Consent to the processing, storage, distribution, personal data

This consent of the subject of personal data on the processing of his personal data was developed in accordance with the Law of Ukraine dated 01.06.2010 No. 2297-VI "On the protection of personal data" as amended on 12.21.2019 (hereinafter - the "Law") and defines the main provisions for processing , use, dissemination, protection, collection, accumulation and other necessary actions with personal data, concluded between Magnita Private research and production enterprise, EDRPOU code 30617241 (hereinafter referred to as the Company, the Owner / Holder of Personal Data) and physical persons Tsami, (hereinafter - the "data subject") entering into a contractual relationship with the Company.

1. Definition of Terms

Personal Data Base - a named collection of ordered personal data in electronic form and/or in the form of personal data files.

Processing of personal data - any action or set of actions, such as the collection, registration, accumulation, storage, adaptation, modification, renewal, use and distribution (distribution, implementation, transfer), depersonalization, destruction of personal data, including using information (automated) systems.

Blocking of personal data - temporary suspension of the processing of personal data.

Owner of personal data - an individual or legal entity, determines the purpose of processing personal data, establishes the composition of this data and the procedures for its processing, unless otherwise provided by law.

Recipient - an individual or legal entity to whom personal data is provided, including a third party;

Third party - any person, with the exception of the personal data subject, owner or manager of personal data and the Ukrainian Parliament Commissioner for Human Rights, to whom the owner or manager of personal data transfers personal data.

Use of personal data - any actions of the owner to process this data, actions to protect them, as well as actions to provide partial or full right to process personal data to other subjects of relations related to personal data, performed with the consent of the subjects " personal data object or in accordance with the law.

Collection of personal data - actions to select or organize information about an individual.

Accumulation of personal data - actions for combining and systematizing information about an individual or group of individuals or entering this data into a personal database.

Distribution of personal data - actions to transfer information about an individual with the consent of the subject of personal data.

Cross-border transfer of personal data - transfer of personal data to the territory of a foreign state of a foreign government authority, a foreign individual or foreign legal entity.

Destruction of personal data - actions that make it impossible to restore the contents of personal data in the personal data information system and (or) as a result of which material carriers of personal data are destroyed.

Subject of personal data - an individual voluntarily and with full awareness of the consequences provides the owners and/or the Manager of personal data with their personal data.

Consent of the subject of personal data - voluntary expression of the will of an individual (subject to his knowledge) to provide permission to process his personal data in accordance with the stated purpose of their processing, expressed in writing or in form, which allows us to conclude for consent.

Personal data - information or a collection of information about an individual who is identified or can be specifically identified.

2. General Terms

2.1 The company carries out the processing, storage and use of personal data, and also determines the purposes of processing personal data, the composition of personal data to be processed, as well as actions (operations) performed with personal data, namely:

2.1.1. Collection of personal data;

2.1.2. Accumulation and storage of personal data;

2.1.3. Distribution of personal data;

2.1.4. Use of personal data;

2.1.5. Recovery of personal data;

2.1.6. Destruction of personal data;

2.1.7. The inclusion of personal data in the database;

2.1.8. Anonymization of personal data;

2.1.9. Other personal data actions that are necessary for the purpose of this Consent.

2.2 The company processes and stores personal data in accordance with the Law of Ukraine “On the Protection of Personal Data” and other regulatory legal acts of Ukraine.

2.3 The validity of this consent also extends to cases when the Company acts as a third party, processes the personal data of entities on behalf of another owner / manager of personal data or other persons providing intermediary services to the Company and obtain personal data of personal data subjects in order to further fulfill personal data of the conclusion and execution of transactions (contracts) between the Company and such personal data entities.

3. Personal Data Processing Principles

3.1 The company accepts and ensures the implementation of the following principles of personal data processing:

3.1.1. personal data should only be processed legally;

3.1.2. processing is subject to the consent of the subject of personal data to the processing of such data;

3.1.3. only personal data that are consistent with the purposes of their processing are subject to processing;

3.1.4. the content and volume of processed personal data must comply with the declared processing goals;

3.1.5. when processing personal data, the accuracy of personal data must be ensured, its sufficiency, and, if necessary, relevance to the purposes of processing personal data;

3.1.6. personal data must be processed in compliance with data protection requirements;

3.1.7. personal data should not be transferred to foreign subjects of relations related to personal data if the proper protection of personal data is not ensured in the jurisdictions of such foreign entities;

3.1.8. processed personal data are subject to destruction or depersonalization upon achievement of processing goals or in case of loss of need to achieve these goals, unless otherwise provided by this agreement or other legislation of Ukraine;

3.1.9. upon gaining access to personal data, the Company is obliged not to disclose to third parties and not to distribute personal data without the consent of the personal data subject, unless otherwise provided by this agreement or other legislation of Ukraine.

3.1.10. The subject of personal data of personal data, by joining the terms of this Consent, gives his consent to the entry and use of his personal data in the User Database and to the processing of his personal data by the Owner (in particular, to the collection, registration, accumulation, storage, adaptation, modification, renewal, use and dissemination, depersonalization, destruction of personal data, including using information (automated) systems, and other actions that Vlad can perform dalets with his personal data: name, surname, father, number of communications, electronic identification data (IP address, phone, e-mail), data on the place of residence, as well as other personal data and information that is provided to fulfill the requirements of the current legislation and / or voluntarily by the Owner of the personal data of the owner solely for the purpose of registering the Subject of personal data in the user database with the subsequent sending to the Subject of personal data of mail messages and SMS messages, including advertising and newsletters, in order to ensure the implementation of civil law and business relations, settlements, accounting and tax accounting, for communication and contractual relations with government bodies, contractors and other third parties in the course of business , as well as for other purposes that do not contradict the current legislation.

4. Processing Terms and Purpose

4.1. The processing of personal data by the Company is carried out in the following cases:

4.1.1. subject to the provision by the subject of personal data of consent to the processing of such data, which is expressed in writing or in a form that allows us to conclude on the consent;

4.1.2. necessary to exercise the rights and legitimate interests of the Company or third parties or to achieve public interests;

4.1.3. necessary for the execution of an agreement to which the data subject is a beneficiary or guarantor, as well as for the conclusion of a contract at the initiative of the personal data subject or an agreement under which the personal data subject will be the beneficiary or guarantor;

4.1.4. It is necessary for the exercise of the rights and obligations of the subject of personal data in the field of labor relations in accordance with the law with appropriate protection.

5. Personal Data Processing

5.1. When processing personal data, the Company carries out the following actions (operations) or a set of actions (operations), using automation tools or without using such tools with personal data: collecting, recording, systematizing, accumulating, storing, clarifying (updating, changing), extracting, use, transfer (distribution, provision, access), depersonalization, blocking, deletion and destruction, unless a narrower scope of actions with personal data is defined to the subject of the personal data subject, on whose behalf the Company operates, or follows from the conditions for the processing of personal data.

5.2. The processing of special categories of personal data regarding race, nationality, political views, religious or philosophical beliefs, health status, intimate life, private life, information about the membership of a personal data subject in public associations or their union activities is not carried out.

5.3. The personal data subject can revoke this consent by sending the owners a written notice at least 90 (ninety) days before the expected date of withdrawal of this consent. The personal data subject agrees that within the specified period the Owner is not obliged to stop processing personal data and destroy the personal data of the personal data subject. The revocation will not be retroactive with respect to personal data processed prior to the entry into force of such revocation.

5.4. The owner / manager of personal data is obliged, in accordance with the requirements of the legislation of Ukraine in the field of personal data protection, to ensure adequate protection of personal data from illegal processing, as well as from illegal access to them, including taking the necessary measures to prevent the disclosure of personal data by employees and / or others authorized persons of the owners to whom such personal data was entrusted or who became aware of them in connection with the implementation of the Agreement.

6. Storage periods and requirements for the destruction of personal data

6.1. Personal data is subject to deletion or destruction in the event of:

6.1.1. the data storage period, a certain consent of the personal data subject to the processing of this data or by law;

6.1.2. termination of legal relations between the subject of personal data and the owner or manager, unless otherwise provided by law;

6.1.3. the entry into force of a court decision to delete or destroy personal data.

6.2. The storage period for personal data is 3 (three) years from the date the subject provides this consent.

6.3. After the expiration of the personal data storage period provided for in clause 6.2. of this Consent, the Owner and / or the Personal Data Manager has the right to automatically extend the storage period for personal data by 3 (three) years if the personal data subject does not require the destruction of personal data after the expiration of the personal data storage period.

7. Protecting Your Personal Data

7.1. Owners, managers of personal data and third parties are required to protect this data from accidental loss or destruction, from illegal processing, including illegal destruction or access to personal data.

7.2. The owner is not responsible for any processing, failure to provide access and protection of personal data of personal data subjects by third parties, including the owner’s employees, if the provision of access to such personal data (or other action that created the possibility of further unauthorized processing by third parties) was committed By the owner or another person with the permission of the subject of personal data outside the performance of obligations under the Agreement for personal purposes or other purposes not related to the performance obligations under the C OVOR, using technical means or other materials / equipment of the owner.

8. Other Terms

8.1. The subject of personal data joins and accepts the terms of this Agreement by providing written consent or consent in the form that allows us to conclude that the consent has been granted by the subject of personal data and to identify such a subject of personal data.

8.2. The data subject joins this Consent by expressing it freely, without any coercion and being aware of the legal consequences of this Agreement.

8.3. By joining this Consent, the personal data subject confirms that the provisions of this Consent are clear and understandable to him.

8.4. The destruction of personal data of the subject of personal data is carried out in case of the requirement of the subject of personal data to destroy his personal data within the time periods specified in clauses 6.2-6.3 of this Agreement.

8.5. This Consent is considered to be concluded and comes into legal force from the moment of accession by the subject of personal data with the terms of this Agreement.

8.6. The text of this Consent is available on the website of the owner/manager of personal data, which is available to an unlimited number of persons by link.