1. General ProvisionsThe given Privacy Policy (hereinafter referred to as
the Policy) is drawn up in full accordance with the requirements of the Federal Law No. 152-FZ ‘On Personal Data’ (dated July 27, 2006) and determines the procedure for processing personal data and measures aimed at ensuring their security and taken by Tilda Publishing, LLC (hereinafter referred to as
the Operator).
1.1. The Operator sets, as its most important objective and main condition for performing its activities, the observance of the rights and freedoms of man and citizen when processing their personal data, including the protection of the rights to privacy, as well as personal and family secrets.
1.2. This Policy in terms of personal data processing applies to all information the Operator can get about visitors of the Website –
http://vanuatuinvesteconomics.com/en2. Basic terms and concepts used in the Policy2.1.
Automated personal data processing means processing of personal data with the help of computer equipment.
2.2.
Blocking of personal data is a temporary termination of personal data processing (except for cases when processing is necessary to clarify personal data).
2.3.
Website is a set of graphic and informational materials, as well as software and databases that ensure the availability of these materials on the Internet at the following network address –
http://vanuatuinvesteconomics.com/en.
2.4.
Informational system of personal data is a set of personal data contained in the databases, as well as information technologies and technical means that ensure personal data processing.
2.5.
Depersonalization of personal data implies actions that make it impossible to determine the owner of personal data (whether it’s a specific User or other subject of personal data processing) without the use of additional information.
2.6.
Personal data processing means any action (operation) or set of actions (operations) performed with personal data with the help of automation tools or without them, including data acquisition, recording, systematization, accumulation, storage, clarification (updates, changes, modifications), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, removal, destruction, etc.
2.7. The Operator is a state authority, municipal body, legal entity or individual that independently or jointly with other persons (entities) organize and/or process personal data, as well as determine the purposes of such processing, the composition of personal data to be processed, and actions (operations) performed with personal data.
2.8.
Personal data means any information directly or indirectly related to a specific or identified User of the Website –
http://vanuatuinvesteconomics.com/en.
2.9.
User is a Website visitor, the purpose of which is to check out the information on available vacancies posted on the Website (
http://vanuatuinvesteconomics.com/en) and/or respond to the vacancy (vacancies).
2.10.
Provision of personal data means actions aimed at disclosing personal data to a certain person or a certain number of persons.
2.11.
Dissemination of personal data implies any actions aimed at disclosing personal data to an indefinite number of persons (personal data transferring) or providing personal data to an unlimited number of persons. That includes publishing personal data in the media, posting personal data in information and telecommunication networks or providing access to personal data in any other way.
2.12.
Cross-border transfer of personal data implies transferring personal data to the territory of a foreign state – to a state authority, foreign individual or legal entity.
2.13.
Destruction of personal data means any actions aimed at permanent destruction of personal data with the impossibility of further restoration of their content in the personal data information system. If necessary, all the material media with personal data are also destroyed.
3. Principles of personal data processingThe processing of personal data is performed on the basis of the principles as follows:
3.1. Personal data processing is carried out on a legal and fair basis.
3.2. Personal data processing is limited to the achievement of specific, pre-defined and legitimate purposes. It’s not allowed to process personal data if such processing is incompatible with the purposes of personal data acquisition.
3.3. It’s not allowed to merge databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other.
3.4. Only personal data meeting the purposes of their processing are subject to processing.
3.5. The content and volume of personal data processed must correspond to the stated purposes of their processing. Excessiveness of the processed personal data in relation to the stated purposes of processing isn’t allowed.
3.6. When personal data are processed, their accuracy, sufficiency, and, if necessary, relevance in relation to the purposes of processing must be ensured. The Operator takes all the necessary measures and/or ensures that the measures are taken to delete or clarify incomplete or inaccurate personal data.
3.7. The storage of personal data is carried out in a form that makes it possible to identify the subject of personal data. Personal data is stored no longer than it’s required by the purposes of their processing, unless the storage period is established by Federal Law or a contract the party (beneficiary, guarantor) of which is the subject of personal data processing. The processed personal data is destroyed or depersonalized upon achievement of the processing purposes or in case if there is no need to achieve these purposes, unless otherwise provided by Federal Law.
4. Purposes and legal grounds for personal data processing4.1. The purposes of personal data processing are as follows:
- search for potential employees, individuals, performers of works/services (contractors);
- provision of information on available vacancies via the Website;
- provision of information by sending emails;
- conclusion, execution and termination of employment contracts;
- conclusion, execution and termination of civil contracts;
- provision of access to services, information and/or materials contained on the Website – http://vanuatuinvesteconomics.com/en.
4.2. Depersonalized data acquired with the help of online statistics services is used to get information about Users’ actions on the Website, improve the quality of the Website and its content.
4.3. The legal basis for the personal data processing is the contracts concluded by the Operator with the subjects of personal data processing. The Operator processes personal data only if it is filled out and/or sent by the subject of personal data processing independently via special forms on the Website (
http://vanuatuinvesteconomics.com/en), or sent to the Operator via email. By filling in the corresponding forms and/or sending their personal data to the Operator, the subjects of personal data processing express their consent to this Policy.
4.4. The Operator processes depersonalized data about the User if this is allowed in the User's browser settings (Cookies and JavaScript are enabled).
5. List of subjects whose personal data is processed by the OperatorThe Operator processes personal data of the following categories of subjects:
5.1. Candidates for a position/vacancy, the information on which is posted on the Website.
5.2. Other subjects of personal data processing (to ensure the achievement of the Policy’s purposes).
6. List of personal data processed by the OperatorThe Operator may process the following personal data of subjects:
6.1. Personal data provided by the Users themselves or by third parties on the behalf of the Users, and entered by the Users (or third parties) into the fields of a special form to send a response to a vacancy posted on the Website, including, but not limited to, the User’s last name, first name, and email address.
6.2. Personal data provided by the Users at their own discretion and sent to the Operator through a personal User’s resume.
6.3. The Website acquires and processes depersonalized data about Users (including Cookies) using online statistics services (such as Yandex Metrica, Google Analytics, etc.).
6.4. The Operator doesn’t process special categories of personal data related to race, nationality, political views, religious or philosophical beliefs, intimate life, etc.
7. Terms and conditions of personal data processingThe Operator processes personal data if there is at least one of the following conditions:
7.1 Personal data is processed if the subjects of personal data processing provide their consent to such processing.
7.2 Processing of personal data is necessary to achieve the purposes provided for by an international treaty of the Russian Federation or Federal Law, as well as to implement the functions, powers and responsibilities assigned by the legislation of the Russian Federation to the Operator.
7.3 Personal data processing is necessary for the administration of justice, execution of a judicial act, act of another authority or official, subject to execution in accordance with the current legislation of the Russian Federation on enforcement proceedings.
7.4 Personal data processing is necessary to execute contracts the party (beneficiary, guarantor) of which is the subject of personal data processing, as well as to conclude contracts on the initiative of the subject of personal data processing or contracts under which the subject will be a beneficiary or guarantor.
7.5 Personal data processing is necessary to exercise the rights and legitimate interests of the Operator or third parties or to achieve socially significant goals, provided that the rights and freedoms of the subject of personal data processing aren’t violated.
7.6 Personal data, access to which is provided by the subject of personal data processing (or at their request) to an unlimited number of persons, are processed (hereinafter such data are referred to as publicly available personal data).
7.7 Personal data subject to publication or mandatory disclosure in accordance with Federal Law are processed.
8. The procedure for personal data acquisition, their storage, transfer and other types of personal data processingThe security of personal data processed by the Operator is ensured by implementing legal, organizational and technical measures necessary to fully comply with the requirements of the current legislation in the field of personal data protection.
8.1. The Operator ensures the security of personal data and takes all possible measures to prevent unauthorized persons from access to personal data.
8.2. Personal data must never, under any circumstances, be transferred to third parties, except in cases related to the execution of the requirements of the current legislation or if the subject of personal data processing instructs the Operator to transfer data to a third party to fulfill their obligations under a civil contract.
8.3. In case of detecting inaccuracies in personal data, the subject of personal data processing can independently update necessary information and send a notification to the Operator’s email address with a mark – ‘Updating personal data.’
8.4. The period for processing personal data is determined by the duration of the circumstances that served as the basis for the acquisition of personal data, including the duration of the civil contract. The subjects of personal data processing may at any time withdraw their consent to such processing by sending a notification to the Operator via email (to the Operator's email address) with a mark – ‘Withdrawal of consent to personal data processing.’
8.5. All information collected by third-party services, including payment systems, means of communication and other service providers, is stored and processed by these entities (Operators) in accordance with their User Agreements and Privacy Policies. The subjects of personal data processing and/or the Users are obliged to read the specified documents in a timely manner. The Operator isn’t responsible for the actions of third parties, including the service providers specified in this paragraph.
9. List of actions performed by the Operator with acquired personal data9.1. The operator carries out acquisition, recording, systematization, accumulation, storage, clarification (updates, changes), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, removal and destruction of personal data.
9.2. The Operator performs automated processing of personal data with or without receiving and/or transferring the received information via information and telecommunication networks.
10. Cross-border transfer of personal data10.1. Before the start of cross-border transfer of personal data, the Operator must ensure that the foreign state to the territory of which the personal data are supposed to be transferred, provides reliable protection of the rights of the subjects of personal data processing.
10.2. Cross-border transfer of personal data to the territory of foreign states that don’t meet the above-mentioned requirements can only be carried out if there is a written consent of the subject of personal data processing to such a transfer and/or in case of execution of a contract, the party of which is the subject of personal data processing.
11. Personal data confidentialityThe Operator and other persons/entities who have access to personal data are obliged not to disclose to third parties or distribute personal data without the consent of the subject of personal data processing, unless otherwise provided by Federal Law.
12. Rights of the subject of personal data processingThe subjects of personal data processing have the right to:
12.1. Receive full information on their personal data processed by the Operator.
12.2. Clarify their personal data, block or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained or isn’t necessary for the stated purpose of processing.
12.3. Withdraw their consent to personal data processing.
12.4. Take measures provided by law for ensuring the protection of their rights.
12.5. Exercise other rights provided for by the current legislation of the Russian Federation.
13. Functions of the Operator when processing personal dataWhen processing personal data, the Operator does the following:
13.1. Takes all measures necessary and sufficient to ensure compliance with the requirements of the current legislation of the Russian Federation in the field of personal data.
13.2. Takes legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification (changing), blocking, copying, provision, distribution, as well as from other unlawful actions.
13.3. Publishes or otherwise provides unrestricted access to this Policy.
13.4. Stops processing and destroys personal data in cases provided for by the current legislation of the Russian Federation in the field of personal data.
13.5. Performs other actions provided for by the current legislation of the Russian Federation in the field of personal data.
14. Final provisions14.1. The subjects of personal data processing can get any explanations on issues related to processing their personal data by contacting the Operator via email.
14.2. Any changes to the Privacy Policy will be given in this document. The Policy is valid indefinitely until it’s replaced by a new version.
14.3. The current version of the Privacy Policy is available on the Internet –
http://vanuatuinvesteconomics.com/en/privacy.