...
Logo of OERN - Society of Experts on Subsoil Use in Russia

RUSSIAN SOCIETY OF SUBSOIL USE EXPERTS

Logo of NAEN - Association of Organizations in the field of subsoil use, National Association for Subsoil Expertise

Privacy and Personal Data Processing Policy of oern.ru website

1. General provisions

1.1. This Privacy and Personal Data Processing Policy (hereinafter - the Policy) defines the procedure and conditions for processing personal data of visitors to the website at: https://oern.ru (hereinafter - the Site), as well as measures to ensure the security of such data in accordance with the requirements of the Federal Law of 27.07.2006 No. 152-FZ «On Personal Data» and other regulatory legal acts of the Russian Federation in the field of personal data protection.

1.2. This Policy applies to all personal data that the Operator may obtain about the user during the use of the Site, including when filling out forms, registering and participating in events, as well as when forming and placing cards of experts and competent persons.

1.3. By using the Site (by viewing pages, filling out forms, continuing to use the Site after the appearance of a cookie notice and links to this Policy), the user confirms that he/she is familiarized with this Policy and accepts its terms and conditions. If the user does not agree with the terms of the Policy, he/she must stop using the Site and, if necessary, send a request to the Operator to delete or restrict the processing of his/her personal data.

1.4. The Policy is public and is freely available on the Site via a permanent link at the bottom (footer) of each page.

1.5. The Operator has the right to make changes to this Policy. The new version of the Policy comes into effect from the moment it is posted on the Website, unless otherwise provided by the new version of the Policy.

2. Personal data operator and contact details

2.1. The operator of the personal data processed on the Website is:

Association of organizations in the field of subsoil use «National Association for Subsoil Expertise» (NAEN)
(hereinafter referred to as the Operator).

2.2. Operator's requisites:

OGRN: 1047796905090
TIN: 7706559442
Legal/postal address: 7, B. Strochenovsky Lane, Moscow, 115054, office 509

2.3. Contact details regarding the processing of personal data:

Website: https://oern.ru
E-mail: office@oern.ru

2.4. The Operator may entrust the processing of personal data to third parties on the basis of contracts concluded with them, provided that such parties comply with the requirements of the Russian Federation legislation on personal data and this Policy.

3. Categories of subjects and list of processed personal data

3.1. The Operator processes personal data of the following categories of personal data subjects:

  • visitors to the Site;
  • persons who send requests via feedback forms and other forms of the Site;
  • experts, competent persons, members and candidates for membership of professional associations, information about which is placed in the form of cards on the Website;
  • representatives of organizations - members and partners of the Operator.

3.2. Depending on the specific interaction with the Site, the Operator may process the following personal data of users:

  • last name, first name, middle name;
  • place of employment, position, professional status;
  • contact information (phone number, e-mail address, postal address if necessary);
  • information on education, academic degree, qualifications and professional experience (for experts and competent persons);
  • data on membership in professional associations, expert status, qualification level, certificate number and its validity period;
  • data on the region of location (city, subject of the Russian Federation);
  • other information voluntarily provided by the user through the forms on the Site.

3.3. When using the Site, anonymized data (including cookies, IP address, browser and device type, equipment specifications, date and time of visit, addresses of requested pages, referrers and other similar technical information) are automatically collected and processed. This data is considered personal data to the extent defined by the legislation of the Russian Federation.

3.4. The Operator does not collect and does not process special categories of personal data (on health status, political views, religious or philosophical beliefs, etc.), as well as biometric personal data, unless such processing is expressly provided for by law or is carried out on the basis of a separate written consent of the subject of personal data.

4. Purposes of personal data processing

Personal data of users are processed by the Operator for the following purposes:

4.1. Ensuring the functioning of the Site, correct display of its content, protection from unauthorized access and attacks.

4.2. Consideration of appeals and requests of users, feedback, sending responses, information and organizational messages within the framework of the Operator's activity.

4.3. Formation, maintenance and publication on the Website of cards of experts, competent persons, as well as representatives of the Operator's member organizations and partners, including for:

  • informing the professional community and stakeholders about the composition of experts and competent persons;
  • confirmation of the qualification status and professional level of specialists;
  • confirmation of the geography of operations and availability of representatives in the regions of the Russian Federation.

4.4. Organization of users' participation in events, programs, projects conducted by the Operator (seminars, conferences, certification, accreditation, consultations, etc.).

4.5. Execution of contracts and agreements to which users or the organizations they represent are parties or beneficiaries.

4.6. Sending to users information and news messages about the Operator's activities and related organizations (with separate consent of the user, if such consent is required by law).

4.7. Improvement of the Website, analysis of traffic, interest in the Website sections, optimization of the structure and content on the basis of anonymized statistical data (including using web analytics services).

5. Legal basis for personal data processing

5.1. The Operator processes personal data if at least one of the following legal grounds exists:

  • consent of the personal data subject to the processing of his/her personal data;
  • the necessity to execute a contract to which the personal data subject is a party or beneficiary, or to conclude a contract at the subject's initiative;
  • the need to fulfill the Operator's obligations established by the legislation of the Russian Federation;
  • realization of legitimate interests of the Operator or third parties, provided that the rights and freedoms of the personal data subject are not violated.

5.2. The user's consent to the processing of personal data may be expressed, among other things, in the performance of conclusory actions confirming the acceptance of the terms of the Policy:

  • continuing to use the Site after displaying a notice of data processing and cookie policy;
  • filling out forms on the Site and submitting your data through such forms;
  • Checking the box «I agree with the Privacy Policy and consent to the processing of personal data» under the appropriate form.

5.3. For experts, competent persons and other professionals whose cards are posted on the Website, the processing and publication of personal data is generally carried out on the basis of a separate written consent/application, contract or other legal document signed by the personal data subject.

6. Personal data processing, cookies and third-party services

6.1. The Operator processes personal data with or without the use of means of automation, using legal, organizational and technical measures aimed at protecting personal data from unlawful or accidental access, destruction, modification, blocking, copying, provision, distribution and other unlawful actions.

6.2. When you visit the Site, cookies - small pieces of data that are used to:

  • ensuring the operation of the Site and its individual functions;
  • to memorize user settings;
  • analyzing the traffic and improving the quality of the Site;
  • personalization of the displayed content within the framework of the Website activity.

6.3. The Site may use web analytics services and other external services (e.g., statistics and accessibility monitoring systems, font and map download services, etc.), which may also process anonymized user data (including cookies). The specific list of such services may vary, with the Operator endeavoring to attract services that comply with the requirements of the Russian legislation on personal data.

6.4. When visiting the Site for the first time, the user is displayed a notice on the use of cookies and a link to this Policy. By continuing to use the Site after the display of such notice, the user confirms his consent to the use of cookies and the processing of personal data to the extent and on the terms specified in this Policy.

6.5. The user may at any time restrict or refuse the use of cookies by changing the settings of his browser. However, in this case the correct operation of some sections and functions of the Site may be hampered.

7. Conditions for transferring personal data to third parties

7.1. The Operator may transfer personal data to third parties in the following cases:

  • if such transfer is provided for by the legislation of the Russian Federation (including at the request of authorized state bodies);
  • when the Operator and the User participate in joint projects, events and programs, when data transfer is necessary for their implementation, if there is a legal basis;
  • when engaging third parties (hosting providers, telecom operators, web analytics services and other persons) who process personal data on behalf of the Operator on the basis of concluded contracts;
  • when providing public data explicitly intended for publication (e.g. cards of experts and representatives, information on position, region, qualifications and other professional status).

7.2. The operator does not sell or transfer personal data to third parties for commercial use without the express consent of the personal data subject.

7.3. In case of cross-border transfer of personal data, the Operator ensures compliance with the requirements of the legislation of the Russian Federation and takes into account the requirements to the level of personal data protection in the respective foreign country.

8. Retention periods and destruction of personal data

8.1. The Operator stores personal data in a form that allows to identify the subject of personal data for no longer than required by the purposes of personal data processing, unless a longer storage period is established by the legislation of the Russian Federation.

8.2. The retention periods for personal data are defined:

  • term of validity of contracts and other agreements with the subject of personal data;
  • the document retention periods established by the legislation of the Russian Federation;
  • the period of validity of the personal data subject's consent (if such period is specified);
  • the time limit for keeping registers of experts, competent persons and other specialists as long as this is necessary for the purposes of the Operator's activities.

8.3. Upon achievement of the processing objectives or upon occurrence of conditions for termination of personal data processing, as well as upon revocation of the consent of the personal data subject, the Operator shall terminate processing of personal data and ensure their destruction or depersonalization within the terms and in accordance with the procedure stipulated by the Operator's internal documents and the legislation of the Russian Federation.

9. Rights of the subject of personal data

9.1. The subject of personal data has the right to:

  • receive information regarding the processing of his/her personal data in the manner and to the extent provided for by the legislation of the Russian Federation;
  • to demand clarification of his/her personal data, blocking or destruction if the data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing;
  • revoke his/her consent to the processing of personal data by submitting a corresponding application to the Operator;
  • to appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects or in court;
  • exercise other rights granted by the legislation of the Russian Federation on personal data.

9.2. In order to exercise their rights, the personal data subject may send a request to the Operator in writing to the address specified in Section 2 of this Policy, or in the form of an electronic document to the following e-mail address office@oern.ru. The Operator considers appeals and sends responses within the time limits established by the legislation of the Russian Federation and the Operator's internal regulations.

10. Measures to protect personal data

10.1. The Operator implements necessary and sufficient legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, dissemination and other unlawful actions in relation to personal data.

10.2. Such measures include the use of information protection tools, limitation of access to personal data, delimitation of access rights of employees, keeping records of data carriers, damage assessment and analysis of threats to personal data security, training of employees on personal data security and confidentiality issues.

11. Procedure for amending the Policy

11.1. This Policy may be changed unilaterally by the Operator without prior notice to users. In this case, the new version of the Policy is posted on the Website at the same address and contains a note on the date of update.

11.2. Continued use of the Site by the user after changes to the Policy means that the user agrees with such changes.

12. Final provisions

12.1. The legislation of the Russian Federation shall be applied to the relations between the Operator and the User regarding the processing of personal data.

12.2. All suggestions, questions, requests and complaints regarding this Policy and the processing of personal data should be sent to the contacts listed in Section 2 of this Policy.