Personal Data Processing Policy

1. General Provisions

1.1. This Policy has been adopted by JSC "PRINZIP Nedvizhimost" (Principal Property), OGRN 1076 658 003 300 (hereinafter referred to as the "Company"), which operates as the administrator of the website prinzip.su (hereinafter referred to as the "Website") and processes personal data voluntarily and independently posted on the Website by personal data subjects (Website users), or transferred (provided) by a personal data subject to the Company via the Website or by other means, with the consent of such subjects.

1.2. The purpose of adopting this Policy is to ensure compliance with the rights and legitimate interests of citizens and the provisions of the current legislation of the Russian Federation regarding personal data processing.

1.3. This Policy has been adopted in accordance with the requirements of Federal Law No. 152‑FZ of July 27, 2006, "On Personal Data", and is published for unrestricted access on the Website at the permanent address: prinzip.su/policy/.

1.4. This document applies to all cases of personal data processing of Website users, both with and without the use of automated means.

1.5. The terms used in this document ("personal data", "personal data processing", etc.) are interpreted in accordance with their definitions in the Federal Law "On Personal Data". Thus, "personal data" refers to any information relating directly or indirectly to an identified or identifiable natural person (personal data subject). The term "personal data processing" means any action (operation) or set of actions (operations) performed with or without automated means on personal data, including collection, recording, systematisation, accumulation, storage, updating (refreshing, modifying), retrieval, use, transfer (dissemination, provision, access), depersonalisation, blocking, deletion, and destruction of personal data.

1.6. The Company processes the following personal data of Website users when provided by personal data subjects:
  • surname;
  • first name;
  • patronymic (middle name);
  • phone number;
  • email address.

1.7. The Company processes personal data of Website users with their consent, which is granted by Website users through conclusive actions on the Website prinzip.su/, confirming their agreement with this Personal Data Processing Policy.


2. Purposes of Personal Data Processing

2.1. The Company processes Website users' personal data for the following purposes:
  • administering the Website and ensuring its functionality, including enabling the submission of resumes for open positions at the Company, informing Website users about the Company’s services and news, enabling Website users to contact the Company for information of interest, etc.;
  • maintaining statistical records;
  • collecting, systematising and updating personal data;
  • entering into agreements with Website users regarding the use of the Website, providing additional services to users, etc.;
  • sending messages to Website users concerning the operation and use of the Website’s services;
  • obtaining feedback (information) from Website users on the quality of the Company’s and Website’s performance;
  • improving the quality of service;
  • sending (transmitting) advertising and informational messages on behalf of the Company and the Company’s Partners;
  • sending (transmitting) offers, advertising and informational materials on products/services of the Company and Partners by the Company’s Partners, for the purpose of creating personalised and individual offers for Website users;
  • other purposes that do not contradict the current legislation of the Russian Federation and the terms of agreements between the Company and relevant Website users.

2.2. The current list of Partners to whom the Company is authorised to transfer Website users' personal data, as well as the purposes of processing and transferring personal data by the Company’s Partners, is available on the Website at: prinzip.su/policy/partners/.


3. Principles of Personal Data Processing

3.1. Processing of personal data provided by their subjects via the Website is carried out in compliance with the following key principles:
  • personal data processing is carried out on a lawful and fair basis;
  • personal data processing is limited to achieving specific, predefined and lawful purposes;
  • processing of personal data that is incompatible with the purposes of collecting personal data is not permitted;
  • merging databases containing personal data processed for incompatible purposes is not permitted;
  • only personal data that meet the purposes of their processing are subject to processing;
  • other principles provided for by the current legislation of the Russian Federation on personal data.


4. Conditions for Personal Data Processing

4.1. Personal data processing within the Company is carried out in compliance with the principles and conditions provided for by the current legislation of the Russian Federation on personal data.

4.2. The Company has the right to transfer, as well as to entrust the processing of Website users' personal data to the Company’s Partners specified in this Personal Data Processing Policy and its Appendices (including via link navigation), in accordance with the specified purposes of processing and transferring personal data. The Company also has the right to entrust the processing of Website users' personal data to another party with their consent, unless otherwise provided by the current legislation of the Russian Federation.

4.3. Processing of Website users' personal data is carried out by the Company for an unlimited period, starting from the moment the personal data subject provides their consent to processing and until such consent is withdrawn in accordance with the procedure established by the legislation of the Russian Federation.


5. Rights of Personal Data Subjects

5.1. Website users decide to provide their personal data and give the Company consent to process them freely, of their own volition and in their own interest. Using the Website constitutes unconditional consent by the user to this Policy and the conditions for processing their personal information specified therein. If the user does not agree with these conditions, they must refrain from using the Website.

5.2. Consent to personal data processing is provided by the subject in electronic form before filling out and submitting a registration form during registration and creation of a personal account on the Website, submitting a resume, accepting (acceding to) the offer (user agreement) posted on the Website, provided the personal data subject is identified as a party to the agreement, unless otherwise provided by the current legislation of the Russian Federation.

5.3. Website users have the right to obtain information concerning the processing of their personal data based on relevant requests sent to the Company.

5.4. Updating, modifying and deleting their personal data is performed by Website users independently via their own account (personal cabinet) registered on the Website. If users are unable to perform these actions independently, they may contact the Company’s employees at the following address: 620 000, Sverdlovsk Region, Yekaterinburg, Lenin Avenue, Building 5, Office 101, with a written request to update, block or delete their personal data.


6. Ensuring Security in Personal Data Processing

6.1. The security of personal data processed by the Company is ensured through the application of legal, organisational, technical and software measures necessary and sufficient to comply with the requirements of the current legislation of the Russian Federation on personal data.

6.2. The specific measures taken by the Company to ensure personal data security are determined by the Company independently and may include, in particular:
  • restricting the number of Company employees with access to personal data;
  • appointing an official responsible for organising personal data processing within the Company;
  • familiarising Company employees with the requirements of the current legislation of the Russian Federation on personal data and the provisions of this Policy;
  • implementing a permission‑based access system for Website users to the Website’s information resources containing personal data;
  • logging and tracking Website users' actions;
  • securing Website users' access to the Website’s information system containing personal data via unique login and password;
  • conducting antivirus software checks;
  • using information security tools that meet the requirements of the current legislation of the Russian Federation;
  • other measures in line with the requirements imposed by the current legislation of the Russian Federation for protecting personal data.


7. Final Provisions

7.1. This Policy is subject to amendment in cases of relevant changes or additions to the current legislation of the Russian Federation on personal data, and may also be amended at any time at the Company’s discretion. The current version of the Company’s Personal Data Processing Policy is always available for viewing by the general public on the Website at the permanent address: prinzip.su/policy.

7.2. All relations involving the Company concerning the processing and protection of personal data that are not directly regulated in this document are governed by the provisions of the current legislation of the Russian Federation on personal data.


By accepting and agreeing to the terms of this Policy, the Website user grants permission to JSC "PRINZIP Nedvizhimost" to send postal correspondence to the specified postal address, including welcome letters containing the user’s personal data, postal attachments, personalised advertising brochures/prospectuses, other information, as well as to send electronic emails, advertising and/or informational messages to the specified email address and/or mobile phone number, and to make calls to the phone number specified by the Website user, containing information about promotional campaigns conducted by JSC "PRINZIP Nedvizhimost" and its partners, information about services and company news.