COMEDY VIDEO
|

1. General Provisions
1.1. This Policy regarding the processing of personal data (hereinafter referred to as the "Policy") is drawn up in accordance with paragraph 2 of Article 18.1 of the Federal Law "On Personal Data" No. 152-ФЗ dated July 27, 2006, as well as other regulatory legal acts of the Russian Federation in the field of protection and processing of personal data and is valid in relation to all personal data (hereinafter referred to as Data) that an individual entrepreneur Andrey Okunev (hereinafter referred to as the Operator, IP) can receive from a personal data subject who is a user of the site (hereinafter referred to as the User) located at the Internet address http: // kinoshou.rf (hereinafter referred to as the Site).
1.2. The operator protects the processed personal data from unauthorized access and disclosure, misuse or loss in accordance with the requirements of Federal Law of July 27, 2006 No. 152-ФЗ "On Personal Data".
1.3. Policy Change.
1.3.1. The operator has the right to make changes to this Policy. When making changes, the heading of the Policy indicates the date of the last update of the editorial office. The new version of the Policy comes into force from the moment it is posted on the Site, unless otherwise provided by the new version of the Policy.
2. Terms and abbreviations
Personal data (PD) - any information relating directly or indirectly to a specific or determinable individual (subject of personal data).
Personal data processing - any action (operation) or a set of actions (operations) performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer, depersonalization, blocking, deletion, destruction of personal data.
Automated processing of personal data - processing of personal data using computer technology.
Personal data information system (ISPD) - a set of personal data contained in databases and processing of information technologies and technical means.
Personal data made publicly available by the subject of personal data - PD, access to an unlimited number of persons to which is provided by the subject of personal data or at his request.
Blocking of personal data - temporary termination of the processing of personal data (unless the processing is necessary to clarify personal data).
Destruction of personal data - actions, as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed.
Operator - an organization that independently or jointly with other persons organizes the processing of personal data, as well as defines the goals of processing personal data to be processed, actions (operations) performed with personal data. The operator is Individual entrepreneur Andrei Okunev, Russia, Nizhny Novgorod, Verhne-Pecherskaya str, 1/1, TIN 526001821575, OGRNIP 315526000000892.

3. Processing personal data
3.1. Obtaining PD.
3.1.1. All PD should be obtained from the subject itself. If the PD of the subject can only be obtained from a third party, then the subject must be notified of this or consent must be obtained from him.
3.1.2. The operator must inform the subject about the goals, the alleged sources and methods of obtaining the PD, the nature of the PD to be received, the list of actions with the PD, the period during which the consent is valid, and the procedure for its withdrawal, as well as the consequences of the refusal of the subject to give written consent to receive them.
3.1.3. PD are transmitted by the subject for their processing by the Operator by:
User visits to the Site;
User filling out the feedback form on the Site (order a call, leave a review, register, place an order and others).
3.2. PD processing.
3.2.1. The processing of personal data is carried out:
with the consent of the personal data subject to the processing of his personal data;
in cases where the processing of personal data is necessary for the implementation and implementation of the functions, powers and duties assigned by the legislation of the Russian Federation;
in cases when personal data is being processed, access to an unlimited number of persons to which is provided by the subject of personal data or at his request (hereinafter - personal data made publicly available by the subject of personal data).

3.2.2. Purpose of processing personal data:
raising the awareness of the Site users about IP products / works / services, providing relevant advertising information, optimizing advertising, providing information support, consulting, conducting marketing campaigns (including email newsletters and SMS notifications about news and promotions, etc. .), sending notifications about the status of requests, applications, orders, as well as in other cases of using the Site by the User.
3.2.3. Categories of personal data subjects.
PD processed the following subjects PD:
individuals - Site Users.
3.2.4. PD processed by the Operator:
surname, name, patronymic of an individual and / or individual entrepreneur, position held, email address, contact phone number, location address;
the source of access to the Site and information from a search or advertising request;
user device data (including resolution, version, and other attributes characterizing the user device);
user clicks, page views, filling in fields, displays and viewing banners and videos;
data characterizing audience segments;
session parameters;
data on time of visit;
cookie information
IP address
3.2.5. The processing of personal data is carried out:
using automation tools;
without using automation tools.
3.3. PD storage.
3.3.1. PD of subjects received by the Operator undergo further processing and are transferred for storage in electronic form.
3.3.2. Storage and placement of documents containing PD in open electronic directories (file sharing) in ISPD is not allowed.
3.3.3. Storage of PD in a form that allows to determine the subject of PD is carried out no longer than the goals of their processing require, and they must be destroyed upon achievement of the processing goals or in case of loss of need to achieve them.
3.4. Destruction of PD.
3.4.1. PDs on electronic media are destroyed by erasing or formatting the media.
3.4.2. The fact of the destruction of PD is documented by the act on the destruction of carriers.
3.5. PD transmission.
3.5.1. The operator transfers the PD to third parties in the following cases:
the subject has expressed his consent to such actions;
the transfer is provided for by Russian or other applicable legislation within the framework of the procedure established by law.
4. Protection of personal data
4.1. The main PD protection measures used by the Operator are:
4.1.1. Appointment of a person responsible for processing PD, which organizes processing of PD, training and briefing, internal control over compliance by the Operator and its employees with requirements for the protection of PD.
4.1.2. Identification of current threats to security of PD during their processing in ISPD and development of measures and measures to protect PD.
4.1.3. Developing a policy regarding the processing of personal data.
4.1.4. Establishment of access rules for PD processed in ISPD.
4.1.5. Setting passwords for access for Operator employees in ISPD.
4.1.6. Compliance with the conditions ensuring the safety of PD and excluding unauthorized access to them.
4.1.7. Detection of facts of unauthorized access to personal data and taking measures.
4.1.8. Recovery of PD modified or destroyed due to unauthorized access to them.
4.1.9. Training of the Operator's employees who directly process personal data, the provisions of the legislation of the Russian Federation on personal data, including the requirements for the protection of personal data, documents that determine the Operator's policy regarding the processing of personal data, local acts on the processing of personal data.
4.1.10. Implementation of internal control and audit.
5. The basic rights of the subject of PD and the obligations of the Operator
5.1. Fundamental rights of the subject of PD.
The subject has the right to access his personal data and the following information:
confirmation of the fact of processing PD by the Operator;
legal grounds and goals of processing PD;
goals and methods used by the Operator for processing PD;
the name and location of the Operator, information about persons (except for the employees of the Operator) who have access to the PD or to whom the PD can be disclosed on the basis of an agreement with the Operator or on the basis of federal law;
terms for processing personal data, including periods for their storage;
the procedure for the exercise by the subject of PD of the rights stipulated by the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data";
name or surname, name, patronymic and address of the person carrying out the processing of PD on behalf of the Operator, if the processing is entrusted or will be entrusted to such a person;
appeal to the Operator and sending him inquiries;
appeal against the actions or omissions of the Operator.
5.2. Responsibilities of the Operator.

The operator must:
when collecting PD, provide information on processing PD;
in cases where PDs were received not from the PD subject, notify the subject;
in case of refusal to provide PD, the subject is explained the consequences of such refusal;
publish or otherwise provide unrestricted access to the document defining its policy regarding the processing of PDs, to information on the ongoing requirements for the protection of PDs;
take the necessary legal, organizational and technical measures or ensure their adoption to protect the PD from unlawful or accidental access to them, destroy, modify, block, copy, provide, distribute the PD, as well as from other illegal actions in relation to the PD;
give answers to inquiries and requests of PD subjects, their representatives and the authorized body for the protection of the rights of PD subjects