1. For the purposes of this document, the following terms are used:
1.1. PIXIES – a individual person, registered in accordance with the law of the Russian Federation as an individual entrepreneur, Anikeeva Elena Viktorovna, State Registration Number 319623400037826, address: Ryazan region, Ryazan, Tsiolkovsky Street, Building 10, Apt. 94
1.2. Site – a web page owned by PIXIES, which is functionally designed to enable Users to access the Site’s content on the terms of this Policy, to inform Users about PIXIES services. Access to the Site is provided using the Internet – wearepixies.com.
1.3. User – a capable individual using the functionality of the Site
1.4. Data – information that Users transmit to PIXIES while using the Site
1.5. Data processing – any action (operation) or a set of actions (operations) performed with the use of automation tools or without the use of such tools with Data, including collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of data
1.6. Other terms not defined by this Policy are subject to interpretation in accordance with the generally accepted meaning in the Internet environment.
2.1. This document (hereinafter and earlier – the “Policy”) establishes the rights and obligations of PIXIES in the process of processing Data.
2.2. This Policy was developed in accordance with the law of the Russian Federation governing relations in the field of ensuring the security of personal data, and in accordance with the regulation on the processing and protection of personal data approved by PIXIES.
2.3. The User’s consent to this Policy is a prerequisite when filling out and submitting the form provided for in clause 2.4.1 of the Policy. At the same time, the User who does not agree with the terms of this Policy is not entitled to send the completed form.
2.4. The user agrees to the terms of this Policy from the moment the following events coincide:
2.4.1. filling in by the User of his own Data in the form specified in the “Contacts” section of the Site at the link https://wearepixies.com/#contact;
2.4.2. putting a mark on familiarization with this Policy and consent to it in the checkbox (graphic element of the Site, which allows the User to mark consent and familiarization with the Policy or not to mark it);
2.4.3. sending the form to the PIXIES address specified in clause 2.4.1 of the Policy by clicking the “SEND” button below the form.
2.5. This Policy can be changed by PIXIES unilaterally at any time, without obtaining the consent of the User and without prior notice. The current version of this Policy is published by PIXIES on the Internet on the Site. Unless PIXIES explicitly states otherwise, the new version of the Policy comes into force and becomes binding on the User from the moment of publication.
2.6. PIXIES retains the right to process the User’s data in relation to the User’s personal data – until the User receives a corresponding notification; in relation to other data – until the time specified by applicable law.
3.1. The data includes the information that the user transmits PIXIES while using Site and as described in the Policy, and include both impersonal user data as well as user’s personal data.
3.2. The data is collected for the purpose of cooperation between the User and PIXIES, as well as improving the quality of PIXIES services and improving the Site. In particular, the purposes of Data processing are:
3.2.1. implementation and / or performance of functions, powers and duties assigned by the law of the Russian Federation to PIXIES .
3.2.2. identification of Users on the Site as part of the provision of paid services;
3.2.3. providing Users with up-to-date information about the Site and the ability to access it;
3.2.4. processing requests of PIXIES’s Users;
3.2.5. prevention and detection of fraud and illegal use of Site, services of Site;
3.2.6. providing Users with personalized offers and recommendations;
3.2.7. sending to Users of service, advertising and other information related to the use of the Site.
3.3. PIXIES, having access to the Data, is obliged not to disclose to third parties and not to distribute personal data without the consent of the subject of personal data, unless otherwise provided by federal law.
3.4. PIXIES has the right to entrust the processing of the Data to another person on the basis of an agreement concluded with this person, the User agrees to exercise this right to PIXIES.
3.5. In the process of using the Site and the User m and the following Data may be transferred to PIXIES:
3.5.1. name and / or surname of the User;
3.5.2. User’s email address;
3.5.3. User’s phone number;
3.5.4. information about the activities of the User and / or his business activities;
3.5.5. information about the User ‘s preferences in cooperation with PIXIES;
3.5.6. information on financial expectations in cooperation with PIXIES.
4. PIXIES applies to the following principles of data processing:
4.1. the processing of personal data must be carried out on a legal and fair basis.
4.2. the processing of personal data should be limited to the achievement of specific, predetermined and legitimate purposes. Processing of personal data that is incompatible with the purposes of collecting personal data is not allowed.
4.3. it is not allowed to combine databases containing personal data, the processing of which is carried out for purposes incompatible with each other.
4.4. only personal data that meet the purposes of their processing are subject to processing.
4.5. the content and volume of processed personal data must comply with the stated processing objectives. The processed personal data should not be redundant in relation to the stated purposes of their processing.
4.6. when processing personal data, the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of processing personal data must be ensured. PIXIES will take the necessary steps to remove or correct incomplete or inaccurate data.
4.7. storage of personal data should be carried out in a form that allows the subject of personal data to be determined, no longer than the purpose of processing personal data requires, unless the storage period for personal data is established by federal law, an agreement to which the subject of personal data is a party, beneficiary or guarantor. The processed personal data are subject to destruction or depersonalization upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law;
4.8. the processing of personal data should be carried out in such a way that for each category of personal data it is possible to determine the storage locations (material carriers) and establish a list of persons who process personal data or have access to them.
5. The basis for processing the Data for PIXIES is:
5.1. the requirements of this Policy;
5.2. consent of the subject of personal data to the processing of his personal data;
5.3. statistical or other research purposes, subject to the mandatory depersonalization of personal data and other regulatory legal acts governing relations in the field of ensuring the security of personal data.
5.4. other grounds directly provided for by the legislation of the Russian Federation.
6. User rights in the field of data processing
6.1. The user has the right to demand that PIXIES clarify his personal data, block or destroy them in cases where personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take measures provided by law to protect his rights.
6.2. The implementation of the User’s requirements specified in this section deprives PIXIES of the ability to ensure the full use of the Site by the User.
7. General requirements for data processing operations
7.1. PIXIES can obtain personal data of subjects in the following ways:
7.1.1. from the User;
7.1.2. from publicly available sources of personal data;
7.1.3. from the operator of personal data, as a person who processes personal data on the basis of an agreement (on behalf of the operator with the consent of the subject);
7.1.4. by other legal means.
7.2. When collecting personal data, PIXIES is obliged to provide the subject, at his request, with the information provided for by federal law:
7.2.1. confirmation of the fact of processing of personal data by the operator;
7.2.2. legal grounds and purposes of personal data processing;
7.2.3. the purposes and methods of processing personal data;
7.2.4. name and location of PIXIES, information about persons (excluding PIXIES employees) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with PIXIES or on the basis of federal law;
7.2.5. the processed personal data relating to the relevant subject of personal data, the source of their receipt, unless another procedure for submitting such data is provided for by federal law;
7.2.6. terms of processing personal data, including the terms of their storage;
7.2.7. the procedure for the exercise by the subject of personal data of the rights provided for by federal law;
7.2.8. information on the performed or expected cross-border data transfer;
7.2.9. name or surname, first name, patronymic and address of the person processing personal data on behalf of PIXIES, if the processing is entrusted or will be entrusted to such a person;
7.2.10. other information provided by federal legislation.
7.3. If the provision of personal data is mandatory in accordance with federal law, PIXIES is obliged to explain to the subject the legal consequences of refusing to provide his personal data.
7.4. When collecting personal data, including through the information and telecommunications network “Internet”, PIXIES is obliged to ensure the processing of personal data of citizens of the Russian Federation using databases located on the territory of the Russian Federation, unless otherwise provided by federal law.
7.5. PIXIES does not collect and subsequently process special categories of personal data, except in the following cases:
7.5.1. the subject has given his consent in writing to the processing of his personal data;
7.5.2. personal data has been made publicly available by the subject;
7.5.3. processing of personal data is carried out in accordance with the legislation on state social assistance, labor legislation, pension legislation of the Russian Federation;
7.5.4. the processing of personal data is necessary to protect the life, health or other vital interests of the subject or the life, health or other vital interests of others and it is impossible to obtain the consent of the subject;
7.5.5. the processing of personal data is necessary to establish or exercise the rights of the subject or third parties, as well as in connection with the administration of justice;
7.5.6. processing of personal data is carried out in accordance with the legislation on compulsory types of insurance, with insurance legislation.
7.6. The consent of the subject to the processing of personal data must be obtained strictly before the processing of personal data.
8. Data storage
8.1. Data confidentiality is canceled:
8.1.1. in case of their depersonalization;
8.1.2. after 75 years of their storage period;
8.1.3. in other cases stipulated by federal laws of the Russian Federation.
8.2. Confidentiality of personal data is established on the basis of the current requirements of the federal law of the Russian Federation.
9. Transfer of Data to third parties
9.1. PIXIES has the right to entrust the Data processing to another person in compliance with the legal requirements.
9.2. Cross-border transfer of data on the territory of foreign states may be carried out by PIXIES for the purpose of fulfilling the purpose of processing personal data.
10. To ensure Data protection:
10.1. responsible for data security are appointed;
10.2. a data protection system is being created, including:
10.2.1. organizational measures to ensure data security;
10.2.2. technical measures to ensure data security.
11. The data is subject to destruction or depersonalization:
11.1. upon achievement of the processing goals or in case of loss of the need to achieve these goals, unless otherwise provided by federal law;
11.2. upon the expiration of the established period for processing personal data;
11.3. requests from the subject of personal data or the Authorized body for the protection of the rights of subjects of personal data.
Version of the Policy effective from 9.10.2020