The Personal Data Processing Policy

The Personal Data Processing Policy of Konglomerat LLC 

1. General Provisions

1.1. This document defines the policy of Konglomerat LLC, legal address: 224144, Republic of Belarus, Brest region, Pinsk, Brestskaya Str., 162. Postal address: 225701, Republic of Belarus, Brest region, Pinsk, PO Box 27; UNP 291193982 (hereinafter referred to as the Company) in relation to the processing of personal data (hereinafter referred to as the Policy). 

 1.2. The purpose of the Policy is to comply with the requirements of the legislation of the Republic of Belarus on personal data and to protect the interests of subjects of personal data (hereinafter referred to as users). 

1.3. The Policy applies to all personal data received by the Company: 

– when executing concluded and planned transactions; 

– in the process of registering users on the website of the online store https://www.eco-wood-art.by, eco-wood-art.by/en (hereinafter referred to as the Site); 

– in order to provide users with access to information resources owned by the Company (hereinafter referred to as the Services of the Company); 

– obtained in another way. 

 1.4. The Company processes and stores personal data in accordance with applicable law and this Policy in order to identify users using the Company’s Services; implementation of communications (establishing feedback with the user); determining the location of the user (if necessary); confirmation of the accuracy and completeness of personal data provided by the user (if necessary); improving the quality of the Company’s Services; provision of services; sending notifications, commercial offers; providing information on the activities of the Company; in order to sell promotions, bonus programs; sending messages of an advertising and informational nature; evaluating and analyzing the work of the Company’s Service; informing about promotions, discounts and special offers; implementation of information and advertising mailings about the products and services of the resource; promoting the goods produced by the Company and improving their quality, analyzing the work of the Company and evaluating the effectiveness of advertising placement. 

 1.5. The Policy applies to the processes of the Company, in which the processing and storage of personal data is carried out, including using automation tools. 

1.6. The current version of the Policy is posted on the Company’s website in the public domain and comes into force from the moment it is posted. 

1.7. The Policy is obligatory for familiarization by persons transmitting personal data to the Company. By checking the box of the Sit /Service of the Company “I agree”, with a link to this Policy, by visiting the Website and / or using the Services owned by the Company, providing his personal data, the user expresses his consent to the processing of his personal data on the terms set forth in this Policy and confirms that he is familiar with this Policy and agrees with its terms by entering his personal data specified in paragraphs. 1.3 of the Policy, on the Company’s website, with a proposal to place an order by clicking the button “Place an order”, “Proceed to checkout”. 

If the user wishes to clarify personal data, or wants to revoke his consent to the processing of personal data, he needs to write an email to the Company’s email address: konglomerat_ooo@mail.ru with the subject “Clarify personal data” or “Stop processing personal data”. The letter should include the email address and the corresponding requirement. 

1.8. This Policy is an integral part of the Public Offer (offer) for the sale of goods of the online store www.eco-wood-art.by, registered in the Trade Register of the Republic of Belarus on May 19, 2020 No. 482184, posted and / or available on the Internet at: https://www.eco-wood-art.by, as well as other agreements concluded with the Company, when this is expressly provided for by their terms. Thus, by concluding an agreement with the Company, the user accepts the terms of this Policy in full. 

 1.9. This Policy applies only to the Services of the Company and its Site. The Company does not control and is not responsible for third-party sites to which users, as subjects of personal data, can follow links available on the Site and in the Company’s Services. 

2. BasicTerms andDefinitions 

personal data – any information relating to an identified individual or individual who can be identified; 

personal data subject – an individual in respect of whom the processing of personal data is carried out; 

operator (Company) – a legal entity, other organization, independently or jointly with other persons organizing and (or) processing personal data; 

processing of personal data – any action or set of actions performed with personal data, including collection, systematization, storage, modification, use, depersonalization, blocking, distribution, provision, deletion of personal data. 

publicly available personal data – personal data disseminated by the subject of personal data either with his consent or disseminated in accordance with the requirements of legislative acts. 

blocking of personal data – termination of access to personal data without deleting it; 

depersonalization of personal data – actions as a result of which it becomes impossible to determine the ownership of personal data to a specific subject of personal data without using additional information; 

provision of personal data – actions aimed at disclosing personal data to a certain person or a certain circle of persons; 

dissemination of personal data – actions aimed at familiarizing with the personal data of an indefinite circle of persons; 

deletion of personal data – actions as a result of which it becomes impossible to restore personal data in information resources (systems) containing personal data, and (or) as a result of which material carriers of personal data are destroyed. 

3. Processing and storage of personal data

3.1. The Company processes and stores personal data in order to identify the user when interacting and providing the Service by the Company. 

3.2. Personal data provided by the user for the purpose of registering him on the Site, in the Service, for technical support, contains: 

– last name, first name, patronymic, delivery address, e-mail address and contact numbers of an individual; other data that in the aggregate may be personal data. 

Also, the site collects and processes anonymized data about visitors (IP-address, including cookies, information about the user’s browser (or other program through which the services are accessed), date and time of access, addresses of the requested pages , purchase history and other similar information are automatically transferred to the Services in the course of their use using the software installed on the user’s device using Internet statistics services (Яндекс.Метрика, Google Analytics, etc.). Anonymized user data collected using Internet statistics services are used to collect information about the actions of users on the site, improve the quality of the site and its content. 

 3.3. Personal data can be combined by the Company with information that the subject of personal data communicates in other ways (orally, in writing, by fax, etc.). 

 3.4. The company processes personal data using automation tools and without using such tools, as well as in a mixed manner, including in information and telecommunication networks, for the purposes specified in the Policy. 

 3.5. The company processes and stores personal data for the purposes specified in the Policy. 

 3.6. The company transfers personal data: to the subject of personal data – without restrictions, except for cases directly provided for by the requirements of the legislation of the Republic of Belarus; to other persons – in cases stipulated by the requirements of the legislation of the Republic of Belarus. 

 3.7. Personal data is stored: 

– on paper; 

– in the form of computer files; 

– in specialized systems of the Company that provide automatic processing and storage of information. 

 3.8. The processing of personal data in the Company is allowed only in compliance with the requirements of the legislation of the Republic of Belarus. 

3.9. The period for which the user’s consent to the processing of personal data is given is equal to the period of use by the user of the Company’s Services. 

3.10. An order for the processing of personal data to a third party is carried out by the Company only on the basis of an agreement concluded between the Company and a third party in accordance with the legislation of the Republic of Belarus. At the same time, the Company enshrines in the contract the obligation of the person processing personal data on behalf of the Company to comply with the principles and rules for processing personal data provided for by the Company Policy and the legislation of the Republic of Belarus. 

 3.11. If the Company entrusts the processing of personal data to another person, the Company bears responsibility to the subject of personal data for the actions of this person. The person who processes personal data on behalf of the Company is responsible to the Company. 

 3.12. The Сompany obliges other persons who have access to personal data not to disclose them to third parties and not to distribute them without the consent of the subject of personal data, unless otherwise provided by the legislation of the Republic of Belarus. 

 3.13. The processed personal data are subject to deletion or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by the legislation of the Republic of Belarus. 

4. Rights ofUsers asSubjects of Personal Data 

 4.1. Personal data subjects have the right: 

• to withdraw consent to the processing of their personal data; 
• to receive information regarding the processing of their personal data; 
• to change their personal data; 
• to receive information about the provision of their personal data to third parties; demand the termination of the processing of their personal data; request the deletion of their personal data; 
• to appeal against actions (inaction) and decisions of the operator related to the processing of their personal data; exercise other rights provided for by law. 

 4.2. The subject of personal data, in order to exercise the listed rights, submits an application in writing or in the form of an electronic document to the address of the Company in the manner prescribed by law. 

 4.3. The Company, within five working days after receiving the application, provides the applicant in an accessible form with information regarding the processing of his personal data. 

4.4. The company, within fifteen (15) days after receiving the application: 

 – about the termination of the processing of personal data, deletes them and notifies the applicant about it. In the absence of the technical possibility of deleting personal data, the Company takes measures to prevent further processing of personal data, including their blocking, and notifies the applicant about this within the same period; 

– about changes in personal data, makes changes and notifies the applicant about it or notifies about the reasons for the refusal to make such changes; 

 – provides the applicant with information about what personal data and to whom were provided during the year preceding the date of submission of the application, or notifies the applicant about the reasons for the refusal to provide such information. 

 4.5. The company has the right to refuse the applicant to satisfy the requirements to terminate the processing of his personal data and (or) their deletion if there are grounds for the processing of personal data provided for by the Law on the Protection of Personal Data and other legislative acts, including if they are necessary for the stated purposes of their processing, with notification of the applicant within fifteen (15) days after receiving the application. 

5. Protection ofPersonalData 

5.1. When processing personal data, the Company is guided by legislation and takes the necessary legal, organizational and technical measures to protect personal data from unauthorized access to them, as well as from other illegal actions in relation to personal data. 

 5.2. The processing and storage of personal data is carried out in accordance with the legislation and internal rules and documents of the Company. 

6. FinalProvisions

6.1. The Company undertakes not to transfer the information received from the user to third parties. 

 6.2. It is not considered a violation of the provision of information by the Company to advertisers and third parties acting on the basis of an agreement with the Company to fulfill obligations to the user solely within the framework of the agreement. 

It is not considered a violation to transfer user data to third parties in an impersonal form for the purpose of assessing and analyzing the operation of the Company’s system and providing personal recommendations. 

The transfer of information in accordance with the requirements of the legislation of the Republic of Belarus is not considered a violation of obligations. 

6.3. The company has the right to use the “cookies” technology. “Cookies” do not contain confidential information and are not transferred to third parties. 

 6.4. The Company receives information about the IP address of the User and information about the link from which website he came from. This information is not used to identify the visitor. 

6.5. The user can get any clarifications on issues of interest regarding the processing of his personal data by contacting the Company. The Company, if necessary, unilaterally introduces appropriate changes to the Policy, followed by their posting on the website. Subjects independently receive information on the changes on the site.