1. General Provisions This personal data processing policy is compiled in accordance with the requirements of Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006 (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by LLC "Eco-Progress" (hereinafter referred to as the Operator).
1.1. The Operator considers compliance with human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family secrecy, as its most important objective and condition for carrying out its activities.
1.2. This Operator’s policy regarding personal data processing (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website
https://eco-progress-oil.com.
2. Basic Terms Used in the Policy 2.1. Automated processing of personal data – processing of personal data using computing technology.
2.2. Blocking of personal data – temporary cessation of personal data processing (except where processing is necessary to clarify personal data).
2.3. Website – a collection of graphic and informational materials, as well as software and databases, ensuring their availability on the internet at
https://eco-progress-oil.com.
2.4. Information system of personal data – a set of personal data contained in databases and ensuring their processing using information technologies and technical means.
2.5. Depersonalization of personal data – actions that make it impossible to determine the affiliation of personal data to a specific User or another subject of personal data without additional information. 2.6. Personal data processing – any action (operation) or set of actions (operations) performed using automation tools or without using such tools on personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, usage, transfer (distribution, provision, access), depersonalization, blocking, deletion, and destruction of personal data.
2.7. Operator – a state or municipal authority, legal entity, or individual that organizes and/or carries out personal data processing independently or jointly with other persons, as well as determining the purposes of personal data processing, the composition of personal data to be processed, and actions (operations) performed with personal data.
2.8. Personal data – any information relating directly or indirectly to an identified or identifiable User of the website
https://eco-progress-oil.com.
2.9. Personal data authorized by the data subject for distribution – personal data that the data subject has made available to an unlimited number of persons by giving consent to the processing of personal data authorized for distribution in accordance with the Personal Data Law (hereinafter referred to as publicly available personal data).
2.10. User – any visitor to the website
https://eco-progress-oil.com.
2.11. Provision of personal data – actions aimed at disclosing personal data to a specific person or specific circle of persons.
2.12. Distribution of personal data – any actions aimed at disclosing personal data to an indefinite number of persons (transfer of personal data) or at making personal data available to an unlimited number of persons, including public disclosure of personal data in mass media, posting in information and telecommunication networks, or providing access to personal data in any other way.
2.13. Cross-border transfer of personal data – the transfer of personal data to the territory of a foreign state, a foreign government authority, a foreign individual, or a foreign legal entity.
2.14. Destruction of personal data – any actions resulting in the irreversible destruction of personal data with the inability to further restore the content of personal data in the personal data information system and/or resulting in the destruction of personal data material carriers.
3. Main Rights and Obligations of the Operator 3.1. The Operator has the right to:
- Obtain reliable information and/or documents containing personal data from the personal data subject;
- Continue processing personal data without the subject’s consent if there are grounds specified in the Personal Data Law, even in case of withdrawal of consent;
- Independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided by the Personal Data Law and regulatory legal acts adopted in accordance with it, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. Operator Responsibilities The Operator is responsible for:
- Providing the data subject with information about the processing of their personal data upon request;
- Organizing the processing of personal data in compliance with applicable Russian Federation laws;
- Responding to requests and inquiries from data subjects and their legal representatives in accordance with the Personal Data Law;
- Notifying the authorized body for the protection of personal data subjects' rights within 10 days of receiving a request from that authority;
- Publishing or otherwise ensuring unrestricted access to this Privacy Policy regarding the processing of personal data;
- Implementing legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, or other unlawful actions;
- Stopping the transfer (distribution, provision, access), processing, and destruction of personal data as required by the Personal Data Law;
- Fulfilling other obligations stipulated by the Personal Data Law.
4. Key Rights and Obligations of Data Subjects4.1. Data subjects have the right to:- Obtain information regarding the processing of their personal data, except in cases specified by federal law. This information is provided in an accessible form and must not contain personal data relating to other individuals unless there are legal grounds for disclosure;
- Request corrections, blocking, or deletion of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of processing;
- Require prior consent for processing their personal data for marketing purposes;
- Withdraw consent for the processing of personal data and request the cessation of processing;
- File complaints with the authorized body for the protection of personal data subjects’ rights or in court regarding unlawful actions or inactions by the Operator;
- Exercise other rights provided by Russian Federation law.
4.2. Data subjects are required to:- Provide accurate personal data to the Operator;
- Notify the Operator of any updates or changes to their personal data.
**4.3. Individuals who provide false information about themselves or data about another individual without proper consent are liable under Russian Federation law.
5. Principles of Personal Data Processing5.1. Processing of personal data must be lawful and fair.
5.2. Processing is limited to achieving specific, legitimate objectives. Processing incompatible with the original data collection purposes is not allowed.
5.3. Combining databases containing personal data for purposes that are incompatible with each other is prohibited.
5.4. Only personal data necessary for the stated purposes of processing may be collected.
5.5. The content and scope of processed personal data must be relevant to the stated purposes. Excessive collection of personal data is not permitted.
5.6. Personal data must be accurate, sufficient, and updated as necessary to meet processing purposes. The Operator shall take steps to correct or delete incomplete or inaccurate data.
5.7. Personal data is stored in a way that allows the identification of the data subject no longer than necessary for processing purposes unless otherwise required by law or contractual obligations. Once processing purposes are fulfilled, the data must be deleted or anonymized unless otherwise required by federal law.
6. Purposes of Personal Data ProcessingPurpose: Sending informational emails to the User.
Personal Data:- Full name
- Email address
- Phone numbers Legal Basis:
- Operator’s charter documents
- Contracts between the Operator and the data subject
- Federal Law "On Information, Information Technologies, and Information Protection" No. 149-FZ dated July 27, 2006 Types of Processing:
- Collection, recording, systematization, accumulation, storage, deletion, and anonymization of personal data
- Sending informational emails to the User’s email address
Purpose: Contacting the User via phone calls.
Personal Data:- Full name
- Phone numbers Legal Basis:
- Operator’s charter documents
- Contracts between the Operator and the data subject
- Federal Law "On Information, Information Technologies, and Information Protection" No. 149-FZ dated July 27, 2006 Types of Processing:
- Collection, recording, systematization, accumulation, storage, deletion, and anonymization of personal data
7. Conditions for Processing Personal Data7.1. Processing is carried out with the data subject’s consent.
7.2. Processing is necessary to achieve objectives established by international treaties or laws of the Russian Federation, or to perform legal duties assigned to the Operator.
7.3. Processing is required for legal proceedings, enforcement of court decisions, or compliance with official mandates under Russian Federation law.
7.4. Processing is necessary for fulfilling contracts with the data subject or for entering into contracts upon their request.
7.5. Processing is necessary for the Operator’s or third parties’ legitimate interests, provided it does not infringe on the rights and freedoms of the data subject.
7.6. Personal data that has been made publicly available by the data subject or at their request (hereinafter referred to as "publicly available personal data") may be processed.
7.7. Personal data subject to publication or mandatory disclosure under federal law may be processed.
8. Collection, Storage, Transfer, and Processing of Personal DataThe security of personal data processed by the Operator is ensured through legal, organizational, and technical measures necessary to fully comply with current personal data protection laws.
8.1. The Operator ensures the confidentiality of personal data and takes all possible measures to prevent unauthorized access to it.
8.2. User personal data will never be shared with third parties under any circumstances, except as required by law or if the user has provided consent for data transfer to a third party for the fulfillment of contractual obligations.
8.3. If personal data is inaccurate, the User can update it by sending a request to the Operator via email at
eco.progress2020@gmail.com with the subject "Personal Data Update."
8.4. Personal data is processed for as long as necessary to achieve the purposes for which it was collected unless otherwise specified by contract or applicable law. The User may withdraw consent for personal data processing at any time by sending an email request to the Operator at
eco.progress2020@gmail.com with the subject "Withdrawal of Consent for Personal Data Processing."
8.5. Any data collected by third-party services, including payment systems, communication providers, and other service providers, is stored and processed in accordance with their Terms of Service and Privacy Policies. The Operator is not responsible for the actions of these third parties.
8.6. Restrictions imposed by the data subject on the transfer, processing, or conditions of processing publicly available personal data do not apply if data is processed in the public interest as determined by law.
8.7. The Operator ensures the confidentiality of personal data during processing.
8.8. Personal data is stored in a format that allows identification of the data subject only for as long as necessary to fulfill the purposes of processing, unless a longer retention period is required by federal law or contract.
8.9. The processing of personal data may be terminated upon achieving the purposes of processing, expiration of the consent period, withdrawal of consent by the data subject, or if unlawful processing is detected.
9. Actions Taken by the Operator with Personal Data
9.1. The Operator collects, records, organizes, stores, updates, retrieves, uses, transfers (including distribution, provision, and access), anonymizes, blocks, deletes, and destroys personal data.
9.2. The Operator may process personal data using automated systems, including transmission over information and telecommunications networks.
10. Cross-Border Transfer of Personal Data
10.1. Before initiating cross-border personal data transfers, the Operator must notify the authorized data protection authority of its intent. This notification is separate from the general data processing notification.
10.2. Before submitting the above notification, the Operator must obtain relevant assurances from foreign government agencies, individuals, or entities receiving the data.
11. Confidentiality of Personal Data
The Operator and any other parties granted access to personal data must not disclose or share personal data with third parties without the data subject’s consent, except as required by federal law.
12. Final Provisions
12.1. Users can request clarification regarding the processing of their personal data by contacting the Operator via email at
eco.progress2020@gmail.com.
12.2. Any changes to the Operator’s personal data processing policy will be reflected in this document. The policy remains in effect indefinitely until replaced by a new version.
12.3. The current version of the Policy is publicly available online at
https://eco-progress-oil.com/policy.