1.1This policy regarding the processing of personal data (hereinafter referred to as the policy) is prepared in accordance with paragraph 2 of Part1 of Art. 18.1 of the Federal Law of the Russian Federation “On Personal Data” No. 152 -ФЗ dated July 27, 2006 (hereinafter - the Law) and determines the position of the site administration (hereinafter - the Site Administration) in the field of processing and protecting personal data (hereinafter - Data), compliance with rights) And the freedoms of each person and, in particular, the right to inviolability of private life, personal and family secrets.
2.1This policy applies to data obtained both before and after entering this policy.
2.2Understanding the importance and value of the data, as well as taking care of observing the constitutional rights of citizens of the Russian Federation and citizens of other states, the site administration provides reliable data protection.
3.1Data means any information related to a direct or indirectly defined or determined individual, i.e. Such information, in particular, includes: surname, name, patronymic, e -mail, location, link to personal website or social networks, IP address.
3.2Data processing is understood any action (operation) or a set of actions (operations) with data performed using automation tools and/or without the use of such tools. Such actions (operations) include: collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, data destruction.
3.3Data safety is understood as the protection of data from unlawful and/or unauthorized access to them, destruction, change, blocking, copying, providing, data distribution, as well as from other unlawful actions in relation to data.
4Legal grounds and objectives of data processing
4.1Processing and ensuring the security of the data by the administration of the site is carried out in accordance with the requirements of the Constitution of the Russian Federation, the Law, the Labor Code of the Russian Federation, by -laws, other cases and features of the processing of data from the federal laws of the Russian Federation, governing and methodological documents of the FSTEC of Russia and the FSB of Russia.
4.2The subjects of data processed by the site administration are:
4.2.1Users and visitors of the site https://gamebreaker.ru/, belonging to the site administration, including with the aim of placing an order on the site https://gamebreaker.ru/.
4.3The Site Administration processes the data of the subjects for the following purposes:
4.3.1the implementation of functions, powers and obligations assigned to the site administration in accordance with federal laws,
4.3.2Users for the purpose of:
4.3.2.1- providing information on goods/services, passing shares and special offers;
4.3.2.2- analysis of the quality of the service provided and improving the quality of customer service;
4.3.2.3- informing about the status of the order;
4.3.2.4- execution of the contract, including sales contract, including a remote way on the site, the reimbursement of the provision of services; the provision of services, as well as accounting for the services provided to consumers for mutual settlements;
4.3.2.5- delivery of the ordered goods to the user who made an order on the site is returning the goods.
5The principles and conditions of data processing.
5.1When processing data, the site administration adheres to the following principles: data processing is carried out on a legal and fair basis; The data is not disclosed to third parties and are not distributed without the consent of the data subject, with the exception of cases requiring data disclosure at the request of authorized state bodies, legal proceedings; determination of specific legal goals before the start of processing (including collecting) data; Only those data that are necessary and sufficient for the declared processing purpose are being collected; The combination of databases containing data, the processing of which is carried out for purposes that are incompatible with each other is not allowed; Data processing is limited to the achievement of specific, predetermined and legal goals; The processed data must be destroyed or depersonalized to achieve processing goals or in case of loss of need to achieve these goals, unless otherwise provided by federal law.
5.2The site administration may include subjects data in publicly available sources of data, while the site administration takes the subject’s written consent to process its data, or by expressing consent through the form of the site (Chekbox), by pressing the subject of personal data expresses his consent.
5.3The site administration does not process data related to racial, nationality, political views, religious, philosophical and other beliefs, intimate life, membership in public associations, including in trade unions.
5.4Biometric data (information that characterize the physiological and biological characteristics of a person on the basis of which you can establish his personality and which are used by the operator to establish the personality of the subject) are not processed by the administration of the site.
5.5The site administration carries out a cross -border data transfer. The site administration confirms that the foreign state, to the territory of which the transfer of personal data is transferred, is ensured adequate protection of the rights of personal data subjects in accordance with the level of security defined by the European Council Convention on the Protection of Personal Persons with automated processing of personal data.
5.6In cases established by the legislation of the Russian Federation, the site administration has the right to transfer data to third parties (Federal Tax Service, the State Pension Fund and other state bodies) in cases provided for by the legislation of the Russian Federation.
5.7The site administration has the right to entrust the processing of data of data from data to third parties with the consent of the data entity, on the basis of the contract concluded with these persons, including when consent with the user agreement and the policy of processing personal data posted on the site.
5.8Persons carrying out data processing on the basis of the administration of the contract concluded with the administration (operator instructions) are obliged to comply with the principles and rules of processing and protection of data stipulated by law. For each third party, the contract determines a list of actions (operations) with data that will be performed by a third party engaged in the processing of data, the purpose of processing, establish the obligation of such a person to observe confidentiality and ensure the safety of data during their processing, indicates the requirements for the protection of the processed data in accordance With the law.
5.9In order to fulfill the requirements of their contractual obligations, data processing to the site administration is carried out both using and without the use of automation tools. The set of processing operations includes the collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transmission (provision, access), depersonalization, blocking, deleting, data destruction.
5.10The administration of the site is prohibited from the adoption on the basis of exclusively automated processing of these decisions that generate legal consequences in relation to the data subject or otherwise affecting its rights and legitimate interests.
6Rights and obligations of data entities, as well as the site administration in terms of data processing
6.1The subject whose data is processed by the site administration has the right:
6.1.1Get from the site administration:
6.1.1.1confirmation of the fact of data processing and information on the availability of data related to the corresponding data subject;
6.1.1.2information about the legal grounds and goals of data processing;
6.1.1.3information about the data processing methods used by the site administration;
6.1.1.4a list of processed data related to the data subject, and information about the source of their receipt;
6.1.1.5information about the terms of data processing, including the timing of their storage;
6.1.1.6information on the procedure for the subject of these rights;
6.1.1.7other information provided for by law or other regulatory acts of the Russian Federation;
6.1.2Demand the site administration:
6.1.2.1clarification of your data, blocking or destruction in case the data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the declared processing purpose;
6.1.2.2withdraw your consent to data processing at any time; demand the elimination of the unlawful actions of the site administration in relation to its data;
6.1.3to protect their rights and legitimate interests, including compensation for losses and/or compensation for non -pecuniary damage in court.
6.2The site administration in the process of data processing is obliged:
6.2.1provide the subject of data on his request for information regarding the processing of his personal data, or legally provide a refusal within thirty days from the date of receipt of the request of the data subject or its representative;
6.2.2Explain the legal consequences of the refusal to provide data if the provision of data is mandatory in accordance with federal law;
6.2.3take the necessary legal, organizational and technical measures or ensure their adoption to protect data from unlawful or accidental access to them, destroy, change, block, copy, provide, distribution of data, as well as from other unlawful actions regarding data;
6.2.4publish on the Internet and ensure unlimited access using the Internet to the document that defines its policy regarding data processing to information on the data protection requirements;
6.2.5provide data to the subjects and/or their representatives for free of charge the opportunity to familiarize themselves with the data when handling the relevant request within 30 days from the date of receipt of such a request;
6.2.6to block unlawfully processed data related to the data subject, or to ensure its blocking (if data processing is carried out by another person acting on behalf of the site administration) from the date of application or receipt of the request for the audit period, in case of unlawful data processing when applying the subject of data or his representative or at the request of the subject of the data or his representative or the authorized body for the protection of the rights of personal data subjects;
6.2.7clarify the data or ensure their clarification of the course of 7 working days from the date of submission of information and remove the blocking of data, in case of confirmation of the fact of data inaccuracy on the basis of the information presented by the subject of the data or its representative;
6.2.8stop unlawful data processing or ensure the termination of unlawful data processing;
6.2.9stop processing data or ensure its termination and destroy data or ensure its destruction to achieve the goal of data processing, unless otherwise provided by an agreement, the party of which, the beneficiary or guarantor, according to which the data subject is, if the purpose of the data is achieved;
6.2.10stop processing data or ensure its termination and destroy the data or ensure its destruction in the event of the subject of data from data processing by the subject, if the site administration is not entitled to process data without the consent of the data subject;
7Data protection requirements
7.1The site administration when processing data takes the necessary legal, organizational and technical measures to protect data from unlawful and/or unauthorized access to them, destruction, change, blocking, copying, providing, data distribution, as well as other illegal actions in relation to data.
7.2Such measures in accordance with the law, in particular, include:
7.2.1the appointment of a person responsible for organizing data processing, and the person responsible for ensuring data security;
7.2.2development and approval of local acts on data processing and protection issues;
7.2.3Application of legal, organizational and technical measures to ensure data security:
7.2.4Determination of data security threats when processing personal data in information systems;
7.2.5the use of organizational and technical measures to ensure data security in their processing in the information systems of personal data necessary to fulfill the requirements for the protection of DAC;
7.2.6the application of the procedure for assessing the conformity of information protection tools in the prescribed manner;
7.2.7Assessment of the effectiveness of measures taken to ensure data safety before the commissioning of the information system of personal data;
7.2.8accounting for machine carriers if data is stored on machine media;
7.2.9detection of facts of unauthorized access to data and taking measures to prevent such incidents in the future;
7.2.10restoration of data modified or destroyed due to unauthorized access to them;
7.2.11The establishment of the rules for accessing data processed in the information system of personal data, as well as ensuring the registration and accounting of all actions performed with data in the personal data information system.
7.2.12monitoring the measures taken to ensure data security and the level of security of information systems of personal data;
7.2.13Assessment of the harm that can be caused to data entities in case of violation of the requirements of the law, the ratio of the specified harm and the measures taken by the administration of measures aimed at ensuring the fulfillment of the duties provided for by law;
7.2.14compliance with conditions that exclude unauthorized access to material data carriers and ensure the safety of data;
8Data processing (storage) time
8.1The terms of processing (storage) of the data are determined on the basis of data processing goals, in accordance with the validity period of the contract with the data entity, the requirements of federal laws, the requirements of the data operators, on the behalf of which the site administration processes the data, the basic rules of the archives of organizations, the limitation periods.
8.2The data, the term of processing (storage) of which has expired, must be destroyed. Data storage after the cessation of their processing is allowed only after they are depersonalized.
9The procedure for obtaining clarifications on data processing issues
9.1Persons whose data are processed by the site administration may receive clarifications on processing their data by contacting the site administration through the feedback form.
10Features of processing and protection of data collected by the site administration using the Internet
10.1The site administration processes data from the resource from the resource: https://gamebreaker.ru/ (hereinafter referred to as the site) and with the direct transition to the placement of the order.
10.2.1Data provision (independent data entry):
10.2.1.1Link to a personal site or social networks
10.3Automatically collected information
10.3.1Determination of location
10.3.3Information on the interests of users on the site on the basis of the introduced search queries of the site users about the goods sold and offered for the sale of relevant information to users using the site, as well as the generalization and analysis of information, about what sections of the site and goods are the greatest demand from the site customers ;
10.3.4Processing and storage of search queries of site users in order to summarize and create customer statistics on the use of sections of the site. The site administration automatically receives some types of information received in the process of interaction of users with the site, correspondence by e-mail, etc. We are talking about technologies and services, such as web protocols, cuckoos, web, as well as applications and tools of the indicated third party. At the same time, web-records, cookies and other monitoring technologies do not make it possible to automatically receive data. If the site user at his discretion provides his data, for example, when filling out the feedback form or when sending an email, then only then the processes of automatically collecting detailed information are launched for ease of ease of use of the site and/or to improve interaction with users.
10.6The site contains links to other web resources, where the information is useful and interesting for users of the site. Moreover, the effect of this policy does not apply to such other sites. It is recommended that users passing on links to other sites are recommended to familiarize themselves with the data processing politicians posted on such sites.
10.7The user of the site can at any time withdraw his consent to data processing by sending a message to the email address: EliteHacksru@mail.ru. After receiving such a message, the user processing will be discontinued, and his data will be deleted, unless the processing can be continued in accordance with the law.
11.1.1when changing the legislation of the Russian Federation in the field of processing and protecting personal data;
11.1.2in cases of receipt of instructions from competent state bodies to eliminate inconsistencies affecting the scope of the policy;
11.1.3by decision of the site administration;
11.1.4when changing the goals and terms of data processing;
11.1.5with a change in the organizational structure, structure of information and/or telecommunication systems (or the introduction of new ones);
11.1.6with the use of new technologies for processing and protection of data (including transfer, storage);
11.1.7When there is a need to change the process of data processing related to the activities of the site.
11.2An integral part of this policy is the consent to the processing of personal data posted on the site.
11.3This policy acts directly and is interconnected with the user agreement posted on the site.