Privacy Policy
Republic of Tatarstan, Kazan city
The seventh day of May, two thousand twenty-one.
This policy in accordance with part 2 of Article 18.1 of the Federal Law of 27.07.2006 № 152-FZ "On Personal Data" defines the policy of individual entrepreneur Galiakhmetov Timur Ildusovich Galiakhmetov (hereinafter - the Operator) in relation to the processing of personal data and contains information on the requirements for the protection of personal data implemented by the Operator. This policy applies to all personal data processed through the Service, which the Operator receives or may receive from the User. This Policy is an integral part of the Operator's internal document defining the general policy of the Operator with regard to personal data processing and disclosing general information on the personal data protection requirements implemented by the Operator.
1. GENERAL PROVISIONS
1.1. The following terms and definitions for the purposes of this policy have the following meanings:
"Personal Data" - any information related to a certain or determined on the basis of such information natural person (subject of personal data), including his/her surname, name, patronymic, year, month, date and place of birth, address, e-mail address, telephone number, marital, social, property status, education, profession, income, other information. For the purposes of this policy, personal data means both information that the User provides about himself/herself when using the Service and information that is automatically transmitted to the Operator in the process of using the Service with the help of software installed on the User's device, including HTTP headers, IP address, cookie data, information about the User's browser, technical characteristics of equipment and software used by the User, date and time of access to the Service. In addition, personal data for the purposes of this policy also includes information about the User, the processing of which is provided for in the Agreement regulating the procedure for using the Service. In accordance with the Decree of the President of the Russian Federation dated March 6, 1997 № 188, personal data are classified as confidential information.
"Operator". individual entrepreneur Galiakhmetov Timur Ildusovich, TIN 165913802572, address: Republic of Tatarstan, Kazan city, processing personal data, as well as defining the purposes of personal data processing, composition of personal data subject to processing, actions (operations) performed with personal data.
"User" any natural person (subject of personal data), including those acting on behalf and in the interests of a legal entity, who may provide their personal data to the Operator in the course of using the Service, either independently or through a legal entity represented by them, and who has expressed consent to the terms and conditions set forth in the Agreement either by signing it or by performing the conclusory actions specified therein, aimed at using the Service. In the context of this policy, the User is also understood as a person whose personal data are processed by the Operator on behalf of the user of the Service contained in the Agreement.
"Service," "Personal Data Information System," "Information System" - a computer program (computer program) called "DEADXMACRO", designed to perform actions aimed at gaining advantages in the gameplay of computer games, as well as a website - a set of computer programs (computer programs) and information processed with their help, which is a website on the Internet, available at the following address https://deadxmacro.store/which allows you to manage some online functions of the Service, pay remuneration for the use of the Service and view information about the use of the Service, including User documentation. The Service includes a set of program code, databases, information, texts, graphic elements, design, images, photos, audio and video materials and other results of intellectual activity.
Exclusive rights to the Service and any of its components belong to the Administration as a right holder or licensee under the law, contract or other transaction.
"Agreement". license agreement/contract, user or other agreement between the User and the Operator, regulating the procedure of using the Service and containing the User's instruction to the Operator to process personal data, concluded either by signing it or by performing the conclusory actions specified therein, aimed at using the Service.
"Processing of personal data" - actions (operations) with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction.
"Automated processing of personal data" - processing of personal data by means of computer equipment.
"Non-automated processing of personal data", "Processing of personal data without the use of automation means" - "Processing of personal data without the use of automation means" - processing of personal data contained in the personal data information system or extracted from such system in cases when such actions with personal data, such as the use, clarification, dissemination, destruction of personal data in relation to each of the personal data subjects, are carried out with the direct participation of a person.
"Dissemination of personal data." - actions aimed at disclosure of personal data to an indefinite number of persons.
"Provision of personal data" - actions aimed at transferring personal data to a certain person or a certain circle of persons.
"Blocking personal data." - temporary cessation of personal data processing (except for cases when processing is necessary to clarify personal data).
"Destruction of personal data." - actions as a result of which it is impossible to restore the content of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed.
"De-identification of personal data." - actions, as a result of which it is impossible to determine the belonging of personal data to a particular subject without using additional information.
"Use of personal data." - actions (operations) with personal data performed for the purpose of decision-making, transactions or other actions generating legal consequences in respect of personal data subjects or otherwise affecting their rights and freedoms or the rights and freedoms of other persons.
"Publicly available personal data." - personal data to which an unlimited number of persons have access with the subject's consent or which, in accordance with federal laws, are not subject to the requirement of confidentiality.
"Privacy of personal data" - a mandatory requirement for the person who has access to personal data not to allow its dissemination without the consent of the subject or other legal basis.
"Statistics." - information about the use of the Service, as well as about the browsing by Users of individual elements of the Service (web pages, frames, content, etc.), collected by means of Counters, cookies, web beacons and other similar technologies.
"Cookies", "cookies". - a small piece of data sent by a web server and stored on the User's device. Cookies contain small pieces of text and are used to store information about browser activity. They allow us to store and retrieve identifying information and other information on computers, smartphones, phones and other devices. File specifications
"cookies" are described in RFC 2109 and RFC 2965. Other technologies are used for the same purpose, including data stored by browsers or devices, identifiers associated with devices, and other software. In this policy, all of these technologies are referred to as cookies.
"Web Beacons." - images in electronic form (single-pixel (1×1) or blank GIF images). Web beacons can help the Operator to recognize certain types of information on the User's device, such as cookies, time and date of page viewing and description of the page where the web beacon is placed.
"Counter." - a computer program that uses a code fragment installed on a website responsible for analyzing cookies and collecting statistical and personal data from that website. Personal data is collected in an anonymized form.
"IP address." - number from the numbering resource of the data transmission network based on the IP protocol (RFC 791), which uniquely identifies the subscriber terminal (computer, smartphone, tablet, other device) or means of communication included in the information system and belonging to the User when providing telematic communication services, including access to the Internet.
"HTTP header". - a line in an HTTP message containing a colon-separated name-value pair. The HTTP header format follows the general ARPA network text message header format described in RFC 822.
1.2. All other terms and definitions used in the text of this Policy shall be interpreted by the Parties in accordance with the legislation of the Russian Federation, current recommendations (RFC) of international standardization bodies on the Internet and the usual rules of interpretation of the relevant terms in the Internet.
1.3. Terms and definitions used in this policy may be used in the singular or plural, depending on the context, and may be capitalized or capitalized.
1.4. The titles of the headings (articles) as well as the construction of the policy are for convenience of reference only and have no literal legal meaning.
1.5. This Policy is developed in accordance with the Constitution of the Russian Federation, the Civil Code of the Russian Federation, Federal Law No. 149-FZ dated 27.07.2006 "On Information, Information Technologies and Information Protection", Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data", and other federal laws.
1.6. This policy defines the procedure and conditions of personal data processing by the Operator, including the procedure for transferring personal data to third parties, the specifics of non-automated processing of personal data, the procedure for access to personal data, the personal data protection system, the procedure for organizing internal control and responsibility for violations in the processing of personal data, as well as other issues.
1.7. This policy shall come into force from the date of its approval by the Operator and shall remain in force indefinitely until replaced by a new policy.
1.8. The Operator has the right to make changes to this policy without the User's consent. All changes to the policy shall be made by the Operator's administrative act.
1.9. This policy applies to all processes of personal data processing carried out through the Service without the use of automation tools. The Operator does not control and is not responsible for websites belonging to third parties, to which the User can go through the links placed in the Service.
2. LEGAL BASIS FOR PERSONAL DATA PROCESSING
2.1. The Operator processes the User's personal data in accordance with the following documents:
- Constitution of the Russian Federation;
- Civil Code of the Russian Federation;
- Tax Code of the Russian Federation;
- Federal Law of 27.07.2006 No. 152-FZ "On Personal Data";
- Federal Law No. 149-FZ dated 27.07.2006 "On Information, Information Technologies and Information Protection";
- Law of the Russian Federation from 07.02.1992 № 2300-1 "On Protection of Consumer Rights";
- Resolution of the Government of the Russian Federation of 15.08.1997 No. 1025 "On Approval of the Rules of Consumer Services in the Russian Federation";
- Resolution of the State Statistics Committee of the Russian Federation of 05.01.2004 No. 1 "On Approval of Unified Forms of Primary Accounting Documentation on Accounting of Labor and its Payment";
- Resolution of the Government of the Russian Federation No. 687 dated 15.09.2008 "On Approval of the Regulations on the Specifics of Personal Data Processing Performed Without the Use of Means of Automation"; - Resolution of the Government of the Russian Federation No. 1119 dated 01.11.2012 "On Approval of the Requirements for the Protection of Personal Data when Processing in Personal Data Information Systems";
- Order of FSTEC of Russia No. 21 dated 18.02.2013 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data when Processing in Personal Data Information Systems";
- Order of the Federal Security Service of Russia No. 378 dd. 10.07.2014 "On Approval of the Composition and Content of Organizational and Technical Measures to Ensure the Security of Personal Data when Processing in Personal Data Information Systems Using Cryptographic Information Protection Means Required to Meet the Personal Data Protection Requirements Established by the Government of the Russian Federation for Each Level of Security".
- other normative legal acts in the established sphere of the Operator's activity.
2.2. Processing of the User's personal data is performed on the basis and in fulfillment of the Agreement regulating the procedure of using the Service and other agreements or contracts concluded between the User and the Operator.
2.3. Processing of the User's personal data may also be carried out on the basis of his/her separate consent to such processing, which may be expressed, among other things, directly when using the Service by clicking on the corresponding button or by ticking the indicator of the corresponding check-box. The validity period of such consent of the User is indicated in its text.
3. PURPOSES OF PERSONAL DATA COLLECTION
3.1. The Operator processes only those personal data that are necessary for the use of the Service or fulfillment of agreements and contracts with the User, except for cases when the legislation of the Russian Federation provides for mandatory storage of personal information for a period of time specified by law.
3.2. When processing personal data, the Operator shall not merge databases containing personal data processed for incompatible purposes.
3.3. The Operator processes the User's personal data for the following purposes:
3.3.1. use of personal data of Users, who are individuals using the Service on their own behalf, for the purposes of conclusion and execution of the Agreement or any other contract with the Operator;
3.3.2. use of personal data of Users who are natural persons using the Service on behalf of a natural or legal person represented by them, for the purposes of conclusion and execution of the Agreement or any other agreement with the Operator;
3.3.3. conducting statistical and other studies of the use of the Service on the basis of anonymized data;
3.3.4. compliance with mandatory requirements of the legislation of the Russian Federation.
4. SCOPE AND CATEGORIES OF PROCESSED PERSONAL DATA, CATEGORIES OF PERSONAL DATA SUBJECTS
4.1. Personal data authorized for processing in accordance with this policy and provided by Users who are natural persons using the Service on their own behalf by filling in the appropriate input fields when using the Service may include the following information:
4.1.1. E-mail address;
4.2. Personal data authorized for processing in accordance with this policy and provided by Users who are natural persons using the Service on behalf of a natural or legal person they represent, by filling in the appropriate input fields when using the Service, may include the following information:
4.2.1. e-mail address;
4.3. Personal data processed in accordance with this policy and automatically transferred to the Operator in the process of using the Service using the software installed on the User's device may include the following information:
4.3.1. HTTP headers;
4.3.2. IP address of the User's device;
4.3.3. cookie data;
4.3.4. data collected by meters;
4.3.5. Web beacon data;
4.3.6. information about the User's browser;
4.3.7. technical specifications of the device and software;
4.3.8. technical data about the operation of the Service, including dates and times of use and access to the Service;
4.3.9. addresses of the requested website pages;
4.3.10. geolocation data of the User;
4.4. In accordance with this Policy, the Operator shall process personal data of persons belonging to the following categories of personal data subjects:
4.4.1. individuals using the Service in accordance with the Agreement on its use on their own behalf;
4.4.2. individuals who use the Service in accordance with the Agreement on its use on behalf of the individual or legal entity they represent.
5. PROCEDURE AND CONDITIONS OF PERSONAL DATA PROCESSING
5.1. The Operator has the right to process the User's personal data without notifying the authorized body for the protection of the rights of personal data subjects in accordance with Part 2 of Article 22 (paragraphs 2 and 8) of the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data".
5.2. The Operator processes the User's personal data using the personal data information system without the use of automation in accordance with federal laws or other regulatory legal acts of the Russian Federation, which establish requirements to ensure the security of personal data during their processing and to respect the rights of personal data subjects. Such actions with personal data as the use, clarification, distribution, destruction of personal data in relation to the User are carried out with the direct participation of the Operator's employees in accordance with the specifics approved by the Resolution of the Government of the Russian Federation dated 15.09.2008 No. 687.
5.3. The Operator shall process and store the User's personal data for the period of time determined in accordance with the Agreement on the use of the Service.
5.4. The User's personal data shall be kept confidential, except for cases when the User voluntarily provides information about himself/herself for general access to an unlimited number of persons.
5.5. The Operator has the right to transfer the User's personal data to third parties in the following cases:
5.5.1. there is the User's consent to such actions, expressed in accordance with the terms of the Agreement on the use of the Service;
5.5.2. the transfer is necessary for the User to use certain functionality of the Service (for example, for authorization through social media accounts) or for the execution of a certain agreement, contract or transaction with the User;
5.5.3. the transfer is provided for by the legislation of the Russian Federation or other applicable law within the framework of the procedure established by law;
5.5.4. in case of transfer of rights to the Service, transfer of personal data to the acquirer is required simultaneously with the transfer of all obligations to comply with the terms of this policy in relation to the personal data received by the acquirer;
5.5.5. if it is necessary to ensure the possibility to protect the rights and legitimate interests of the Operator or third parties, when the User violates this policy or the Agreement on the use of the Service;
5.5.6. in other cases stipulated by the legislation.
5.6. In case of loss or unauthorized disclosure of personal data, the Operator informs the User about this fact.
5.7. The Operator takes the necessary organizational and technical measures to protect the User's personal data from illegal or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties.
5.8. The Operator together with the User takes all necessary measures to prevent losses or other negative consequences caused by the loss or unauthorized disclosure of the User's personal data.
5.9. The Operator has the right to transfer personal data to inquiry and investigation bodies, other authorized bodies on the grounds provided for by the current legislation of the Russian Federation.
5.10. When collecting personal data, the Operator shall record, systematize, accumulate, store, clarify (update, change), extract personal data of the User, who are citizens of the Russian Federation, using databases located in the territory of the Russian Federation.
5.11. The Operator stops processing the User's personal data processed with the User's consent in case of expiration of the User's consent for processing or revocation of the User's consent for processing of his/her personal data, as well as in case of detection of unlawful processing of personal data or liquidation of the Operator.
6. ACCESS TO PERSONAL DATA
6.1. The right to access the User's personal data is granted only to the Operator's employees who are authorized to work with the User's personal data by virtue of their official duties on the basis of the list of persons authorized to work with personal data, which is approved by the Operator.
6.2. The list of employees who have access to personal data is kept up to date by the Operator.
6.3. Access to the User's personal data by third parties who are not employees of the Operator is prohibited without the User's consent, except for cases established by the legislation of the Russian Federation.
6.4. Access of the Operator's employee to the User's personal data shall be terminated from the date of termination of labor relations or from the date when the employee loses the right to access the User's personal data due to change of job duties, position or other circumstances in accordance with the procedure established by the Operator. In case of termination of labor relations, all carriers with the User's personal data that were at the disposal of the dismissed Operator's employee shall be transferred to the superior employee in accordance with the procedure established by the Operator.
7. UPDATING, CORRECTION, DELETION AND DESTRUCTION OF PERSONAL DATA
7.1. The User may at any time change, update, supplement or delete the personal data or part thereof provided by the User using the Service interface.
7.2. In case the Operator independently detects the fact of incompleteness or inaccuracy of the User's personal data, the Operator takes all possible measures to update the personal data and make appropriate corrections.
7.3. If it is impossible to update incomplete or inaccurate personal data of the User, the Operator takes measures to delete them.
7.4. In case of detection of unlawfulness of processing of the User's personal data, their processing by the Operator shall be stopped and the personal data shall be deleted.
7.5. In case of inoperability of the Service interface or lack of functionality of the Service to change, update, supplement or delete the User's personal data, as well as in any other cases, the User has the right to demand in writing from the Operator to clarify his personal data, block or destroy them if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing.
7.6. The Operator makes necessary changes to personal data that are incomplete, inaccurate or irrelevant within a period not exceeding seven working days from the date of submission by the User of information confirming that the personal data are incomplete, inaccurate or irrelevant.
7.7. The Operator shall destroy illegally obtained or not necessary for the stated purpose of processing the User's personal data within a period not exceeding seven working days from the date of submission by the User of information confirming that such personal data is illegally obtained or not necessary for the stated purpose of processing.
7.8. The Operator shall notify the User of the changes made and measures taken, and shall take reasonable steps to notify third parties to whom the personal data of that User has been transferred.
7.9. The User's rights to change, update, supplement or delete personal data may be restricted in accordance with legal requirements. Such restrictions, in particular, may stipulate the obligation of the Operator to retain the personal data changed, updated, supplemented or deleted by the User for the period defined by the legislation and to transfer such personal data in accordance with the established procedure to the state authorities.
8. RESPONSES TO USER REQUESTS FOR ACCESS TO PERSONAL DATA
8.1. The User has the right to receive information from the Operator regarding the processing of their personal data, including information containing:
8.1.1. confirmation of the fact of personal data processing by the Operator;
8.1.2. legal grounds and purposes of personal data processing;
8.1.3. the purposes and methods of personal data processing applied by the Operator;
8.1.4. name and location of the Operator, information about persons (except for the Operator's employees) who have access to personal data or to whom personal data may be disclosed on the basis of a contract with the Operator or on the basis of federal law;
8.1.5. processed personal data related to the respective User, the source of their receipt, unless another procedure for the presentation of such data is provided for by the federal law;
8.1.6. terms of personal data processing, including the terms of their storage;
8.1.7. the procedure for exercising the User's rights under the Federal Law of July 27, 2006, No. 152-FZ "On Personal Data";
8.1.8. information on realized or suspected cross-border data transfers;
8.1.9. the name or surname, first name, patronymic and address of the person who processes personal data on behalf of the operator, if the processing is or will be entrusted to such a person;
8.1.10. other information stipulated by law.
8.2. The Operator provides the opportunity to familiarize with the personal data processed and stored in the Operator's information system free of charge at the User's request within thirty days from the date of receipt of the User's written request.
8.3. In case the Operator refuses to provide information on the availability of personal data about the User or personal data to the User upon the User's application or upon receipt of the User's request, the Operator shall provide in writing a reasoned response, which is the basis for such refusal, within a period not exceeding thirty days from the date of the User's application or from the date of receipt of the User's request.
9. INFORMATION ON IMPLEMENTED REQUIREMENTS TO PERSONAL DATA PROTECTION
9.1. The security of personal data during their processing in the information system is ensured by means of a personal data protection system neutralizing the actual threats defined in accordance with Article 19, paragraph 5 of the Federal Law of July 27, 2006 No. 152-FZ "On Personal Data". 9.2. The personal data protection system applied by the Operator includes legal, organizational, technical and other measures to ensure the security of personal data, determined taking into account current threats to the security of personal data and information technologies used in information systems.
9.3. With regard to personal data, in respect of which the User's consent to their processing by third parties has been granted, the Operator has the right to engage, on the basis of a contract, another person ensuring the security of personal data during their processing in the information system.
9.4. When processing personal data in the Operator's information system, the latter shall ensure:
9.4.1. taking measures aimed at preventing unauthorized access to the User's personal data and/or transferring them to persons who do not have the right to access such information;
9.4.2. timely detection of unauthorized access to personal data;
9.4.3. prevention of impact on the technical means involved in the processing of personal data, as a result of which their functioning may be disturbed;
9.4.4. the possibility of immediate recovery of personal data modified or destroyed due to unauthorized access to them;
9.4.5. constant control over ensuring the level of protection of personal data.
9.5. For the purposes of compliance with the security requirements and implementation of the personal data security system, the Operator has developed a private model of security threats to the personal data information system.
9.6. In accordance with the Resolution of the Government of the Russian Federation No. 1119 dated 01.11.2012 "On Approval of Requirements to Personal Data Protection in Personal Data Information Systems", the Operator determined the level of personal data protection in case of their processing in the personal data information system owned by the Operator.
9.7. The Operator has drawn up an act of determining the level of personal data protection during their processing in the personal data information system.
9.8. The Operator, based on the act of determining the level of protection of personal data at their processing in the personal data information system without the use of automation, has developed and implemented a set of measures to protect and ensure the security of personal data.
9.9. The Operator uses technical means and software for processing and protection of personal data, and keeps a log of personal data protection means.
9.10. The Operator shall keep a log of accounting and storage of removable data carriers containing personal data.
9.11. Technical means ensuring the functioning of the personal data information system shall be located in premises owned by the Operator by right of ownership or other proprietary right (lease, free-of-charge use, etc.).
9.12. All the Operator's employees admitted to work with personal data, as well as those related to operation and maintenance of the personal data information system are familiarized with the requirements of this policy, as well as with the Operator's internal documents regulating the procedure of work with personal data.
9.13. The Operator has organized the process of employee training on the procedure of using personal data protection means operated by the Operator. The training is provided to the employees having permanent access to personal data and employees related to operation and maintenance of the personal data information system and personal data protection means.
9.14. The Operator's internal documents stipulate that employees are obliged to immediately notify the relevant Operator's official about loss, damage or shortage of data carriers containing personal data, as well as about attempts of unauthorized disclosure of personal data, its causes and conditions.
10. CONSENT TO THE PROCESSING OF PERSONAL DATA
10.1. The User decides to provide his/her personal data and gives consent to their processing freely, of his/her own free will and in his/her own interest.
10.2. The consent to the processing of personal data provided by the User is specific, informed and conscious.
10.3. In case the User's personal data are processed on the basis of and pursuant to the Agreement regulating the procedure of using the Service and other agreements or contracts concluded between the User and the Operator using the Service, such processing of the User's personal data is carried out on the basis of Article 6.5 of the Federal Law No. 152-FZ of July 27, 2006 "On Personal Data" and does not require a separate consent.
10.4. If the User's personal data is processed on the basis of his/her separate consent to such processing, expressed directly when using the Service by clicking on the corresponding button or by ticking the indicator of the corresponding check-box, then such consent to the processing of personal data is provided by the User in the form of an electronic document signed with a simple electronic signature in accordance with the Agreement governing the use of the Service.
10.5. Consent to the processing of personal data may be withdrawn by the User in accordance with the procedure established by law.
11. FINAL PROVISIONS
11.1. The beginning of the use of the Service by the User means his agreement with the terms of this policy. If the User does not agree with the terms of this policy, the use of the Service shall be immediately terminated.
11.2. The law of the Russian Federation shall apply to this Policy and to the relations between the User and the Operator arising in connection with the application of this Policy.
11.3. This policy is permanently publicly available on the Operator's website at the following link: https://deadxmacro.store/privacy_policy
11.4. All suggestions or questions regarding this policy may be addressed to the Operator's User Support Service by sending an e-mail to the following e-mail address: [email protected].
12. REQUIREMENTS.
Individual entrepreneur Galiakhmetov Timur Ildusovich, INN 165913802572
Republic of Tatarstan, Kazan city
