ICC New Time | Privacy Policy

1.1. This Privacy Policy regarding the processing of personal data on the Internet has been prepared in accordance with paragraph 2 of Part 1 of Article 18.1 of the Federal Law of the Russian Federation No. 152-FZ of July 27, 2006 "On Personal Data" and defines the position of the International Consumer Cooperative "New Time" (hereinafter — ICC "New Time", the Cooperative, or the Company) regarding the processing and protection of personal data, the observance of the rights and freedoms of each personal data subject, and in particular, the right to privacy, personal and family secrets.

the right to receive information concerning the processing of their Data;
the right to request clarification, blocking, or destruction of their Data if they are incomplete, outdated, inaccurate, illegally obtained, or are not necessary for the stated purpose of processing;
the right to appeal the actions (or inaction) of the Company to state authorities, including in court;
the right to protect their rights and legitimate interests, including compensation for damages and/or compensation for moral harm in court or in accordance with other procedures provided for by applicable law;
and other rights established by applicable law.

when collecting Data, the Company is obliged to provide the User, upon their request, with the information provided for in Part 7 of Article 14 of the Law;
if the provision of Data is mandatory in accordance with the law, the Company is obliged to explain to the User the legal consequences of refusing to provide their Data;
the Company is obliged to take necessary and sufficient measures to ensure the fulfillment of duties provided for by the Law and regulatory legal acts adopted in accordance with it;
the Company is obliged to publish this Policy on the Internet, information on the implemented requirements for the protection of personal data, and also to ensure access to this document via the Internet;
when processing personal data, the Company is obliged to take necessary legal, organizational, and technical measures or ensure their adoption to protect Data from unlawful or accidental access, destruction, modification, blocking, copying, provision, distribution, and other unlawful actions in relation to Data;
the Company is obliged to respond to requests from Users and inquiries from Roskomnadzor and provide them with information concerning the processing of Data in the manner established by the Law;
the Company is obliged to eliminate violations of the law committed during the processing of Data, clarify, block, and destroy Data (or ensure that these actions are carried out by a person acting on behalf of the Company);
the Company is obliged, before starting the processing of personal data, to notify Roskomnadzor of its intention to process personal data, except in cases established by law;
the Company is obliged to appoint a Person Responsible for the processing of personal data;
the Company bears other obligations provided for by law in connection with the processing of Data.

Categories of Users' Data	Purposes of Processing	Legal Grounds	Processing Periods
Last name, first name, patronymic; contact details (phone, email address); call time; order number; consumer preferences.	Business communication with Users	Consent to processing of personal data (clause 1, part 1, art. 6 of the Law)	Until the User's order is fully fulfilled
Last name, first name, patronymic; contact details (phone, email address); preferred call time; discount and/or bonus card details; delivery address; consumer preferences; name and details of the legal entity on whose behalf the User acts.	Ordering, selling, delivery of goods, and acquisition of services	Consent to processing of personal data (clause 1, part 1, art. 6 of the Law)	Until the expiration of the statute of limitations (3 years) after the Company and the User have fully fulfilled their obligations regarding the order, sale, and delivery of goods and acquisition of services
First name; contact details (email address).	Distribution of advertising, informational materials, and news	Consent to processing of personal data (clause 1, part 1, art. 6 of the Law)	Until the User withdraws consent to the processing of personal data
Pseudonym (forum name); password; contact details (email address); city of residence.	Ensuring the operation of the forum	Consent to processing of personal data (clause 1, part 1, art. 6 of the Law)	Until the User withdraws consent to the processing of personal data

identifying threats to Data security during their processing in personal data information systems;
applying organizational and technical measures to ensure Data security during their processing in personal data information systems, necessary to meet the requirements for Data protection, the implementation of which ensures the levels of personal data security established by the Government of the Russian Federation;
applying information security tools that have passed the conformity assessment procedure in accordance with established procedures;
evaluating the effectiveness of measures taken to ensure Data security before the personal data information system is put into operation;
keeping records of machine-readable Data media;
detecting instances of unauthorized access to Data and taking measures;
restoring Data that has been modified or destroyed due to unauthorized access;
establishing rules for access to Data processed in the personal data information system, as well as ensuring the recording and accounting of all actions performed with Data in the personal data information system;
monitoring the measures taken to ensure Data security and the level of protection of personal data information systems.

confirmation of the fact of processing of Data by the Company;
the legal grounds and purposes of processing Data;
the methods of processing Data used by the Company;
the name and location of the Company, information about persons who have access to Data or to whom Data may be disclosed on the basis of an agreement with the Company or on the basis of federal law;
the processed Data relating to the relevant personal data subject, the source of their receipt, unless a different procedure for providing such data is provided for by federal law;
the periods of processing of Data, including the periods of their storage;
the procedure for the exercise by the personal data subject of the rights provided for by the legislation of the Russian Federation in the field of Data;
information on the cross-border transfer of Data that has been carried out or is intended;
the name of the organization or the surname, first name, patronymic, and address of the person processing Data on behalf of the Company, if processing is or will be entrusted to such organization or person;
other information provided for by the legislation of the Russian Federation in the field of personal data.

the number of the main identity document of the personal data subject or their representative, information on the date of issue of the specified document and the authority that issued it;
information confirming the participation of the personal data subject in legal relations with the Company, or information otherwise confirming the fact of processing of personal data in the Company, the signature of the personal data subject or their representative. The request may be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.

8.5. If the information specified in this section, as well as the processed Data, was provided for review to the personal data subject upon their request, the personal data subject has the right to contact the Company again or send a repeated request to obtain the specified information and review such Data no earlier than thirty days after the initial request or submission of the initial request, unless a shorter period is established by federal law, a regulatory legal act adopted in accordance with it, or a contract to which the personal data subject is a party, beneficiary, or guarantor.

organization of a security regime for the premises in which the information system is located, preventing the possibility of uncontrolled entry or presence in these premises of persons who do not have the right of access to these premises;
ensuring the safety of Data media;
approval by the head of the operator of a document defining the list of persons whose access to Data processed in the information system is necessary for them to perform their official (labor) duties;
the use of information security tools that have passed the conformity assessment procedure with the requirements of the legislation of the Russian Federation in the field of information security, if the use of such tools is necessary to neutralize current threats;
appointment of an official (employee) responsible for ensuring the security of personal data in the information system;
ensuring the possibility of access to the contents of the electronic message log exclusively for officials (employees) of the operator or an authorized person who need the information contained in the said log to perform their official duties.