Privacy Policy

1. General Provisions

1.1. This Personal Data Processing Policy defines the procedure for processing personal data carried out by an individual, Aksarov Mark Alexandrovich, INN 026206196375 (hereinafter referred to as the “Controller”), registered as a payer of the professional income tax (self-employed).

1.2. This Policy has been developed in accordance with Federal Law No. 152-FZ dated 27.07.2006 “On Personal Data” and defines the procedure for personal data processing, as well as measures to ensure their security.

1.3. This Policy applies to personal data that the Controller may receive via the information and telecommunication network “Internet” when using the website https://www.taskry.ru (hereinafter referred to as the “Website”), as well as other subdomains of the taskry.ru domain zone, and applies to the processing of personal data carried out using automation tools and without their use.

1.4. This Policy is publicly available on the Website in the information and telecommunication network “Internet” and is permanently accessible at https://www.taskry.ru/privacy-policy.

2. Terms and Definitions

2.1. Personal Data — any information relating directly or indirectly to an identified or identifiable individual (data subject).

2.2. Controller — a state authority, municipal body, legal entity, or individual who, independently or jointly with others, organizes and/or carries out the processing of personal data, as well as determines the purposes of personal data processing, the scope of personal data, and the actions (operations) performed with personal data.

2.3. Processing of Personal Data — any action (operation) or set of actions (operations) performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), blocking, deletion, and destruction of personal data.

2.4. Automated Processing of Personal Data — processing of personal data using computing equipment.

2.5. Dissemination of Personal Data — actions aimed at disclosing personal data to an indefinite group of persons.

2.6. Provision of Personal Data — actions aimed at disclosing personal data to a specific person or a specific group of persons.

2.7. Blocking of Personal Data — temporary suspension of personal data processing (except where processing is necessary to clarify personal data).

2.8. Destruction of Personal Data — actions resulting in the irreversible deletion of personal data content in an information system and/or destruction of physical media containing personal data.

2.9. Anonymization of Personal Data — actions resulting in the impossibility of identifying the data subject without the use of additional information.

3. Principles of Personal Data Processing

3.1. Personal data processing is carried out on a lawful and fair basis.

3.2. Personal data processing is limited to the achievement of specific, predetermined, and legitimate purposes. Processing of personal data that is incompatible with the purposes of collection is not permitted.

3.3. It is not permitted to combine databases containing personal data if the processing purposes are incompatible with each other.

3.4. Only personal data that is relevant to the purposes of processing shall be processed.

3.5. The content and scope of processed personal data correspond to the stated purposes of processing. The processed personal data shall not be excessive in relation to the stated purposes.

3.6. When processing personal data, the accuracy, sufficiency, and, where necessary, relevance of personal data in relation to the purposes of processing are ensured. The Controller takes necessary measures or ensures their adoption to delete or clarify incomplete or inaccurate data.

3.7. Personal data shall be stored in a form that allows identification of the data subject for no longer than required by the purposes of processing, unless a different storage period is established by federal law or contract. Upon achievement of the processing purposes, personal data shall be destroyed or anonymized unless otherwise required by federal law.

4. Purposes of Personal Data Processing

4.1. Purpose of personal data processing: user registration and identification on the Website, providing access to the personal account and service functionality, maintaining and editing the user profile.

• Categories of personal data subjects: website visitors.
• List of processed personal data: surname, first name, phone number, email address, residential address, date of birth, public profile link, facial photograph, job position.
• Method of personal data processing: automated processing of personal data.
• Retention period of personal data: until deletion of the user account, withdrawal of consent to personal data processing, or achievement of the purposes of processing, unless a different period is required by the legislation of the Russian Federation.
• Procedure for personal data destruction: personal data is destroyed by deleting it from the Controller’s information systems and backups in accordance with the procedure and time limits established by the legislation of the Russian Federation.

4.2. Purpose of personal data processing: providing the user with the ability to create, store, modify, and use information about clients within the service functionality.

• Categories of personal data subjects: clients.
• List of processed personal data: surname, first name, phone number, email address, public profile link, facial photograph.
• Method of personal data processing: automated processing of personal data.
• Retention period of personal data: until deletion of the relevant data by the user, termination of service use, or achievement of the purposes of processing, unless otherwise provided by the legislation of the Russian Federation.
• Procedure for personal data destruction: personal data is destroyed by deleting it from the Controller’s information systems and backups in accordance with the procedure and time limits established by the legislation of the Russian Federation.

4.3. Purpose of personal data processing: ensuring the operation and security of the Website, maintaining user settings, improving usability, and analyzing Website performance.

• Categories of personal data subjects: website visitors.
• List of processed personal data: cookies.
• Method of personal data processing: automated processing of personal data.
• Retention period of personal data: for the period necessary to achieve the purposes of processing, or in accordance with cookie retention periods set by the user’s browser or Website settings.
• Procedure for personal data destruction: personal data is destroyed by deleting cookies upon expiration of their storage period or by the user independently through browser settings.

5. Conditions for Personal Data Processing

5.1. Personal data processing is carried out with the consent of the data subject, provided by filling out forms on the Website and/or performing actions that clearly express the data subject’s consent.

5.2. Personal data processing is carried out exclusively for the purposes of using the Website’s functionality, including registration, authentication, and providing access to the Controller’s services.

5.3. The Controller processes personal data in accordance with the legislation of the Russian Federation and only to the extent necessary to achieve the stated purposes of processing.

5.4. Consent to personal data processing may be withdrawn by the data subject by sending a notice to the Controller. Upon receipt of such notice, the Controller shall cease processing personal data, unless otherwise provided by the legislation of the Russian Federation.

5.5. The Controller does not transfer personal data to third parties, except in cases provided for by the legislation of the Russian Federation, as well as in cases of engaging persons ensuring the operation of the Website and its infrastructure (including hosting, data storage, and other technical services) on the basis of data processing agreements.

6. Storage and Processing of Personal Data

6.1. The Controller processes personal data for the purposes specified in this Policy and to the extent necessary to achieve those purposes.

6.2. Personal data is stored by the Controller for no longer than required to achieve the purposes of processing, unless a different retention period is established by the legislation of the Russian Federation.

6.3. The Controller ensures the confidentiality of personal data and takes necessary measures to prevent unauthorized access to such data.

6.4. Personal data shall be deleted or destroyed upon achievement of the purposes of processing, withdrawal of consent by the data subject, or detection of unlawful processing, unless otherwise required by the legislation of the Russian Federation.

6.5. The data subject has the right to request the update, deletion, or termination of processing of their personal data in accordance with the procedure established by this Policy and the legislation of the Russian Federation.

7. Rights of Data Subjects

7.1. The right to receive information relating to the processing of their personal data in accordance with the legislation of the Russian Federation;

7.2. The right to require the Controller to update, block, or delete their personal data if such data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated purpose of processing;

7.3. The right to withdraw consent to the processing of personal data, as well as to request the cessation of personal data processing in cases provided for by the legislation of the Russian Federation;

7.4. The right to take measures provided for by the legislation of the Russian Federation to protect their rights;

7.5. The right to exercise any other rights provided for by the legislation of the Russian Federation.

8. Obligations of the Controller

8.1. To provide the data subject, upon request, with information relating to the processing of their personal data, in the manner and cases provided for by the legislation of the Russian Federation.

8.2. To organize personal data processing in accordance with the requirements of the legislation of the Russian Federation.

8.3. To take necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions in relation to personal data.

8.4. To respond to requests and inquiries from data subjects and their legal representatives in accordance with the requirements of the legislation of the Russian Federation.

8.5. To update, block, or delete personal data in cases and in the manner provided for by the legislation of the Russian Federation.

8.6. To cease processing personal data and destroy personal data in cases provided for by the legislation of the Russian Federation, including upon request of the data subject or withdrawal of consent to personal data processing.

8.7. To publish or otherwise ensure unrestricted access to this Policy.

8.8. To provide the authorized data protection authority with the necessary information upon request, in accordance with the procedure and deadlines established by the legislation of the Russian Federation.

8.9. When collecting personal data, including via the Internet, to ensure recording, systematization, accumulation, storage, updating, modification, and retrieval of personal data of Russian citizens using databases located in the territory of the Russian Federation, except in cases provided for by the legislation of the Russian Federation.

8.10. To fulfill other obligations provided for by the legislation of the Russian Federation in the field of personal data protection.

9. Measures to Ensure the Security of Personal Data During Processing

9.1. The Controller takes necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions in relation to personal data.

9.2. The Controller ensures restricted access to personal data and takes measures to prevent unauthorized access.

9.3. The Controller takes measures to ensure the security of personal data and storage media containing personal data.

9.4. The Controller applies necessary technical information security tools, including antivirus software.

9.5. The Controller exercises control over the measures taken to ensure the security of personal data.

10. Final Provisions

10.1. The data subject may obtain clarifications regarding the processing of their personal data by contacting the Controller via email: aksarov91@gmail.com.

10.2. The Controller has the right to make changes to this Policy at its discretion, including in case of changes in the legislation of the Russian Federation or the operating conditions of the Website.

10.3. The new version of the Policy comes into force from the moment it is published on the Website, unless otherwise provided by the new version of the Policy.

10.4. The user undertakes to independently review the current version of the Policy each time they use the Website.

10.5. In case of disagreement with the terms of the Policy, the data subject must stop using the Website.