The Operator ensures the confidentiality and security of personal data, adopting the necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, as well as from other unlawful actions. These measures include:
- appointment of a person responsible for the organization of personal data processing
- adoption of local regulations in the field of personal data processing
- use of information security tools, including secure remote access
- use of authentication mechanisms to restrict access to data
- intrusion and cyberattack detection, protection against malicious software
Processing and storage of data is carried out on the territory of the Russian Federation.
In the event of loss or disclosure of personal data, the Operator notifies the user and also:
- notifies Roskomnadzor (the Russian data protection authority) of the breach within 24 hours
- conducts an internal investigation within 72 hours and submits the results to Roskomnadzor
The Operator cannot verify the legal capacity of the personal data subject or the accuracy of the information provided by them.