Personal Data Processing Policy

Last revision date: 5 March 2021

 (unlimited access; information is published subject to Part 2, Article 18.1, Federal Law No. 152-FZ “On Personal Data” dated 27 July 2006)

This Personal Data Privacy Policy (the Privacy Policy) has been adopted by AstraLogika LLC, INN 5009077688, KPP 500901001, Registered address: 142000, Moscow Region, Domodedovo, Tsentralny Microdistrict, 83 Kashirskoye Shosse, Bldg. 1, Office 4 (the Operator) to ensure compliance with the Russian legal provisions and guarantee protection of the rights of subjects of personal data processed by the Operator as part of its business operations, maintain confidentiality and secure processing of such data, and it applies to all the information that AstraLogika LLC may receive about any Users at the time of their registration and while they use the website of the Oil Industry IT Championship project it-oilchamp.ru (the Website) and/or services of the Website.

1. TERMS AND DEFINITIONS
1.1. The following terms are used in this Privacy Policy:
1.1.1. Administration of it-oilchamp.ru website (Website Administration) – employees authorised to manage the website on behalf of the Operator who organise and/or carry out the processing of personal data and determine the purposes of personal data processing, the composition of personal data subject to processing, and the actions (operations) performed with the personal data.
1.1.2. Personal data – any information relating to a directly or indirectly identified or identifiable natural person (data subject).
1.1.3. Processing of personal data – any action (operation) or combination of actions (operations) performed with personal data, both with or without the use of automation aids, to include collection, recording, classification, accumulation, storage, updating (renewal, modification), extraction, use, transfer (distribution, provision, access), anonymisation, blocking, deletion, and destruction of personal data.
1.1.4. Confidentiality of personal data – a mandatory requirement for the Operator or another person who has gained access to personal data to prevent their dissemination without the consent of the personal data subject or without other legal grounds.
1.1.5. Website of the Oil Industry IT Championship – a group of interrelated web pages hosted at a unique Internet address (URL): it-oilchamp.ru.
1.1.6. Website User (User) – a person who has access to the Website via the Internet, including a person who has registered on the Website in due manner, and is using the Website/Website services.
1.1.7. Cookies – small pieces of data sent by a web server and stored on a User’s computer that a web client or web browser sends to the web server in an HTTP request each time the User attempts to open a page on the corresponding Website.
1.1.8. IP address – a unique web address of a node in a computer network that is built using the IP protocol.

2. GENERAL PROVISIONS
2.1. Any time the User uses the Operator’s Website/Website services, such User expresses unconditional consent to this Privacy Policy and the terms of processing of the User’s personal data.
2.2. If the User disagrees with the terms of the Privacy Policy and the terms of personal data processing, the User shall discontinue using the Operator’s Website and send a request to the Website Administration to cease the use of his/her personal data. This request shall include the last name, first name, patronymic (if any), contact details (phone number, e-mail address, or mailing address) of the personal data subject, as well as a list of personal data whose processing should be ceased. 
2.3. This Privacy Policy shall only apply to the Operator’s Website. The Operator does not control and shall not be held accountable for third-party websites that the User may access via links available on it-oilchamp.ru.
2.4. The Website Administration does not verify the reliability of personal data provided by the Website User.

3. SUBJECT OF PRIVACY POLICY
3.1. This Privacy Policy enforces the obligations on the Website Administration to keep undisclosed and protect confidentiality of the personal data that the User provides at the request of the Website Administration for the purposes of using the Website, including when registering on the Website or in connection with participation in the Oil Industry IT Championship project.
3.2. The User’s access to the Website materials may require registration, to include assignment of a login and/or password to enable subsequent use of the Website as a registered User. If the Website User decides to register, such User shall, when registering on the Website, give consent to the processing of his/her personal data, to the extent necessary for registration, that are provided on a compulsory (specially labelled data) or voluntary basis. The User shall provide the personal data whose processing is permitted under this Privacy Policy by completing a registration form in the corresponding section of the Website, and such personal data shall include the following information:
3.2.1. User’s last name, first name, and patronymic (if any);
3.2.2. date of birth;
3.2.3. identity document details;
3.2.4. User’s registration and residence addresses;
3.2.5. User’s telephone;
3.2.6. e-mail address;
3.2.7. links to the User’s social media accounts;
3.2.8. information on secondary education;
3.2.9. information on continuing education;
3.2.10. information on secondary professional education;
3.2.11. information on higher education;
3.2.12. information on foreign language skills;
3.2.13. information on professional achievements;
3.2.14. information on publications;
3.2.15. information on professional track record;
3.2.16. career preferences;
3.2.17. information on professional skills;
3.2.18. personal interests/hobbies;
3.2.19. involvement in the Foundation’s projects;
3.2.20. photograph (if necessary);
3.2.21. information on health restraints, clothing sizes, and other information requested by the Operator in the normal course of business.
3.3. The Website shall protect the data that are furnished automatically when the User visits the web pages:
 - IP address;
 - information from cookies;
 - browser information;
 - time of access;
 - referrer (address of the previous web page).
3.3.1. Disabling the cookies may render access to the sections of the website that require authorisation impossible.
3.3.2. The Website collects statistics about the IP addresses of its visitors. This information is used to prevent, detect, and manage technical troubles.
3.4. Any other personal information not specified above (browsing history, browsers used, operating systems, etc.) shall be subject to secure storage and non-disclosure, except as stipulated by clause 5.2 of this Privacy Policy.

4. PURPOSES OF COLLECTING USER’S PERSONAL INFORMATION
4.1. The Website Administration may use the User’s personal data to:
4.1.1. Identify the User registered on the Website, including for participation in projects and programmes that the Operator carries out.
4.1.2. Grant the User access to personalised data and resources of the Website.
4.1.3. Establish feedback with the User, including to send notifications and requests regarding the use of the Website, deliver services, and process requests and applications from the User.
4.1.4. Identify the User’s location to ensure security and prevent fraud.
4.1.5. Confirm the accuracy and completeness of the personal data provided by the User.
4.1.6. Create an account for participation in the Operator’s projects and events, if the User has consented to the creation of the account.
4.1.7. Notify the Website User about the progress of the Operator’s projects and activities.
4.1.8. Provide the User with effective customer services and technical support in case of any troubles when using the Website.
4.1.9. Provide the User, subject to the User’s consent, with special offers, information, newsletters, and other information on behalf of the Operator or on behalf of the Operator’s partners.
4.1.10. Grant the User access to the websites or services of the Operator’s partners with a view to obtain additional information about the Operator’s events and projects.

5. METHODS AND DURATION OF PERSONAL DATA PROCESSING
5.1. The processing of the User’s personal data shall be carried out for au unlimited period of time using any lawful means, including in personal data information systems with or without automation aids.
5.2. The Website Administration may transfer the User’s personal data to third parties if the User has granted additional consent to such actions.
5.3. The User’s personal data may be transferred to authorised government agencies of the Russian Federation only for reasons and in the manner outlined in applicable laws of the Russian Federation.
5.4. If the personal data have been lost or disclosed, the Website Administration shall inform the User about such loss or disclosure of personal data.
5.5. The Website Administration shall take appropriate administrative and technical measures to protect the User’s personal data from unauthorised or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful acts of third parties.
5.6. The Website Administration, acting in collaboration with the User, shall take all reasonable steps to prevent losses or other adverse effects caused by the loss or disclosure of the User’s personal data.

6. OBLIGATIONS OF THE PARTIES
6.1. The User shall:
6.1.1. Provide information about the personal data that may be required to use the Website.
6.1.2. Update and supplement the provided information on the personal data if such information has been modified.
6.2. The Website Administration shall:
6.2.1. Use the information received solely for the purposes listed in clause 4 of this Privacy Policy.
6.2.2. Make sure that confidential information is kept secret, and that it is not disclosed or transferred without the User’s prior written authorisation, and that the User’s transferred personal data is not sold, exchanged, published, or otherwise disclosed, except as stipulated by clauses 5.2 and 5.3 of this Privacy Policy.
6.2.3. Take precautions to protect the confidentiality of the User’s personal data in line with the procedure generally used to protect such information in existing business practices.
6.2.4. Block personal data of the corresponding User from the time of request or appeal by the User, or his/her legal representative or authorised agency for the protection of the rights of personal data subjects, for the duration of an audit in case any inaccurate personal data or illegal actions have been identified.
6.3. By accepting this Agreement, the User:
6.3.1. Undertakes not to publish in the public domain any e-mail addresses, mailing addresses, telephone numbers, links, or other contact details.
6.3.2. Grants consent to the Website Administration for the publication and use without any compensation, subject to Article 152.1 of the Civil Code of the Russian Federation, of his/her photographs, videos, or works of fine art in which the User is depicted, provided that the User’s photograph was obtained when he/she was being filmed in places open to the public or at public events.
6.3.3. The User agrees that the Website Administration has the right to restrict or block the User’s access to the Website or initiate other actions against the User who was found in breach of this Privacy Policy, or effective laws, or legally protected rights of third parties, if such third parties have filed a reasonable complaint.
6.3.4. The User shall be prohibited from copying, downloading, reproducing, distributing, or translating into foreign languages ​​any components of the Website without the Operator’s written permission. The User acknowledges and agrees that any materials and all the necessary software applications essential for the function of the Website are protected by intellectual property laws of the Russian Federation and other international laws, and that the content provided to the User during the use of the Website is protected by copyright, trademark, or patent laws, as well as other relevant laws.
6.3.5. The User shall not be entitled to modify, sell, or distribute the Website materials and applications, whether in whole or in part.

7. LIABILITY OF THE PARTIES
7.1. Should the Website Administration fail to carry out its obligations, it shall be liable for damages incurred by the User in connection with the unlawful use of personal data as per the applicable laws of the Russian Federation, except as stipulated in clauses 5.2, 5.3 and 7.2 of this Privacy Policy.
7.2. In case of loss or disclosure of confidential information, the Website Administration shall not be held liable if this confidential information:
7.2.1. Became public prior to its loss or disclosure.
7.2.2. Was disclosed with the User’s consent.
7.3. The User shall bear full responsibility for abiding by the requirements of Russian laws, to include laws on advertising, protection of copyright and related rights, protection of trademarks and service marks, without limitation to the above, including full responsibility for the content and format of materials.
7.4. The User acknowledges that responsibility for any information (including, but not limited to: data files, texts, etc.) to which he/she may have access as part of the Foundation’s Website lies with the person that provided such information.
7.5. The User agrees that the information provided to him/her on the Operator’s Website may be an item of intellectual property, and that the rights to such item of intellectual property are protected and belong to other Users, partners, or advertisers who post such information on the Operator’s Website. The User shall not be entitled to modify, lease, loan, sell, distribute, or create dereliction works based on such Content (in whole or in part), except when the owners of such Content have expressly permitted such actions in writing on the terms of a separate agreement.
7.6. Distribution of text materials (articles, publications) that are in free public access on the Website shall be permitted as long as a link to the Website is provided.
7.7. The Administration shall not be liable to the User for any loss or damage incurred by the User as a result of deletion, failure, or inability to save any Content and other media data contained on the Operator’s Website or transmitted through it.
7.8. The Administration shall not be liable for any direct or indirect losses arising from: the use or inability to use the Website or individual services; unauthorised access to the User’s communications; or statements or behaviours of any third party on the Website.
7.9. The Administration shall not be liable for any information posted by the User on the Website, including but not limited to the information protected by copyright, without the express consent of the copyright holder.

8. DISPUTES
8.1. Prior to filing a lawsuit regarding disputes arising from the relations between the User of the Operator’s Website and the Website Administration, a claim (written proposal for voluntary settlement) shall be filed on a mandatory basis.
8.2. The recipient of the claim shall notify the claimant of its decision following review of the claim in writing within 30 calendar days of receipt of the claim.
8.3. If no agreement is reached, the dispute will be referred to the Arbitration Court of Moscow.
8.4. The effective laws of the Russian Federation shall apply to this Privacy Policy and to the relations between the User and the Website Administration.

9. ADDITIONAL PROVISIONS
9.1. The Website Administration reserves the right to revise this Privacy Policy without the User’s consent.
9.2. The revised Privacy Policy shall take effect immediately after its posting on the Foundation’s Website, except as otherwise stipulated by the new version of the Privacy Policy.
9.3. Any suggestions or questions regarding this Privacy Policy should be sent to: web@case-in.ru.
9.4. The current version of the Privacy Policy is available at it-oilchamp.ru/privacy