Policy regarding the processing of personal data

1. General terms
1.1. The policy regarding the processing of personal data (hereinafter – the Policy) of the limited liability Company "SaleNames" (hereinafter - the "Company", "Organization") defines the basic principles, goals, conditions and methods of processing of personal data, lists of subjects and personal data processed by "SaleNames", the functions of the company in the processing of personal data, the rights of personal data subjects, as well as the requirements for the protection of personal data implemented in the company in accordance with the requirements of Article 18.1. of Federal Law of 27 July 2006 No. 152-FL "On personal data".
1.2. This Policy uses the following basic terms:
personal data – any information relating directly or indirectly to a specific or identifiable natural person (subject of personal data);
processing of personal data – any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
automated processing of personal data – processing of personal data using computer technology;
distribution of personal data – actions aimed at disclosure of personal data to an indefinite number of persons;
rendering of personal data – actions aimed at disclosure of personal data to a certain person or a certain circle of persons;
blocking of personal data – temporary termination of processing of personal data (except for cases when processing is necessary to clarify personal data);
destruction of personal data – actions as a result of which it becomes impossible to restore the content of personal data in the information system of personal data and (or) as a result of which material carriers of personal data are destroyed;
depersonalization of personal data – actions that make it impossible without the use of additional information to determine the ownership of personal data to a particular subject of personal data;
information system of personal data – a set of personal data contained in databases and providing their processing of information technologies and technical means.
personal data subject – an individual to whom personal data directly or indirectly refer.

2. Principles of personal data processing in the Company:
2.1. Processing of personal data is carried out on a legal and fair basis;
2.2. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. Processing of personal data incompatible with the purposes of personal data collection is not allowed;
2.3. It is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other;
2.4. Only personal data that meet the purposes of their processing should be the subject to processing;
2.5. The content and volume of personal data processed correspond to the stated purposes of processing and are not excessive in relation to the stated purposes of their processing;
2.6. The processing of personal data ensures the accuracy of personal data, their sufficiency, and, where necessary, relevance in relation to the purposes of personal data processing. Necessary measures are taken to delete or clarify incomplete or inaccurate data;
2.7. Storage of personal data is carried out in a form that allows to determine the subject of personal data, no longer than required by the purpose of personal data processing, if the period of storage of personal data is not established by Federal law, an agreement to which the beneficiary or guarantor is the subject of personal data. The processed personal data upon achievement of the purposes of processing or in case of loss of need for achievement of these purposes, unless otherwise provided by the Federal law, are subject to destruction or depersonalization.
2.8. When collecting personal data, including through the information and telecommunication network "Internet", record, systematization, accumulation, storage, specification (updating, change), extraction of personal data of citizens of the Russian Federation with use of the databases which are in the territory of the Russian Federation is provided.

3. Legal basis of personal data processing:
Processing of personal data in the Company is carried out in accordance with the Federal law of July 27, 2006 № 152-FL "On personal data", Art. 53 of the Federal law of the Russian Federation of 07.07.2003 № 126-FL "On communications", the Labor Code of the Russian Federation, the Russian Federation Government decree of 01.11.2012 № 1119 "On approval of requirements for the protection of personal data when processing in information systems of personal data", the Russian Federation Government decree of 15.09.2008 № 687 "On approval of the Regulations on the peculiarities of personal data processing carried out without the use of automation" and other legal acts in the field of personal data protection.

4. Purposes of personal data processing:
4.1. The Company collects, stores and processes only those personal data that are necessary for the provision of services and for the implementation of its activities, as well as to ensure the rights and legitimate interests of third parties, provided that the rights of the personal data subject are not violated.
4.2. Personal data of the personal data subject may be processed by the Company for the following purposes:
4.2.1. To identify the subject of personal data;
4.2.2. To enable registration and maintenance (support) of a domain name;
4.2.3. To communicate with the subject of personal data, if necessary, including for sending notifications, requests and information related to the provision of services, as well as for processing requests and applications from the subjects of personal data;
4.2.4. To carry out statistical and other researches based on depersonalized data.
4.3. The organization does not process special categories of personal data relating to race, nationality, political views, religious beliefs, health status, as well as biometric personal data.

5. The structure of personal data:
5.1. Personal data of the subject of personal data – employee of the Company – information necessary for the Company in connection with registration, change, termination of employment relations.
5.2. Personal data subject of the personal data of the counterparty under the contract civil-legal nature, - the information required by the Society in connection with the execution, amendment, termination of the contract civil-legal nature with the subject of personal data.
5.3. Personal data of the personal data subject – client of the Company – information necessary for the Company to fulfill its obligations under the contractual relations with the personal data subject (client of the Company) and to fulfill the requirements of the legislation of the Russian Federation in the field of personal data protection.
5.4. Personal data of the subject of personal data – the physical person who addressed to the Organization in the order established by the Federal Law "On the order of consideration of addresses of citizens of the Russian Federation».

6. Processing of personal data:
6.1. Processing of personal data of the Company's personal data subjects is carried out in order to ensure compliance with the laws and other regulatory legal acts of the Russian Federation, to ensure the personal security of personal data subjects, to control the quantity and quality of work performed and to ensure the safety of the Company's property.
6.2. Processing of personal data is carried out by the Company with the consent of the subjects of personal data, both with the use of automation and without the use of such means.
6.3. The company does not provide or disclose information containing personal data of personal data subjects to a third party without the written consent of the personal data subject, except when it is necessary to prevent threats to life and health, as well as in cases established by the current legislation of the Russian Federation in the field of personal data protection.
6.4. At the reasoned request of the authorized body and only within the framework of the implementation of the current legislation, the personal data of the subject without his consent may be transferred:
- to the judiciary in connection with the administration of justice;
- in bodies of Federal security service;
- the Prosecutor's office;
- the police;
- in other bodies and organizations in the cases established by regulatory legal acts, obligatory for execution.
6.5. In case of obtaining consent to the processing of personal data from the representative of the personal data subject, the authority of the representative to give consent on behalf of the personal data subject is checked by the Company.
6.6. In case the personal data subject withdraws his / her consent to the processing of personal data, the Company has the right to continue processing personal data without the consent of the subject if there are grounds specified in the current legislation.
6.7. Legal regulation of the order and terms of storage of the documents containing personal data of subjects of personal data is performed on the basis of "the List of the standard administrative archival documents formed in the course of activity of state bodies, local governments and the organizations with indication of terms of storage" approved by the Order of the Ministry of culture of Russia of 25.08.2010 No. 558.
6.8. Destruction of documents containing personal data is carried out in any way that excludes familiarization of unauthorized persons with the destroyed materials and the possibility of restoring their text.

7. Confidentiality of personal data
7.1. Information relating to personal data, which has become known in connection with the implementation of labor relations, the implementation of the provisions of the civil law contract, to which the subject of personal data is a party, and in connection with the provision of services by the Company, is confidential information and is protected by the current legislation of the Russian Federation.
7.2. Persons who have access to the processed personal data have signed an obligation of non-disclosure of confidential information, as well as warned of possible disciplinary, administrative, civil and criminal liability in case of violation of the norms and requirements of the current legislation of the Russian Federation in the field of personal data protection.
7.3. Persons who have access to the processed personal data are not entitled to disclose the personal data of the personal data subject to a third party without the written consent of such subject, except in cases when it is necessary to prevent threats to the life and health of the personal data subject, as well as in cases established by the legislation of the Russian Federation.
7.4. Persons who have access to personal data, undertake not to disclose personal data for commercial purposes without the written consent of the subject of personal data. Processing of personal data of personal data subjects in order to promote goods, works and services on the market by means of direct contacts with a potential consumer by means of communication is allowed only with his prior consent.

8. Rights of personal data subjects
8.1. The personal data subject has the right to receive information concerning the processing of his/her personal data, including:
8.1.1. confirmation of personal data processing by the Company;
8.1.2. legal grounds and purposes of personal data processing;
8.1.3. purposes and methods of personal data processing used by the Company;
8.1.4. name and location of the Company, information on persons (except for employees of the Company) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Company or on the basis of the Federal Law of the Russian Federation;
8.1.5. processed personal data relating to the relevant subject of personal data, the source of their receipt, unless another procedure for the submission of such data is provided by the Federal Law of the Russian Federation;
8.1.6. terms of processing of personal data, including the terms of their storage;
8.1.7. the procedure for the subject of personal data rights under the Federal Law of July 27, 2006 № 152-FL "On personal data»;
8.1.8. name or surname, name, patronymic and address of the person processing personal data on behalf of the Company, if the processing is or will be entrusted to such person;
8.1.9. other data provided by the Federal Law of July 27, 2006 No. 152-FZ "About personal data" or other Federal Laws of the Russian Federation.
8.2 the personal data Subject has the right to require the Company to clarify his personal data, block or destroy them if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing, as well as to take measures provided by law to protect their rights.
8.3. If the personal data subject believes that the Company processes his personal data in violation of the requirements of the Federal Law of July 27, 2006 № 152-FL "On personal data" or otherwise violates his rights and freedoms, the personal data subject has the right to appeal against the actions or omissions of the Company to the body for the protection of the rights of personal data subjects (Federal service for supervision of communications, information technology and mass communications - Roskomnadzor) or in court.
8.4. The personal data subject has the right to protect his rights and legitimate interests, including compensation for damages and (or) compensation for moral damage in court.
8.5. Other rights defined by Chapter 3 of the Federal Law of July 27, 2006 № 152-FL "On personal data".

9. Measures aimed at ensuring the fulfillment of the Company's obligations under article 18.1., 19 of the Federal Law of July 27, 2006 № 152-FL "On personal data»:
9.1. A responsible person has been appointed for the organization of personal data processing in the Company.
9.2. The order of the head of the Company approved local acts establishing procedures aimed at identifying and preventing violations of the legislation of the Russian Federation in the field of personal data, as well as determining for each purpose of personal data processing the content of the processed personal data, the categories of subjects whose personal data are processed, the terms of their processing and storage, the order of destruction when achieving the goals of processing or when other legal grounds occur;
9.3. The legal, organizational and technical measures to ensure the security of personal data during their processing in the information systems of the Company's personal data provided for by the relevant regulatory legal acts are applied.
9.4. When processing personal data carried out without the use of automation, the requirements established by the Decree of the Government of the Russian Federation of September 15, 2008 № 687 "On approval of the Regulations on the peculiarities of processing of personal data carried out without the use of automation."
9.5. In order to carry out internal control over the compliance of personal data processing with the established requirements of the current legislation, the Company has organized periodic inspections of the personal data processing conditions.
9.6. Employees of the Company directly engaged in the processing of personal data are familiarized with the provisions of the legislation of the Russian Federation on personal data (including the requirements for the protection of personal data), local acts on the processing of personal data.
9.7. The company is responsible for violation of obligations to ensure the security and confidentiality of personal data when processing them in accordance with the legislation of the Russian Federation.
9.8. To ensure unlimited access to the company's personal data processing Policy and information on the measures taken to protect personal data, the text of this Policy is published on the company's official website (https://www.salenames.ru).