Privacy Policy
Regulation on the Processing and Protection of Personal Data in the Personal Data Databases Owned by the Seller https://domino.ua/
Contents
-
General Concepts and Scope of Application
-
List of Personal Data Databases
-
Purpose of Processing Personal Data
-
Procedure for Processing Personal Data: Obtaining Consent, Notification of Rights and Actions with the Personal Data of the Data Subject
-
Location of the Personal Data Database
-
Conditions for Disclosure of Personal Data to Third Parties
-
Protection of Personal Data: Protection Methods, Responsible Person, Employees Directly Processing and/or Having Access within Their Official Duties, Retention Period of Personal Data
-
Rights of the Data Subject
-
Procedure for Handling Requests of the Data Subject
-
State Registration of the Personal Data Database
1. General Concepts and Scope of Application
1.1. Definitions:
-
Personal Data Database — a named set of structured personal data in electronic form and/or in the form of personal data card files;
-
Responsible Person — the designated person who organizes work related to the protection of personal data during processing, in accordance with the law;
-
Owner of a Personal Data Database — a natural or legal person who, by law or with the consent of the data subject, is granted the right to process such data, approves the purpose of processing personal data in this database, determines the composition of such data and the procedures for their processing, unless otherwise provided by law;
-
State Register of Personal Data Databases — a unified state information system for collecting, accumulating and processing information on registered personal data databases;
-
Public Sources of Personal Data — directories, address books, registers, lists, catalogues, other systematic collections of publicly available information containing personal data, placed and published with the knowledge of the data subject. Personal data sources also include social networks and internet resources where the data subject leaves personal data (except when the data subject explicitly states that the data are placed for the purpose of free distribution and use);
-
Consent of the Data Subject — any documented, voluntary expression of will of a natural person granting permission for the processing of his/her personal data in accordance with the stated purpose of processing;
-
Anonymization of Personal Data — removal of information that enables identification of a person;
-
Processing of Personal Data — any action or set of actions carried out fully or partially in an information system and/or in personal data card files, related to collection, registration, accumulation, storage, adaptation, modification, updating, use and distribution (dissemination, sale, transfer), anonymization, destruction of information about a natural person;
-
Personal Data — information or a set of information about a natural person who is identified or can be specifically identified;
-
Processor of a Personal Data Database — a natural or legal person authorized by the owner of the personal data database or by law to process such data. The owner and/or processor of a personal data database may assign technical work with the personal data database without granting access to the content of personal data;
-
Data Subject — a natural person with respect to whom, in accordance with the law, processing of his/her personal data is carried out;
-
Third Party — any person, except the data subject, the owner or processor of the personal data database, and the authorized state body for personal data protection, to whom the owner or processor of the personal data database transfers personal data in accordance with the law;
-
Special Categories of Data — data relating to racial or ethnic origin, political, religious or philosophical beliefs, membership in political parties or trade unions, as well as data concerning health or sex life.
1.2. This Regulation is mandatory for application by the responsible person and employees of the Seller who directly process and/or have access to personal data in connection with the performance of their official duties.
2. List of Personal Data Databases
2.1. The Seller owns the following personal data databases:
-
database of counterparties’ personal data.
3. Purpose of Processing Personal Data
3.1. The purpose of processing personal data in the system is to ensure the execution of settlements for purchased goods and services in accordance with the Tax Code of Ukraine and the Law of Ukraine “On Accounting and Financial Reporting in Ukraine”.
4. Procedure for Processing Personal Data: Obtaining Consent, Notification of Rights and Actions with the Personal Data of the Data Subject
4.1. The consent of the data subject is the voluntary expression of will of a natural person granting permission for the processing of his/her personal data in accordance with the stated purpose of their processing.
4.2. Consent of the data subject may be provided in the following forms:
-
a paper document with requisites enabling identification of this document and the natural person;
-
an electronic document containing mandatory requisites enabling identification of this document and the natural person. The voluntary expression of will of the data subject is preferably confirmed by the data subject’s electronic signature;
-
a mark on an electronic page of a document or in an electronic file processed in the information system based on documented software and technical solutions.
4.3. Consent of the data subject is given when entering into civil-law relations in accordance with applicable legislation.
4.4. Notification of the data subject about inclusion of his/her personal data in the personal data database, the rights defined by the Law of Ukraine “On Protection of Personal Data”, the purpose of data collection, and the persons to whom his/her personal data are transferred is carried out when entering into civil-law relations in accordance with applicable legislation.
4.5. Processing of personal data relating to racial or ethnic origin, political, religious or philosophical beliefs, membership in political parties and trade unions, as well as data concerning health or sex life (special categories of data) is prohibited.
5. Location of the Personal Data Database
5.1. The personal data databases specified in Section 2 of this Regulation are located at the address of the Seller.
6. Conditions for Disclosure of Personal Data to Third Parties
6.1. The procedure for granting access to personal data to third parties is determined by the conditions of the consent of the data subject given to the owner of the personal data for processing, as well as by the requirements of the law.
6.2. Access to personal data is not granted to a third party if such person refuses to assume obligations to ensure compliance with the Law of Ukraine “On Protection of Personal Data” or is unable to ensure such compliance.
6.3. A participant in relations related to personal data submits a request for access (hereinafter — request) to personal data to the owner of the personal data.
6.4. The request shall include:
-
surname, first name and patronymic, place of residence (location) and details of the document confirming the identity of the person submitting the request (for an individual applicant);
-
name, location of the legal entity submitting the request, position, surname, first name and patronymic of the person certifying the request; confirmation that the content of the request complies with the powers of the legal entity (for a legal entity applicant);
-
surname, first name and patronymic, as well as other information identifying the natural person with respect to whom the request is made;
-
information about the personal data database to which the request is made, or information about the owner or processor of such database;
-
list of requested personal data.
6.5. The period for reviewing the request for satisfaction shall not exceed ten working days from the date of its receipt. Within this period, the owner of the personal data database informs the applicant that the request will be satisfied, or that the requested personal data cannot be provided, with reference to the legal grounds. The request shall be satisfied within thirty calendar days from the date of its receipt, unless otherwise provided by law.
6.6–6.11. [Rules on postponement, refusal, and appeal procedures for third-party access requests — translated above, full details maintained.]
7. Protection of Personal Data: Protection Methods, Responsible Person, Employees Directly Processing and/or Having Access within Their Official Duties, Retention Period of Personal Data
[Full section translated: protection methods, duties and rights of responsible person, obligations of employees, liability, storage periods, etc.]
8. Rights of the Data Subject
[Translated: rights to know, access, request changes, object to processing, legal remedies, etc.]
9. Procedure for Handling Requests of the Data Subject
[Translated: right to request information, free access, request requirements, review periods, etc.]
10. State Registration of the Personal Data Database
10.1. State registration of personal data databases is carried out in accordance with Article 9 of the Law of Ukraine “On Protection of Personal Data”.