PERSONAL DATA PROCESSING POLICY
- GENERAL PROVISIONS
- JUSTAS-Logistic LLC pays special attention to the protection of personal data during their processing and respects the observance of the rights of personal data subjects.
The approval of this policy regarding the processing of personal data (hereinafter referred to as the Policy) is one of the measures to ensure the protection of personal data taken by JUSTAS-Logistic LLC (hereinafter referred to as the Operator), provided for in Article 17 of the Law of the Republic of Belarus dated May 7, 2021 No. 99 Z “On the Protection of Personal Data” (hereinafter referred to as the Law).
The policy explains to the subjects of personal data how and for what purposes their personal data is collected, used or otherwise processed, and also reflects the rights of the subjects of personal data in this regard and the mechanism for implementing them.
The policy applies to the processing of personal data of users of the website http://justus-logistic.by/, clients, contractors, job candidates.
2.Location of the Operator: 230026, Grodno, pr-t Ya.Kupaly, 87, office 612;
Internet address: http://justus-logistic.by
e-mail: logistics@justus.by.
- The purpose of this Policy is to ensure proper protection of personal data from unauthorized access and disclosure, respect for the rights and freedoms of a citizen when processing his personal data, including ensuring the protection of the rights to privacy, personal and family secrets.
- By transferring personal data to the Operator, including through the Operator’s Official Website, the subject of personal data confirms his consent to the processing of the relevant information on the terms set out in this Policy.
- PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
5.. OOO “JUSTAS-Logistic” when processing personal data, performs the following actions: collection, use, systematization, storage, depersonalization, modification, blocking, distribution, provision, deletion. Processing of personal data is carried out with and without automation tools.
- The Operator processes personal data in the following cases:
| Purpose
|
Categories of subjects whose personal data is processed
|
Processed data
|
Reason for processing
|
Storage period
|
| Identification of the user who sent a message through the form on the official website, processing requests and interaction with users of the Operator’s Official Website. | Users website
|
Name, phone number, email address
|
Consent
|
1 month
|
| Sending notifications, commercial offers, informational, news and advertising mailings related to the Operator’s services to the subject of personal data | Mailing recipients
|
Last name, first name, company name, phone number, email
|
Consent
|
1 year |
| Conclusion, execution, modification, termination with clients | Person authorized to sign the agreement
|
Last name, first name, patronymic, position, other data provided upon conclusion of the agreement
|
Without consent – paragraph 15, 20 of Art. 6 3aLaw on the Protection of Personal Data
|
3 years after the expiration of the contract, if the tax authorities conduct an audit of compliance with the law, if the tax authorities did not conduct an audit of compliance with the law – 10 years after the expiration of the contract |
| Processing information (resume) of a job candidate | Job candidates | Last name, first name, patronymic, date of birth, education details, occupation, other information that the candidate indicates in the resume | Processing personal data when they are indicated in a document addressed to the operator and signed by the subject of personal data, in accordance with the content of such document
(paragraph 16 of Art. 6 of the Law on the Protection of Personal Data) |
Within 3 months after submitting the resume. |
- The Operator may provide the received personal data to third parties:
an authorized person on the basis of a concluded agreement. At the time of approval of this policy, the Operator transfers personal data to theauthorized person – Liberty Finance LLC.
analytics service providers – Yandex.Metrica, GoogleAnalytics
third parties due to legal requirements (requests from investigative, law enforcement agencies, etc.).
- MAIN RIGHTS AND RESPONSIBILITIES OF THE PERSONAL DATA SUBJECT
- The personal data subject has the right to:
- revoke his consent to the processing of personal data if the processing of personal data is carried out on the basis of consent. The right to revoke consent cannot be exercised if the processing is carried out on other legal grounds (for example, in accordance with legal requirements);
- receive information regarding the processing of his personal data by the Operator. The information must contain:
– name and location of the Operator;
– confirmation of the fact of personal data processing by the Operator;
– personal data and the source of their receipt;
– legal grounds and purposes of processing personal data;
– the period for which consent is given;
– the name and location of the authorized person to whom the Operator transfers personal data;
- require changes to personal data if they are incomplete, outdated or inaccurate;
- require termination of the processing of their personal data, including their deletion, if there are no grounds for processing personal data;
- appeal the actions (inactions) and decisions of the Operator that violate their rights when processing personal data.
- obtain any clarifications on issues of interest regarding the processing of their personal data by contacting the Operator:
- To exercise their rights, the subject of personal data sends a corresponding application: in writing or in the form of an electronic document (and in the case of exercising the right to revoke consent – also in the form in which such consent was received), respectively, to the postal address or Internet address specified in paragraph 1 of this Policy.
Such an application must contain:
last name, first name, patronymic (if any) subject of personal data, address of his/her place of residence (place of stay);
date of birth of the subject of personal data;
statement of the essence of the requirements of the subject of personal data;
identification number of the subject of personal data, in the absence of such number – the number of the document certifying the identity of the subject of personal data, in cases where this information was indicated by the subject of personal data when giving his/her consent or the processing of personal data is carried out without the consent of the subject of personal data;
personal signature (for an application in written form) or electronic digital signature (for an application in the form of an electronic document) of the subject of personal data.
- For assistance in exercising their rights, as well as on all issues related to this Policy, the personal data subject may contact the Operator by sending a corresponding message to the Operator’s email address.
- MAIN RIGHTS AND RESPONSIBILITIES OF THE OPERATOR
11. The Operator has the right to:
receive reliable information and (or) documents containing personal data from the personal data subject;
request information from the personal data subject about the relevance and reliability of the personal data provided;
in the event of the personal data subject’s withdrawal of consent to the processing of personal data, continue processing personal data without the consent of the personal data subject if there are grounds specified in the Law;
if necessary to achieve the purposes of processing personal data, transfer them to third parties in compliance with the requirements of the law;
independently determine the composition and list of measures necessary and sufficient to ensure the fulfillment of the obligations stipulated by the Law and regulatory legal acts adopted in accordance with it, unless otherwise provided by the Law.
- The operator is obliged to:
explain to the subject of personal data his rights related to the processing of personal data;
obtain consent of the subject of personal data to the processing of personal data, except for cases stipulated by the Law and other legislative acts;
ensure the protection of personal data in the process of their processing; provide the subject of personal data with information about his personal data, as well as about the provision of his personal data to third parties, except for cases stipulated by the Law and other legislative acts;
make changes to personal data that are incomplete, outdated or inaccurate, except for cases when another procedure for making changes to personal data is established by legislative acts or if the purposes of processing personal data do not imply subsequent changes to such data;
stop processing of personal