User agreement for personal data processing

1. General Provisions
This personal data processing policy has been prepared in accordance with the requirements of the Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter referred to as the Personal Data Law) and defines the procedure for processing personal data and measures to ensure the security of personal data undertaken by RunToRam (hereinafter referred to as the Operator).

1.1. The Operator considers compliance with human and civil rights and freedoms when processing personal data, including the right to privacy, personal and family confidentiality, as its primary objective and condition for conducting its activities.

1.2. This policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that the Operator may receive about visitors to the website https://runtoram.com.

2. Key Terms Used in the Policy
2.1. Automated processing of personal data – Processing of personal data using computer technology.

2.2. Blocking of personal data – Temporary cessation of personal data processing (except when processing is necessary to clarify personal data).

2.3. Website – A set of graphical and informational materials, as well as computer software and databases that ensure their availability on the Internet at https://runtoram.com.

2.4. Information systеm of personal data – A collection of personal data contained in databases and the technologies and technical means that ensure their processing.

2.5. Anonymization of personal data – Actions that make it impossible to determine the ownership of personal data without additional information.

2.6. Processing of personal data – Any action (operation) or set of actions performed using automated tools or without such tools involving personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.

2.7. Operator – A state or municipal body, legal entity, or individual that independently or jointly organizes and/or performs the processing of personal data, and determines the purposes, composition, and actions performed on personal data.

2.8. Personal data – Any information that directly or indirectly relates to a specific or identifiable User of the website https://runtoram.com.

2.9. Public personal data – Personal data to which an unlimited number of people are granted access by the subject of personal data through their consent in accordance with the Personal Data Law.

2.10. User – Any visitor to the website https://runtoram.com.

2.11. Provision of personal data – Actions aimed at disclosing personal data to a specific person or group of people.

2.12. Distribution of personal data – Actions aimed at disclosing personal data to an undefined group of people or providing access to personal data.

2.13. Cross-border transfer of personal data – Transfer of personal data to a foreign state, foreign authority, foreign individual, or foreign legal entity.

2.14. Destruction of personal data – Actions that irreversibly destroy personal data, making restoration impossible.

3. Operator’s Rights and Obligations
3.1. The Operator has the right to:
Request accurate personal data and related documents from the data subject.
Continue processing personal data without the subject’s consent in cases provided by the Personal Data Law.
Independently determine the measures necessary for compliance with the Personal Data Law.
3.2. The Operator is obligated to:
Provide the data subject with information regarding the processing of their personal data upon request.
Organize the processing of personal data as required by Russian law.
Respond to requests and inquiries from data subjects and their representatives.
Notify the authorized body for the protection of personal data upon request within 10 days.
Publish this Policy and ensure unrestricted access to it.
Take legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, modification, or disclosure.
Stop processing and destroy personal data under conditions set forth in the Personal Data Law.
4. Rights and Obligations of Personal Data Subjects
4.1. Personal Data Subjects have the right to:
Receive information regarding the processing of their personal data.
Demand that the Operator clarify, block, or destroy their personal data if it is incomplete, outdated, or unlawfully obtained.
Require prior consent for the use of their personal data for marketing purposes.
Withdraw consent for the processing of personal data.
Lodge complaints with the authorized body or in court for violations.
4.2. Personal Data Subjects are obligated to:
Provide the Operator with accurate information.
Notify the Operator of any updates to their personal data.
5. Principles of Personal Data Processing
5.1. Processing is carried out lawfully and fairly.
5.2. Processing is limited to achieving specific, legitimate purposes.
5.3. Personal data is processed only to the extent necessary.
5.4. Processed personal data must be accurate, sufficient, and updated when necessary.
5.5. Data storage is limited to the time required to achieve processing purposes.

6. Purposes of Personal Data Processing
The purpose of processing is to provide the User with access to the services and materials on the website.

Personal Data: Name, phone numbers, and email address.
Legal Basis: Agreements between the Operator and the personal data subject.
Types of Processing: Collection, recording, systematization, storage, and destruction.
7. Conditions for Personal Data Processing
7.1. Processing is performed with the subject’s consent.
7.2. Processing may be necessary for legal obligations or agreements.
7.3. Publicly accessible data can be processed as permitted by the subject.

8. Collection, Storage, and Transfer of Personal Data
Personal data is stored securely with protection measures in place.
Personal data will not be shared with third parties unless required by law or with the subject’s consent.
Inaccurate personal data can be updated by sending a request to [email protected].
9. List of Actions Performed with Personal Data
Collection, storage, clarification, use, transfer, anonymization, and deletion of personal data.
10. Cross-Border Transfer of Personal Data
The Operator must notify the authorized body before initiating a cross-border transfer of personal data.
11. Confidentiality of Personal Data
The Operator and any third party with access to personal data are required to maintain confidentiality.

12. Final Provisions
12.1. Users can request clarification regarding their personal data processing via [email protected].
12.2. Changes to this Policy will be published on the website.
12.3. The current version of the Policy is publicly available at https://info.runtoram.com/en/user-agreement-for-personal-data-processing/