Privacy policy

1. General provisions

1.1 The Privacy Policy (the “Policy”) defines how personal data is processed and protected on the website by which you use the Bisery service and in the Bisery mobile application (hereinafter referred to as “Service”), personal data are processed and protected, and created for the purpose of respecting the rights of personal data subjects in accordance with applicable law (hereinafter referred to as “Legislative”).

1.2 The operator of personal data, that is, the person who processes personal data and determines the purposes and means of such processing, is the person providing the Service in accordance with the Service Agreement posted on the Service, in particular the Rules for the use of the trading platform (Offer) (hereinafter referred to as the “Company”, “we”).

1.3 The Company periodically updates the Policy and recommends that it regularly check its content for possible changes.

1.4 In all that is not defined by the Policy, the Company shall be guided by the provisions of the Legislation.

2. Principles of data processing

2.1 The Company complies with high standards of personal data protection and adheres to the principles set forth in this Section.

2.2 Principle of Legality and Justice. The Company ensures that the processing of personal data is carried out in accordance with the direct requirements of the Legislation and taking into account the constitutional rights and freedoms of man and citizen, as well as reasonable expectations of personal data subjects.

2.3 Principle of limiting the processing of a specific purpose. The Company processes personal data only in accordance with the specific purposes of the processing, determined in advance and fixed, in particular, in user documents. The company does not process personal data for purposes other than the purpose of the collection, without an appropriate legal basis (e.g. your consent).

2.4 Principle of Mining Processing. Determining the amount of data and actions with them to achieve each goal, the Company processes only those data without which it is impossible to do, and the processing itself should be commensurate with the stated goal and is limited to the period necessary to achieve the purposes of processing personal data.

2.5 Principle of ensuring accuracy, reliability, sufficiency and relevance. With regard to those data the processing of which is necessary, the Company takes reasonable measures to ensure the accuracy, reliability, sufficiency and relevance of personal data.

2.6 Principle of Confidentiality and Security

2.6.1 The Company assesses the risks and threats associated with the processing of personal data, taking into account the direct connection of this data with the individual and existing threats to the rights of personal data subjects.

2.6.2 The Company shall take the necessary organizational, legal and technical measures aimed at ensuring the security of personal data, including their confidentiality.

2.7 Principle of transparency. In order to ensure the stability and predictability of the processing for all subjects of personal data, supervisory (supervisory) authorities, partners and other persons, the Company strives to ensure the awareness of these persons, including by providing unlimited access to the Policy.

3. Legal bases of data processing

3.1 We process personal data only if there are legal grounds for their processing.

3.2 The Company processes your data in the following cases:

• To perform a contract whose party, the beneficiary or guarantor, for which the subject of personal data is, as well as for concluding a contract on the initiative of the subject of personal data or a contract under which the subject of personal data will be the beneficiary or guarantor (hereinafter referred to as the “Service Agreement”). The Service Agreement always specifies the terms of data processing necessary for the execution of such agreements;
• To exercise the rights and legitimate interests of the Company or third parties (hereinafter referred to as the “Locative Interests”), subject to the balance of such interests and rights and freedoms of subjects. Our legitimate interests include ensuring the security of the Service, fraud protection, improving and ensuring the proper operation of the Service, as well as protecting the Company’s legal and financial interests;
• When the processing of data is provided for by law and for the performance entrusted by law to the Company of functions, powers and obligations (hereinafter referred to as “Law obligations”). Such legal obligations, in particular, may include the administration of justice, the implementation of tax legislation;
• If you have your consent to the processing of personal data (hereinafter referred to as “Consent”). You can give Consent in writing, in the form of an electronic document or in other electronic form;
• If there are other legal grounds provided for by the Legislation.

4. Procedures and conditions of data processing

4.1 In this Section you can find out how the Company processes your data depending on the relationship in which you are with the Company. Here you can get information about the purposes and grounds for processing personal data, about the categories of subjects whose personal data are processed, about the categories and scope of personal data, as well as about the categories of third parties and / or specific third parties to whom the data may be transferred.

4.2 This Section describes the processing of your data if you use one of the services in any way. You can view the pages of the Service without registering as a visitor to the Service (hereinafter referred to as the “Service Visitor”) and use the Services by being a registered and authorized user of one of the Services (the “User”).

4.3 When using the Service, Visitors to the Service and Users accept user documents, for example, it may be User Agreements, Terms of Use, License Agreements, Terms of Use, Offer (hereinafter referred to as the “Service Agreement”). You can always read the Service Agreements in each Service.

4.4 The table below describes the processing of your data, depending on the capabilities of a particular Service and your will to use the individual functions of the Service. You can both not use a specific Service as a whole, and refuse to use certain functions of the Service, including to refuse to provide data, in this case, the relevant processing will not be carried out.

4.5 The Company may also process personal data for purposes specified in the Consent of the processing of personal data in the form of data collection or in the Service interface when obtaining such consent, for example, for the purposes of sending marketing messages or for communication with the User and / or the Visitor of the Service on his initiative.

5. Methods of processing

5.1 We process personal data both using automation tools and without the use of such means (mixed processing). When processing personal data, we may perform the following actions (operations) with personal data: collection, recording, audio recording, organization, storage, replacement, recovery, reclaim, use for the purpose of transfer or providing access to them in a different way, grouping, combination, blocking, deletion or destruction.

5.2 The Company does not make decisions that may affect your rights solely through automated data processing.

5.3 We may process Users of the Service for the purpose of protection against fraud, protection of User accounts in the Services for the protection of the Legitimate Interests and under the Terms of the Service Agreements. Such processing consists in the analysis of your activity in the Service, and in case of detection of presumably suspicious activity - including in limiting the possibility of using individual functions for the time of making a final decision by employees of the Company or authorized third parties.

5.4 If the functionality of the Service provides for the possibility of publishing data for Users and / or for other third parties, such data is not intended for further use by third parties in accordance with the terms of the Services Agreements.

6. Data transfer - in what cases can we transfer your personal data?

6.1 We may share your personal data when necessary to fulfill the Service Agreement, to implement the Legitimate Interests or the performance of the Legislature – in other cases, the transfer is possible only with your Consent.

6.2 The Company transfers your data in the presence of legal grounds for the transfer, entrusting processing to third parties, as well as without erritifying processing. In case of order of processing to third parties for the purposes of the Company, we include special conditions for processing data in contracts with such third parties and monitor their implementation.

6.3 Third parties and / or categories of persons to whom your data may be transferred, as well as the purposes of the transfer are specified in Section 4, as well as in Section 9.

7. Terms of processing

7.1 The Company stores and otherwise processes your personal data while it is necessary to achieve the purposes of processing and if there are legal grounds in accordance with the Policy.

7.2 We will terminate the processing of your data in achieving the objectives, the absence of legal grounds, as well as in the event of termination of the Company’s activities (reorganization / liquidation) or the identification of improper processing of personal data.

8. Security of personal data

8.1 The Company shall take the necessary organizational, legal and technical measures aimed at ensuring the security of personal data, including their confidentiality. The Company protects your data from unauthorized or accidental access to them, destruction, modification, blocking, copying, granting, distributing and other unlawful actions.

8.2 The Company regularly assesses the risks and threats associated with the processing of personal data, taking into account the direct connection of this data with the individual and the existing threats to the rights of personal data subjects.

9. Cross-Border Data Transfer

9.1 The Company may carry out cross-border transfer of your data only if there are legal grounds, including on the terms of the Service Agreement.

9.2 When placing orders and their subsequent delivery or returning to the Users, the Company transfers data to logistics companies in accordance with Section 4. Information about such persons and their location is indicated in the interface of the Service when placing an order and / or in the Service Agreements.

10. Rights of subjects

10.1 To exercise your rights of the subject of personal data, you can contact the Company using different channels, depending on which category of personal data subjects you belong to. In order to respond to your request, the Company needs to make sure that the sending person and the subject of personal data belonging to one of the categories of subjects specified in the Policy is the same individual. We will respond to your request within the period established by the Law.

10.1.1 If you are a User, please contact us using the Service functionality (for example, in the Service "Support" and / or "Conversions"), being authorized. In case you have lost access to your account on the Service, please contact the Company via sales@bisery.com to delete your account with data that will help us to determine you as a User as specified in the Services Agreements. Unfortunately, in this case, we will not be able to restore you access to your personal account.

10.1.2 If you Are a Visitor to the Services, send an application to the Company’s legal address specified in the Service Agreement, or to sales@bisery.com, refer to your category of data number and / or other information (name, name, data of the identity document) that otherwise confirm the fact of processing personal data by the operator and help us determine you as a subject of personal data of the relevant category.

10.2 Termination of personal data processing, deletion and withdrawal of consent

10.2.1 If you no longer want us to process your personal data, please refer to us according to which category of personal data subjects you belong.

10.2.2 Users may be accessed by the function of independently deleting the account in the Services. With this deletion, we will stop processing your data.

10.2.3 The Company may continue to store certain data after your request for termination of the processing of personal data only if it has the grounds for processing data. Such processing may be necessary to fulfill the Legislature and / or to protect the legitimate interests, in particular during the limitation period.

10.3 Obtaining information about the processing of your personal data and copy of the data

10.3.1 You can always find out about the processing of personal data Company in this Policy. You are also entitled to a copy of your data.

10.3.2 If you would like to receive information about what data the Company processes you, or a copy of your data, please refer to us in accordance with what category of personal data subjects you belong to.

10.4 Clarification and blocking of personal data

10.4.1 If you are a User, you can always use the functionality of the Service to clarify or otherwise adjust personal data, as well as contact the Company with a requirement to block data.

10.4.2 If such functionality is missing or you belong to a different category of data subjects and believe that the data that the Company is engaged in has lost its relevance is not accurate or is processed improperly, send us an appeal according to which category of personal data subjects you belong.

10.5 Refusal to provide data. The company processes your personal data as the minimum extent necessary for this. If you do not want to provide the Company's data and there is no appropriate requirement in the law, you have the right to refuse to provide personal data. Unfortunately, in this case, the use of most of the Services will be difficult or impossible.

10.6 Appeals for our decisions. If you do not agree with the decision taken on your appeal related to the processing of your personal data, you can or contact us again, providing additional explanations, contact the authorized body for the protection of the rights of personal data subjects or the court.