Personal data processing and protection policy for the MSNcosmetic online store
(hereinafter - " Policy")
1.1. This Policy defines the procedure for processing and protecting personal data of site users http://msncosmetic.com (hereinafter-the "Site"), buyers of Goods in the Site and/or third parties who provide their Personal data in the Site and/or through the Site, processed by an Individual Entrepreneur IE Hripko S. N, PSRN: 316774600349082, ITN: 772978644089 (hereinafter – the "Operator").
1.2.The Policy has been developed in accordance with clause 2, part 1, article 18.1 of the Federal Law of July 27, 2006 No. 152-FL " of personal data "(hereinafter — the "Federal law of personal data").
1.3. This Policy is an integral part of the Agreement, and the Site user hereby understands and confirms that by accepting the terms of the Agreement, he / she hereby accepts and confirms the terms of the Policy.
Personal data - any information related directly or indirectly to a specific or identifiable individual (subject of personal data). This information includes, but is not limited to the following information: last name, first name, patronymic, gender, date of birth, email address, phone number, delivery address, etc.
Personal data processing – any action (operation) or set of actions (operations) performed with or without the use of automation tools with Personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, presentation, access), depersonalization, blocking, deletion, destruction of Personal data.
User– any legally capable individual who uses the services of the Site, purchases Goods through the Site and / or presents their Personal data in the Site (including through the Personal account in the Site).
2. Purposes, principles and methods of Personal data processing
3.1. Personal data is Processed by the Operator:
- for the purpose of executing the User agreement, other agreements and / or contracts concluded between the Operator and the User and / or concluded between the User and third parties of the Operator (such as the delivery service);
- for the purpose of selling, paying for, delivering, or returning the Product in or through the Site;
- in order for the User to receive the services provided in the Site (as provided in the Agreement);
- in order to inform the User (subject of Personal data) about Goods, services, in order to inform and / or conduct promotions, contests, events, and other similar activities that take place in the Site and / or the Operator, and / or the operator's partners and / or the Site;
- for the purpose of conducting electronic and sms surveys, sending sms messages, messages via Internet messengers;
- in order to target the Site's advertising materials;
- for the purpose of conducting statistical and other research based on depersonalized data;
- in order to use User reviews posted in the Site, including those containing Personal data, for promotional, advertising, informational purposes, in order to promote Products and / or the Site;
- in order to communicate with the User in order to implement the above goals.
3.2.The Operator receives Personal data directly from the Site User (the subject of Personal data) and/or from his / her legal representative in cases stipulated by the current legislation of the Russian Federation.
3.3. The Operator processes Personal data on a legal and fair basis in accordance with the legislation of the Russian Federation.
3.4. The operator processes Personal data by automated and/or manual methods, with the use of computer technology and without the use of such funds.
3.5. Personal data is stored in the territory of the Russian Federation, namely at the following address:69 Aviamotornaya Str., Moscow, 111024.
4. Personal data provided by the User. The procedure for the provision of Personal data.
4.1. The user provides the following Personal information in the Website:
- name, surname, patronymic (name);
- date of birth;
- Product delivery address; email address (e-mail);
- phone number;
- any other information related directly or indirectly to a specific or identifiable individual (personal data subject).
4.2. Personal data can be provided by the User through the Personal account or when placing an order for Goods in the Site.
5.Terms of Personal data processing. Processing of Personal data by third parties
5.1. The User's Personal data is kept confidential, except for cases when the User voluntarily provides information about himself for General access to an unlimited number of persons. When using individual Usage options, the User agrees that a certain part of their personal information becomes publicly available.
5.2. The User's Personal data may be transferred to third parties of the Operator for the purpose of Processing Personal data specified in this Policy. Thus, by accepting the terms of this Policy, the User confirms their consent to the Processing of Personal data by third parties. The transfer and / or Processing of Personal data to third parties/third parties may be carried out, including for the following purposes:
5.2.1. The Transfer is necessary for the User to use a certain type of Site options;
5.2.2. When the User uses the services of companies providing financial services.
5.3. Personal data may be transferred to a third party as part of the sale or other transfer of the business (in whole or in part), and the acquirer will assume all obligations to comply with the terms of this Policy in relation to the received Personal data.
5.4. As a result of processing the User's personal information by depersonalizing it, depersonalized statistical data may be obtained, which is transmitted to a third party for conducting research, performing work or providing services on behalf of the Operator.
6. Changing and deleting Personal data. Mandatory storage of Personal data.
6.1. The User may at any time change (update, supplement) the information provided by him.
6.2. The User can also delete his data provided.
6.3. Rights provided for in clauses 6.1. and 6.2. this Policy may be restricted in accordance with the requirements of the current legislation of the Russian Federation. In particular, such restrictions may provide for the Operator's obligation to keep the information changed or deleted by the User for a period established by the current legislation of the Russian Federation, and to transfer such information in accordance with the legally established procedure to a state body.
7. Processing of personal information using Cookies and counters.
7.1. Cookies that are available in the User's equipment for any reason can be used by the Operator to provide the User with personalized options for using the Site, its functions and services, for targeting/sending information/advertising that is shown to the User, for statistical and research purposes, as well as for other purposes of Processing Personal data specified in this Policy.
7.2. The User is aware that the hardware and software used for use in the Site may have the function of prohibiting operations with Cookies (for any sites or for certain sites), as well as deleting previously received Cookies.
7.4. The structure of the Cookie, its content and technical parameters are determined at the discretion of the Operator and may change without prior notice to the User.
7.5. Counters placed by the Operator for the effective use of the Site can be used to analyze the User's Cookies, to collect and process statistical information, and for other purposes. The technical parameters of the counters are determined by the Operator and may change without prior notice to the User.
8. Measures used to protect Personal data.
8.1. The Operator takes necessary and sufficient organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions with it by third parties.
8.2. The Operator uses information from the User's profile (username and password, security question and answer) to authorize access to Use. In this case, the Operator has the right to provide such data to the persons specified in article 4 of this document. The User is responsible for the safety of this information, including username and password. Any actions performed using it are considered by the Operator to be performed by the User. It is forbidden for the user to transfer their own username and password to third parties.
If the User has become aware of the username and password of another user, as well as other confidential information about the latter, he is obliged to notify the Operator and not use the information that has become known to him.
8.3. A User's access to the Site may cause the appeal to Internet resources of third parties and downloading of software code and/or graphic objects from them (including those that are invisible when displaying Internet pages by the browser) used for advertising purposes and for collecting statistics. Owners of these resources have the technical ability to collect information about the user and independently determine the terms of its use.
By configuring the software, the User can block requests for graphic images hosted in third-party servers, but this may lead to loss of readability and errors when displaying resources.
When users go from the Site pages to the pages of Internet resources of third parties, the User independently determines the limits of using information about them within the terms and conditions determined by the owners of the corresponding Internet resources.
8.5. The Site may contain links to third-party resources that are not covered by this document. The procedure for processing and protecting personal data in third-party resources is determined by their operators and / or administrators. The operator is not responsible for the actions of such third parties.
8.6. Security of User's Personal data is achieved by monitoring the definition of threats to the security of Personal data during their processing; the application of organizational and technical measures to ensure security of personal data during their processing; by assessing the effectiveness of measures taken to ensure security of personal data; by detecting unauthorized access to Personal data and taking measures for their elimination; by establishing rules of access to personal data; by controlling the measures taken to ensure the security of personal data.
9.1.The operator reserves the right to make changes in this Policy.
9.2. This Policy and the relations between the User and the Operator arising in connection with the application of the Policy are governed by the current legislation of the Russian Federation.