2. Key concepts used in the Policy

1. Automated processing of personal data - processing of personal data using computer technology;
2. Blocking of personal data – temporary cessation of the processing of personal data (except in cases where processing is necessary to clarify personal data);
3. A website is a collection of graphical and informational materials, as well as computer programs and databases, that ensure their availability on the internet at a network address.;
4. Personal data information system: a set of personal data contained in databases, and the information technologies and technical means that ensure their processing.;
5. Anonymization of personal data - actions as a result of which it is impossible to determine, without the use of additional information, the ownership of personal data to a specific User or other data subject;
6. Processing of personal data is any action (operation) or set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), retrieval, use, transmission (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.;
7. Operator – a state body, municipal body, legal entity or individual, acting alone or jointly with other persons, that organizes and (or) carries out the processing of personal data, and also determines the purposes of personal data processing, the set of personal data to be processed, and the actions (operations) performed with personal data;
8. Personal data – any information relating directly or indirectly to an identified or identifiable User of the website;
9. User - any visitor to the website;
10. Disclosure of personal data - actions aimed at disclosing personal data to a specific person or a specific group of persons.;
11. Dissemination of personal data - any actions aimed at disclosing personal data to an indefinite circle of persons (transfer of personal data) or at familiarizing an unlimited circle of persons with personal data, including the disclosure of personal data in the media, placement in information and telecommunication networks, or providing access to personal data in any other way;
12. Cross-border transfer of personal data – the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual, or a foreign legal entity.;
13. Destruction of personal data means any actions as a result of which personal data are destroyed irreversibly, making it impossible to further restore the content of personal data in the personal data information system and (or) as a result of which the material carriers of personal data are destroyed.

3. The Operator may process the following User personal data

1. Last name, first name, patronymic;
2. Email address;
3. Phone numbers;
4. Year, month, date, and place of birth;
5. Photos;
6. Also, the site collects and processes anonymized data about visitors (including cookies«cookie») using internet statistics services (Yandex.Metrica, Google Analytics, and others).
7. The aforementioned data is collectively referred to as Personal Data throughout the Policy.

4. Purposes of Personal Data Processing

1. The purpose of processing User's personal data is to inform the User by sending emails; to conclude, perform and terminate civil law contracts; to provide the User with access to services, information and/or materials contained on the website.
2. The Operator also has the right to send the User notifications about new products and services, special offers, and various events. The User can always opt out of receiving informational messages by sending the Operator a letter to the following email address: info@niic-spektr.ru  with the note «Refusal to receive notifications about new products and services and special offers.».
3. Anonymized User data collected through internet statistics services are used to gather information about User actions on the website, and to improve the quality of the website and its content.

5. Legal basis for personal data processing

1. The Operator processes the User's personal data only if it is filled out and/or sent by the User independently through the special forms located on the website. By filling out the relevant forms and/or sending their personal data to the Operator, the User expresses their consent to this Policy.
2. The operator processes anonymized User data if permitted by the User's browser settings (saving of «cookie»and the use of JavaScript technology).

6. Procedure for the collection, storage, transfer, and other processing of personal data

The security of personal data processed by the Operator is ensured by implementing the legal, organizational, and technical measures necessary to fully comply with the requirements of current personal data protection legislation.

1. The Operator ensures the confidentiality of personal data and takes all possible measures to prevent unauthorized access to personal data.
2. User's personal data will never, under any circumstances, be transferred to third parties, except in cases related to the execution of current legislation.
3. In case of inaccuracies in personal data, the User can update them independently by sending a notification to the Operator's email address with the subject line «Personal Data Update».
4. The period of personal data processing is unlimited. The user can revoke their consent to the processing of personal data at any time by sending a notification to the Operator via email to the Operator's email address with the subject line «Revocation of consent to personal data processing».

7. Cross-border transfer of personal data

1. Prior to commencing cross-border personal data transfer, the operator must ensure that the foreign state to which personal data is intended to be transferred provides adequate protection of the rights of personal data subjects.
2. Cross-border transfer of personal data to foreign countries that do not meet the above requirements may only be carried out if there is written consent from the personal data subject for the cross-border transfer of their personal data and/or for the performance of a contract to which the personal data subject is a party.

8. Final Provisions

1. Users can receive any clarifications on issues of interest regarding the processing of their personal data by contacting the Operator via email.
2. Any changes to the Operator's personal data processing policy will be reflected in this document. The policy is valid indefinitely until replaced by a new version.
3. The current version of the Policy is freely available on the Internet at:  niic-spektr.ru/privacy-policy