TRACFEST’s most important goal and condition for carrying out its activities is to respect human and civil rights and freedoms when processing personal data, including protecting the rights to privacy and personal and family secrets.
This TRACFEST policy regarding the processing of personal data (hereinafter referred to as the Policy) applies to all information that TRACFEST may obtain about visitors to the website.
Basic rights and obligations of TRACFEST
TRACFEST has the right to:
- receive from the subject of personal data reliable information and/or documents containing personal data;
- in the event that the subject of personal data withdraws their consent to the processing of personal data, as well as sends a request to stop processing personal data, TRACFEST has the right to continue processing personal data without the consent of the subject of personal data if there are grounds specified in the Personal Data Law;
- independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of obligations provided for by the Personal Data Law and regulatory legal acts adopted in accordance with it, unless otherwise provided by the Personal Data Law or other federal laws.
TRACFEST is obliged to:
- provide the data subject, at their request, with information concerning the processing of their personal data;
- respond to requests and inquiries from data subjects and their legal representatives in accordance with the requirements of the Personal Data Act;
- provide the authorized body for the protection of the rights of personal data subjects with the necessary information at the request of that body within 10 days from the date of receipt of such a request;
- publish or otherwise provide unrestricted access to this Policy regarding the processing of personal data;
- take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as from other unlawful actions in relation to personal data;
- perform other duties provided for by the Personal Data Law.
Basic rights and obligations of personal data subjects
Personal data subjects have the right to:
- receive information regarding the processing of their personal data, except in cases provided for by federal laws;
- require the operator to clarify, block, or destroy their personal data if it is incomplete, outdated, inaccurate, illegally obtained, or unnecessary for the stated purpose of processing, as well as take measures provided for by law to protect their rights;
- to set a condition of prior consent for the processing of personal data for the purpose of promoting goods, works, and services on the market;
- to withdraw consent to the processing of personal data, as well as to send a request to stop processing personal data;
- appeal to the authorized body for the protection of the rights of personal data subjects or in court against unlawful actions or inaction of TRACFEST in the processing of their personal data.
Personal data subjects are obliged to:
- provide TRACFEST with accurate data about themselves;
- inform TRACFEST about any clarification (update, change) of their personal data.
Principles of personal data processing
- Personal data is processed on a lawful and fair basis.
- The processing of personal data is limited to the achievement of specific, predetermined, and lawful purposes. The processing of personal data that is incompatible with the purposes of collecting personal data is not permitted.
- It is not permitted to combine databases containing personal data that are processed for purposes that are incompatible with each other.
- The content and scope of the personal data processed shall correspond to the stated purposes of processing. The personal data processed shall not be excessive in relation to the stated purposes of processing.
- When processing personal data, the accuracy, adequacy, and, where necessary, relevance of the personal data in relation to the purposes of processing are ensured. TRACFEST takes the necessary measures and/or ensures that measures are taken to delete or correct incomplete or inaccurate data.
Procedure for the collection, storage, transfer, and other types of processing of personal data
The security of personal data processed by TRACFEST is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with the requirements of current legislation in the field of personal data protection.
TRACFEST ensures the safety of personal data and takes all possible measures to prevent access to personal data by unauthorized persons.
The User’s personal data will never, under any circumstances, be transferred to third parties, except in cases related to the enforcement of applicable law or if the subject of the personal data has given TRACFEST consent to transfer the data to a third party in order to fulfill obligations under a civil law contract.
The period for processing personal data is determined by the achievement of the purposes for which the personal data was collected, unless another period is provided for by contract or applicable law.
TRACFEST ensures the confidentiality of personal data when processing it.
TRACFEST stores personal data in a form that allows the identification of the data subject for no longer than is necessary for the purposes of processing personal data, unless the period of storage of personal data is established by federal law or by a contract to which the data subject is a party, beneficiary, or guarantor.
The conditions for the termination of personal data processing may be the achievement of the purposes of personal data processing, the expiration of the consent of the personal data subject, the withdrawal of consent by the personal data subject or a request to terminate personal data processing, as well as the discovery of unlawful personal data processing.