Getintent Privacy Policy

Concepts and terms:
Automated processing of personal data is the processing of personal data using computer technology.
Personal data information system is a set of personal data contained in databases and information technologies and technical means that ensure their processing.
PD processing, Personal data processing – any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.
Personal Data Operator – public authority, municipal body, legal or natural person who organizes and (or) performs the processing of personal data, as well as determine the purposes of processing personal data, the composition of personal data to be processed, actions (transactions) performed with personal data.
Personal data (PD) – any information relating to a directly or indirectly defined or defined individual (subject of personal data).
The User of the Service is a person who accesses the Service via the Internet on his device.
Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state to the authority of a foreign state, to a foreign individual or to a foreign legal person.
Cookies are small fragments of data sent by the web server and stored on the computer of the Service User, which the web-client or web-browser each time forwards the web-server to the HTTP-request when trying to open the page of the corresponding service.
IP address is a unique network address of a node in a computer network built using the IP protocol.

1. General provisions

1.1. This Privacy Policy (hereinafter – «Policy») is developed in accordance with the requirements of the Federal Law of 27.07.2006 152-FZ «On Personal Data» and defines the principles of processing and ensuring the security of personal data when processing on the https website://getintent.com/, https://getintent.ru/ (further – «Service»).
1.2. This Policy determines the order and conditions of processing of personal data on the Service and general terms of service between LLC «Getintent» (OGRN 1137746101790; INN 7709922022; location: 129272, Moscow, Str. Trifonovskaya, d. 57A, et. 5, of. 08-08) (further – «Owner of the Service») and an individual (its legal representative) who has created an account on the Service or use the Service without an account, and also establishes the rights of subjects of the PD and responsibility for violations of the order of processing the PD. Creating an account on the Service and confirming your Consent to the processing of personal data by continuing registration on the Service in any of the available ways, as well as in any use of the Service (including without registration/authorization on the Service)The User (his legal representative) acknowledges that he is familiar with, agrees to the terms and accepts this Policy.
1.3. This Policy applies to all information that the Service Owner may receive about the Service User during the use of the Service, any programs, services of the Service.
1.4. The purpose of this Policy is to ensure that the work of the Service meets the requirements of the legislation of the Russian Federation in the field of processing the PD.
1.5. This Policy applies to the processing of the PD on the Service and to all structural units and employees of the Service Owner participating in these processes.
1.6. In case of disagreement with any of the terms of this Policy, the User of the Service (its legal representative) shall cease to use it and remove the account.
1.7. This Policy applies only to the Service, the Service Owner does not control and is not responsible for third-party services and sites to which the Service User may refer to the links available on the Service.

2. Principles and rules of PD processing

2.1. The processing of the PD is carried out by the Owner of the Service on a legal and equitable basis and is limited to the achievement of specific, predefined and lawful purposes. Only PD that meet the objectives of processing are to be processed. The content and volume of processed by the Owner of the Service PD correspond to the stated purposes of processing, redundancy of processed data is not allowed.
2.2. When processing PD, the Owner of the Service ensures the accuracy of the traffic rules, their sufficiency and, if necessary, relevance in relation to the purposes of PD processing. The owner of the Service takes the necessary measures to remove or clarify incomplete or inaccurate PD.
2.3. The storage of PD by the Owner of the Service is carried out in a form that allows to determine the subject of PD, no longer than the purposes of PD processing require, unless the storage period of PD is established by federal law, an agreement to which the party, beneficiary or guarantor is the subject of personal data. The processed PD is subject to destruction or depersonalization upon achievement of the processing objectives, unless otherwise provided by federal law.
2.4. PD processing by the Service Owner is carried out in an automated way in PD information systems.
2.5. The Service Owner does not carry out cross-border transfer of PD and does not make decisions regarding the PD subject based solely on automated processing.

3. The list of PD processed by the User of the Service

3.1. This Policy establishes the obligations of the Service Owner to non-disclosure and to ensure the confidentiality of personal data that the Service User provides when registering on the Service and/or during further use of the Service.
3.2. The Service may collect the following information about Users by filling out registration forms, feedback forms or personal account forms on the Service, including:

name;
username;
name and field of activity of the company;
city;
phone number;
email;
other information entered by the User of the Service on his own initiative, with the exception of special categories of PD.

3.3. The Owner of the Service additionally processes the data, User settings, which are automatically transmitted when visiting:

IP address;
information from cookies;
information about the browser (or other program that accesses the service);
access time;
page address;
referrer (address of the previous page);
geodata.

Information from cookies is processed to evaluate which pages of the Service are most popular, and which information is of the greatest interest to Users of the Service.
3.4. The Service collects statistics on the IP addresses of the Service Users. This information is used to identify and solve technical problems.
3.5. The Service does not process biometric personal data of Service Users and does not pursue the purpose of establishing the identity of the PD subject.
3.6. The Owner of the Service uses a web analytics service, an Internet counter (Yandex.Metrica) in order to analyze user activity using cookies, evaluate the use of the Service by Users, and improve the Site. The user can disable cookies in the security settings of all browsers (on all devices). Refusing to use cookies or blocking cookies may result in the unavailability of some or all functions and/or sections of the Site, and may also affect the User’s ability to fully use the Site. The services specified in this paragraph transmit information about sessions, visits, visits, and views to the Site Owner.

4. Purposes and grounds for collecting Service User PD

4.1. The Service Owner may use the User’s PD for the following purposes:

registration/authorization of the User in the Service;
promotion of goods, works, and services on the market by making direct contacts with the User of the Service using means of communication (including showing advertising to the User of the Service that meets his interests);
sales of goods and services to Service Users via the Internet;
providing the ability to communicate with the User of the Service, sending notifications, requests and information to him, as well as receiving and processing requests from Users of the Service;
conducting marketing, statistical and audience research, including surveys of satisfaction of the Service User.

5. Methods and terms of PD processing

5.1. The PD of the Service User is processed before the date of deletion of the User account and/or before the date of revocation of Consent to the processing of personal data (if the latter occurs earlier).
5.2. In case of account deletion from the Service or withdrawal of Consent to the processing of personal data (if the latter occurs earlier) The Owner of the Service informs a third party about this if PD processing is carried out by such a person acting on behalf of the Owner of the Service, and if the preservation of PD is no longer required for the purposes of PD processing, destroys PD or ensures their destruction (if PD processing is carried out by another person acting on behalf of the Owner of the Service) within the time limit established the legislation of the Russian Federation.
5.3. The Service User’s PD may be transferred to authorized government bodies of the Russian Federation only on the grounds and in the manner established by the legislation of the Russian Federation.
5.4. If the Service User’s account is deleted, the Service Owner may store personal and other necessary data of the Service User on its electronic media for the period established by the current legislation of the Russian Federation.
If the User restores his account before the end of such a period, the processing of the User’s personal data of the Service is carried out in accordance with this Policy.

6. Rights of the Service User

6.1. The Service User (or his legal representative) has the right to request the following information from the Service Owner:

name and actual address of the Service Owner;
confirmation of the fact that the Owner of the Service processed his PD;
legal grounds, goals and methods of processing its PD;
processed PD related to the corresponding User of the Service, and the source of their receipt;
information about persons (with the exception of employees of the Service Owner) who have access to PD or who can be provided with PD on the basis of a contract (including instructions) or on the basis of federal law;
terms of PD processing, including the terms of their storage;
the name or surname, first name, patronymic and address of the person processing the PD, if processing is or will be entrusted to such a person.

6.2. The User of the Service (or his legal representative) has the right to request clarification of his PD, their blocking or destruction if the PD is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing.

7. Implemented measures to ensure the safety of PD

7.1. When processing PD, the Service Owner takes the necessary legal, organizational and technical measures to protect PD from unauthorized or accidental access to them, destruction, modification, blocking, copying, provision, distribution of PD, as well as from other illegal actions in relation to PD. Such measures in accordance with Federal Law No. 152-FZ dated 07/27/2006 “On Personal Data”, in particular, include the following:

a person responsible for organizing the processing and ensuring the safety of PD has been appointed;
this Policy has been developed, local acts on the processing of PD, as well as local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation, eliminating the consequences of such violations;
an assessment of the harm that may be caused to the PD subject in case of violation of the requirements of the Federal Law “On Personal Data” has been carried out;
current threats to the security of the safety of PD during their processing on the Service have been identified in accordance with part 5 of Article 19 of the Federal Law “On Personal Data” and the type of threats to the safety of PD during their processing on the Service has been determined, taking into account the assessment of possible harm;
internal control of compliance of PD processing with the requirements of the Federal Law “On Personal Data” and regulatory legal acts adopted in accordance with it has been organized;
employees of the Service Owner who directly process PD are familiar with the provisions of the legislation of the Russian Federation on PD, including the requirements for the protection of PD, this Policy and local acts of the Service Owner on PD processing;
a system of protection of PD information systems has been created;
information security tools that have passed the compliance assessment procedure in accordance with the established procedure are used;
a security regime has been organized for the premises in which PD is being processed, preventing the possibility of uncontrolled entry or stay in these premises of persons who do not have the right to access these premises;
the rules for access to PD processed on the Service are defined, as well as registration and accounting of all actions performed with PD by Users of the Service is provided;
the facts of unauthorized access to PD are being detected and measures are being taken on such facts;
restoration of PD modified or destroyed due to unauthorized access to them is ensured;
periodic checks are carried out on compliance with the procedure for processing and ensuring the safety of PD by the Owner of the Service.

8. Additional terms

8.1. The Service Owner has the right to make changes to this Policy. Any changes to the Policy will take effect from the moment the new version of the Policy is published on the Service. Continued use of the Service after the publication of a new version of the Policy on the Service will mean that the User agrees to the changes in the Policy. In case of disagreement with the Policy changes that have entered into force, the User is obliged to independently terminate any use of the Service, including by deleting his account on the Service.The User has the right to contact the Data protection officer at the following address for all issues related to the collection and processing of PD: clients@getintent.com.
The user has the right to file a complaint with the authorized bodies.