PRIVACY POLICY

Date of the last update: 25 of May 2024

GENERAL PROVISIONS

  • The present privacy policy (hereinafter referred to as the Policy) defines the basic principles, goals, conditions and ways of personal data processing by the Individual Entrepreneur Alexander Alexandrovich Misurkin, OGRNIP 322508100520591, INN 232105309193, hereinafter referred to as the “Customer” (hereinafter referred to as the Operator).
  • The present Policy has been developed in accordance with the requirements of clause 2, part 1, art. 18.1 of the Federal Law No. 152-ФЗ dated July 27th, 2006 “Personal Data Act” (hereinafter referred to as the Personal Data Act), taking into account the requirements of the Personal Data Act and other regulatory legal acts of the Russian Federation in the field of personal data handling.
  • The present Policy applies to all operations performed by the Operator with personal data with or without the use of automation tools. The operator processes data of the personal data subject only if it is filled out and (or) sent by the personal data subject independently through the forms on the Website https://xxi-flights.space/ (hereinafter referred to as the Website). By filling out the appropriate forms and (or) sending his personal data to the Operator, the subject of the personal data agrees with this Policy.
  • The subject of the personal data independently decides to provide his personal data and gives consent freely, willingly and in his own interest.
  • The present Policy is subject to updating at the initiative of the Operator, as well as following the changes in the legislation of the Russian Federation on the personal data.
  • BASIC CONCEPTS
  • For the purposes of the present Policy, the following terms are used in the following meaning:
  • Personal data — any information relating directly or indirectly to a specific or identifiable individual (personal data subject).
  • Personal data processing — any action (operation) or number of actions (operations) applied to the personal data using automation tools or without the use of such tools, including collection, recording, classification, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of the personal data.
  • Automated personal data processing — processing of the personal data with the help of computer technologies.
  • Dissemination of personal data — actions aimed at disclosing personal data to an undefined number of persons.
  • Provision of personal data — actions aimed at disclosing personal data to a certain individual or a certain number of persons.
  • Blocking of personal data — temporary termination of personal data processing (except for cases where processing is required to clarify the personal data).
  • Destruction of personal data — actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which material media of personal data are destroyed.
  • Depersonalization of personal data — actions as a result of which it becomes impossible to determine the ownership of personal data to a specific subject of personal data without the use of additional information.
  • Subject of personal data, Subject — an individual that can be directly or indirectly identified using the personal data.
  • Consent to the processing of personal data, Consent — written or digital document that confirms the Subject’s voluntary decision to transfer personal data to the Operator to the extent, on the conditions and for the purposes defined by the present Policy and the agreements concluded between the Subject and the Operator.
  • PRINCIPLES AND OBJECTIVES OF THE PERSONAL DATA PROCESSING
  • The processing of personal data by the Operator is carried out taking into account the need to ensure the protection of the rights and freedoms of personal data subjects, including the protection of the right to privacy, personal and family secrets, based on the following principles:
  • personal data processing is carried out on a legal basis;
  • personal data processing is limited to the achievement of specific predefined and legitimate objectives;
  • personal data processing incompatible with the purposes of personal data collection is not allowed;
  • the content and the volume of personal data processed correspond to the stated purposes of processing. Redundancy of the processed personal data in relation to the stated purposes of their processing is not allowed;
  • while processing the personal data, the accuracy of personal data, sufficiency, and, when required, relevance in relation to the purposes of processing personal data are ensured;
  • storage of the personal data is performed in a form that makes it possible to identify the subject of personal data, no longer than required by the purposes of personal data processing, unless the period for storing personal data is stated by the federal law or the agreement to which the Personal Data Subject is a party, beneficiary or guarantor;
  • the processed personal data is to be destroyed or anonymized upon the achievement of the processing goals or if the need to achieve these goals is lost, unless otherwise provided by the federal law.
  • Processing of the personal data by the Operator is carried out for the following purposes:
  • identification of the Subject for the purpose of concluding any contracts with the Operator and their further performance;
  • promotions, polling, interviews, testing and researches on the Website by the Operator;
  • establishing contacts with the Subject, including, but not limited to: sending messages, notifications in the form of SMS, emails, oral and written requests, processing requests and enquiries from the Subject;
  • confirmation of the accuracy and completeness of the personal data provided by the Subject;
  • statistical and other research and (or) analytical purposes, considering the anonymization of the Subject’s personal data.
  • VOLUME AND CATEGORIES OF THE PROCESSED PERSONAL DATA, CATEGORIES OF PERSONAL DATA SUBJECTS
  • The Operator can process personal data of the following Subjects :
  • counterparties - individuals and representatives of counterparties - legal entities;
  • Website visitors
  • Personal data processed by the Operator includes:
  • last name, first name of the Personal Data Subject ;
  • mobile phone number;
  • email address;
  • history of requests and views on the Website and its services;
  • cookies, information about the user’s location, information about the user’s actions on the Website, information about the user’s equipment, session date and time.
  • The operator ensures that the content and volume of processed personal data corresponds to the stated purposes of processing and, if necessary, takes measures to eliminate their redundancy in relation to the stated purposes of processing.
  • PROCEDURE AND CONDITIONS FOR THE PERSONAL DATA PROCESSING
  • Personal data processing is carried out by the Operator in the following ways:
  • non-automated personal data processing;
  • automated personal data processing with or without transmission of the received information via information and telecommunication networks, including processing using automated database management systems and other software;
  • mixed personal data processing.
  • List of actions performed by the Operator with personal data: collection, classification, accumulation, storage, clarification (updating, changing), use, distribution (including transfer), depersonalization, blocking, destruction on the territory of the Russian Federation in accordance with the current legislation of the Russian Federation.
  • The personal data subject decides to provide his personal data and gives Consent freely, willingly and in his own interest.
  • The Operator does not process biometric personal data.
  • The Operator does not perform cross-border transfer of the personal data.
  • Processing of special categories of the personal data relating to race, nationality, political views, religious or philosophical beliefs, intimate life is not performed by the Operator.
  • The condition for terminating the personal data processing can be the achievement of the purposes of personal data processing, the expiration of the Consent or withdrawal of the Consent by the Personal Data Subject, as well as the identification of the unjustified personal data processing.
  • The period for personal data processing is unlimited. The subject may at any time withdraw his Consent to the personal data processing by sending a notification to the Operator via email to the Operator's email address specified in Section 10 of the present Policy, marked “Withdrawal of the consent to the personal data processing.”
  • The Operator undertakes to stop processing the Subject's personal data within 5 (five) business days from the date of receipt of the notification in accordance with the clause 6.8 of the present Policy.
  • MAIN RIGHTS AND OBLIGATIONS
  • The Operator has a right to:
  • receive the reliable information and (or) documents containing personal data from the Subject;
  • require the Personal Data Subject to timely update the provided personal data.
  • The Operator is obliged to:
  • process the personal data in the manner established by the current legislation of the Russian Federation;
  • consider requests from the Personal Data Subject (his legal representative) regarding the personal data processing and give reasoned response;
  • provide the Personal Data Subject (his legal representative) with the opportunity to freely access his personal data;
  • take measures to update, destroy the personal data of the personal data subject following his (his legal representative) enquiry with legal and reasonable claims;
  • organize the personal data protection in accordance with the requirements of the legislation of the Russian Federation.
  • Personal data Subjects have a right to:
  • receive the full information about their personal data processed by the Operator;
  • access their personal data including a right to receive a copy of any record containing their personal data except otherwise is provided by the federal law;
  • update their personal data, block it or destroy it in cases where the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing;
  • withdraw the consent to the personal data processing;
  • take measures provided by the law to protect their rights;
  • exercise other rights provided by the legislation of the Russian Federation.
  • Personal data Subjects are obliged to:
  • provide the Operator with reliable information about themselves;
  • provide documents containing personal data to the extent necessary for the purpose of processing;
  • inform the Operator about clarification (updating, changing) of their personal data .
  • Persons who provided the Operator with false information about themselves or information about another Personal Data Subject without the latter’s consent bear responsibility as set forth by еру legislation of the Russian Federation.
  • PROCEDURE FOR CONSIDERATION OF DISPUTES
  • All disputes and disagreements that may arise between the Operator and the Subjects on issues that are not resolved in the text of the Policy must be resolved through negotiations.
  • The Parties are obliged to comply with the claims procedure for resolving disputes. Before filing a claim in court regarding disputes arising from the relationship between the Subject and the Operator, a claim (a written proposal for a voluntary settlement of the dispute) is submitted. The period for consideration of a claim is 30 (thirty) calendar days from the date of receipt of the claim, unless a different procedure for pre-trial settlement is established by the current legislation of the Russian Federation.
  • If controversial issues are not resolved during negotiations, disputes arising from the Policy are resolved in a court of general jurisdiction at the location of the Operator. The current legislation of the Russian Federation applies to the present Policy and the relationships between the Subject and the Operator.
  • FINAL PROVISIONS
  • The Operator has a right to make changes to the present Policy. When changes are made to the current edition, the date of the last update is indicated. The new edition of the Policy comes into force from the moment it is posted on the Website, unless otherwise provided by the new edition of the Policy. The current edition is constantly available on the Website.
  • The present Policy approves the Consent form for the personal data processing of Website users (Appendix No. 1 to this Policy), which is posted on the Website in public access at the link: https://xxi-flights.space/eng/soglasie

OPERATOR DETAILS

Individual Entrepreneur Misurkin Alexander Alexandrovich
OGRNIP 322508100520591
INN 232105309193