Privacy Policy

 

1. GENERAL PROVISIONS

1.1. This Privacy Policy regarding the processing of personal data (hereinafter referred to as the "Policy") has been prepared in accordance with Part 2 of Article 24 of the Constitution of the Russian Federation and Clause 2 of Article 18.1 of the Federal Law "On Personal Data" No. 152-FZ of July 27, 2006, as well as other regulatory legal acts of the Russian Federation in the field of protection and processing of personal data. It applies to all personal data (hereinafter referred to as "Data") that the Volgograd Region Bar Association "LEGION" (hereinafter referred to as the "Operator") may receive from a data subject who is a party to a civil contract or from a visitor to the website http://kavo-legion.ru/ on the Internet (hereinafter referred to as the "User," "Client") during the use of any of the websites, services, or offerings of the Volgograd Region Bar Association "LEGION" (hereinafter referred to as the "Bar Association," "Operator").

1.2. This Policy defines the Operator's position and intentions in the field of processing and protecting personal data, ensuring the rights and fundamental freedoms of every individual, and, in particular, the right to privacy, personal and family confidentiality, as well as the protection of one's honor and good name. The Policy is intended for study and strict compliance by the management and employees of all structural units of the Operator and must also be communicated to Users and other interested parties.

1.3. When processing personal data, the Operator is obliged to take the necessary legal, organizational, and technical measures, or ensure their adoption, to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, and other unlawful actions regarding personal data.

1.4. The Operator has the right to make changes to this Policy. When changes are made, the current version will indicate the date of the last update. The new version of the Policy comes into force from the moment it is published, unless otherwise provided by the new version of the Policy.

1.5. Terms and definitions used in this Policy:

1.5.1. Personal data – any information relating directly or indirectly to an identified or identifiable natural person (data subject).

1.5.2. Data subject (also user, client, customer) – a natural person whose personal data is processed in accordance with the law.

1.5.3. Personal data operator – the Volgograd Region Bar Association "LEGION," independently or jointly with other persons, that organizes and/or carries out the processing of personal data, as well as determines the purposes of processing, the scope of personal data to be processed, and the actions (operations) performed with personal data.

1.5.4. Website – the Internet resource located at http://kavo-legion.ru/.

1.5.5. Remote service – the remote provision of a document, information about which is posted on the Website http://kavo-legion.ru/.

1.5.6. Order – the sequence of actions for selecting and paying for a Service on the Website http://kavo-legion.ru/.

1.6. The information on the website is for informational purposes only and may be changed without any prior notice.

1.7. The Operator assumes that the User independently, freely, voluntarily, and in their own interest makes the decision to provide their personal information and gives consent to its processing.

1.8. Due to the nature of how information is obtained, the Operator does not verify the accuracy of the personal information provided by the User and does not monitor its relevance. However, the Operator assumes that the User provides accurate personal information and keeps it up to date. The User bears full responsibility, as well as possible consequences, for providing inaccurate or outdated personal information. Use of the Website means the User agrees with this Policy and the terms of processing their personal information. If the User disagrees with them, they must refrain from using the Website, including for the purpose of purchasing Services.

1.9. The Website may contain links to other websites. The Bar Association is not responsible for information published on such websites and provides links solely for the convenience of visitors to its own website.

1.10. The confidentiality of the User’s personal information is maintained.

1.11. The Operator independently chooses the methods of processing personal data depending on the purposes and its own material and technical capabilities.

1.12. The data subject has the right to:

1.12.1. access personal data related to them and information concerning its processing;

1.12.2. control the handling of their personal data;

1.12.3. request the correction or deletion of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing;

1.12.4. withdraw their consent to the processing of personal data;

1.12.5. appeal the Operator’s actions or inactions to the authorized body for the protection of data subjects’ rights or in court;

1.13. To exercise their rights and legitimate interests, data subjects have the right to contact the Operator or submit a request personally or through a representative. The request must contain the information specified in Part 3 of Article 14 of the Federal Law "On Personal Data."

1.14. The personal data Operator is obliged to:

1.14.1. take the necessary and sufficient legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, and other unlawful actions with respect to personal data;

1.14.2. implement organizational and technical measures for the protection of personal data in accordance with the requirements of Russian Federation legislation on personal data processing;

1.14.3. provide the data subject, upon their request, with the following information:

1.14.3.1. confirmation of the fact of personal data processing by the Operator;

1.14.3.2. legal grounds and purposes of processing personal data;

1.14.3.3. the purposes and methods used by the Operator for processing personal data;

1.14.3.4. the name and location of the Operator, as well as information about persons (except Operator’s employees) who have access to personal data or to whom personal data may be disclosed under a contract with the Operator or under federal law;

1.14.3.5. the personal data being processed, related to the respective data subject, the source of its acquisition, unless another procedure for providing such data is established by federal law;

1.14.3.6. the duration of personal data processing, including storage periods;

1.14.3.7. the procedure for the data subject to exercise their rights under this Federal Law;

1.14.3.8. information about completed or planned cross-border data transfers;

1.14.3.9. the name or surname, first name, patronymic, and address of the person processing personal data on behalf of the Operator, if processing is or will be delegated to such a person;

1.14.3.10. other information required by federal law.

2. PURPOSES OF COLLECTION AND PROCESSING OF PERSONAL DATA

2.1. The Operator collects, processes, and stores only that personal information which is necessary to provide services, Remote Services, and to gather website visit statistics.

2.2. The Operator uses the User’s personal information for the following purposes:

2.2.1. Compliance with legal requirements regarding the procedure for processing and protecting the personal data of citizens who are Operator’s clients:

2.2.1.1. Provision of services to the Client;

2.2.1.2. Sending a document to the Client within the framework of providing Remote Services;

2.2.1.3. Contacting the data subject when necessary, including sending notifications, information, and requests related to service provision, as well as processing applications, inquiries, and requests;

2.2.1.4. Promotion and provision of legal services on the market through direct contact with the data subject;

2.2.1.5. Collecting website visit statistics.

2.2.2. Compliance with current legislation of the Russian Federation and Operator’s regulations.

3. LEGAL BASIS FOR PROCESSING PERSONAL DATA

3.1. The processing of personal data is carried out in accordance with Articles 23 and 24 of the Constitution of the Russian Federation, Articles 86–90 of the Labor Code of the Russian Federation, the Civil Code of the Russian Federation, and contracts concluded with third parties in order to ensure the functionality and promotion of the Website.

4. SCOPE AND CATEGORIES OF PROCESSED PERSONAL DATA, CATEGORIES OF DATA SUBJECTS

4.1. The Operator processes the following personal data, which are not special or biometric:

4.1.1. Regarding potential Clients:

4.1.1.1. Last name, first name, patronymic;

4.1.1.2. Contact phone number;

4.1.1.3. Email address;

4.1.1.4. User data (IP address, cookie data).

4.1.2. Regarding Clients:

4.1.2.1. Last name, first name, patronymic;

4.1.2.2. Contact phone number;

4.1.2.3. Email address;

4.1.2.4. Passport details;

4.1.2.5. Registration address.

4.1.3. Regarding Website visitors:

4.1.3.1. User data (IP address, cookie data).

5. PROCESSING OF PERSONAL DATA

5.1. The Operator stores and processes personal information of users in accordance with applicable regulations and local legal acts created on their basis.

5.2. The confidentiality of the User’s personal information is maintained, except in cases of voluntary disclosure by the User for public access to an unlimited number of people.

5.3. The Operator protects the User’s personal information in accordance with the requirements applicable to the protection of such information and is responsible for using secure protection methods.

5.4. To protect the User’s personal information, ensure its proper use, and prevent unauthorized and/or accidental access, the Operator applies necessary and sufficient technical and administrative measures. Personal information provided by the User is stored on servers with restricted access located in secured premises.

5.5. The Operator has the right to transfer the User’s personal information (including to organizations and individual entrepreneurs engaged in recording, systematization, accumulation, updating, storage, retrieval, and to third parties, including under a processing agreement) in the following cases:

5.5.1. The User has clearly expressed their consent to such actions, for example by continuing to use the Website or filling out forms on the Website containing personal information;

5.5.2. The transfer is necessary within the framework of the User’s use of a specific Service or provision of a service to the User;

5.5.3. When processing Users’ personal data, the Operator is guided by the Federal Law of the Russian Federation "On Personal Data."

5.6. The condition for termination of personal data processing is the withdrawal of consent by the data subject for the processing of their personal data, as well as the discovery of unlawful processing.

6. UPDATING, CORRECTION, DELETION, AND DESTRUCTION OF PERSONAL DATA, RESPONSES TO DATA SUBJECT REQUESTS

6.1. Upon achieving the purposes of personal data processing, as well as in the event of withdrawal of consent by the data subject, personal data must be destroyed if:

6.1.1. otherwise not provided by a contract, of which the data subject is a party, beneficiary, or guarantor;

6.1.2. the Operator has no right to process without the consent of the data subject on grounds established by the Federal Law "On Personal Data" or other federal laws;

6.1.3. otherwise not provided by another agreement between the Operator and the data subject.

6.2. The Operator is obliged to provide the data subject or their representative with information on the processing of personal data of such subject upon request. The User has the right to demand clarification or deletion of the personal information they have provided at any time by sending a request to "This email address is being protected from spambots. You need JavaScript enabled to view it.".

7. CONFIRMATION OF CONSENT WITH THE POLICY

7.1. The User has the right to refuse to confirm consent with this Policy if any of its terms are unacceptable to them.

7.2. The User confirms that acceptance of this Policy (continued use of the Website) means full agreement with all its terms without exception. In particular, by accepting this Policy, the User consents to the Operator for:

7.2.1. sending information to the User’s email address;

7.2.2. receiving incoming calls from the Operator’s employees;

7.2.3. compiling website visit statistics.

7.3. The User’s consent with the terms of the Policy, including the procedure for processing personal information, is valid for 5 years with automatic extension unless revoked in accordance with Article 9 of the Federal Law No. 152-FZ of 27.07.2006 "On Personal Data."