Privacy Statement

Personal Data Privacy Policy

1. General Provisions

1.1. This document (hereinafter referred to as the Policy) is adopted by the Federal State Budgetary Educational Institution of Higher Education "Ufa University of Science and Technology" (hereinafter – UUST) in order to fulfill the requirements of the Federal Law of 27.07.2006 No. 152-FZ "On Personal Data" and defines the procedure for processing personal data and measures to ensure the security of personal data of visitors to the website of the scientific and practical journal "Legal State: Theory and Practice" (Registration No. PI No. FS77-73609 dated August 31, 2018, issued by the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor)), Internet domain name: https://pravgos.ru (hereinafter – the Website).

1.2. This Policy discloses the main principles and rules used by the Operator in processing personal data of Website visitors, including the objectives, legal grounds, conditions, and methods of such processing, the categories of personal data subjects whose personal data are processed by the Operator, as well as information on the Operator’s compliance with the requirements of the legislation of the Russian Federation and the Operator’s implemented requirements for the protection of processed personal data.

1.3. This Policy is a publicly available document, declaring for any interested parties the foundations of the Operator's activities in processing personal data of visitors, and is subject to placement in open access on the Website at: https://pravgos.ru

2. Basic Terms

2.1. Personal Data Operator (Operator) – a state body, municipal body, legal or natural person, independently or jointly with other persons organizing and (or) carrying out the processing of personal data, as well as determining the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data. Within the framework of this Policy, the Operator is the Federal State Budgetary Educational Institution of Higher Education "Ufa University of Science and Technology".

2.2. Automated processing of personal data – processing of personal data using computer technology.

2.3. Dissemination of personal data – actions aimed at disclosing personal data to an indefinite number of persons.

2.4. Provision of personal data – actions aimed at disclosing personal data to a specific person or a specific group of persons.

2.5. Blocking of personal data – temporary suspension of the processing of personal data (except when processing is necessary to clarify personal data).

2.6. Destruction of personal data – actions as a result of which it becomes impossible to restore the content of personal data in the personal data information system and (or) as a result of which physical carriers of personal data are destroyed.

2.7. Depersonalization of personal data – actions as a result of which it becomes impossible, without the use of additional information, to determine the ownership of personal data by a specific personal data subject.

2.8. Cross-border transfer of personal data – transfer of personal data to the territory of a foreign state to a foreign government body, a foreign individual, or a foreign legal entity.

2.9. User (visitor) – an Internet user and, in particular, a Website user who familiarizes themselves with the materials of the Website, as well as sends requests and materials for publication to the editorial office of the scientific and practical journal "Legal State: Theory and Practice".

3. Sources and Legal Grounds for Processing Personal Data

3.1. The sources for obtaining personal data processed by the Operator are:

  • directly the subjects of personal data, including Website visitors, authors of information materials, counterparties, clients, other individuals who have provided information to the Operator, or persons who, in accordance with the Law of the Russian Federation of 27.12.1991 No. 2124-1 "On Mass Media", are sources of information;

  • individuals in respect of whom, in accordance with the provisions of current legislation of the Russian Federation, personal data are publicly available, subject to mandatory disclosure or publication, or must be included in publicly available state registers or information systems;

  • government authorities and local self-government bodies, legal entities, information dissemination organizers on the Internet, and other persons disseminating information in accordance with the provisions of the Federal Law of 27.07.2006 No. 149-FZ "On Information, Information Technologies, and Information Protection";

  • mass media;

  • sources of disclosure (publication) of information in accordance with the requirements of the legislation of the Russian Federation (publicly available registers or information systems).

3.2. The content and volume of personal data of the categories of personal data subjects processed by the Operator are determined by the Operator in accordance with the purposes of personal data processing specified in Section 4 of this Policy. The Operator does not process personal data that are excessive in relation to the stated purposes of processing or incompatible with such purposes.

3.3. The Operator carries out activities in the field of personal data processing on the basis of and in accordance with the requirements of the current legislation of the Russian Federation, including:

  • The Constitution of the Russian Federation;

  • The Civil Code of the Russian Federation;

  • Federal Law of 27.07.2006 No. 152-FZ "On Personal Data";

  • Federal Law of 27.07.2006 No. 149-FZ "On Information, Information Technologies, and Information Protection";

  • as well as local regulations adopted at UUST in accordance with the consents of subjects to the processing of their personal data.

3.4. The processing of personal data by the Operator is carried out with the consent of the respective personal data subject to the processing of his/her personal data in accordance with Federal Law of 27.07.2006 No. 152-FZ "On Personal Data".

3.5. Without the consent of the personal data subject, the Operator processes personal data in the following cases:

  • processing of personal data is necessary for the professional activities of a journalist and/or the lawful activities of the mass media;

  • processing of personal data is necessary for the exercise and performance of functions, powers, and duties assigned to the Operator by the legislation of the Russian Federation;

  • processing of personal data that is subject to publication or mandatory disclosure in accordance with federal law;

  • processing of personal data is necessary for the implementation of the rights and legitimate interests of the Operator or third parties, or for the achievement of socially significant goals, provided that this does not violate the rights and freedoms of the personal data subject;

  • processing of personal data is carried out for statistical or other research purposes, except for the purposes specified in Article 15 of Federal Law of 27.07.2006 No. 152-FZ "On Personal Data", provided that personal data is mandatorily depersonalized;

  • processing of personal data that has been made publicly available by the personal data subject or at his/her request (hereinafter – personal data made publicly available by the personal data subject);

  • in other cases expressly provided for by Federal Law of 27.07.2006 No. 152-FZ "On Personal Data".

4. Purposes and Procedure for Processing Personal Data, Categories of Personal Data Subjects

4.1. For the purpose of carrying out the professional activities of a journalist and/or the lawful activities of the mass media, or scientific, literary, or other creative activities, the Operator processes the following data: surname, first name, patronymic; contact phone number; email address; academic degree and academic title; profession; position; place of work; information collected through metric programs. Categories of subjects whose personal data are processed for the purpose of journalistic and/or legal activities of the mass media: employees; counterparties; representatives of counterparties; clients; website visitors; beneficiaries under contracts; trainees; students.

4.2. By submitting material for publication in the scientific and practical journal "Legal State: Theory and Practice" via a special form on the Website, by email, or other means of communication (messengers), the personal data subject declares the personal data specified therein as publicly available:

  • surname, first name, patronymic of the User

  • academic degree and academic title of the User

  • profession, position, name of the organization represented by the User

  • name of the city and country of location of the User or the organization represented by the User

  • other data that the User deems necessary to provide and authorizes the Operator to process, including transfer and dissemination of the specified data. The Operator provides on the Website tools allowing the personal data subject to express his/her consent to the processing of personal data.

4.3. The list of Operator’s actions with personal data: collection; recording; systematization; accumulation; storage; clarification (updating, modification); extraction; use; transfer (provision, access); depersonalization; blocking; deletion; destruction; dissemination. Methods of processing: mixed; without transfer over the internal network of the legal entity; with transfer over the Internet. When processing personal data using automation tools, the Operator also uses information technologies and technical means, as well as information protection means applied in information systems.

4.3. The Operator discloses processed personal data only on the grounds and in cases provided for by the legislation of the Russian Federation, including in connection with the release and dissemination of mass media products.

4.4. The Operator terminates the processing of personal data upon achieving the purpose of processing personal data.

4.5. The destruction of personal data by the Operator is carried out in the manner and within the timeframes provided for by Federal Law of 27.07.2006 No. 152-FZ "On Personal Data".

4.6. The Website may use the Yandex.Metrica web analytics service, provided by YANDEX LLC, 119021, Russia, Moscow, 16 Leo Tolstoy St. The Yandex.Metrica service uses the "cookie" technology – small text files placed on users' computers to analyze their activity. The information obtained using "cookies": a) cannot identify the user; b) helps improve the operation of the Website; c) is automatically transmitted to YANDEX LLC, which processes this information in accordance with the terms of use of the Yandex.Metrica service available at https://yandex.ru/legal/metrica_termsofuse/. The Operator provides functionality on the Website allowing the Website User to express consent to the processing of personal data when using metric data collection systems and to continue working with the Website after giving consent. The Operator receives Website visit data from the Yandex.Metrica service in depersonalized form and uses it for statistical purposes to analyze user interest in Website materials without transferring it to third parties.

4.7. In the course of its activities, the Operator entrusts the processing of personal data to third parties with the consent of personal data subjects, unless otherwise provided by current legislation of the Russian Federation, subject to the obligatory observance by the person carrying out the processing of personal data on behalf of the Operator of the principles and rules of processing and ensuring the security of personal data established by the legislation of the Russian Federation.

5. Information on Implemented Personal Data Protection Requirements

5.1. When processing personal data, the Operator takes all necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination, as well as from other unlawful actions regarding personal data.

5.2. The Operator takes the necessary legal, organizational, technical, and physical measures to protect personal data, as well as measures aimed at ensuring the fulfillment of the obligations stipulated by Federal Law of 27.07.2006 No. 152-FZ "On Personal Data" and regulatory legal acts adopted in accordance with it. Such measures include, among others, the following:

  • The existence of a personal data processing policy, local acts on personal data processing, as well as local acts establishing procedures aimed at preventing and detecting violations of the legislation of the Russian Federation, eliminating the consequences of such violations;

  • Appointment of a person responsible for organizing the processing of personal data;

  • Appointment of a person responsible for the security of personal data;

  • Familiarization of employees and/or third parties entrusted with the processing of personal data with the provisions of personal data legislation, the policy, instructions, and other local acts on the processing of personal data;

  • Identification of threats to the security of personal data;

  • Accounting for personal data machine carriers;

  • Establishment of rules for access to personal data processed in the personal data information system;

  • Assessment of harm that may be caused to personal data subjects, as well as the correlation of said harm with the measures taken by the Operator to ensure the fulfillment of the Operator's obligations;

  • Internal control of compliance with the requirements of legislation, the Operator's policy regarding personal data processing, and the Operator's local acts;

  • Development and placement on the organization’s website and on the websites of the media established by the organization of documents defining the policy on personal data processing;

  • Development and placement on the organization’s and media’s websites of functionality allowing Website users to express consent to the processing of personal data when using metric data collection systems, as well as functionality for obtaining consent from personal data subjects for the processing and dissemination of personal data made public by the personal data subjects;

  • Development and application of organizational and technical measures to ensure the protection of personal data, taking into account current threats to personal data security and information technology.

5.3. The person responsible for organizing and ensuring the security of personal data by the Operator is the editor-in-chief of the scientific and practical journal "Legal State: Theory and Practice".

5.4. The authorized body for the protection of the rights of personal data subjects is the Federal Service for Supervision of Communications, Information Technology, and Mass Media (Roskomnadzor).

6. Rights of Personal Data Subjects

6.1. The personal data subject has the right to receive information about the processing of his/her personal data by the Operator, except as provided by federal laws.

6.2. The personal data subject has the right, in the manner and under the conditions established by federal laws, to require the Operator to clarify his/her personal data, block or destroy them if the personal data are incomplete, outdated, inaccurate, unlawfully obtained, or are not necessary for the stated purpose of processing, as well as to take legal measures to protect his/her rights. If such a request is made, if the personal data subject has previously made the personal data public and allowed their dissemination, the Operator has the right to make the relevant changes on the Website of the network publication, but cannot affect the making of the required changes on other information resources that have published the specified personal data.

6.3. The personal data subject has the right to withdraw his/her consent to the processing of personal data in accordance with Article 9 of Federal Law of 27.07.2006 No. 152-FZ "On Personal Data" in cases where the Operator processes personal data on the basis of the personal data subject’s consent.