Personal Data Processing Policy

1. General Provisions

1.1. This personal data processing policy has been drawn up in accordance with the requirements of the Federal Law of 27.07.2006. No. 152-FZ "On Personal Data" and defines the procedure for processing personal data and measures to ensure the security of personal data of Blago LLC (hereinafter referred to as the Operator).

1.2. Use of the Site services means the User's unconditional consent to this Policy and the terms of processing of his personal information specified therein; in case of disagreement with these terms, the User must refrain from using the services.

1.3. The operator of users' personal data is: OOO "Blago".

1.4. Consent to the processing of personal data is given by clicking "Order" on any of the products posted on the website, or by clicking "Get an individual application plan", or by clicking "Submit" when filling in the data on the website.

1.5. The User guarantees that he/she is an adult and has legal capacity.

1.6. The Operator sets as its most important goal and condition for the implementation of its activities the observance of the rights and freedoms of man and citizen when processing his personal data, including the protection of the rights to privacy, personal and family secrets. This Operator policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the blagoagro.ru website.

2. Key concepts used in the Policy

2.1. Automated processing of personal data — processing of personal data using computer technology.

2.2. Blocking of personal data — temporary cessation of processing of personal data (except for cases when processing is necessary to clarify personal data).

2.3. Website — a set of graphic and information materials, as well as computer programs and databases that ensure their availability on the Internet at the network address https://blagoagro.ru/.

2.4. Personal data information system — a set of personal data contained in databases and information technologies and technical means that ensure their processing.

2.5. Depersonalization of personal data — actions as a result of which it is impossible to determine without the use of additional information the ownership of personal data by a specific User or another subject of personal data.

2.6. Personal data processing — any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

2.7. Operator — a government agency, municipal agency, legal entity or individual that independently or jointly with other persons organizes and/or carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data subject to processing, actions (operations) performed with personal data.

2.8. Personal data — any information related directly or indirectly to a specific or determinable User of the website https://blagoagro.ru/.

2.9. Personal data permitted for distribution by the personal data subject — personal data, access to which by an unlimited number of persons is granted by the personal data subject by giving consent to the processing of personal data permitted by the personal data subject for distribution in the manner prescribed by the Law on Personal Data (hereinafter — personal data permitted for distribution).

2.10. User — any visitor to the website https://blagoagro.ru/.

2.11. Provision of personal data — actions aimed at disclosing personal data to a specific person or a specific group of persons.

2.12. Distribution of personal data — any actions aimed at disclosing personal data to an unlimited number of persons (transfer of personal data) or familiarizing an unlimited number of persons with personal data, including disclosure of personal data in the media, posting in information and telecommunications networks or providing access to personal data in any other way.

2.13. Cross-border transfer of personal data — transfer of personal data to the territory of a foreign state to a foreign government body, foreign individual or foreign legal entity.

2.14. Destruction of personal data — any actions as a result of which personal data are destroyed irrevocably with the impossibility of further restoration of the content of personal data in the personal data information system and/or the destruction of tangible media of personal data.

3. Purposes of processing personal information of Users

3.1. The Site collects and stores only the personal information that is necessary to provide services or fulfill agreements and contracts with the User, except for cases when the law provides for mandatory storage of personal information for a period specified by law. In the event of receiving a notice from the User about the revocation of consent to the processing of personal data, the Site stops processing the User's personal data within a period not exceeding 10 business days from the date of receipt. Notification of revocation of consent to the processing of personal data is sent to the e-mail address: info@blagoagro.ru and also by written request to the legal address: 191002, RUSSIA, ST. PETERSBURG, VNTER.G. MUNICIPAL DISTRICT VLADIMIR DISTRICT, ZAGORODNY PR-KT, 5, LITERA B, ROOM 3-N, ROOM 202B
3.2. The Site processes the User's personal information for the following purposes::
3.2.1. Identification of the User, to get acquainted with the products posted on the Site.
Purpose of processing: Registration on the Site (creation of an account), provision of access to personal resources, establishment of feedback with the User, notification to offer to conclude an agreement
Personal data:
last name, first name, patronymic,
e-mail address,
phone numbers,
company name,
area,
region,
crop,
type of soil,
information on fertilizers applied,
information on foliar treatment.
Legal grounds: Consent to the site policy.
Types of personal data processing: Collection, recording, systematization, accumulation, storage, destruction and depersonalization of personal data; sending informational letters to an e-mail address, or to a personal account, as well as directly on the Site.

3.2.2. Carrying out advertising activities, sending information about new products and services, special offers and various events with the consent of the User.
Purpose of processing: advertising.
Personal data:
last name, first name, patronymic,
email address,
telephone numbers,
company name,
area ha,
region,
crop,
type of soil,
information about applied fertilizers,
information about foliar treatment.
Legal grounds: consent to the site policy.
Types of personal data processing: Collection, recording, systematization, accumulation, storage, destruction and depersonalization of personal data; Sending informational letters to an email address, or to a personal account, as well as directly on the Site.

3.2.3. Conclusion, execution and termination of civil contracts (data categories):
Purpose of processing: conclusion, execution and termination of civil contracts
Personal data:
last name, first name, patronymic
email address
telephone numbers
year, month, date and place of birth
photographs
passport details (series number, date of issue, issued by, registration address) for individuals
area ha,
region,
crop,
type of soil,
information on applied fertilizers,
information on foliar cultivation;
last name, first name, patronymic,
email address,
telephone numbers,
company name, company details,
area ha,
region,
crop,
type of soil,
information on applied fertilizers,
information on foliar cultivation, for legal entities.
Legal grounds: agreements concluded between the operator and the subject of personal data.
Types of personal data processing: collection, recording, systematization, accumulation, storage, destruction and depersonalization of personal data; sending informational letters to an e-mail address.

3.3. The site also collects and processes anonymous data about visitors (including cookies) using Internet statistics services (Yandex Metrica, Google Analytics and others). The above data are further united by the general concept of Personal data in the text of the Policy.

3.4. For all purposes of personal data processing, the personal data processing period is 3 years from the date of the last activity on the site.

3.5. For all purposes, the categories of personal data subjects are - site users.

3.6. For all purposes, the personal data category is General.

3.7. Personal data is destroyed - by erasing it from the servers of the personal data operator.

3.8. Anonymized data of Users collected using Internet statistics services are used to collect information about the actions of Users on the site, improve the quality of the site and its content.

4. Terms of processing and storing Users' personal information and its transfer to third parties. Protection of personal data

4.1. The Site stores Users' personal information in accordance with the internal regulations of specific services.

4.2. The User's personal information is kept confidential, except in cases where the User voluntarily provides information about himself/herself for general access to an unlimited number of people.

4.3. The Operator processes the User's personal data only if the User fills it out and/or sends it independently through special forms located on the blagoagro.ru website. By filling out the relevant forms and/or sending your personal data to the Operator, the User expresses his/her consent to this Policy.

4.4. The Operator processes anonymized data about the User if this is allowed in the User's browser settings (the saving of cookies and the use of JavaScript technology are enabled).

4.5. The Site has the right to transfer the User's personal information to third parties in the following cases:

4.5.1. The User has consented to the following actions:

4.5.2. The transfer is necessary for the User to use a certain service or to fulfill a certain agreement or contract with the User.

4.5.3. The processing of personal data is necessary to achieve the goals provided for by an international treaty of the Russian Federation or by law, to exercise the functions, powers and duties imposed on the operator by the legislation of the Russian Federation.

4.5.4. The processing of personal data is necessary for the administration of justice, the execution of a judicial act, an act of another body or official subject to execution in accordance with the legislation of the Russian Federation on enforcement proceedings.

4.5.5. In the event of the sale of the Site, all obligations to comply with the terms of this Policy in relation to the personal information received by it are transferred to the purchaser.

4.6. The security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.
When protecting the personal data of Users, the Operator takes all necessary organizational, administrative and technical measures, including:
- anti-virus protection;
- security/vulnerability audit (monitoring);
- network access control, local network management;
- registration and accounting;
- ensuring the storage of information containing the personal data of Users, excluding access to them by third parties;
- general control over compliance by employees with measures to protect the personal data of Users;
- protection of the personal data of Users stored in the electronic databases of the Site from unauthorized access, distortion, transfer and destruction of information, as well as from other illegal actions;
- data transfer via secure communication channels. The interfaces of information systems are protected by the HTTPS protocol using encryption certificates for the final data during transmission between the storage server and the workstation; an anonymized form containing only IP addresses and other technical attributes of the services provided is used to transmit information to the equipment.
- persons directly involved in the processing of personal data are familiar with the provisions of the legislation of the Russian Federation on personal data, including the requirements for the protection of personal data, documents defining the policy regarding the processing of personal data, local acts on the processing of personal data;
- a person responsible for organizing the processing of personal data has been appointed;
- models of security threats to personal data in information systems have been developed;
- accounting of machine-readable media of personal data is ensured;
- the ability to restore personal data modified or destroyed due to unauthorized access to them is ensured;
- internal control is carried out to ensure that personal data processing complies with the requirements of Federal Law of the Russian Federation No. 152 "On Personal Data" and regulatory legal acts adopted in accordance with it;
- the possibility of uncontrolled entry or presence of unauthorized persons in the premises where work is carried out with personal data is excluded;

- the safety of personal data carriers and information security tools is ensured.

- software and hardware tools that have undergone the conformity assessment procedure in the established manner are used to ensure the security of personal data.

4.7. If personal data were processed in an automated manner, destruction occurs by erasing from the database, formatting the media or by mechanical damage to hard drives.

If personal data were processed non-automated, their destruction occurs by burning, crushing (grinding), chemical decomposition.

4.8. In the event of detection of inaccuracies in personal data, the User can update them independently by sending the Operator a notification to the Operator's e-mail address info@blagoagro.ru with the subject line "Updating personal data".

5. Basic rights and obligations of personal data subjects

5.1. Personal data subjects have the right to:

— receive information regarding the processing of their personal data, except for cases stipulated by federal laws. The information is provided to the personal data subject by the Operator in an accessible form, and it must not contain personal data related to other personal data subjects, except for cases where there are legal grounds for disclosing such personal data. The list of information and the procedure for obtaining it are established by the Law on Personal Data;

— demand that the operator clarify their personal data, block or destroy them if the personal data are incomplete, outdated, inaccurate, illegally obtained or are not necessary for the stated purpose of processing, as well as take measures provided by law to protect their rights;

— put forward a condition for prior consent when processing personal data for the purpose of promoting goods, works and services on the market;

— revoke consent to the processing of personal data, as well as send a request to stop the processing of personal data;
— appeal to the authorized body for the protection of the rights of personal data subjects or in court against the illegal actions or inaction of the Operator when processing his personal data;
— to exercise other rights provided for by the legislation of the Russian Federation.

5.2. Personal data subjects are obliged to:
— provide the Operator with reliable data about themselves;
— inform the Operator about clarification (update, change) of their personal data.

5.3. Persons who have transferred to the Operator inaccurate information about themselves, or information about another personal data subject without the consent of the latter, are liable in accordance with the legislation of the Russian Federation.

6. Obligations of the Parties

6.1. The User is obliged to:

6.1.1. Provide information about personal data necessary for using the Site.

6.1.2. Update and supplement the provided information about personal data in the event of changes to this information.

6.2. The Operator is obliged to:

6.2.1. Use the information received solely for the purposes specified in this Privacy Policy.

6.2.2. Ensure that confidential information is kept secret, not disclosed without the prior written permission of the User, and not sell, exchange, publish or disclose in any other possible way the transferred personal data of the User, except as provided for in this Privacy Policy.

6.2.3. In order to ensure the protection of the User's personal data during their processing, the following legal, organizational and technical measures have been taken against unauthorized, illegal or accidental access to personal data, destruction, modification, blocking, copying, provision, distribution of personal data, as well as against other illegal actions in relation to personal data:
1) identification of threats to the security of personal data during their processing;
2) application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems necessary to meet the requirements for the protection of personal data, the implementation of which ensures the levels of protection of personal data established by the Government of the Russian Federation;
3) application of information security tools that have undergone the established procedure for assessing the conformity of information;
4) assessment of the effectiveness of measures taken to ensure the security of personal data before putting the personal data information system into operation;
5) detection of unauthorized access to personal data and taking measures, including measures to detect, prevent and eliminate the consequences of computer attacks on personal data information systems and to respond to computer incidents in them;
6) restoration of personal data modified or destroyed due to unauthorized access to them;
7) establishment of rules for access to personal data processed in the personal data information system, as well as ensuring the registration and accounting of all actions performed with personal data in the personal data information system;
8) control over the measures taken to ensure the security of personal data and the level of protection of personal data information systems.

6.2.4. Block personal data related to the relevant User from the moment of the User's request or appeal or the User's legal representative or authorized body for the protection of the rights of personal data subjects for the period of verification in the event of detection of inaccurate personal data or illegal actions.

7. Liability of the Parties

7.1. The Operator who has failed to fulfill its obligations shall be liable for the losses incurred by the User in connection with the illegal use of personal data, in accordance with the legislation of the Russian Federation.

7.2. In the event of loss or disclosure of confidential information, the Operator shall not be liable if this confidential information:

7.2.1. Has become publicly known prior to its loss or disclosure.

7.2.2. Has been received from a third party prior to its receipt by the Operator.

7.2.3. Has been disclosed with the consent of the User.

8. Dispute Resolution

8.1. Before filing a claim in court regarding disputes arising from the relationship between the User of the Site and the Operator, it is mandatory to file a claim (a written proposal for a voluntary settlement of the dispute).

8.2. The recipient of the claim shall, within 15 calendar days from the date of receipt of the claim, notify the claimant in writing of the results of the claim review.

8.3. If no agreement is reached, the dispute will be referred to the court in accordance with the current legislation of the Russian Federation.

8.4. The current legislation of the Russian Federation shall apply to this Privacy Policy and the relationship between the User and the Operator.

9. Additional terms

9.1. The User has the right to make any changes to this Privacy Policy without the consent of the User. The Policy is valid indefinitely until it is replaced by a new version.

9.2. The new Privacy Policy comes into force from the moment it is posted on the Site, unless otherwise provided by the new version of the Privacy Policy and is posted at the following link: https://blagoagro.ru/en/policy

9.3. All suggestions or questions regarding this Privacy Policy should be communicated to the e-mail address: info@blagoagro.ru

9.4. The current Privacy Policy is posted on the page at: https://blagoagro.ru/en/policy