RIVACY POLICY


TERMS AND DEFINITIONS
Personal Data shall mean any information related, directly or indirectly, to a specific or definable individual (personal data subject).
User shall mean a person accessing the Website contents and services using telecommunication channels.
Operator shall mean a person arranging and (or) performing personal data processing independently or jointly with other parties, as well as determining the purposes of personal data processing, the contents of personal data to be processed, and actions (operations) to be performed with personal data.
Personal Data Processing shall mean any action (operation) or a set of actions (operations) performed with personal data with or without the use of automation tools including the collection, recording, categorization, accumulation, storage, clarification (update, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion and destruction of personal data.
Provision of Personal Data shall mean actions aimed at the disclosure of personal data to a certain person or a certain number of persons.
Blocking of Personal Data shall mean temporary suspension of personal data processing (unless such processing is required to clarify personal data); Destruction of Personal Data shall mean actions resulting in the impossibility of restoring the contents of personal data in the personal data information system and (or) resulting in destruction of the physical media containing personal data; Information shall mean any information (messages, data) regardless of their form.
Personal Data Confidentiality shall mean a requirement mandatory for the Operator or other person having access to personal data to prevent their distribution without the consent of the personal data subject or other legal basis.
Website shall mean aggregated webpages published on the Internet united by a common topic, functions, design or common domain address space, containing materials, articles, information databases, services and programs developed and/or added by the Operators as well as information databases created by the website users. Website address on the Internet: https://pekarro.ru/eng.
Operator shall mean employees authorized to manage the Website, determining the composition of User’s personal data, personal data collection goals, their processing and storage.
Automated Processing of Personal Data shall mean processing of personal data using computers and computer software.
Anonymization of Personal Data shall mean actions making it impossible to identify the belonging of personal data to a specific User or other personal data subject without using additional information. Provision of Personal Data shall mean actions aimed at the disclosure of personal data to a certain person or a certain number of persons.
Distribution of Personal Data shall mean any actions aimed at the disclosure of personal data to any number of unspecified persons (transfer of personal data) or review of personal data by an unlimited number of parties, including the disclosure of personal data in the media, publication in information and telecommunication networks or providing access to personal data in any other way.
Destruction of Personal Data shall mean any actions resulting in irreversible destruction of personal data, when it is impossible to further restore personal data content in the personal data information system and/or in destruction of physical media storing personal data.

GENERAL PROVISIONS.
2.1. This Confidentiality Policy (hereinafter referred to as the Policy) covers all information on the User, including personal data as it is defined in the applicable legislation (hereinafter referred to as the Personal Information), that Konditerskie Morozova Limited Liability Company (hereinafter referred to as the Operator) can receive during the visit to the website https://pekarro.ru and Partner’s websites, and usage of programs, products and/or services. The Operator can also receive Personal Information from its partners (hereinafter referred to as the Partners), websites, programs and from other sources with publicly available personal data. As applicable, transfer of the Personal Information is possible only in the cases established by the applicable legislation and is performed based on special contracts between the Operator and each of the Partners.
Usage of any of the Websites and/or Services can be regulated by additional terms and conditions that can amend and/or supplement this Policy and/or have special terms and conditions regarding personal information published in corresponding sections of documents for such Websites and/or Services.
2.2. This provision has been developed to protect personal data received from each of the Website visitors against unauthorized usage, arrange management of personal data of the Website users and is aimed at assurance of compliance with the users’ legal rights and interests, assurance of protection of their rights and freedoms when processing personal data, including the right of privacy, right for personal and family secrets due to the need of receiving, collection, systematization, analysis, storage and if needed of transfer (provision of access to) of personal data within the limits determined by this provision to achieve legal goals of the Websites activities.
2.3. If you use this Website, you agree with this Confidentiality Policy and conditions of processing of your personal data by the Operator.
2.4. If you do not agree with the confidentiality policy, stop using the website.
2.5. This Confidentiality Policy is applicable only to https://pekarro.ru/eng. The Operator is not responsible for any third-party websites you can visit by clicking the links available at the website.
2.6. The Operator does not verify the accuracy of personal data provided by Users.
2.7. This Confidentiality Policy establishes the procedure for receiving, protection, storage, processing and transfer of personal data of the Website Users, covers all information on the Website User that the Operator can receive during a visit to the Website.
2.8. This Confidentiality Policy is not applicable to other websites and cannot be applied to third-party websites.
2.9. In order to improve the service quality and ensure legal remedies, the Operator has the right to store log records (document containing sequential recording of all events at the Website) on the actions performed by the User while visiting the website.

3. PERSONAL DATA COLLECTION PURPOSES
3.1. The Operator collects only that personal information, which is required for the provision of services to the User or the performance of agreements and contracts with the User, unless the law provides for a mandatory storage of personal information for a specific period.
3.2. The Operator processes the User's Personal Data for the following purposes:
3.2.1. To identify the User when he/she uses certain services;
3.2.2. To provide access to Website personalized resources to the User;
3.2.3. To provide services and process User’s requests and applications;
3.2.4. To receive User’s feedback, including sending notifications and requests regarding the visit to the Website, provision of services, processing User’s requests and applications;
3.2.5. To confirm reliability and completeness of personal data provided by the User;
3.2.6. To determine the User’s location to ensure safety and prevent fraud;
3.2.7. To create an account, if the User has agreed to create one;
3.2.8. To provide efficient customer and technical support to the User in case of any problems related to the Website usage;
3.2.9. To grant the User access to the websites or services of the Website Partners in order to obtain products, updates and services.
3.2.10. To collect statistics.

4. USER’S CONSENT TO PERSONAL DATA PROCESSING
4.1. By agreeing to terms and conditions of this Policy and Personal Data Processing and Protection Policy of Konditerskie Morozova Limited Liability Company and by sending a message through the feedback form and comments form on the Website, the User agrees for processing of his/her personal data for the purposes and within the scope established by this Policy.

5. TERMS AND CONDITIONS OF PROCESSING OF USER’S PERSONAL INFORMATION AND ITS TRANSFER TO THIRD PARTIES
5.1. The source of all User’s personal data is the User of the Operator’s Website. The Operator does not receive or process personal data from other sources. By filling in any form on the Operator’s Website, the User gives his/her consent for processing of his/her personal data for the purposes specified in section 3 of this provision. The User confirms the rights regarding the account created in this way.
5.2. The User's personal data are kept confidential, except for the cases when the User voluntarily provide information about him/herself for public access to an unlimited number of parties. When using specific services, the User agrees that a certain part of his/her personal information becomes public.
5.3. The User's personal data is processed without any time limit, in any legal way, including in personal data information systems with or without automation tools. The User’s personal data is processed according to the legislation of the Russian Federation.
5.4. The Operator shall not disclose the User’s personal information without the User’s preliminary written consent and shall not sell, exchange, publish or disclose in any other possible way, except for the cases provided for by the legislation of the Russian Federation.
5.5. The Operator takes the necessary administrative and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other illegal actions made by third parties.
5.6. The Operator uses the received information only for the purposes specified in section 4 of this provision.

6. LIST OF PROCESSED PERSONAL DATA OF THE WEBSITE USERS AND PURPOSES OF PROCESSING.
6.1. Personal data of the Website Users include the following:
6.1.1. Personal data that the User provides on his/her own when creating a product application on the Website. Information required for creating an application is clearly indicated and includes the following: - Full name; - telephone number.
6.1.2. Data automatically transferred by the Website during its use through the software installed on the user’s device, including IP address, cookie information, information on the user’s browser (or other program used to access the website), time of access, address of the requested page.
6.2. The Operator can use industry-wide cookies technology, i.e. files used by web servers to identify users and store data on them.
6.3. User at any time can change parameters in the browser settings so that the browser stops saving all cookies and notifies them when those are sent. In this case some website services and functions may stop working or work incorrectly.
6.4. The Operator provides to the Website Users unlimited and free access to their personal data, including the right to receive copies of any record containing their personal data, except for the cases stipulated by the legislation.

7. PERSONAL DATA STORAGE.
7.1. Personal data of the Website Users are stored in digital form in the Website personal data information system and in archived copies of the website databases. When storing personal data of the Website Users, administrative and technical measures are taken to ensure data safety and prevent unauthorized access.
7.2. Personal data of the Website Users are confidential and cannot be used by the Operator or any other party for personal advantage.
7.3. When processing personal data, the Operator shall take the necessary legal, administrative and technical measures to protect personal data against unlawful or accidental access to them, destruction, modification, blocking, copying, provision and distribution and other illegal actions in respect of personal data.
7.4. The Operator takes the necessary administrative and technical measures to protect the personal data of the Website User against unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other illegal actions made by third parties.

8. LIABILITIES OF THE PARTIES.
8.1 The User shall:
8.1.1 Provide personal data required to use Websites/Services.
8.1.2 Update and supplement the provided personal data if such data change.
8.2 The Operator shall:
8.2.1 Use the received information only for the purposes specified in this Confidentiality Policy.
8.2.2 Keep the confidential information in secret, not disclose the User’s personal data without the User’s preliminary written consent and not sell, exchange, publish or disclose them in any other possible way, except for the cases provided for by this Confidentiality Policy.
8.2.3 Take measures to protect confidentiality of the User’s personal data according to the procedure usually used to protect such information in the existing business practices.
8.2.4 Block personal data related to a certain User after a request of the User or his/her legal representative or authorized body protecting rights of personal data subjects for the inspection period in case of identification of unreliable personal data or unlawful actions.

9. RESPONSIBILITIES OF THE PARTIES
9.1. If the Operator fails to fulfill its obligations, it shall be liable for the User’s damages due to unlawful use of personal data according to the legislation of the Russian Federation.
9.2. In case of loss or disclosure of Confidential Information, the Operator shall not be liable if this confidential information:
- Became public before its loss or disclosure.
- Has been received from a third party before the Operator received it.
- Has been disclosed with the User’s consent.

10. SETTLEMENT OF DISPUTES
10.1. Before filing a court action related to the disputes arising from the relationships of the Website User and the Operator, a claim must be sent (a written suggestion to voluntarily settle the dispute).
10.2. The recipient of the claim shall notify the claimant in writing of the results of the claim consideration within 7 calendar days after receiving the claim.
10.3. If no agreement is reached, the dispute shall be referred to the court according to the current legislation of the Russian Federation.
10.4. The current legislation of the Russian Federation shall apply to this Confidentiality Policy and relationships between the User and the Operator.

11. ADDITIONAL CONDITIONS
11.1. The Operator has the right to amend this Confidentiality Policy without the User’s consent.
11.2. The new Confidentiality Policy shall come into effect after its publication on the Website/Service, unless otherwise provided for in the new edition of the Confidentiality Policy.
11.3. All suggestions or questions regarding this Confidentiality Policy shall be sent to email: klient@gk-kim.ru.
11.4. By filling in the feedback form or registering at the Website or using any website service, the User gives his/her consent to weekly or regular newsletters and email marketing via email and SMS to the telephone number specified by the User. To withdraw his/her consent, the User can send a written application to the Operator or to email address: klient@gk-kim.ru.
11.5. The current Confidentiality Policy is an open and publicly available document. This Confidentiality Policy is available on the Internet https://pekarro.ru/eng.