with personal data.
2.8. Personal Data — any information directly or indirectly related to a specific or determinable User of the website http://farm-in-russia.ru.
2.9. Personal Data Permitted for Dissemination — personal data access to an unlimited circle of persons provided by the subject of personal data through consent to process such data in accordance with the procedure established by the Law on Personal Data (hereinafter — Permitted for Dissemination).
2.10. User — any visitor to the website http://farm-in-russia.ru.
2.11. Provision of Personal Data — actions aimed at disclosing personal data to a specific person or circle of persons.
2.12. Dissemination of Personal Data — any actions aimed at disclosing personal data to an indefinite circle of persons (transfer), or familiarization with personal data by an unlimited circle of persons, including publication in mass media, placement in information telecommunication networks or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data — transfer of personal data outside the territory of a foreign state to a foreign authority, foreign individual or foreign legal entity.
2.14. Destruction of Personal Data — any actions resulting in irrevocable destruction of personal data such that it cannot be restored in a subsequent manner from information systems or material carriers containing such data.
3.Main Rights and Responsibilities of the Operator
3.1. The Operator has the right:
— To receive truthful information and/or documents containing personal data from the subject;
— In case the subject withdraws consent to process their personal data or submits a request to cease processing their personal data, the Operator may continue processing without consent if there are grounds specified in the Law on Personal Data;
— To independently determine the scope and list of measures necessary and sufficient to fulfill obligations stipulated by law and regulatory acts adopted in accordance with it unless otherwise provided by law or other federal laws.
3.2. The Operator is obliged:
— To provide the subject with information regarding their processed personal data upon request;
— To organize processing in accordance with applicable Russian legislation;
— To respond to requests and inquiries from subjects and their legal representatives according to requirements set forth in the Law on Personal Data;
— To inform authorized bodies about requests from them within 10 days from receipt;
— To publish or otherwise ensure unrestricted access to this Policy regarding processing personal data;
— To take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, dissemination, provision, as well as other unlawful actions;
— To cease transfer (distribution, provision, access), processings and destroy personal data according to procedures and cases provided by law;
— To perform other duties stipulated by law on Personal Data.
4.Main Rights and Responsibilities of Subjects of Personal Data
4.1. Subjects have the right:
— To receive information regarding their processed personal data unless otherwise provided by federal laws; such information is provided in an accessible form without containing third-party private information unless there are lawful grounds for disclosure;
— To demand clarification (updating/modification) or blocking/destruction if their personal data are incomplete, outdated, inaccurate, unlawfully obtained or not necessary for declared purposes;
— To impose pre-consent conditions for processing their personal data for marketing purposes;
— To withdraw consent for processing their personal data or submit a request to cease such processing;
— To appeal unlawful actions or omissions by the Operator regarding their processed personal data through authorized bodies or courts;
— To exercise other rights provided by Russian legislation.
4.2. Subjects are obliged:
— To provide truthful information about themselves;
— To inform the Operator about updates/modifications/destruction regarding their own personal data.
4.3 Persons who have provided false information about themselves or about another subject without consent shall bear responsibility according to Russian legislation.
5. Principles for Processing Personal Data
5.1 Processing is conducted on lawful and fair basis.
5.2 Processing is limited to achieving specific, predetermined lawful goals; incompatible processing with these goals is prohibited.
5.3 Combining databases containing different sets of processed personal data that serve incompatible purposes is prohibited.
5.4 Only those personalData that meet processing goals are subject to processing.
5.5 Content and volume must correspond to declared purposes; excessiveness is not allowed.
5.6 During processing: ensure accuracy; sufficiency; relevance; take measures for correction/deletion if needed.
5.7 Storage duration must not exceed what is necessary for achieving purposes unless otherwise established by law; destruction occurs upon goal achievement or loss thereof unless law states otherwise.
6. Purpose(s)of Processing Personal Data
Purpose: Providing user access to services, information,and/or materials available onthe website.
Personal Data: Surname,s first name,middle name; email address; phone numbers.
Legal Grounds: Founding documentsof LLC "VFBs"; agreements between operatorand subject.
Typesof Processing: Collection; recording; systematization; accumulation; storage; destruction; anonymization; sending informational emails via email address
7.Conditions for Processing Personal Data
7.1. Processing of personal data is carried out with the consent of the data subject to the processing of their personal data.
7.2. Processing of personal data is necessary to achieve the purposes provided for by an international treaty of the Russian Federation or by law, for the implementation of functions, powers, and duties assigned to the operator by legislation of the Russian Federation.
7.3. Processing of personal data is necessary for the administration of justice, execution of a court decision, or an act of another body or official, which must be executed in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. Processing of personal data is necessary for the execution of a contract in which the data subject is a party, beneficiary, or guarantor, as well as for concluding a contract at the initiative of the data subject or a contract in which the data subject will be a beneficiary or guarantor.
7.5. Processing of personal data is necessary to protect the legitimate interests of the operator or third parties or to achieve socially significant goals provided that this does not violate the rights and freedoms of the data subject.
7.6. Processing of personal data is carried out when access to an unlimited circle of persons is granted by the data subject or at their request (hereinafter — publicly available personal data).
7.7. Processing includes personal data that are subject to publication or mandatory disclosure in accordance with federal law.
8.Procedure for collecting, storing, transferring, and other types of processing personal data
The security of personal data processed by the Operator is ensured through legal, organizational, and technical measures necessary to fully comply with current legislation in the field of personal data protection.
8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access to personal data
8.2. Personal data of the User will never be transferred to third parties under any circumstances, except in cases related to compliance with applicable legislation or if the data subject has given consent to transfer their data to a third party for fulfilling obligations under a civil law contract.
8.3. If inaccuracies are found in personal data, the User can update them independently by sending a notification to the Operator’s email address tbis@vfbs.ru with the note “Updating Personal Data.”
8.4. The period for processing personal data is determined by achieving the purposes for which they were collected unless another period is specified by a contract or current legislation. The user can withdraw their consent to processing at any time by sending a notification via email to tbis@vfbs.ru with the note “Withdrawal of Consent to Personal Data Processing.”
8.5. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by these entities (Operators) in accordance with their User Agreement and Privacy Policy. The Data Subject and/or relevant documents are involved accordingly. The Operator is not responsible for actions taken by third parties, including those listed as service providers in this paragraph.
8.6. Restrictions set by the Data Subject on transfer (except providing access), as well as on processing or conditions of processing (except obtaining access) personal data permitted for dissemination do not apply in cases where processing is carried out in state, public, or other interests defined by Russian legislation.
8.7. When processing personal data, the Operator ensures confidentiality thereof.
8.8. The Operator stores personal data in a form that allows identifying the Data Subject no longer than required for processing purposes unless storage duration is established by federal law, contract, or other relevant agreement involving the Data Subject as beneficiary or guarantor.
8.9 . The termination condition for processing personal data may be achieved when goals are met, consent expires or is withdrawn by the Data Subject, or upon request to cease processing; also upon detection of unlawful processing.
9 . List of actions performed by the Operator with received personal data
9 .1 . The Operator collects, records , systematizes , accumulates , stores , updates (modifies), retrieves , uses , transfers (distributes , provides , grants access), anonymizes , blocks , deletes , and destroys personal data .
9 .2 . The Operator performs automated processing of personal data with receiving and/or transmitting information via telecommunication networks or without such networks.
10 . Cross-border transfer of personal data
10.1 . Before starting cross-border transfer activities, the Operator must notify authorized body on protecting rights of Data Subjects about its intention to carry out cross-border transfer (such notification is sent separately from notification about intended processing).
10.2 . Prior to submitting this notification, the Operator must obtain relevant information from foreign authorities and foreign individuals/entities involved in cross-border transfer plans.
11. Confidentiality of Personal Data
The Operator and other persons who have access to personal data are obliged not to disclose it to third parties or distribute it without consent from the Data Subject unless otherwise provided by federal law.
12 . Final Provisions
12 .1 . The User can obtain any clarifications regarding questions related to their personal data processing by contacting the Operator via email at tbis@vfbs.ru.
12 .2 . Any changes made by the Operator to this Personal Data Processing Policy will be reflected herein; this policy remains valid indefinitely until replaced with a new version. 12 .3 . The current version of this Policy is publicly available on the Internet at https://farm-in-russia.ru/policy
This Personal Data Processing Policy is drafted in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006, "On Personal Data" (hereinafter — the Law on Personal Data) and defines the procedures for processing personal data and the measures taken by LLC "VFBS," TIN 7709963942, OGRN 5147746167135 (hereinafter — the Operator) to ensure the security of personal data.
1.1. The Operator's primary goal and condition for conducting its activities is to comply with the rights and freedoms of individuals and citizens when processing their personal data, including protecting rights to privacy, personal, and family secrets.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter — the Policy) applies to all information that the Operator may obtain about visitors of the website http://farm-in-russia.ru.
2.Basic Concepts Used in the Policy
2.1. Automated processing of personal data — processing of personal data using computer technology.
2.2. Blocking of personal data — temporary cessation of processing of personal data (except when processing is necessary for clarifying personal data).
2.3. Website — a collection of graphic and informational materials, as well as computer programs and databases that ensure their accessibility via the Internet at the network address http://farm-in-russia.ru.
2.4. Information system of personal data — a set of personal data contained in databases and information technologies and technical means ensuring their processing.
2.5. Anonymization of personal data — actions resulting in the inability to identify a specific User or other subject of personal data without using additional information.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with or without automation tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction.
2.7. Operator — a state body, municipal body, legal or natural person organizing and/or carrying out processing of personal data independently or jointly with others, as well as determining purposes of processing, composition of processed data, actions (operations) performed with personal data.
2.8. Personal Data — any information directly or indirectly related to a specific or determinable User of the website http://farm-in-russia.ru.
2.9. Personal Data Permitted for Dissemination — personal data access to an unlimited circle of persons provided by the subject of personal data through consent to process such data in accordance with the procedure established by the Law on Personal Data (hereinafter — Permitted for Dissemination).
2.10. User — any visitor to the website http://farm-in-russia.ru.
2.11. Provision of Personal Data — actions aimed at disclosing personal data to a specific person or circle of persons.
2.12. Dissemination of Personal Data — any actions aimed at disclosing personal data to an indefinite circle of persons (transfer), or familiarization with personal data by an unlimited circle of persons, including publication in mass media, placement in information telecommunication networks or providing access to personal data by any other means.
2.13. Cross-border transfer of personal data — transfer of personal data outside the territory of a foreign state to a foreign authority, foreign individual or foreign legal entity.
2.14. Destruction of Personal Data — any actions resulting in irrevocable destruction of personal data such that it cannot be restored in a subsequent manner from information systems or material carriers containing such data.
3.Main Rights and Responsibilities of the Operator
3.1. The Operator has the right:
— To receive truthful information and/or documents containing personal data from the subject;
— In case the subject withdraws consent to process their personal data or submits a request to cease processing their personal data, the Operator may continue processing without consent if there are grounds specified in the Law on Personal Data;
— To independently determine the scope and list of measures necessary and sufficient to fulfill obligations stipulated by law and regulatory acts adopted in accordance with it unless otherwise provided by law or other federal laws.
3.2. The Operator is obliged:
— To provide the subject with information regarding their processed personal data upon request;
— To organize processing in accordance with applicable Russian legislation;
— To respond to requests and inquiries from subjects and their legal representatives according to requirements set forth in the Law on Personal Data;
— To inform authorized bodies about requests from them within 10 days from receipt;
— To publish or otherwise ensure unrestricted access to this Policy regarding processing personal data;
— To take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, dissemination, provision, as well as other unlawful actions;
— To cease transfer (distribution, provision, access), processings and destroy personal data according to procedures and cases provided by law;
— To perform other duties stipulated by law on Personal Data.
4.Main Rights and Responsibilities of Subjects of Personal Data
4.1. Subjects have the right:
— To receive information regarding their processed personal data unless otherwise provided by federal laws; such information is provided in an accessible form without containing third-party private information unless there are lawful grounds for disclosure;
— To demand clarification (updating/modification) or blocking/destruction if their personal data are incomplete, outdated, inaccurate, unlawfully obtained or not necessary for declared purposes;
— To impose pre-consent conditions for processing their personal data for marketing purposes;
— To withdraw consent for processing their personal data or submit a request to cease such processing;
— To appeal unlawful actions or omissions by the Operator regarding their processed personal data through authorized bodies or courts;
— To exercise other rights provided by Russian legislation.
4.2. Subjects are obliged:
— To provide truthful information about themselves;
— To inform the Operator about updates/modifications/destruction regarding their own personal data.
4.3 Persons who have provided false information about themselves or about another subject without consent shall bear responsibility according to Russian legislation.
5. Principles for Processing Personal Data
5.1 Processing is conducted on lawful and fair basis.
5.2 Processing is limited to achieving specific, predetermined lawful goals; incompatible processing with these goals is prohibited.
5.3 Combining databases containing different sets of processed personal data that serve incompatible purposes is prohibited.
5.4 Only those personalData that meet processing goals are subject to processing.
5.5 Content and volume must correspond to declared purposes; excessiveness is not allowed.
5.6 During processing: ensure accuracy; sufficiency; relevance; take measures for correction/deletion if needed.
5.7 Storage duration must not exceed what is necessary for achieving purposes unless otherwise established by law; destruction occurs upon goal achievement or loss thereof unless law states otherwise.
6. Purpose(s)of Processing Personal Data
Purpose: Providing user access to services, information,and/or materials available onthe website.
Personal Data: Surname,s first name,middle name; email address; phone numbers.
Legal Grounds: Founding documentsof LLC "VFBs"; agreements between operatorand subject.
Typesof Processing: Collection; recording; systematization; accumulation; storage; destruction; anonymization; sending informational emails via email address
7.Conditions for Processing Personal Data
7.1. Processing of personal data is carried out with the consent of the data subject to the processing of their personal data.
7.2. Processing of personal data is necessary to achieve the purposes provided for by an international treaty of the Russian Federation or by law, for the implementation of functions, powers, and duties assigned to the operator by legislation of the Russian Federation.
7.3. Processing of personal data is necessary for the administration of justice, execution of a court decision, or an act of another body or official, which must be executed in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. Processing of personal data is necessary for the execution of a contract in which the data subject is a party, beneficiary, or guarantor, as well as for concluding a contract at the initiative of the data subject or a contract in which the data subject will be a beneficiary or guarantor.
7.5. Processing of personal data is necessary to protect the legitimate interests of the operator or third parties or to achieve socially significant goals provided that this does not violate the rights and freedoms of the data subject.
7.6. Processing of personal data is carried out when access to an unlimited circle of persons is granted by the data subject or at their request (hereinafter — publicly available personal data).
7.7. Processing includes personal data that are subject to publication or mandatory disclosure in accordance with federal law.
8.Procedure for collecting, storing, transferring, and other types of processing personal data
The security of personal data processed by the Operator is ensured through legal, organizational, and technical measures necessary to fully comply with current legislation in the field of personal data protection.
8.1. The Operator ensures the safety of personal data and takes all possible measures to prevent unauthorized access to personal data
8.2. Personal data of the User will never be transferred to third parties under any circumstances, except in cases related to compliance with applicable legislation or if the data subject has given consent to transfer their data to a third party for fulfilling obligations under a civil law contract.
8.3. If inaccuracies are found in personal data, the User can update them independently by sending a notification to the Operator’s email address tbis@vfbs.ru with the note “Updating Personal Data.”
8.4. The period for processing personal data is determined by achieving the purposes for which they were collected unless another period is specified by a contract or current legislation. The user can withdraw their consent to processing at any time by sending a notification via email to tbis@vfbs.ru with the note “Withdrawal of Consent to Personal Data Processing.”
8.5. All information collected by third-party services, including payment systems, communication tools, and other service providers, is stored and processed by these entities (Operators) in accordance with their User Agreement and Privacy Policy. The Data Subject and/or relevant documents are involved accordingly. The Operator is not responsible for actions taken by third parties, including those listed as service providers in this paragraph.
8.6. Restrictions set by the Data Subject on transfer (except providing access), as well as on processing or conditions of processing (except obtaining access) personal data permitted for dissemination do not apply in cases where processing is carried out in state, public, or other interests defined by Russian legislation.
8.7. When processing personal data, the Operator ensures confidentiality thereof.
8.8. The Operator stores personal data in a form that allows identifying the Data Subject no longer than required for processing purposes unless storage duration is established by federal law, contract, or other relevant agreement involving the Data Subject as beneficiary or guarantor.
8.9 . The termination condition for processing personal data may be achieved when goals are met, consent expires or is withdrawn by the Data Subject, or upon request to cease processing; also upon detection of unlawful processing.
9 . List of actions performed by the Operator with received personal data
9 .1 . The Operator collects, records , systematizes , accumulates , stores , updates (modifies), retrieves , uses , transfers (distributes , provides , grants access), anonymizes , blocks , deletes , and destroys personal data .
9 .2 . The Operator performs automated processing of personal data with receiving and/or transmitting information via telecommunication networks or without such networks.
10 . Cross-border transfer of personal data
10.1 . Before starting cross-border transfer activities, the Operator must notify authorized body on protecting rights of Data Subjects about its intention to carry out cross-border transfer (such notification is sent separately from notification about intended processing).
10.2 . Prior to submitting this notification, the Operator must obtain relevant information from foreign authorities and foreign individuals/entities involved in cross-border transfer plans.
11. Confidentiality of Personal Data
The Operator and other persons who have access to personal data are obliged not to disclose it to third parties or distribute it without consent from the Data Subject unless otherwise provided by federal law.
12 . Final Provisions
12 .1 . The User can obtain any clarifications regarding questions related to their personal data processing by contacting the Operator via email at tbis@vfbs.ru.
12 .2 . Any changes made by the Operator to this Personal Data Processing Policy will be reflected herein; this policy remains valid indefinitely until replaced with a new version. 12 .3 . The current version of this Policy is publicly available on the Internet at https://farm-in-russia.ru/policy