Privacy Policy

1. General Provisions

1.1. This Privacy Policy defines the procedure for processing and protecting personal data provided by users when using the website rpp.ru.
1.2. RAIL PROJECT PROFESSIONALS Limited Liability Company (hereinafter – the Operator) undertakes to ensure the confidentiality and security of users’ personal data in accordance with the legislation of the Russian Federation.
1.3. This Privacy Policy is developed in accordance with the Federal Law of July 27, 2006 No. 152-FZ “On Personal Data”.
2. Purposes of Personal Data Processing
2.1. The Operator processes users’ personal data for the following purposes:
* 2.1.1. Preparation, conclusion, and execution of a civil law contract.
* 2.1.2. Providing answers to user inquiries and consulting.
* 2.1.3. Data analysis to improve the website’s performance and the quality of services provided.
2.2. The purposes of personal data processing are consistent with the Operator’s activities and the information provided in the Notification to Roskomnadzor.
3. Personal Data Processed
3.1. The Operator processes the following categories of personal data provided by users through website forms:
* 3.1.1. Last name, first name
* 3.1.2. Email address
* 3.1.3. Phone number
* 3.1.4. Content of the inquiry/request
4. Legal Basis for Personal Data Processing
4.1. The Operator processes personal data on the following legal grounds:
* 4.1.1. User’s consent to the processing of their personal data, provided when submitting a form on the website (clause 1, part 1, Article 6 of Federal Law No. 152-FZ).
* 4.1.2. Processing is necessary for the performance of a contract to which the data subject is a party or beneficiary or guarantor, and also for the conclusion of a contract at the data subject’s initiative or a contract under which the data subject will be the beneficiary or guarantor. The contract concluded with the data subject cannot contain provisions that restrict the rights and freedoms of the data subject (clause 5, part 1, Article 6 of Federal Law No. 152-FZ) – if related to the preparation for entering into a contract.
* 4.1.3. The Operator’s legitimate interest in analyzing data to improve the website’s performance (clause 7, part 1, Article 6 of Federal Law No. 152-FZ).
5. Procedure and Conditions for Personal Data Processing
5.1. Personal data processing is carried out using automation tools and without the use of automation tools.
5.2. The Operator ensures the security of personal data during its processing.
5.3. Transfer of personal data to third parties:
* 5.3.1. Personal data received through website forms may be transferred to sales department employees.
5.4. Personal data is not transferred transnationally.
5.5. Personal data retention periods:
* 5.5.1. Data received through forms is stored until the purposes of processing are achieved or until the user withdraws consent.
* 5.5.2. Website usage data is stored for [Specify the period, if there is a specific period, otherwise – “during the website’s operation”].
6. Rights of Data Subjects
6.1. The user has the right to:
* 6.1.1. Receive information about the processing of their personal data.
* 6.1.2. Access their personal data.
* 6.1.3. Demand clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, illegally obtained, or not necessary for the stated purpose of processing.
* 6.1.4. Withdraw consent to the processing of personal data.
6.2. To exercise their rights, the user should send a request to the email address: box@rpp.ru
6.3. The Operator undertakes to consider the user’s request and provide a response within  30 days from the date of its receipt.
7. Measures to Ensure Personal Data Security
7.1. The Operator takes the necessary organizational and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions of third parties.
7.2. Measures to ensure the security of personal data comply with the requirements of Article 19 of the Federal Law “On Personal Data” and include:
* 7.2.1. Appointment of a person responsible for the organization of personal data processing by order dated July 09, 2020.
* 7.2.2. Development and approval of the Personal Data Processing Policy and other local regulations defining personal data processing procedures.
* 7.2.3. Use of licensed antivirus software on all workstations and servers.
* 7.2.4. Ensuring the physical security of premises and technical means of personal data processing (restriction of access for unauthorized persons, placement of servers in secure rooms).
* 7.2.5. Data transfer through the website is carried out using the HTTPS protocol.
8. Final Provisions
8.1. This Privacy Policy may be amended by the Operator unilaterally.
8.2. The new version of the Privacy Policy comes into force from the moment it is posted on the website.
8.3. The current version of the Privacy Policy is always available on the page at: rpp.ru/politika-konfidencialnosti
9. Contact Information
9.1. Operator: RAIL PROJECT PROFESSIONALS Limited Liability Company
9.2. Address: 620036, Sverdlovsk Region, Yekaterinburg City, Karasyevskaya  50 – 28
9.3. Phone: +7 343 227 0851
9.4. Email: box@rpp.ru