1.1. This Personal Data Processing Policy (the "Policy") of the Sverdlovsk Region Attorneys' Bureau "Bezopasnost Finansovoy Deyatelnosti" (Financial Activity Security) (INN 6685199875, OGRN 1226600028357, address: office 8.09, 101 Mamina-Sibiryaka St., Yekaterinburg, 620075, Russia) (the "Operator", "BFD") has been adopted in accordance with Federal Law No. 149-FZ of 27 July 2006 "On Information, Information Technologies and Information Protection", Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and other applicable regulations on personal data.
1.2. The purpose of this Policy is to protect the rights and freedoms of data subjects when their personal data is processed by the Operator.
1.3. Terms used in this Policy have the meanings assigned to them by Federal Law No. 152-FZ "On Personal Data".
1.4. Key rights of the data subject:
1.5. Key obligations of the Operator:
1.6. Rights of the Operator:
2.1. Personal data is collected and processed by the Operator for the purposes of:
2.2. The Operator collects and processes personal data to perform the duties imposed on it by Federal Law No. 63-FZ of 31 May 2002 "On Advocacy and the Bar in the Russian Federation", including the provision of qualified legal assistance to organisations and individuals.
2.3. Unless otherwise provided by a legal services agreement, the Operator does not take decisions producing legal consequences for the data subject, or otherwise affecting their rights and legitimate interests, on the basis of solely automated processing of personal data.
3.1. The legal grounds for processing personal data are:
4.1. Personal data covered by this Policy is provided by the data subject by completing forms on the Website, by sending messages addressed to the Operator, or otherwise — freely, of their own will and in their own interest.
4.2. Categories of data subjects:
4.3. Subjects in the category "Website users" provide the following personal information (in whole or in part), not subject to dissemination — subscribers to publication updates:
* An asterisk marks information that is mandatory.
4.4. Subjects in the category "persons mentioned and/or depicted in publications on the Website" provide the following personal information (in whole or in part):
Public data (subject to dissemination):
Non-public data (not subject to dissemination):
* An asterisk marks data that is mandatory.
4.5. The Operator protects data transmitted automatically while the data subject views advertising blocks, including cookies, in accordance with Section 8 of this Policy.
4.6. The Operator collects statistics on visitors' IP addresses. This information is used to compile aggregate data on Website traffic.
4.7. The Operator does not verify the accuracy of personal data provided by the data subject and cannot assess their legal capacity. The Operator assumes that the data subject provides accurate and sufficient data and keeps it up to date.
5.1. The Operator collects, records, systematises, accumulates, stores, refines (updates, amends), retrieves, uses, transfers (disseminates, provides, grants access to), anonymises, blocks, deletes and destroys personal data.
5.2. Personal data is processed:
5.3. Processing periods are determined with regard to:
5.4. The Operator does not disclose personal data to third parties or disseminate it without the data subject's consent (unless otherwise provided by federal law).
5.5. Processing ceases when its purposes have been achieved, when the consent expires or is withdrawn, or when unlawful processing is identified.
6.1. The Operator takes the necessary and sufficient legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, provision or dissemination, and against other unlawful actions, in accordance with Federal Law No. 152-FZ "On Personal Data" and regulations adopted under it.
6.2. The Operator has adopted internal regulations on personal data security. Employees with access to personal data have been familiarised with this Policy and those regulations.
7.1. Where personal data is confirmed to be inaccurate or unlawfully processed, it is updated by the Operator and the previous data is no longer processed.
7.2. When the purposes of processing have been achieved, or where the data subject withdraws consent, the personal data is destroyed unless otherwise agreed between the Operator and the data subject.
7.3. The data subject is entitled to information concerning the processing of their personal data. Requests may be sent in writing to: office 8.09, 101 Mamina-Sibiryaka St., Yekaterinburg, 620075, Russia, or by e-mail to office(at)abfd.ru.
7.4. Demands to cease processing, to rectify, block or destroy personal data, and withdrawals of consent, should be sent to office(at)abfd.ru.
8.1. Personal data of Website visitors and users processed for analytical purposes may be transferred to third-party services (including Yandex.Metrica) and to tools of the platform on which the Website is built, by providing it to a defined range of persons or by granting authorised access.
8.2. Third-party services (including Yandex.Metrica) process the following data of Website visitors and users for analytical purposes: gender; age; approximate geographic location; referral sources; search phrases used to reach the Website; bounce rates; time spent on the Website; browsing depth; ad click-through rates; conversion.
8.3. Platform tools process the following data for analytical purposes: IP address; approximate location; device and application data (type, operating system, device or application identifier, browser version, language settings); date and time of device use; cookies and pixels installed on or interacted with through the device; recorded activity (sessions, clicks, feature use, mouse movement and other interactions); third-party cookies used to embed third-party elements such as videos, feedback forms or social media buttons; web beacons (included, among other things, in electronic mailings to determine whether messages were opened and what happened to them subsequently).
9.1. The Website may contain links to third-party websites and services not controlled by the Operator. The Operator is not responsible for the security or confidentiality of any information collected by such websites or services.