Policy on the Processing and Protection of Personal Data (Privacy Policy)

1. General Provisions

The Policy on the Processing and Protection of Personal Data (privacy policy) has been drawn up in accordance with the requirements of Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (hereinafter, the “Personal Data Law”) and determines the procedure for processing personal data and the measures to ensure the security of personal data taken by BOXSTORE LLC (hereinafter, the “Operator”).

1.1. The Operator sets as its most important objective and condition for carrying out its activities the observance of the rights and freedoms of man and citizen in the processing of his or her personal data, including the protection of the rights to inviolability of private life and to personal and family secrecy.
1.2. This policy of the Operator on the processing of personal data (hereinafter, the “Policy”) applies to all information that the Operator may obtain about visitors to the website https://boxstore.ru.

2. Basic Concepts Used in the Policy

2.1. Automated processing of personal data — processing of personal data by means of computer equipment.
2.2. Blocking of personal data — temporary cessation of the processing of personal data (except where the processing is necessary to clarify the personal data).
2.3. Website — a set of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://boxstore.ru.
2.4. Personal data information system — a set of personal data contained in databases and of the information technologies and technical means that ensure their processing.
2.5. Depersonalization of personal data — actions as a result of which it becomes impossible, without the use of additional information, to determine whether personal data belong to a specific User or another personal data subject.
2.6. Processing of personal data — any action (operation) or set of actions (operations) performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (dissemination, provision, access), depersonalization, blocking, deletion and destruction of personal data.
2.7. Operator — a state body, a municipal body, a legal entity or an individual that, independently or jointly with other persons, organizes and/or carries out the processing of personal data and also determines the purposes of processing personal data, the composition of the personal data to be processed, and the actions (operations) performed with personal data.
2.8. Personal data — any information relating directly or indirectly to an identified or identifiable User of the website https://boxstore.ru.
2.9. Personal data authorized by the personal data subject for dissemination — personal data to which the personal data subject has granted access to an unlimited number of persons by giving consent to the processing of personal data authorized by the personal data subject for dissemination in the manner provided for by the Personal Data Law.
2.10. User — any visitor to the website https://boxstore.ru.
2.11. Provision of personal data — actions aimed at disclosing personal data to a certain person or a certain group of persons.
2.12. Dissemination of personal data — any actions aimed at disclosing personal data to an indefinite group of persons or at making personal data known to an unlimited number of persons, including posting on the Internet.
2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to an authority of the foreign state, a foreign individual or a foreign legal entity.
2.14. Destruction of personal data — any actions as a result of which personal data are irreversibly destroyed with no possibility of subsequent recovery.

3. Basic Rights and Obligations of the Operator

• receive reliable information and/or documents from the personal data subject;
• in the event of withdrawal of consent to processing, is entitled to continue processing if there are grounds specified in the Law;
• independently determine the measures necessary to fulfill the obligations provided for by law.

The Operator is obliged to:

• provide the personal data subject with information upon his or her request;
• organize the processing of personal data in accordance with the legislation of the Russian Federation;
• take measures to protect personal data;
• cease processing and destroy data in the established cases.

4. Basic Rights and Obligations of Personal Data Subjects

• receive information about the processing of their data;
• demand the clarification, blocking or destruction of data;
• withdraw consent to processing;
• appeal against the actions of the Operator;
• provide reliable information about themselves.

5. Principles of Personal Data Processing

Data processing is carried out on a lawful and fair basis, within the scope of lawful purposes, without redundancy, ensuring the accuracy and relevance of the data, with a limited storage period and destruction upon achievement of the purposes.

6. Purposes of Personal Data Processing

Personal data are processed for:

• the conclusion and performance of contracts;
• informing about the Operator’s products and projects;
• document management;
• ensuring the security of interaction.

The following are processed: full name, INN (taxpayer ID), delivery address, contact details, bank details, etc.

7. Conditions for Personal Data Processing

Data processing is carried out with the consent of the subject or where there are legal grounds: performance of a contract, a court decision, fulfillment of obligations, protection of legitimate interests, etc.

8. Procedure for the Collection, Storage, Transfer and Other Types of Processing of Personal Data

The Operator ensures the safekeeping of personal data and takes all possible measures to prevent access to them by unauthorized persons.

The User may withdraw consent or update data by sending an email to in@boxstore.ru.

9. List of Actions Performed by the Operator with Personal Data

Collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer, depersonalization, blocking, deletion, destruction. Automated processing is possible.

10. Cross-Border Transfer of Personal Data

The Operator is obliged to notify the authorized body of its intention to carry out cross-border transfer of personal data and to obtain the necessary information from the receiving party.

11. Confidentiality of Personal Data

The Operator and other persons who have obtained access to personal data are obliged not to disclose them without the consent of the subject, unless otherwise provided by law.

12. Final Provisions

The User may obtain clarifications by writing to in@boxstore.ru.
The current version of the policy is available at https://boxstore.ru/politconf.

Operator Details

BOXSTORE LLC
INN (taxpayer ID): 9724074324
OGRN: 1227700127368
Registered address: 115230, Moscow, Kashirskoye Highway 3, bldg. 2, str. 2, premises/floor/office 1/6/28/2/WP
Bank account number: 40702810208500017200
Correspondent account: 30101810745374525104
BIC: 044525104
Bank: Tochka Bank LLC
Email: in@boxstore.ru