Policy for processing of personal data

1.1. The operator sets as the major purpose and a condition of implementation of the activity observance of the rights and freedoms of the person and citizen when processing its personal data, including protection of the rights to personal privacy, a personal and family secret.

1.2. This policy of Operator for processing of personal data (further – Policy) is applied to all information which the Operator can receive about visitors of the https://away.ru website.

2.1. The automated processing of personal data – processing of personal data by means of computer aids.

2.2. Blocking of personal data – the temporary termination of processing of personal data (except as specified if processing is necessary for refining of personal data).

2.3. The website – set of graphic and information materials and also the computer programs and databases providing their availability on the Internet to the network address https://away.ru.

2.4. A personal data information system — set of the personal data which are contained in databases, and providing their processing of information technologies and technical means.

2.5. Depersonalization of personal data — actions as a result of which the specific User or other subject of personal data cannot define accessory of personal data without use of the additional information.

2.6. Processing of personal data – any action (transaction) or set of actions (transactions) made with use of the automation equipment or without use of such means with personal data including collecting, record, systematization, accumulation, storage, refining (updating, change), extraction, use, transfer (distribution, granting, access), depersonalization, blocking, removal, destruction of personal data.

2.7. The operator – state body, municipal body, legal entity or physical person, independently or together with other persons the purposes of processing of personal data organizing and (or) performing processing of personal data and also defining, structure of the personal data which are subject to processing, actions (transaction) made with personal data.

2.8. Personal data – any information relating directly or indirectly to the defined or defined User of the https://away.ru website.

2.9. The personal data permitted by the subject of personal data for distribution - personal data, access of an unlimited circle of people to which is provided by the subject of personal data by consent on processing of the personal data permitted by the subject of personal data for distribution in the order provided by the Law on personal data (further - the personal data permitted for distribution).

2.10. The user – any visitor of the https://away.ru website.

2.11. Granting personal data – the actions sent on disclosure of personal data to a certain person or a certain circle of people.

2.12. Distribution of personal data – any actions directed to disclosure of personal data to an uncertain circle of people (transfer of personal data) or to acquaintance with personal data of an unlimited circle of people, including publication of personal data in mass media, placement in information and telecommunication networks or providing access to personal data by any different way.

2.13. Cross-border transfer of personal data – transfer of personal data on the territory of the foreign state to authority of the foreign state, foreign natural or foreign legal entity.

2.14. Destruction of personal data – any actions as a result of which personal data are destroyed irrevocably with impossibility of further recovery of the contents of personal data in a personal data information system and (or) are destroyed material carriers of personal data.

3.1. The operator has the right:

– obtain the authentic information and/or documents containing personal data from the subject of personal data;

– in case of a response the Operator has the right to continue by a subject of personal data of consent to processing of personal data processing of personal data without the consent of the subject of personal data in the presence of the bases specified in the Law on personal data;

– to independently define structure and the list of the measures necessary and the duties, sufficient for ensuring accomplishment, provided by the Law on personal data and regulatory legal acts adopted according to it if other is not provided by the Law on personal data or other federal laws.

3.2. The operator is obliged:

– provide to the subject of personal data at its request information concerning processing of its personal data;

– organize processing of personal data in the order established by the current legislation of the Russian Federation;

– respond to appeals and requests of subjects of personal data and their legal representatives according to requirements of the Law on personal data;

– report in authorized body on protection of the rights of subjects of personal data at the request of this body necessary information within 30 days from the date of receipt of such request;

– publish or to otherwise provide unlimited access to this Policy for processing of personal data;

– take legal, organizational and technical measures for personal data protection from illegal or accidental access to them, destruction, change, blocking, copying, granting, distribution of personal data and also from other wrongful acts in respect of personal data;

– stop transfer (distribution, granting, access) of personal data, to stop processing and to destroy personal data in the order and cases provided by the Law on personal data;

– fulfill other duties provided by the Law on personal data.

4.1. Subjects of personal data have the right:

– obtain information concerning processing of its personal data, except as specified provided by federal laws. The information is provided to the subject of personal data by the Operator in an available form, and they should not contain the personal data relating to other subjects of personal data, except as specified, when there is legal basis for disclosure of such personal data. The list of information and an order of its receiving is established by the Law on personal data;

– demand from the operator of refining of its personal data, their blocking or destruction in case personal data are incomplete, outdated, inexact, illegally received or are not necessary for a stated purpose of processing and also to take the measures for protection of the rights provided by the law;

– lay down a condition of prior consent when processing personal data for the purpose of market promotion of goods, works and services;

– on a withdrawal of consent to processing of personal data;

– appeal in authorized body on protection of the rights of subjects of personal data or judicially against wrongful acts or failure to act of the Operator when processing its personal data;

– on implementation of other rights provided by the legislation of the Russian Federation.

4.2. Subjects of personal data are obliged:

– provide to the Operator reliable data about itself;

– report to the Operator about refining (updating, change) of the personal data.

4.3. The persons who transferred to the Operator false information on themselves or data on other subject of personal data without the consent of the last, bear responsibility in accordance with the legislation of the Russian Federation.

5.4. Also on the website there is collecting and processing of the depersonalized data on visitors (including the cookie files) by means of services of Internet statistics (Yandex the Metrics and Google of the Analyst and others).

5.5. Above-mentioned data in the text of Policy are united further by the general concept Personal data.

5.6. Processing of special categories of the personal data concerning racial, national identity, political views, religious or philosophical beliefs, intimate life by the Operator is not performed.

5.7. Processing of the personal data permitted for distribution from among special categories of the personal data specified in Part 1 of Article 10 of the Law on personal data is allowed if the bans and conditions provided by Article 10.1 of the Law on personal data are observed.

5.8. The consent of the User to processing of the personal data permitted for distribution is made out separately from other soglasiya on processing of its personal data. At the same time the conditions provided, in particular, by Article 10.1 of the Law on personal data are complied. Requirements to the content of such consent are established by authorized body on protection of the rights of subjects of personal data.

5.8.1 The User provides consent to processing of the personal data permitted for distribution to the Operator directly.

5.8.2 The operator is obliged no later than three working days in time from the moment of receiving the specified consent of the User to publish information on processing conditions, on availability of the bans and conditions on processing by an unlimited circle of people of the personal data permitted for distribution.

5.8.3 Transfer (distribution, granting, access) of the personal data permitted by the subject of personal data for distribution should be stopped upon the demand of the subject of personal data at any time. This requirement should include a surname, a name, a middle name (in the presence), contact information (the phone number, the e-mail address or the postal address) of the subject of personal data and also the list of personal data which processing is subject to the termination. The personal data specified in this requirement can be processed only by the Operator to whom it is sent.

5.8.4 Consent to processing of the personal data permitted for distribution stops the action from the moment of receipt to the Operator of the requirement specified in item 5.8.3 of this Policy for processing of personal data.

6.1. Processing of personal data is performed on a legal and fair basis.

6.2. Processing of personal data is limited to achievement of concrete, in advance particular and legal purposes. The processing of personal data incompatible with the purposes of collecting of personal data is not allowed.

6.3. Consolidation of the databases containing personal data which processing is performed for the purpose of, incompatible among themselves is not allowed.

6.4. Only personal data which answer the purposes of their processing are subject to processing.

6.5. Content and volume of the processed personal data answer stated purposes of processing. The redundancy of the processed personal data in relation to stated purposes of their processing is not allowed.

6.6. When processing personal data the accuracy of personal data, their sufficiency, and in necessary cases and relevance in relation to the purposes of processing of personal data is provided. The operator takes necessary measures and/or provides their acceptance on removal or refining of incomplete or inexact data.

6.7. Storage of personal data is performed in the form allowing to define the subject of personal data, not longer than it is demanded by the purposes of processing of personal data if storage duration of personal data is not established by the federal law, the agreement, which party, the beneficiary or the guarantor on whom the subject of personal data is. The processed personal data are destroyed or depersonalized on reaching the purposes of processing or in case of loss of need for achievement of these purposes if other is not provided by the federal law.

7.1. Purpose of processing of personal user information:

7.2. Also the Operator has the right to send to the User of the notice of new products and services, special offers and various events. The user can always refuse obtaining information messages, having sent the Operator the letter on the e-mail address of info@away.ru with a mark "Refusal of notices of new products and services and special offers".

7.3. The depersonalized data of Users collected by means of services of Internet statistics serve for collection of information about actions of Users on the website, improvements of quality of the website and its contents.

8.1. A legal basis of processing of personal data by the Operator are:

– federal laws, other regulatory legal acts in the sphere of personal data protection;

– the consent of Users to processing of their personal data, to processing of the personal data permitted for distribution.

8.2. The operator processes personal user information only in case of their filling and/or sending by the User independently through the special forms located on the website https://away.ru or sent to the Operator by e-mail. Filling the corresponding forms and/or sending the personal data to the Operator, the User expresses the consent with this Policy.

8.3. The operator processes the depersonalized data on the User in case it is authorized in settings of the browser of the User (preserving of the cookie files and use of JavaScript technology is included).

8.4. The subject of personal data independently makes the decision on granting its personal data and agrees freely, the will and in the interest.

9.1. Processing of personal data is performed with the consent of the subject of personal data on processing of its personal data.

9.2. Processing of personal data is necessary for achievement of the goals, provided by the international treaty of the Russian Federation or the law, for implementation of the functions assigned by the legislation of the Russian Federation to the operator, powers and duties.

9.3. Processing of personal data is necessary for the implementation of justice, execution of the court ruling, the act of other body or the official who are subject to execution in accordance with the legislation of the Russian Federation about enforcement proceeding.

9.4. Processing of personal data is necessary for agreement performance which party either the beneficiary or the guarantor on whom the subject of personal data and also for signing of the contract at the initiative of the subject of personal data or the agreement under which the subject of personal data will be a beneficiary or the guarantor is.

9.5. Processing of personal data is necessary for implementation of the rights and legitimate interests of the operator or the third parties or for achievement of the socially significant purposes provided that at the same time the rights and freedoms of the subject of personal data are not violated.

9.6. Processing of personal data, access of an unlimited circle of people to which is provided by the subject of personal data or at its request (further – public personal data), is performed.

9.7. Processing of the personal data which are subject to publication or obligatory disclosure according to the federal law is performed.

10.1. The operator ensures safety of personal data and takes all feasible measures excluding access to personal data of unauthorized persons.

10.2. Personal user information never, under no circumstances will be transferred to the third parties, except as specified, connected with performance of the current legislation or in case by the subject of personal data it is agreed to the Operator to data transmission to the third party for obligation fulfillment under the civil agreement.

10.3. In case of identification of inaccuracies in personal data, the User can update them independently, by the direction to the Operator the notice on the e-mail address of info@away.ru Operator with a mark "Updating of personal data".

10.4. The term of processing of personal data is defined by achievement of the goals for which personal data were collected if other term is not provided by the agreement or the current legislation.
The user can withdraw at any time the consent to processing of personal data, having directed to the Operator the notice by e-mail to the e-mail address of info@away.ru Operator with a mark "A withdrawal of consent to processing of personal data".

10.5. All information which gathers third-party services, including payment service providers, means of communication and other service providers is stored and processed by specified persons (Operators) according to their User agreement and Privacy policy. The subject of personal data and/or the User is obliged to study the specified documents independently in due time. The operator does not bear responsibility for actions of the third parties including specified in this point of service providers.

10.6. The bans on transfer established by the subject of personal data (except providing access) and also (except gaining access) the personal data permitted for distribution do not affect processing or conditions of processing in cases of processing of personal data in the state, public and other public interests determined by the legislation of the Russian Federation.

10.7. The operator when processing personal data provides confidentiality of personal data.

10.8. The operator performs storage of personal data in the form allowing to define the subject of personal data, not longer than it is demanded by the purposes of processing of personal data if storage duration of personal data is not established by the federal law, the agreement, which party, the beneficiary or the guarantor on whom the subject of personal data is.

10.9. Achievement of the goals of processing of personal data, expiration of consent of the subject of personal data or a withdrawal of the consent of personal data by the subject and also identification of illegal processing of personal data can be a condition of the termination of processing of personal data.

11.1. The operator performs collecting, record, systematization, accumulation, storage, refining (updating, change), extraction, use, transfer (distribution, granting, access), depersonalization, blocking, removal and destruction of personal data.

11.2. The operator performs the automated processing of personal data with receiving and/or transfer of the obtained information on information and telecommunication networks or without that.

12.1. The operator prior to implementation of cross-border transfer of personal data is obliged to be convinced that the foreign state on which territory it is supposed to perform transfer of personal data provides reliable protection of the rights of subjects of personal data.

12.2. Cross-border transfer of personal data in the territory of the foreign states which are not meeting the above-stated requirements can be performed only in case of consent availability in writing of the subject of personal data on cross-border transfer of its personal data and/or agreement performances which party is the subject of personal data.

14.1. The user can receive any explanations on the interesting questions concerning processing of its personal data, having addressed the Operator by means of e-mail info@away.ru.

14.2. Any changes of policy of processing of personal data by the Operator will be reflected in this document. The policy works is termless before replacement with its new version.

14.3. The current version of Policy in free access is located on the Internet at the address https://away.ru/privacy.