Service agreement, terms of delivery and payment

1. General provisions 1.1 In the process of doing business, LLC "DOMAIN" processes personal data of individuals — subjects of personal data. In order to maintain business reputation and ensure compliance with the norms of federal legislation in full, DOMAIN LLC (hereinafter referred to as the Operator) considers it the most important task to ensure the legality and fairness of personal data processing, respect for their confidentiality and the security of their processing processes.

1.2 This document defines a policy regarding the processing and protection of personal data in order to protect the rights and freedoms of a person and a citizen when processing his personal data, including the protection of the rights to privacy, personal and family secrets. The Policy is a publicly available document declaring the conceptual foundations of the Operator's activities in the processing of personal data.

1.3 This Policy applies to all cases of personal data processing by the Operator or on behalf of the Operator, regardless of whether it is performed manually, automatically (semi-automatically).

1.4 In the process of processing, the Operator is guided by the Federal Law "On Personal Data" No. 152-FZ dated 07/27/2006 (hereinafter referred to as the Law).

2. Processing of personal data 2.1 The Operator processes personal data in order to implement the functions assigned to the Operator by regulatory legal acts, to fulfill contractual obligations, one of the parties to which are the subjects of personal data, as well as for other purposes provided for by law.

2.2 The Operator may collect and process the personal data of its employees, candidates for vacant positions, as well as customers, their representatives and beneficiaries and other persons who are in contractual and other civil relations with the Operator, as well as the processing of personal data of other persons, if this processing is entrusted in accordance with the requirements of the Law. During the collection and subsequent processing of personal data, the Operator undertakes to comply with the basic principles and conditions of processing determined by Law.

2.3 The Operator processes personal data to the extent and for the period necessary to fulfill contractual obligations, requirements of federal legislation, as well as its own business and service purposes. In cases prescribed by Law, the Operator reserves the right to request the appropriate consent of the subjects for the processing of their personal data and refuse to provide services in case of non-receipt of such consent.

2.4 The processing of personal data is carried out only by authorized employees of the Operator, after taking sufficient security measures to ensure the protection of personal data and in accordance with regulatory documents governing the processing and protection of personal data. The processing and storage of personal data can be carried out both in paper and electronic form, with or without automation tools.

2.5 The Operator may resort to the involvement of third parties for the processing of personal data only in case of justified necessity. The Operator undertakes to take all necessary measures to ensure that third parties involved in the processing of personal data act in accordance with this Policy and do not compromise the confidentiality of personal data.

2.6 The Operator may transfer the personal data of subjects to third parties, provided that this transfer is subject to the requirements of federal legislation, the terms of contracts concluded with the subject or is authorized by the relevant consent of the subject. The transfer of personal data is carried out in a secure manner using secure data transmission channels. The transfer of personal data to a third party may be carried out only on the basis of an agreement with the Operator containing requirements for the protection of the transferred personal data, duties and responsibilities of a third party to comply with these requirements, unless otherwise stipulated by federal law.

3. Protection of personal data 3.1 The Operator undertakes not to disclose or distribute personal data to third parties without the consent of the personal data subject, unless otherwise provided by federal law.

3.2 The security of personal data processed by the Operator is ensured by the implementation of legal, organizational, technical and programmatic measures necessary and sufficient to meet the requirements of federal legislation in the field of personal data protection.

3.3 The main personal data protection measures used by the Operator are:

appointment of officials responsible for organizing the processing and protection of personal data; restriction and control of the composition of employees who have access to personal data; familiarization of employees with the requirements of federal legislation and regulatory documents of the Operator for the processing and protection of personal data; organization of the regime for ensuring the physical security of premises, media and equipment; control of user access to information resources, software and hardware for processing and protecting information; registration and accounting of events in information systems; the use of cryptographic information protection tools to ensure the security of personal data when transmitting over open communication channels; providing antivirus protection; protection of information systems from attacks at the network level; periodic monitoring of the sufficiency and completeness of the implementation of protective measures; implementation of internal control and (or) audit of compliance of personal data processing with Federal Law No. 152-FZ dated 07/27/2006 "On Personal Data" and regulatory legal acts adopted in accordance with it, requirements for personal data protection, as well as local acts of the Operator.

4. The rights of personal data subjects 4.1 The subject of personal data has the right (in accordance with Chapter 3 of the Law):

• to receive information about the operator, about his location, about the availability of personal data related to the relevant personal data subject, as well as to familiarize with such personal data;
• to clarify their personal data, block or destroy them if the personal data is incomplete, outdated, unreliable, illegally obtained or is not necessary for the stated purpose of processing;
• to terminate the processing of their personal data carried out for direct marketing purposes;
• revoke their consent to the processing of personal data or demand the termination of the processing of their personal data (in this case, the Operator has the right to refuse to provide services to the subject or fulfill their contractual obligations if this is impossible without processing the specified personal data);
• receive information regarding the processing of his personal data, including information containing:

1. confirmation of the fact of processing personal data, as well as the purpose of such processing;
2. methods of processing personal data by the Operator;
3. information about persons who have access to personal data or who may be granted such access;
4. the list of processed personal data and the source of their receipt;
5. terms of processing of personal data, including the terms of their storage;
6. information on what legal consequences the processing of personal data may entail for the subject of personal data.

4.2 The right of a personal data subject to access his/her personal data may be restricted in accordance with federal laws, including if:

• processing of personal data, including personal data obtained as a result of operational investigative, counterintelligence and intelligence activities, is carried out for the purposes of national defense, state security and law enforcement;
• the processing of personal data is carried out by bodies that have detained the subject of personal data on suspicion of committing a crime, or have charged the subject of personal data in a criminal case, or have applied a preventive measure to the subject of personal data before charging, with the exception of cases provided for by the criminal procedure legislation of the Russian Federation, if it is allowed to familiarize the suspect or accused with such personal data with data;
• the processing of personal data is carried out in accordance with the legislation on countering the legalization (laundering) of proceeds from crime and the financing of terrorism;
• the access of the personal data subject to his personal data violates the rights and legitimate interests of third parties;
• the processing of personal data is carried out in cases provided for by the legislation of the Russian Federation on transport security in order to ensure the stable and safe functioning of the transport complex, protect the interests of the individual, society and the state in the field of transport complex from acts of unlawful interference.

4.3 In order to obtain information about the specifics of personal data processing, the subject must send an appropriate request to the Operator. The request must contain the number of the main document certifying the identity of the personal data subject or his representative, information about the date of issue of the specified document and the issuing authority, information confirming the participation of the personal data subject in relations with the operator (contract number, date of conclusion of the contract, conditional verbal designation and (or) other information), or information, otherwise confirming the processing of personal data by the operator, the signature of the personal data subject or his representative. The request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of the Russian Federation.

4.4 If the personal data subject believes that the Operator is processing his personal data in violation of the requirements of the Law or otherwise violates his rights and freedoms, the personal data subject has the right to appeal the actions or omissions of the Operator to the Authorized Body for the Protection of the Rights of personal data subjects or in court.

4.5 The subject of personal data has the right to protect his rights and legitimate interests, including compensation for damages and (or) compensation for moral damage in court.