The Privacy Policy of the personal data of the site users | Cluster of High-Tech for the Ocean and Arctic

The Privacy Policy of the personal data of the site users (hereinafter referred to as the Privacy Policy) applies to all information provided by the Association "Cluster of High—tech Solutions for the Development of the World Ocean and Arctic Resources" (hereinafter referred to as the Association "WOKA Cluster") and/or itsAffiliated persons may obtain information about the User during their use of the official website of the WCOA Cluster Association and during the execution of any agreements and contracts with the WCOA Cluster Association.;By the user. The User's consent to the Policy, expressed by him in the framework of a relationship with one of the listed persons, applies to all other listed persons.

Using the website of the Association "WTO Cluster" means the User's unconditional consent to this Policy and the conditions for processing his personal information specified therein; in case of disagreement with these conditions, the User must refrain from using the website.

GENERAL PROVISIONS
1. The Privacy Policy has been compiled in accordance with the requirements of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" (hereinafter referred to as the Personal Data Law) and other regulatory legal acts of the Russian Federation governing the processing and protection of personal data. Defines the procedure for processing personal data and measures to ensure the security of personal data of the Association "Cluster of high—tech solutions for the development of the resources of the World Ocean and the Arctic" (hereinafter referred to as the Association "WTOA Cluster"), TIN 7801652280, OGRN 1187800005095), located at: 197101, St. Petersburg, Kronverkaya str., 29/37, lit. B, room 63-N.
2. The WTO Cluster Association is the Operator of personal data processing (hereinafter referred to as the Operator) of the website https://arcwocluster.ru (hereinafter referred to as the Website).
3. This Privacy Policy has been adopted by the Operator and applies to all information that the Operator can obtain about the User of the Site from any device and when communicating with the Operator in any form.
4. The Privacy Policy sets out the terms of use of the Website. Using the Website means the User's full and unconditional consent to all the terms of this Privacy Policy. If the User does not agree with any terms of the Privacy Policy in whole or in part, or the terms of the Policy as a whole, the User must refrain from using the Site.
5. This Privacy Policy applies only to the Website. The Operator does not control and is not responsible for third-party sites to which the User can click on the links available on the Site.
6. By using the Site (viewing, reading text, sending or downloading information) and providing their personal data, the Site User consents to the processing of personal data in accordance with this Privacy Policy, unless additional consent requirements are established by this Privacy Policy.
7. The main purpose of this Privacy Policy is to ensure the protection of human and civil rights and freedoms when processing personal data, including the protection of the rights to privacy, personal and family secrets.
8. In compliance with the requirements of Part 2 of Article 18.1 of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data", the Privacy Policy is published freely on the Internet on the Website.
TERMS AND DEFINITIONS
1. Personal data — any information related directly or indirectly to a specific or identifiable natural person (subject of personal data) — the User.
2. User is any visitor to the Operator's Website.
3. Personal data operator — a state body, municipal body, legal entity or individual who independently or jointly with other persons organize and (or) process personal data, as well as determine the purposes of personal data processing, the composition of personal data to be processed, actions (operations) performed with personal data.
4. The subject of personal data is an individual, the owner of the data that can be used to identify him (clients, site visitors, employees).
5. Personal data authorized by the personal data subject for dissemination — personal data to which an unlimited number of persons have access by the personal data subject by giving consent to the processing of personal data authorized by the personal data subject for dissemination in accordance with the procedure provided for by the Personal Data Act (hereinafter referred to as personal data authorized for Dissemination).
6. Personalized website services are digital tools and functions that adapt to the individual preferences, behaviors, and needs of each user. They are created based on collected User data such as browsing history, purchases, demographic data, and other metrics.
7. Personal data processing is any action (operation) or set of actions (operations) with personal data performed with or without automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion, destruction, distribution.
8. Automated personal data processing is the processing of personal data using computer technology.
9. Personal data information system is a set of personal data contained in databases and information technologies and technical means that ensure their processing.
10. Personal data recording is the process of entering or recording information that allows User identification.
11. Systematization of personal data — actions aimed at combining and arranging personal data in a certain sequence. The systematization of data is carried out in accordance with the legislation and in the interests of the personal data subject.
12. Accumulation of personal data is the formation of an initial, unsystematic array of personal data.
13. Personal data storage is the process of preserving and securing information that allows direct or indirect identification of the User.
14. Clarification (updating, modification) of personal data is a process that must be carried out to ensure the accuracy and relevance of information stored in the Operator's databases.
15. Blocking of personal data — temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data).
16. Depersonalization of personal data is an action that makes it impossible to determine whether personal data belongs to a specific User or another personal data subject without using additional information.
17. Provision of personal data — actions aimed at disclosing personal data to a certain person or a certain circle of people.
18. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at familiarizing with personal data of an unlimited number of persons, including the publication of personal data in the media, posting in information and telecommunications networks or providing access to personal data in some other way.
19. Deleting personal data is a process that allows you to protect the User's personal information and minimize the risks associated with its leakage.
20. Destruction of personal data — any actions as a result of which personal data is permanently destroyed with the impossibility of further restoration of the content of personal data in the personal data information system and (or) the material carriers of personal data are destroyed.
21. Website is a collection of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at the network address of the Operator's Website https://arcwocluster.ru .
PURPOSES OF PERSONAL DATA PROCESSING
1. The processing of personal data is limited to the achievement of specific, predetermined and legitimate purposes. Processing of personal data incompatible with the purposes of personal data collection is not allowed. The personal data being processed should not be redundant in relation to the stated purposes of their processing. Only personal data that meets the purposes of their processing is subject to processing.
2. The Operator processes the User's personal data for the following purposes:
  1. Registration and identification of the User registered on the Website to ensure the functioning of the Website.
  2. Providing the User with access to personalized Website resources.
  3. The Operator establishes feedback with the User, including sending notifications, requests regarding the use of the Site, the provision of services, the performance of work by the Operator, and the processing by the Operator of requests and requests from the User.
  4. Create a User account to access the materials of the service, if the User has agreed to create an account.
  5. Providing effective customer and technical support to the User in case of problems related to the use of the Site.
  6. Sending information about the Operator's activities/ works/ services to the User.
  7. Carrying out the Operator's activities in accordance with the Operator's Charter.
  8. Conclusion and execution of contracts between the User and the Operator.
  9. Compliance with the requirements of the legislation of the Russian Federation.
3. All operations with personal data are carried out in compliance with the requirements of the legislation of the Russian Federation in the field of personal data protection and taking into account the principles of confidentiality and security.
CATEGORIES OF PERSONAL DATA PROCESSED
1. Personal data processed by the Operator includes:
  1. last name, first name, patronymic of the personal data subject;
  2. email address;
  3. phone number;
  4. data that is automatically transmitted to the Site's Services during their use using the software installed on the User's device, namely: IP address, cookie data, date and time of access to the Services, addresses of the requested pages, history of requests and views on the Site and its Services;
2. The Operator ensures that the content and volume of personal data being processed correspond to the stated purposes of processing provided for in section 3 of the Privacy Policy.
BASIC RIGHTS AND OBLIGATIONS OF THE OPERATOR
1. The operator has the right to:
  1. Receive reliable information and/or documents containing personal data from the personal data subject.
  2. If the personal data subject withdraws consent to the processing of personal data, the Operator has the right to continue processing personal data without the consent of the personal data subject, provided there are grounds specified in the Personal Data Act.
  3. Independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations stipulated by the Law on Personal Data and regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law on Personal Data or other federal laws.
  4. The Operator has the right to transfer personal data of Personal Data Subjects to Third Parties/Partners, state bodies, municipal authorities, state institutions, state extra-budgetary funds, and other persons (if applicable), as well as to entrust the processing of personal data of Personal Data Subjects to Third Parties/Partners, and other persons if there are appropriate legal grounds and requirements are met. By registering on the website, the User also confirms his consent for the Operator to transfer personal data of Personal Data Subjects to Third Parties / Partners. If the User is against the transfer of personal data by the Operator to Third Parties / Partners, the User has the right to withdraw consent to the transfer of personal data to Third Parties/ Partners. The Operator's contact details for contacting PD subjects to revoke consent to the transfer of personal data to Third parties / Partners related to PD:
    Email address: info@arcwocluster.ru .
    postal address: 197101, St. Petersburg, Kronverkskaya str., 29/37, lit. B, room 63-N,
    Contact phone number: +7 (966) 856-34-91.
2. The operator must:
  1. To provide the personal data subject, upon his request, with information related to the processing of his personal data.
  2. Organize the processing of personal data in accordance with the procedure established by the current legislation of the Russian Federation.
  3. Respond to requests and requests from personal data subjects and their legal representatives in accordance with the requirements of the Personal Data Act.
  4. To provide the necessary information to the authorized body for the protection of the rights of personal data subjects at the request of this body within 30 days from the date of receipt of such request.
  5. To publish or otherwise provide unrestricted access to this Personal Data Processing Policy.
  6. Take legal, organizational and technical measures to protect personal data from unlawful or accidental access to it, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions with respect to personal data.
  7. Stop transferring (distributing, providing, accessing) personal data, stop processing and destroy personal data in accordance with the procedure and cases provided for by the Law on Personal Data.
  8. Perform other duties stipulated by the Law on Personal Data.
BASIC RIGHTS AND OBLIGATIONS OF PERSONAL DATA SUBJECTS
1. The categories of subjects of personal data include:
  1. employees and authorized persons of the Operator;
  2. Visitors to the Website of the Association "WTOA Cluster";
  3. Representatives of the legal entities — counterparties of the Association "WTOA Cluster".
2. Subjects of personal data have the right to:
  1. Receive information regarding the processing of personal data, except in cases provided for by federal laws. The information is provided to the personal data subject by the Operator in an accessible form, and it should not contain personal data related to other personal data subjects, except in cases where there are legitimate grounds for the disclosure of such personal data. The list of information and the procedure for obtaining it are established by the Law on Personal Data.
  2. To require the Operator to clarify their personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as to take legal measures to protect their rights.
  3. Revoke consent to the processing of personal data.
  4. To appeal to the authorized body for the protection of the rights of personal data subjects or in court against unlawful actions or omissions of the Operator during the processing of their personal data.
  5. To exercise other rights provided for by the legislation of the Russian Federation.
3. The subjects of personal data are obliged to provide the Operator with reliable information about themselves.
PROCEDURE AND CONDITIONS OF PERSONAL DATA PROCESSING
1. The processing of personal data by the Operator is carried out in accordance with the requirements of the legislation of the Russian Federation in the following ways::
  1. automated processing of personal data with or without transmission of the received information via information and telecommunication networks;
  2. non-automated processing of personal data;
  3. mixed processing of personal data.
2. The list of actions performed by the Operator with the User's personal data for the purposes stipulated in clause 3.2 of the Privacy Policy: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, depersonalization, blocking, deletion, destruction.
3. By registering, ordering documents or services on the Website arcwocluster.ru , The User provides the User's consent (hereinafter referred to as Consent) to process his personal data in accordance with the provisions of this Privacy Policy of the Operator.
4. The processing of personal data is carried out by the Operator subject to obtaining Consent obtained in accordance with the requirements of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data", with the exception of cases established by the legislation of the Russian Federation when personal data processing can be carried out without such Consent.
5. The User decides to provide his personal data and gives Consent freely, voluntarily and in his own interest.
6. The duration of personal data processing is determined by the achievement of the purposes for which personal data was collected, unless another period is stipulated by the agreement with the User or the current legislation.
7. The condition for termination of personal data processing may be the achievement of personal data processing goals or the loss of the need to achieve these goals, the expiration of Consent or withdrawal of Consent by the User, as well as the detection of unlawful processing of personal data.
8. Consent may be revoked by sending a written statement of withdrawal to the Operator.
9. The Operator distributes personal data authorized by the User for distribution, that is, it performs actions aimed at disclosing them to an indefinite circle of persons, in compliance with the requirements, prohibitions and conditions established by Part 9 of art. 9, art. 10.1 of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data". Disclosure and dissemination of personal data to third parties without the User's consent is prohibited, unless otherwise provided by federal law. Consent to the processing of personal data authorized by the User for distribution is issued separately from other User consents to the processing of his personal data, taking into account the Requirements for the content of consent to the processing of personal data authorized by the personal data subject for distribution, approved by Roskomnadzor Order No. 18 dated 02/24/2021.
10. When processing personal data, the operator takes or ensures the adoption of necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, provision, dissemination of personal data, as well as from other unlawful actions with respect to personal data.
11. Personal data is stored in a form that makes it possible to identify the User for a period not longer than the purposes of personal data processing require, except in cases where the storage period of personal data is established by federal law, an agreement to which the User is a party, beneficiary or guarantor.
12. When processing personal data, the Operator complies with the requirements of Article 18 of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data".
13. When processing personal data, the Operator undertakes to respect the confidentiality of personal data.
14. There is no cross-border transfer of personal data by the Operator.
15. In case of illegal or accidental transfer (provision, distribution, access) of personal data, the Operator informs the User about it within 3 working days.
BLOCKING, CLARIFICATION AND DESTRUCTION OF PERSONAL DATA
1. In case of detection of unlawful processing of personal data when contacting the User (his representative) or at the request of the User (his representative) or the authorized body for the protection of the rights of personal data subjects, the Operator blocks the unlawfully processed personal data related to the relevant User, or ensures their blocking from the moment of such request or receipt of the specified User request for the verification period.
2. In case of detection of inaccurate personal data when contacting the User or his representative, or at their request or at the request of the authorized body for the protection of the rights of personal data subjects, the Operator blocks personal data related to this User, or ensures their blocking from the moment of such request or receipt of the specified request for the verification period, if the blocking of personal data does not violate the rights and legitimate interests of the User or third parties.
3. In case of confirmation of the inaccuracy of personal data, the Operator, based on information provided by the User (his representative) or the authorized body for the protection of the rights of personal data subjects, or other necessary documents, clarifies the personal data or ensures their clarification within 7 (seven) business days from the date of submission of such information.
4. In case of detection of unlawful processing of personal data, the Operator, within a period not exceeding 3 (three) working days from the date of detection, stops the unlawful processing of personal data or ensures the termination of the unlawful processing of personal data, and if it is impossible to ensure the legality of the processing of personal data, within a period not exceeding ten working days from the date of detection illegal processing of personal data, destroys such personal data or ensures their destruction.
5. If the purpose of personal data processing is achieved, the Operator destroys the personal data or ensures their destruction within a period not exceeding 30 (thirty) days from the date of achievement of the purpose of personal data processing, unless otherwise provided by an agreement to which the User is a party, beneficiary or guarantor, or by another agreement between the Operator and the User, or if the Operator does not has the right to process personal data without the User's consent on the grounds of, provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" or other federal laws.
6. If the User withdraws consent to the processing of his personal data and if the storage of personal data is no longer required for the purposes of personal data processing, the Operator destroys the personal data or ensures their destruction within a period not exceeding 30 (thirty) days from the date of receipt of the said withdrawal, unless otherwise provided by the agreement to which the party, the beneficiary or guarantor for which is the User, by any other agreement between the Operator and the User, or if the Operator is not entitled to process personal data without the User's consent on the grounds provided for by Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" or other federal laws.
7. Within a period not exceeding 7 (seven) business days from the date of submission by the User (his representative) of information confirming that such personal data was illegally obtained or is not necessary for the stated purpose of processing, the Operator destroys such personal data.
8. The processed personal data is subject to destruction in case of loss of the need to achieve the purposes of processing, unless otherwise provided by federal law.
PROCESSING OF PERSONAL DATA USING COOKIES AND COUNTERS
1. Cookies transmitted to the User's equipment and the Operator's User equipment can be used by the Operator to provide personalized Services to the User, for statistical and research purposes, as well as to improve the Site.
2. The User is aware that the hardware and software used by him to visit sites on the Internet may have the function of prohibiting operations with cookies (for any sites or for certain sites), as well as deleting previously received cookies. The corresponding settings are made by the User independently in accordance with the documentation for the hardware and software (browser).
3. The counters placed by the Operator on the Site can be used to analyze the User's cookies, to collect and process statistical information about the use of the Site, as well as to ensure the operability of the Site as a whole or its individual functions in particular. The technical parameters of the counters may change without prior notice to the User.
RESPONSIBILITY OF THE PARTIES
1. The Operator is responsible for violating the requirements of Federal Law No. 152-FZ dated 27.07.2006 "On Personal Data" in accordance with the legislation of the Russian Federation.
2. The User has the right to claim damages in court.
FINAL PROVISIONS
1. The Operator has the right to make changes to the Privacy Policy without the User's consent.
2. The new Privacy Policy comes into force from the date of its posting on the Website, unless otherwise provided by the new version of the Privacy Policy. The new version of the Privacy Policy applies to relationships that have arisen since it was put into effect.