Personal Data Processing Policy

General provisions
1. This personal data processing policy has been compiled in accordance with the requirements of Federal law of 27.07.2006. №152-ФЗ «О персональных данных» and regulations GDPR and determines the procedure for processing personal data and measures to ensure the security of personal data of Kiberis (hereinafter referred to as the Operator).
2. operator aims and condition for the implementation of his activities the observance of the rights and freedoms of man and citizen when processing his personal data, including protection of rights to privacy, personal and family secrets.
3. This Operator's policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website https://kiberis.ru.

Basic concepts used in the Policy
1. Automated processing of personal data – processing of personal data using computer technology;
2. Blocking of personal data-temporary termination of the processing of personal data (except in cases where the processing is necessary to clarify personal data);
3. Website – a collection of graphic and informational materials, as well as computer programs and databases that ensure their availability on the Internet at a network address https://kiberis.ru;
4. Personal data information system — a set of personal data contained in databases, and information technologies and technical means that ensure their processing;
5. Depersonalization of personal data — actions, as a result of which it is impossible to determine, without the use of additional information, the identity of personal data to a specific User or other subject of personal data;
6. Personal data processing – any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including the collection, recording, systematization, accumulation, storage, clarification (update, change), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;
7. Operator – a state body, a municipal body, a legal entity or an individual who independently or jointly with other persons organizes and (or) performs the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data;
8. Personal data – any information related directly or indirectly to a specific or identifiable User of the website https://kiberis.ru;
9. User – any user of the website https://kiberis.ru;
10. Provision of personal data – actions aimed at disclosing personal data to a certain person or a certain circle of persons;
11. Dissemination of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at familiarizing an unlimited number of persons with personal data, including publishing personal data in the mass media, posting it in information and telecommunications networks, or providing access to personal data in any other way;
12. Cross-border transfer of personal data – the transfer of personal data to the territory of a foreign state to the authority of a foreign state, a foreign individual or a foreign legal entity;
13. Destruction of personal data – any actions as a result of which personal data is permanently destroyed with the impossibility of further restoration of the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.

Operator may process the following personal data of the User
1. Last name, First Name
2. Date of birth and gender
3. Contact phone number
4. Email address
5. Postal address
6. Information about professional skills (education, specialty, advanced training courses, etc.)
7. Ip address and User Cookies
Also, in addition to personal data, impersonal information of all patients held in the system is automatically collected to improve the quality of artificial intelligence.

Purposes of processing personal data
1. Identification of the party within the framework of the use, agreements and contracts with the Site.
2. Communication with the user, including sending notifications, requests and information related to the use, execution of agreements and contracts, as well as processing requests and requests from the user, including possible newsletters of an informational and advertising nature.
3. Targeting of materials, including the adjustment of artificial medical intelligence to the user.
4. Fulfillment of the Site's obligations to the user
5. Conducting audits and other internal research to improve the quality of services provided.
6. Analysis of data entered by patients (complaints, tests, and other impersonal information; only gender and age are used from personal data) in order to improve the quality of artificial intelligence.

Procedure for the collection, storage, transfer and other types of processing of personal data
1. Personal data of Users is stored exclusively on electronic media and processed using automated systems, except in cases where non-automated processing of personal data is necessary in connection with the implementation of legal requirements.
2. security of personal data processed by the Operator is ensured by implementing the legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.
3. operator ensures the safety of personal data and takes all possible measures to exclude access to personal data of unauthorized persons.
4. User's personal data will never, under any circumstances, be transferred to third parties, except:
  1. At the request of the authorized state authorities of the Russian Federation only on the grounds and in accordance with the procedure established by the legislation of the Russian Federation
  2. Strategic partners who work with the Administration to provide products and services, or those who help the Administration to sell products and services to consumers. We provide third parties with the minimum amount of personal data necessary only to provide the required service or conduct the necessary transaction.
5. In case of inaccuracies in personal data, the User can update them independently, by editing on the website, or by sending a notification to the Operator to the Operator's email address kiberis@mail.ru marked 'Updating of personal data'.
6. term of processing of personal data is unlimited. The User can withdraw his consent to the processing of personal data at any time by sending a notification to the Operator via e-mail to the Operator's e-mail address kiberis@mail.ru marked 'Revocation of consent to the processing of personal data'.
7. In the event of a leak of personal data to unauthorized third parties, the Operator is obliged to notify the relevant competent authority within 72 hours (except in cases where the leak does not lead to a risk to the rights and freedoms of individuals). In the event that a data leak may lead to a high degree of risk to the rights and freedoms of individuals, the Operator is obliged to immediately notify the relevant data subjects of the leak.

When collecting, storing, transferring and other types of processing of personal data, the following User rights are guaranteed:
1. Right to receive information-the designated right is formed by proper notification of the subject PD on the need to provide relevant, adequate, and truthful information.
2. Right of access — this right is, first of all, the right to receive by the subject The Operator's PD on the processing of his personal data, access to the data, as well as information regarding the purposes of processing, the category of processed data, recipients PD, the stipulated storage period PD, etc.
3. Right to make changes (correction of errors) - by means of this category, the subject has the right to demand from The operator of making changes and eliminating inaccuracies in relation to its PD.
4. Right to delete PD (right to be forgotten) — in accordance with this category, the subject has the right to require the Operator to immediately delete the PD related to it if there are special grounds (PD is no longer required for the purposes for which they were obtained; personal data was processed illegally, etc.). However, when receiving a request for data deletion, the Operator must take into account the public interest of the data, the fundamental right to freedom of expression and dissemination of information, and other conditions specified in the Regulations. In some cases, if it is not possible to delete the PD, a processing restriction may be applied (PD should not be processed in the future).
5. The right to restrict the processing of PD — in accordance with this category, the subject The PD has the right to demand from Operator limit processing PD if there are special conditions (the data is inaccurate; the processing is illegal, but the subject objects to the deletion of the data, etc.).
6. The right to PD portability-according to this category, the subject The PD has the right to receive the related PD provided to the Operator in a structured and machine-readable format, as well as to transfer the designated data to another Operator, if processing is carried out using automated means.
7. Right to object — in accordance with this category, the subject The PD has the right to object to the processing of related PD (for example, for direct marketing purposes).
8. Rights arising in connection with automated decision-making and profiling — in accordance with this category of rights, the subject The PD should have the right not to be subject to a decision based on automatic data processing, which gives rise to legal consequences against it.

Final provisions
1. User can get any clarifications on the issues of interest related to the processing of his personal data by contacting the Operator via e-mail kiberis@mail.ru.
2. This document will reflect any changes to the Operator's personal data processing policy. The policy is valid indefinitely until it is replaced with a new version.
3. current version of the Policy is freely available on the Internet at the following address https://kiberis.ru/?agreement=personal_data

Last modified date: 01.10.2019