Rules on personal data processing and privacy policy of DaNa-Logistic LLC

1. General provisions.

1.1. The personal data processing Policy (hereinafter referred to as the Policy) aims to protect the rights and freedoms of individuals whose personal data is processed by DaNa-Logistic LLC (hereinafter referred to as the Company), location: 194094, Saint Petersburg, Zelenkov lane, 7a, lit. 3, room 5-n, office 55.
1.2. The policy is developed in accordance with the requirements of the Constitution of the Russian Federation, Federal law of 27.07.2006, № 152-FZ "On personal data" (hereinafter referred to as FZ "On personal data").
1.3. The Policy contains information to be disclosed in accordance with part 7 of article 14, part of FZ "On personal data" and is a publicly available.

2. Information about the processing of personal data.

2.1. The company processes personal data of subjects of personal data (hereinafter "Clients") on a legal and fair basis to carry out the functions, powers and duties assigned by law, to exercise the rights and justified interests of the Company, employees and third parties.
2.2. The company collects personal data directly from Clients. By submitting personal data to the Company the Client confirms his consent to processing of it in any way for the purposes in accordance with the procedure and scope established by current legislation of the Russian Federation.
2.3. Actions for processing personal data include collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion and destruction.

3. Processing of Clients ' personal data.

3.1. The Company processes personal data of Clients in order to comply with the legislation of the Russian Federation as well as for the purpose of:

• communication with the Client including sending notifications, requests and information related to the provision of services;
• processing Requests and applications from the Client;
• sending commercial offers to the Client, informing the client about services and special offers via electronic mailings;
• to carry out activities to promote the Company's services;
• to evaluate and analyze the work of website.

3.2. In the course of using the Site Services the Client decides independently and voluntarily to provide the Company with personal data (last name, first name, patronymic, email address, mobile phone number) and other information about the Client.
3.3. The Client hereby declares his consent (including revocation of consent to the processing of personal data) to the automated and without the use of automation the processing of Company and its affiliates of personal and other data of the Client by taking actions under paragraph 3 of article 3 of the Federal law of 27.07.2006 № 152-FZ "On personal data" to be processed by the Company and/or third parties acting on behalf of the Company. The company takes all necessary measures to protect the Client's personal data from unauthorized access by third parties.
3.4. The Company processes personal data of Clients with their consent provided by Clients and/or their legal representatives by performing certain actions on this website including but not limited to making an application, subscribing to newsletters in accordance with this Policy.
3.5. The company processes the following personal data of Clients:

• surname;
• name;
• patronymic;
• company;
• mobile phone;
• Email

4. Information about personal data security.

4.1. The Company appoints a person responsible for organizing the processing of personal data to perform the duties stipulated by FZ "On personal data" and legal and regulatory instruments adopted in accordance with it.
4.2. The Company applies a set of legal, organizational and technical measures to ensure the security of personal data to ensure the confidentiality of personal data and protect them from illegal actions:

• provides unlimited access to the Policy, a copy of which is available at the Company's location and can also be posted on the Company's website;
• familiarizes employees with the provisions of the personal data legislation as well as with the Policy and Regulations;
• allows employees to access personal data processed in the Company's information system as well as physical media only for the performance of their work duties;
• identifies security threats to personal data when processing them in the Company's information system;
• applies organizational and technical measures and uses information security tools necessary to achieve the established level of personal data security;
• detects unauthorized access to personal data and takes measures to respond including restoring personal data that has been modified or destroyed as a result of unauthorized access;
• assesses the effectiveness of measures taken to ensure the security of personal data before commissioning the Company's information system;
• performs internal control over the compliance of personal data processing with FZ "On personal data", regulatory legal acts adopted in accordance with it, requirements for personal data protection, Policy and other local acts including control over the measures taken to ensure the security of personal data and their level of security when processing in the Company's information system.

5. Client's Rights

5.1. The Client has the right:

• to receive personal data related to this Client and information related to their processing;
• to clarify, block or destroy his personal data if they are incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing;
• to revoke his consent to the processing of personal data;
• to protect his rights and legitimate interests including compensation for damages and compensation for moral injury in court;
• to appeal the actions or omissions of the Company to the authorized body for the protection of the rights of personal data Subjects or in court;
• to receive information concerning the processing of his personal data including information containing:
  1) confirmation of the processing of personal data by the Company;
  2) legal grounds and purposes of personal data processing;
  3) purposes and methods of personal data processing used by the Company;
  4) the name and location of the Company, information about persons (except employees of the Company) who have access to personal data or to whom personal data may be disclosed on the basis of an agreement with the Company or on the basis of Federal law;
  5) processed personal data related to the relevant Client of personal data, the source of their receipt, unless a different procedure for submitting such data is provided for by Federal law;
  6) terms of processing of personal data including the terms of their storage;
  7) the procedure for the Client to exercise the rights provided for by this Federal law;
  8) information about the cross-border data transfer that has taken place or is expected to take place;
  9) the name or surname, first name, patronymic and address of the person who processes personal data on behalf of the Company, if the processing is or will be entrusted to such a person;
  10) other information provided for by this Federal law or other Federal laws.

5.2. In order to exercise his rights and legitimate interests the Client has the right to contact the Company or send a request personally or with the help of a representative. The request must contain the information specified in part 3 of article 14 of the FZ "On personal data".
5.3. The Client can withdraw his consent to the processing of personal data in accordance with article 9 of Federal law № 152-FZ of 27.07.2006 "On personal data" by sending a corresponding written application to the mail address of the Company specified in this Policy.