Политика в отношении обработки персональных данных
1. GENERAL PROVISIONS
This Privacy Policy has been prepared in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and sets out the principles and procedures governing the processing of personal data and the measures taken to ensure the security of personal data by Great Finance (hereinafter referred to as the “Controller”).
1.1. The Controller considers the protection of individuals' rights and freedoms in the processing of their personal data to be one of its fundamental principles, including respect for privacy and protection of personal information.
1.2. This Privacy Policy applies to all information that the Controller may obtain about visitors to the website:
https://buhnalogpro.com
2. DEFINITIONS USED IN THIS PRIVACY POLICY
2.1. Automated processing of personal data — processing of personal data using automated or computer-based systems.
2.2. Restriction of processing — the temporary restriction of the processing of personal data, except where processing is necessary for the purposes permitted by applicable law.
2.3. Website — a collection of graphical and informational materials, software and databases that make the website available on the Internet at:
https://buhnalogpro.com
2.4. Personal data filing system — any structured set of personal data that is accessible according to specific criteria, whether centralised, decentralised or distributed on a functional or geographical basis.
2.5. Anonymisation of personal data — processing of personal data in such a manner that the individual can no longer be identified without the use of additional information.
2.6. Processing of personal data — any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.7. Controller — the natural or legal person which determines the purposes and means of the processing of personal data.
2.8. Personal data — any information relating to an identified or identifiable individual who visits or uses the Website.
2.9. User — any visitor to the website:
https://buhnalogpro.com
2.10. Provision of personal data — making personal data available to a specific person or category of persons.
2.11. Disclosure of personal data — any action by which personal data is made available to persons other than the data subject, including transmission or other forms of disclosure.
2.12. International transfer of personal data — a transfer of personal data from the United Kingdom to a recipient located outside the UK, where such transfer is subject to applicable UK data protection requirements.
2.13. Erasure of personal data — the permanent deletion or destruction of personal data so that it can no longer be used to identify an individual.
3. MAIN RIGHTS AND OBLIGATIONS OF THE CONTROLLER
3.1. The Controller has the right to:
— request accurate information and, where reasonably necessary, documents containing personal data from the data subject;
— continue processing personal data where permitted by applicable law even if a data subject withdraws consent, provided that another lawful basis for processing exists;
— independently determine appropriate technical and organisational measures necessary to comply with applicable data protection legislation.
3.2. The Controller shall:
— provide data subjects, upon request, with information concerning the processing of their personal data;
— process personal data in accordance with applicable UK data protection legislation;
— respond to requests and enquiries from data subjects concerning their personal data in accordance with applicable legal requirements;
— make this Privacy Policy publicly available;
— implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or disclosure;
— cease processing and/or erase personal data where required by applicable law or where the relevant processing purpose has been fulfilled and continued retention is no longer necessary;
— comply with other obligations imposed on the Controller under applicable data protection legislation.
4. MAIN RIGHTS AND OBLIGATIONS OF DATA SUBJECTS
4.1. Data subjects may have the following rights:
— the right to obtain information about whether their personal data is being processed and, where applicable, access to such personal data;
— the right to request correction or completion of inaccurate or incomplete personal data;
— the right to request erasure of personal data in circumstances provided for by applicable law;
— the right to request restriction of processing in circumstances provided for by applicable law;
— the right to object to certain processing of personal data;
— the right to withdraw consent where processing is based on consent;
— the right to object to the processing of personal data for direct marketing purposes;
— the right to data portability where the applicable legal requirements are met;
— the right to lodge a complaint with the competent data protection supervisory authority;
— the right to exercise any other rights provided by applicable data protection legislation.
4.2. Data subjects should:
— provide accurate information where personal data is requested;
— notify the Controller where their personal data needs to be corrected or updated.
4.3. Individuals who knowingly provide inaccurate information about themselves or provide another individual's personal data without appropriate authorisation may be responsible for the consequences of such actions in accordance with applicable law.
5. PRINCIPLES OF PROCESSING PERSONAL DATA
5.1. Personal data shall be processed lawfully, fairly and in a transparent manner.
5.2. Personal data shall be collected for specified, explicit and legitimate purposes and shall not be further processed in a manner incompatible with those purposes.
5.3. Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
5.4. Only personal data necessary for the relevant processing purposes shall be processed.
5.5. The amount and nature of personal data processed shall correspond to the stated purposes of processing and shall not be excessive.
5.6. Reasonable steps shall be taken to ensure that personal data is accurate and, where necessary, kept up to date. Inaccurate personal data shall be corrected or erased without undue delay where appropriate.
5.7. Personal data shall not be kept for longer than is necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by applicable law.
6. PURPOSES OF PROCESSING PERSONAL DATA
Purpose of processing: providing the User with access to services, information and/or materials available on the Website.
Personal data processed: first name, surname and telephone number.
Lawful basis: consent of the data subject, performance of a contract or taking steps at the request of the data subject before entering into a contract, compliance with legal obligations, or legitimate interests of the Controller, where applicable.
Types of processing: collection, recording, organisation, storage, use, retrieval, updating, restriction, erasure, destruction and anonymisation of personal data.
The Controller shall process personal data only to the extent necessary for the purposes described above.
7. CONDITIONS FOR PROCESSING PERSONAL DATA
7.1. Personal data may be processed where the data subject has provided consent, where consent is required by applicable law.
7.2. Personal data may be processed where processing is necessary to comply with a legal obligation to which the Controller is subject.
7.3. Personal data may be processed where necessary for the establishment, exercise or defence of legal claims or for compliance with a court order or other lawful requirement.
7.4. Personal data may be processed where this is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject before entering into a contract.
7.5. Personal data may be processed where this is necessary for the legitimate interests of the Controller or a third party, provided that such interests are not overridden by the interests, rights or freedoms of the data subject.
7.6. Personal data may be processed where the data subject has made the information manifestly public or has otherwise lawfully made it available.
7.7. Personal data may be processed where such processing is required or permitted by applicable law.
8. PROCEDURE FOR COLLECTION, STORAGE, TRANSFER AND OTHER PROCESSING OF PERSONAL DATA
The security of personal data processed by the Controller is ensured through appropriate technical and organisational measures designed to comply with applicable data protection and security requirements.
8.1. The Controller takes reasonable measures to protect personal data and prevent unauthorised access.
8.2. The User's personal data will not be disclosed to third parties except where such disclosure is necessary to comply with applicable law, to provide requested services, to perform contractual obligations, to protect legitimate interests, or where the data subject has provided appropriate consent.
8.3. If personal data is inaccurate or needs to be updated, the User may contact the Controller by email at:
buhotchetnost@outlook.com
with the subject line:
“Personal Data Update”
8.4. Personal data shall be processed for as long as necessary to achieve the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
Where processing is based on consent, the User may withdraw consent by contacting the Controller at:
buhotchetnost@outlook.com
with the subject line:
“Withdrawal of Consent”
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8.5. Information collected by third-party service providers, including payment providers, communication services, hosting providers and other suppliers, may be stored and processed by those providers in accordance with their own terms and privacy policies.
8.6. The Controller may process personal data where such processing is required or permitted by applicable law, including where necessary to comply with legal, regulatory or public authority requirements.
8.7. The Controller shall maintain the confidentiality of personal data and shall take appropriate measures to prevent unauthorised disclosure.
8.8. Personal data shall be stored in a form that permits identification of the data subject only for as long as necessary for the purposes for which the personal data is processed, unless a longer period is required or permitted by applicable law.
8.9. Processing of personal data may cease when the relevant processing purposes have been achieved, when the applicable consent expires or is withdrawn, when the data subject lawfully objects to processing, or when continued processing is no longer necessary or lawful.
9. PROCESSING ACTIVITIES PERFORMED BY THE CONTROLLER
9.1. The Controller may carry out the following processing operations:
collection, recording, organisation, structuring, storage, updating, retrieval, consultation, use, disclosure, transmission, restriction, anonymisation, erasure and destruction of personal data.
9.2. The Controller may process personal data using automated systems and information technologies, including through electronic communication networks.
10. INTERNATIONAL TRANSFERS OF PERSONAL DATA
10.1. Where personal data is transferred outside the United Kingdom, the Controller shall ensure that the transfer is carried out in accordance with applicable UK data protection legislation.
10.2. Where required by law, the Controller shall use an appropriate lawful transfer mechanism, which may include:
— UK adequacy regulations;
— the UK International Data Transfer Agreement (IDTA);
— the UK Addendum to the EU Standard Contractual Clauses;
— another lawful mechanism permitted under applicable UK data protection legislation.
10.3. Where required, the Controller shall take appropriate steps to assess the level of protection provided to personal data following an international transfer.
11. CONFIDENTIALITY OF PERSONAL DATA
The Controller and any persons who have access to personal data shall maintain the confidentiality of such data and shall not disclose or otherwise make personal data available to third parties except where:
— the data subject has provided appropriate consent;
— disclosure is necessary for the performance of a contract or provision of requested services;
— disclosure is required or permitted by applicable law;
— disclosure is necessary to establish, exercise or defend legal claims; or
— another lawful basis for disclosure applies.
12. FINAL PROVISIONS
12.1. The User may obtain clarification regarding the processing of personal data by contacting the Controller by email:
buhotchetnost@outlook.com
12.2. Any changes to this Privacy Policy will be reflected in an updated version of this document. The Policy will remain effective until it is replaced by a revised version.
12.3. The current version of this Privacy Policy is freely available online at:
https://buhnalogpro.com/page_30873/
This Privacy Policy has been prepared in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and sets out the principles and procedures governing the processing of personal data and the measures taken to ensure the security of personal data by Great Finance (hereinafter referred to as the “Controller”).
1.1. The Controller considers the protection of individuals' rights and freedoms in the processing of their personal data to be one of its fundamental principles, including respect for privacy and protection of personal information.
1.2. This Privacy Policy applies to all information that the Controller may obtain about visitors to the website:
https://buhnalogpro.com
2. DEFINITIONS USED IN THIS PRIVACY POLICY
2.1. Automated processing of personal data — processing of personal data using automated or computer-based systems.
2.2. Restriction of processing — the temporary restriction of the processing of personal data, except where processing is necessary for the purposes permitted by applicable law.
2.3. Website — a collection of graphical and informational materials, software and databases that make the website available on the Internet at:
https://buhnalogpro.com
2.4. Personal data filing system — any structured set of personal data that is accessible according to specific criteria, whether centralised, decentralised or distributed on a functional or geographical basis.
2.5. Anonymisation of personal data — processing of personal data in such a manner that the individual can no longer be identified without the use of additional information.
2.6. Processing of personal data — any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.7. Controller — the natural or legal person which determines the purposes and means of the processing of personal data.
2.8. Personal data — any information relating to an identified or identifiable individual who visits or uses the Website.
2.9. User — any visitor to the website:
https://buhnalogpro.com
2.10. Provision of personal data — making personal data available to a specific person or category of persons.
2.11. Disclosure of personal data — any action by which personal data is made available to persons other than the data subject, including transmission or other forms of disclosure.
2.12. International transfer of personal data — a transfer of personal data from the United Kingdom to a recipient located outside the UK, where such transfer is subject to applicable UK data protection requirements.
2.13. Erasure of personal data — the permanent deletion or destruction of personal data so that it can no longer be used to identify an individual.
3. MAIN RIGHTS AND OBLIGATIONS OF THE CONTROLLER
3.1. The Controller has the right to:
— request accurate information and, where reasonably necessary, documents containing personal data from the data subject;
— continue processing personal data where permitted by applicable law even if a data subject withdraws consent, provided that another lawful basis for processing exists;
— independently determine appropriate technical and organisational measures necessary to comply with applicable data protection legislation.
3.2. The Controller shall:
— provide data subjects, upon request, with information concerning the processing of their personal data;
— process personal data in accordance with applicable UK data protection legislation;
— respond to requests and enquiries from data subjects concerning their personal data in accordance with applicable legal requirements;
— make this Privacy Policy publicly available;
— implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or disclosure;
— cease processing and/or erase personal data where required by applicable law or where the relevant processing purpose has been fulfilled and continued retention is no longer necessary;
— comply with other obligations imposed on the Controller under applicable data protection legislation.
4. MAIN RIGHTS AND OBLIGATIONS OF DATA SUBJECTS
4.1. Data subjects may have the following rights:
— the right to obtain information about whether their personal data is being processed and, where applicable, access to such personal data;
— the right to request correction or completion of inaccurate or incomplete personal data;
— the right to request erasure of personal data in circumstances provided for by applicable law;
— the right to request restriction of processing in circumstances provided for by applicable law;
— the right to object to certain processing of personal data;
— the right to withdraw consent where processing is based on consent;
— the right to object to the processing of personal data for direct marketing purposes;
— the right to data portability where the applicable legal requirements are met;
— the right to lodge a complaint with the competent data protection supervisory authority;
— the right to exercise any other rights provided by applicable data protection legislation.
4.2. Data subjects should:
— provide accurate information where personal data is requested;
— notify the Controller where their personal data needs to be corrected or updated.
4.3. Individuals who knowingly provide inaccurate information about themselves or provide another individual's personal data without appropriate authorisation may be responsible for the consequences of such actions in accordance with applicable law.
5. PRINCIPLES OF PROCESSING PERSONAL DATA
5.1. Personal data shall be processed lawfully, fairly and in a transparent manner.
5.2. Personal data shall be collected for specified, explicit and legitimate purposes and shall not be further processed in a manner incompatible with those purposes.
5.3. Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
5.4. Only personal data necessary for the relevant processing purposes shall be processed.
5.5. The amount and nature of personal data processed shall correspond to the stated purposes of processing and shall not be excessive.
5.6. Reasonable steps shall be taken to ensure that personal data is accurate and, where necessary, kept up to date. Inaccurate personal data shall be corrected or erased without undue delay where appropriate.
5.7. Personal data shall not be kept for longer than is necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by applicable law.
6. PURPOSES OF PROCESSING PERSONAL DATA
Purpose of processing: providing the User with access to services, information and/or materials available on the Website.
Personal data processed: first name, surname and telephone number.
Lawful basis: consent of the data subject, performance of a contract or taking steps at the request of the data subject before entering into a contract, compliance with legal obligations, or legitimate interests of the Controller, where applicable.
Types of processing: collection, recording, organisation, storage, use, retrieval, updating, restriction, erasure, destruction and anonymisation of personal data.
The Controller shall process personal data only to the extent necessary for the purposes described above.
7. CONDITIONS FOR PROCESSING PERSONAL DATA
7.1. Personal data may be processed where the data subject has provided consent, where consent is required by applicable law.
7.2. Personal data may be processed where processing is necessary to comply with a legal obligation to which the Controller is subject.
7.3. Personal data may be processed where necessary for the establishment, exercise or defence of legal claims or for compliance with a court order or other lawful requirement.
7.4. Personal data may be processed where this is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject before entering into a contract.
7.5. Personal data may be processed where this is necessary for the legitimate interests of the Controller or a third party, provided that such interests are not overridden by the interests, rights or freedoms of the data subject.
7.6. Personal data may be processed where the data subject has made the information manifestly public or has otherwise lawfully made it available.
7.7. Personal data may be processed where such processing is required or permitted by applicable law.
8. PROCEDURE FOR COLLECTION, STORAGE, TRANSFER AND OTHER PROCESSING OF PERSONAL DATA
The security of personal data processed by the Controller is ensured through appropriate technical and organisational measures designed to comply with applicable data protection and security requirements.
8.1. The Controller takes reasonable measures to protect personal data and prevent unauthorised access.
8.2. The User's personal data will not be disclosed to third parties except where such disclosure is necessary to comply with applicable law, to provide requested services, to perform contractual obligations, to protect legitimate interests, or where the data subject has provided appropriate consent.
8.3. If personal data is inaccurate or needs to be updated, the User may contact the Controller by email at:
buhotchetnost@outlook.com
with the subject line:
“Personal Data Update”
8.4. Personal data shall be processed for as long as necessary to achieve the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
Where processing is based on consent, the User may withdraw consent by contacting the Controller at:
buhotchetnost@outlook.com
with the subject line:
“Withdrawal of Consent”
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8.5. Information collected by third-party service providers, including payment providers, communication services, hosting providers and other suppliers, may be stored and processed by those providers in accordance with their own terms and privacy policies.
8.6. The Controller may process personal data where such processing is required or permitted by applicable law, including where necessary to comply with legal, regulatory or public authority requirements.
8.7. The Controller shall maintain the confidentiality of personal data and shall take appropriate measures to prevent unauthorised disclosure.
8.8. Personal data shall be stored in a form that permits identification of the data subject only for as long as necessary for the purposes for which the personal data is processed, unless a longer period is required or permitted by applicable law.
8.9. Processing of personal data may cease when the relevant processing purposes have been achieved, when the applicable consent expires or is withdrawn, when the data subject lawfully objects to processing, or when continued processing is no longer necessary or lawful.
9. PROCESSING ACTIVITIES PERFORMED BY THE CONTROLLER
9.1. The Controller may carry out the following processing operations:
collection, recording, organisation, structuring, storage, updating, retrieval, consultation, use, disclosure, transmission, restriction, anonymisation, erasure and destruction of personal data.
9.2. The Controller may process personal data using automated systems and information technologies, including through electronic communication networks.
10. INTERNATIONAL TRANSFERS OF PERSONAL DATA
10.1. Where personal data is transferred outside the United Kingdom, the Controller shall ensure that the transfer is carried out in accordance with applicable UK data protection legislation.
10.2. Where required by law, the Controller shall use an appropriate lawful transfer mechanism, which may include:
— UK adequacy regulations;
— the UK International Data Transfer Agreement (IDTA);
— the UK Addendum to the EU Standard Contractual Clauses;
— another lawful mechanism permitted under applicable UK data protection legislation.
10.3. Where required, the Controller shall take appropriate steps to assess the level of protection provided to personal data following an international transfer.
11. CONFIDENTIALITY OF PERSONAL DATA
The Controller and any persons who have access to personal data shall maintain the confidentiality of such data and shall not disclose or otherwise make personal data available to third parties except where:
— the data subject has provided appropriate consent;
— disclosure is necessary for the performance of a contract or provision of requested services;
— disclosure is required or permitted by applicable law;
— disclosure is necessary to establish, exercise or defend legal claims; or
— another lawful basis for disclosure applies.
12. FINAL PROVISIONS
12.1. The User may obtain clarification regarding the processing of personal data by contacting the Controller by email:
buhotchetnost@outlook.com
12.2. Any changes to this Privacy Policy will be reflected in an updated version of this document. The Policy will remain effective until it is replaced by a revised version.
12.3. The current version of this Privacy Policy is freely available online at:
https://buhnalogpro.com/page_30873/