Zenit Legal LLC privacy policy regarding processing and protection of personal data

This privacy policy regarding the processing and protection of personal data (hereinafter referred to as the Policy) applies to all information that Zenit Legal Limited Liability Company TIN: 1657269200 (hereinafter referred to as the "Personal Data Operator" or "Operator") can receive about the user (hereinafter referred to as the User) and/or about a third party, on behalf of and in whose interests the User takes actions using of the site https://zenitlegal.com (hereinafter referred to as the Site), its services, programs and products.

This Policy was created on the basis of and in accordance with the Article 24 of the Constitution of the Russian Federation, Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and other regulatory acts of the Russian Federation in the field of processing personal data of users.

The Policy applies to all personal data of subjects that can be obtained by the Operator in the course of its activities.

The purpose of the Policy is to provide the persons (subjects) providing their personal data with the necessary information to assess which personal data and for what purposes are processed by the Operator, which methods of ensuring their security are implemented.

The Policy ensures the protection of the rights and freedoms of subjects while processing their personal data with or without any automation tools, and also defines the responsibility of persons with access to personal data in case of non-compliance with the requirements governing the processing and protection of personal data.

Users of the Site, working with the services of the Operator, informing the Operator of their personal data, including through the mediation of third parties, acknowledge their consent to the processing of personal data in accordance with this Policy and the terms of processing User's personal data.

Consent to the personal data processing may be revoked by the subject of personal data by sending a message to the email address indicated on the Website. If the personal data subject withdraws consent to the processing of personal data, the Operator has the right to continue personal data processing without the consent of the personal data subject if there are grounds specified by the current legislation.

1. GENERAL PROVISIONS

1.1. Within the framework of this Policy, the User's personal information is understood as:
I. Personal information that the User provides about himself/herself on their own will in the process of using feedback forms and other Services of the Site, including the User's personal data (surname, first name, place of work, position, contact phone number, email address, etc.), as well as personal data received at the Operator's corporate email address, persons who have expressed consent to the personal data processing by starting using the Site, by sending an email to the Operator's corporate email. Other information is provided by the User at his discretion.
II. Data that is automatically transmitted to the Site's services during their use (viewing, reading texts, downloading information) through the software installed on the User's device, including IP address, cookie data, information about the User's browser (or any other program that accesses the services), technical characteristics of the equipment and software used by the User, date and time of the Site visit, addresses of the requested pages, other similar information.
III. Other information about the User, required to access and use the Site.
1.2. his Privacy Policy applies only to the Website https://zenitlegal.com. Website https://zenitlegal.comdoes not control and is not responsible for third-party sites to which the User can click following the links available on the Site https://zenitlegal.com.


2. PURPOSES OF PROCESSING USERS' PERSONAL DATA

2.1. The Website collects and stores only that personal information necessary for the provision of the services or the execution of agreements and contracts with the User, except in cases where the legislation provides for the mandatory storage of personal data for a period specified by law.
2.2. The Operator processes personal data for the implementation of activities, the realization of its legitimate interests and requirements.
2.3. Purposes of personal data processing:
I. User identification;
II. Providing the User with an access to the Site resources;
III. Establishing feedback with the User, including sending notifications, requests regarding the use of the Site, the provision of services, processing requests and requests from the User. Determination of the User's location to ensure security, fraud prevention;
IV. Confirmation of the accuracy and completeness of the personal data provided by the User;
V. Providing the User with an effective customer and technical support in case of problems related to the Site functioning. To notify the User by e-mail;
VI. Notifying the User about the information updating on the Site, sending notifications, special offers, newsletters and other information and requests related to the provision of services with the consent of the User.
2.4. User notifications about the information update of materials and other changes on the site are displayed on the site itself.
2.5. The Site collects typical session log information, including the IP address, browser type and the language, as well as data on the time of visit and the address of the websites from which the links were clicked. In order to ensure effective Site management and assist in setting up the user interface, the Operator can use cookies (small text files stored in the visitor's browser) or web beacons (web beacons - electronic images) together with tracking pixels, which allow the Site to count the number of visitors who have visited a certain page, and provide access to certain cookies.
2.6. The collected standard information is used exclusively for statistical purposes. The Operator does not use personal data for the purpose of personal identification of any of the Users. However, when authorizing registered Users on the Site, the Operator may use this information in combination with the information obtained through data analysis tools and cookies in order to analyze how visitors use the Site.
2.7. By using the Site, the User agrees that the Operator can upload cookies to the User's device in accordance with the conditions described above.
2.8. The User can manage cookies by accessing the browser settings. If cookies are deleted, all data about the User's preferences will be deleted, including the choice to refuse to use the cookies. If cookies are blocked, the changes may affect the user interface, and some components of the Site may become unavailable.


3. CONDITIONS ON PROCESSING USERS' PERSONAL INFORMATION AND ITS TRANSFER TO THIRD PARTIES

3.1. Confidentiality is maintained with respect to the User's personal information, except in cases where the User voluntarily provides information about themselves for general access to an unlimited number of persons. In this case, the User agrees that a certain part of his personal data becomes publicly available.
3.2. The Operator does not have the right to transfer User's personal data to third parties, except for the following parties:
I. authorized state bodies within their powers;
II. persons to whom the Operator is obliged to transfer data in order to comply with the legislation of the Russian Federation;
III. persons to whom the Operator transfers personal data in order to fulfill the contract with the subject of personal data;
IV. persons to whom the Operator entrusts the processing of personal data;
V. to the legal successors of the Operator;
VI. other persons, with the consent of the subject of personal data.
3.3. The processing of the User's personal data is carried out without any time limit in any legal way, including in personal data information systems using automation tools or without the use of such tools. The processing of Users' personal data is carried out in accordance with the Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".
3.4. The Operator applies appropriate standards of technological and operational security to protect the information provided by Site Visitors from unauthorized access, disclosure, distortion, blocking or destruction. The measures applied by the Operator include:
I. appointment of a responsible person for the organization of personal data processing;
II. application of legal, technical and organizational measures to ensure the security of personal data;
III. assessment of the harm that may be caused to personal data subjects in case of violation of legal requirements, the ratio of harm and the security measures taken by the Operator;
IV. using secured premises with limited access to host servers of personal data information systems, as well as the use of lockable cabinets for storing paper carriers of personal data;
V. familiarization of the Operator employees directly processing personal data with the provisions of the legislation of the Russian Federation on personal data;
VI. control over the measures taken to ensure the security of personal data.
3.5. The Operator guarantees organizational and technical measures to protect the User's personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from any other illegal actions with it by third parties. The Operator, together with the User, takes all the necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.
3.6. In case of loss or disclosure of personal data, the Operator has the right not to inform the User about the loss or disclosure of personal data.


4. OBLIGATIONS OF THE PARTIES

4.1. The User is obliged to:
I. When sending a message by e-mail or via postal communication, provide information about personal data;
II. Update, supplement the provided information about personal data in case of any changes in it.
4.2. The Operator is obliged to:
I. Use the information received exclusively within the purposes described above;
II. Ensure the storage of confidential information in secret, not to disclose without the prior written permission of the User, as well as not to sell, exchange, publish or disclose in any other possible ways User’s transferred personal data, except as provided for in this Policy;
III. Take precautions to protect the privacy of the User's personal data in accordance with the procedure usually used to protect this kind of information in the existing business turnover;
IV. Block personal data related to a relevant User from the moment of request or notification of the User, or his legal representative or an authorized body for the protection of the rights of personal data subjects for the period of verification in case of identification of fake personal data or illegal actions.
4.3. In case of loss or disclosure of personal data, the Operator is not responsible if this confidential information:
I. Became a public domain before its loss or disclosure happened;
II. Was received from a third party before it was received by the Operator;
III. Was disclosed with the User's consent.
4.4. The User is fully responsible for compliance with the legislation requirements of the Russian Federation, including the laws on advertising, on copyright protection and related rights, on trademarks and service marks protection, but not limited to the above, including full responsibility for the content and form of materials.
4.5. The User acknowledges that the responsibility for any information (including, but not limited to: data files, texts, etc.) to which he may have access as part of the Site is born by the person who provided such information.
4.6. he User agrees that the information provided to him as part of the Site https://zenitlegal.com, may be an object of intellectual property, the rights to which are protected and belong to other Users, partners or advertisers who post such information on the Site.
4.7. The User does not have the right to make changes, lease, transfer on loan terms, sell, distribute or set up any production based on the content of the Site (in whole or in part), except in cases when such actions were expressly authorized in writing by the owners of the content of the site in accordance with the terms of a separate agreement.
4.8. Text materials of the site (articles, publications available for common public access on the site) are the subject to sharing on condition of sharing the link for the site.
4.9. The Operator is not liable to the User for any loss or damage faced by the User as a result of deletion, failure or inability to save any content of the site and other communication data contained on the site or streamed through it.
4.10. The Operator is not responsible for any direct or indirect losses that occurred due to: use or inability to use the site or individual services; unauthorized access to User’s communications; statements or behavior of any third party on the site.
4.11. The Operator is not responsible for any information posted by the user on the Site, including, but not limited to, copyrighted information, without the express consent of the copyright owner.

5. RIGHTS OF THE PARTIES

5.1. The User has the right to demand from the Operator:
I. to provide more detailed information about the use of the User's personal data by the Operator;
II. to provide a copy of the information that the User has provided to us;
III. to update any inaccurate, incorrect or outdated personal information stored by the Operator;
IV. to delete any personal information that is no longer necessary or no longer subject to the legal obligations to which the Operator applies; Оператора;
V. if the processing is based on consent, withdraw your consent so that we stop this particular processing;
VI. to stop direct marketing with you by informing us in advance;
VII. in cases where we carry out fully automated decision-making, which leads to legal obligations or a similar significant impact, you can request information from us about the decision-making methodology and ask us to verify whether the automated decision has been made correctly. We may reject the request, as permitted by applicable law, including in cases where the provision of information will lead to the disclosure of trade secrets or interfere with the prevention or detection of fraud or other crime. However, as a rule, in these circumstances, we will verify that the algorithm and the source data function as expected, without errors or distortions, or, if required by law, to correct the processing;
VIII. to restrict the use of your information during the investigation of the complaint.
5.2. The Operator has the right to:
I. Restrict the User in using the site in case of violation by the User of this Policy;
II. Supplement, modify this Policy without the prior consent of the User;
III. Provide the User's personal data to state, law enforcement and other competent authorities in case of receiving requests related to the investigation of a criminal case or any alleged illegal activity.


6. IMPLEMENTATION OF PERSONAL DATA PROTECTION

6.1. The Operator's activity in processing personal data in information systems is based on the principles of protecting the privacy of the information received.
6.2. The security of personal data during its processing in the Operator's information systems is ensured by means of an information protection system, which includes: organizational measures with the use of restrictions on physical access to premises, the use of software and technical protection measures.
6.3. The exchange of personal data during its processing in information systems is carried out through communication channels protected by technical means of information protection.
6.4. When processing personal data in the Organization's information systems, the following is ensured:
I. Carrying out measures aimed at preventing unauthorized access to personal data and (or) transferring it to persons who do not have the right to access such information;
II. timely detection of unauthorized access to personal data;
III. prevention of the impact on the technical means of automated processing of personal data, as a result of which their functioning may be disrupted;
IV. the possibility of immediate recovery of personal data modified and destroyed due to unauthorized access to them;
V. constant monitoring of the level of personal data security.
6.5. In order to ensure that the level of personal data protection complies with the requirements of Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and Federal Law No. 149-FZ of 27.07.2006 "On Information, Information Technologies and Information Protection", the Operator does not disclose information about the specific means and methods used to ensure the information security of personal data.


7. TERMS OF PERSONAL DATA PROCESSING

7.1. The time limit of personal data processing is determined based on the purposes of processing in the Operator's information systems, in accordance with the validity period of the contract, the agreement with the Subject of personal data, the statute of limitations, as well as other legal requirements and regulatory documents of the Operator.


8. SUPPLIMENTARY CONDITIONS

8.1. The Operator has the right to make changes to this Policy without the User's consent.
8.2. The new version of the Policy comes into force from the moment it is posted on the Website, unless otherwise is provided by the new version of the Policy.
8.3. The current version of the Policy is posted on the page at: zenitlegal.com.


9. FEEDBACK. QUESTIONS AND SUGGESTIONS.

9.1. All suggestions, questions and notifications regarding this Policy should be reported to info@zenitlegal.com or at the location of the office of Zenit Legal LLC, by phone +7 800 700 8 358.