This document defines the policy of LLC Festivali Nikola-Lenivtsa (hereinafter – the Company) with respect to the processing of personal data.

This Policy has been developed in accordance with the current legislation of the Russian Federation on personal data.

This Policy applies to all processes for collection, recording, systematization, accumulation, storage, clarification, extraction, use, transmission (distribution, provision, access), depersonalization, blocking, removal, destruction of personal data use of such funds.

Principles of processing personal data

Processing of personal data is based on the following principles:

processing of personal data is carried out on a legal and fair basis;
the processing of personal data is limited to the achievement of specific, predefined and legitimate purposes;
It is not allowed to process personal data incompatible with the purpose of collecting personal data;
It is not allowed to combine databases containing personal data, processing of which is carried out for purposes incompatible with each other;
Only those personal data that correspond to the purposes of their processing are subject to processing;
the content and volume of the processed personal data correspond to the stated processing objectives. The processed personal data are not excessive in relation to the stated processing purposes;
the processing of personal data ensures the accuracy of personal data, their sufficiency, and, if necessary, relevance to the stated purposes of their processing;
the destruction or depersonalization of personal data upon the achievement of the objectives of their processing or in the event of a loss of the need to achieve these goals, if it is impossible to eliminate. The Company admits violations of personal data, unless otherwise provided by federal law.
Terms of personal data processing

Processing of personal data is carried out in compliance with the principles and rules established by the Federal Law “On Personal Data”. Processing of personal data is allowed in the following cases:

processing of personal data is carried out with the consent of the subject of personal data to the processing of his personal data;
the processing of personal data is necessary to achieve the objectives stipulated by the international treaty of the Russian Federation or the law for the implementation and performance of functions, powers and duties imposed by the legislation of the Russian Federation on the operator;
the processing of personal data is necessary for the administration of justice, the enforcement of a judicial act, an act of another body or official subject to enforcement in accordance with the law of the Russian Federation on enforcement proceedings;
the processing of personal data is necessary for the performance of a contract to which the party is either the beneficiary or the guarantor for which the personal data subject is, as well as for the conclusion of the contract on the initiative of the personal data subject or the contract where the personal data subject will be the beneficiary or guarantor;
the processing of personal data is necessary to protect the life, health or other vital interests of the subject of personal data if obtaining the consent of the personal data subject is impossible;
processing of personal data is necessary to implement the rights and legitimate interests of the operator or third parties, or to achieve socially significant goals, provided that the rights and freedoms of the subject of personal data are not thereby violated;
the processing of personal data is carried out for statistical or other research purposes, subject to mandatory personalization of personal data. The exception is the processing of personal data in order to promote goods, works, services on the market by making direct contacts with the potential consumer by means of communications, as well as for political agitation;
processing of personal data, access of an unlimited circle of persons to which is provided by the subject of personal data, or at his request (hereinafter – personal data made by a public entity of personal data);
processing of personal data subject to publication or mandatory disclosure in accordance with federal law.
The Company may include the personal data of the subjects in the publicly available sources of personal data, while the Company takes the written consent of the subject to the processing of his personal data.

The Company can process special categories of personal data related to race, nationality, health status, and the Company undertakes to take written consent of the subject to the processing of his personal data.

Biometric personal data (information that characterizes the physiological and biological characteristics of a person, on the basis of which it is possible to establish his identity and which are used by the operator