Privacy Policy

1 General information

1.1 The following information is provided with an overview of what will happen with your personal data when you visit this website and measures for providing security of personal data, undertaken by the LLC «UTANOL» (further the Operator).

1.2 The principal goal and condition of the Operator’s operation is to observe human and civil rights and freedoms in the processing of personal data, including the protection of privacy, personal and family secrets.

1.3 This Privacy Policy (hereinafter, the Policy) applies to all information that the Operator may receive about visitors to the website https://utanol.by.

2 Terms and definitions used in the Policy

2.1 Automated processing of personal data – processing of personal data by means of computer technology.

2.2 Blocking of personal data – temporary termination of personal data processing (except when processing is necessary to clarify personal data).

2.3 Website – a set of graphic and informational materials, as well as computer programs and databases, ensuring their availability on the Internet at the network address https://utanol.by.

2.4 Personal data information system – a set of personal data contained in databases of personal data and information technologies and technical means ensuring their processing.

2.5 De-identification of personal data – actions, as a result of which it is impossible to determine, without the use of additional information, whether the personal data belongs to a particular User or other personal data subject.

2.6 Processing of personal data – any action (operation) or set of actions (operations) performed with personal data, including collection, systematization, storage, clarification (updating, modification), extract, use, transfer (distribution, provision, access), anonymization, blocking, removal of personal data.

2.7 Operator – a state agency, municipal authority, legal entity or individual, independently or together with other persons, organizing and/or carrying out processing of personal data, as well as determining the purpose of personal data processing, the content of personal data to be processed, actions (operations) performed with personal data.

2.8 Personal data – any information relating to a certain or definable User of the website https://utanol.by.

2.9 Personal data, allowed by the subject of personal data for distribution, – personal data, access to which is provided by the subject of personal data by giving consent to the processing of personal data, allowed by the subject of personal data for distribution in the manner prescribed by the Law on Protection of Personal Data (hereinafter – personal data allowed for distribution).

2.10 User – any visitor to the website https://utanol.by.

2.11 Provision of personal data – actions aimed at familiarization with personal data of a certain person or a certain circle of persons.

2.12 Dissemination of personal data – actions aimed at familiarization with personal data on an indefinite range of persons, including publication of personal data in the media, placement in information and telecommunications networks or providing access to personal data in any other ways.

2.13 Cross-border transfer of personal data – transfer of personal data to the territory of a foreign country to a foreign authority, foreign individual or foreign legal entity.

2.14 Destruction of personal data – actions, as a result of which personal data is destroyed irretrievably with the impossibility of further restoration of personal data content in the information system of personal data and/or destruction of the physical storage units of personal data.

3 Basic rights and obligations of the Operator

3.1 The operator has rights to:

• receive from the subject of personal data reliable information and/or documents containing personal data;
• the Operator has the right to continue processing personal data without the consent of the personal data subject on the grounds specified in the Law on Protection of Personal Data, even if the personal data subject withdraws consent to the processing of personal data, as well as sending a request to terminate the processing of personal data;
• independently determine the composition and list of measures, necessary and sufficient to ensure fulfillment of obligations provided by the Law on Protection of Personal Data, other legislative acts, as well as international treaties of the Republic of Belarus.

3.2 The operator is obligated to:

• provide to the subject of personal data, at his/her request, information relating to the processing of his/her personal data;
• organize processing of personal data in the manner specified in the current legislation of the Republic of Belarus;
• respond to requests and inquiries of subjects of personal data and their legal representatives in accordance with the requirements of the Law on Protection of Personal Data;
• inform the authorized agency for the protection of the rights of subjects of personal data, at the request of this body, the necessary information within 30 days from the date of receipt of such a request;
• publish or otherwise ensure unrestricted access to this Policy on personal data processing;
• take legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision, distribution of personal data, as well as other illegal actions in relation to personal data;
• stop transfer (distribution, provision, access) of personal data, stop processing and destroy personal data in the manner and cases specified in the Law on Protection of Personal Data;
• perform other duties provided by the Law on Protection of Personal Data and other legislative acts.

4 Basic rights and obligations of subjects of personal data

4.1 Subjects of personal data have rights to:

• receive information relating to the processing of his/her personal data, except for cases specified by Law. Information shall be provided to the subject of personal data by the operator in an accessible form, and shall not contain personal data relating to other subjects of personal data, except for cases where there are legitimate grounds for disclosure of such personal data. The list of information and the procedure for obtaining it are set forth in the Law on Protection of Personal Data;
• require the operator to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as to take legal measures to protect their rights;
• impose the condition of prior consent when processing personal data for the purpose of promoting goods, works and services in the market;
• withdraw consent for personal data processing, as well as to request the termination of personal data processing;
• appeal to the authorized body for protection of the rights of subjects of personal data or in court illegal actions or lack of action of the Operator in the processing of his personal data;
• realize other rights, specified by the legislation of the Republic of Belarus.

4.2 Subjects of personal data are obliged to:

• provide the Operator with reliable data about themselves;
• inform the Operator about the clarification (updating, changing) of their personal data.

4.3 Persons who provided the Operator with inaccurate information about themselves, or information about another subject of personal data without their consent, bear responsibility in accordance with the legislation of the Republic of Belarus.

5 Principles of personal data processing

5.1 Processing of personal data is carried out in accordance with the Law on Protection of Personal Data and other legislative acts.

5.2 Processing of personal data is limited to achieving specific, predetermined and legitimate purposes. Processing of personal data that is incompatible with the purpose of collecting personal data shall not be permitted.

5.3 If it is necessary to change the initially stated purposes of personal data processing, the operator is obliged to obtain consent from the subject of personal data to process his personal data in accordance with the modified purposes of processing of personal data in the absence of other grounds for such processing, provided by the Law on Protection of Personal Data and other legislative acts.

5.4 Databases containing personal data that are processed for purposes that are incompatible with each other shall not be combined.

5.5 Only personal data that meets the purposes for which it is being processed may be processed.

5.6 The content and amount of processed personal data correspond to the stated processing purposes. No redundancy of processed personal data in relation to the stated purposes of its processing shall be allowed.

5.7 The accuracy of personal data and its sufficiency is ensured during the processing of personal data, and, if necessary, its relevance in relation to the purposes of personal data processing. The Operator takes the necessary measures and/or ensures that such measures are taken to remove or clarify incomplete or inaccurate data.

5.8 Personal data is stored in a form that allows identification of the subject of personal data, no longer than required by the purposes of personal data processing, unless the storage period of personal data is established by law, contract, a party, beneficiary or guarantor, under which the subject of personal data. Processed personal data is destroyed or depersonalized upon attainment of processing purposes or if it is no longer necessary to attain such purposes, unless otherwise provided by law.

5.9 Processing of personal data is carried out with the consent of the subject of personal data, except as provided by the Law on Protection of Personal Data and other legislation.

6 Purposes of personal data processing

Purposes of processing	– informing the User (the subject of personal data) by sending e-mails – response to the User’s (the subject of personal data) request
Personal data	– e-mail address – surname and first name
Legal Basis	statutes (foundation agreement) documents of the Operator
Types of personal data processing	– sending newsletters to an email address – responding to a user’s request to an email address
The period of time for which consent is given	the time required to use the data for the main activity of the website

7 Terms of personal data processing

7.1 Processing of personal data is carried out with the consent of the subject of personal data on processing of his/her personal data.

7.2 Processing of personal data is necessary to achieve the purposes stipulated by an international treaty of the Republic of Belarus or by law, to perform the functions, competences and obligations imposed on the Operator by the legislation of the Republic of Belarus.

7.3 Processing of personal data without the consent of the subject of personal data is carried out only in cases specified in the Law on Protection of Personal Data and other legislative acts.

7.4 When you visit the website utanol.com in the database records your IP address, time of visit, browser settings, operating system, as well as other technical information needed to display the contents of the website correctly. From this data it is impossible to identify the identity of the visitor.

7.5 It is forbidden to leave personal information to minors on our service without parental or guardian consent. If you are a parent or guardian and you know that your children have given us their personal data without your consent, please contact us: utanol@mail.ru.

8 Procedure of collection, storage, transfer and other processing of personal data

8.1 The security of personal data processed by the Operator is ensured by means of legal, organizational and technical measures necessary to comply fully with the requirements of current legislation in the field of personal data protection.

8.2 The Operator ensures the safety of personal data and takes all possible measures to exclude access to personal data by unauthorized persons.

8.3 Personal data of the User (the subject of personal data) is never, under no circumstances transferred to third parties, except in cases related to the implementation of the current legislation or if the subject of personal data has given consent to the Operator to transfer data to a third party to fulfill obligations under a civil law contract.

8.4 In case of detection of inaccuracies in personal data, the User (the subject of personal data) can update them independently by sending a notice to the Operator’s e-mail address utanol@mail.ru with a note «Updating of personal data».

8.5 The term of processing of personal data is determined by achieving the purposes for which the personal data was collected, unless a different term is stipulated by the contract or current legislation.

8.6 The user (the subject of personal data) may withdraw his consent to the processing of personal data at any time by sending a notice via email to the Operator’s email address utanol@mail.ru , marked «Withdrawal of consent to the processing of personal data».

8.7 All information that is collected by third-party services, including payment systems, means of communication and other service providers, is stored and processed by the specified persons (Operators) in accordance with their User Agreement and Privacy Policy. The subject of personal data and/or with the specified documents. The Operator shall not be liable for the actions of third parties, including the service providers mentioned in this clause.

8.8 The website utanol.com use third party Internet services that collect information independent of us: Yandex.Metrica, Google Analytics. The data collected by them can be provided to other services within these organizations, they can use the data to personalize the advertising of their own advertising network. The user can read the user agreements of these organizations on their websites. There the user can also opt out of their personal data collection, for example Google Analytics blocker is here (https://tools.google.com/dlpage/gaoptout?hl=ru), Yandex Metrics blocker is here (https://yandex.ru/support/metrica/general/opt-out.html). LLC «UTANOL» does not transfer personal data to other organizations and services not specified in this privacy policy. The only exception is the transfer of information when legally required by state authorities authorized to carry out these actions.

8.9 The website https://utanol.by may contain links to other websites which are not operated by the Operator. The Operator is not responsible for their content. The Operator recommends the user to read the privacy policy of each site he visits, if it is there.

8.10 The prohibitions established by the subject of personal data on transfer (except for granting access), as well as on processing or conditions of processing (except for obtaining access) of personal data permitted for distribution, shall not apply in cases of processing of personal data in state, social and other public interests, defined by the legislation of the Republic of Belarus.

8.11 The Operator shall ensure confidentiality of personal data when processing personal data.

8.12 Personal data is stored in a form that allows identification of the subject of personal data, no longer than required by the purposes of personal data processing, unless the storage period of personal data is established by law, contract, a party, beneficiary or guarantor, under which the subject of personal data.

8.13 The condition for termination of personal data processing can be the achievement of the purposes of personal data processing, expiration of the consent of the subject of personal data, withdrawal of consent by the subject of personal data or the requirement to stop processing of personal data, as well as detection of unlawful processing of personal data.

9 The list of actions made by the Operator with the received personal data

9.1 The Operator collects, records, systematizes, accumulates, stores, clarifies (updates, changes), extracts, uses, transfers (distribution, provision, access), depersonalizes, blocks, deletes and destroys personal data.

9.2 The Operator carries out automated processing of personal data with or without the receipt and/or transmission of received information via information and telecommunications networks.

10 Transborder transfer of personal data

10.1 The Operator is obliged to notify the competent authority for protection of the rights of subjects of personal data about its intention to transfer personal data across borders (such notification is sent separately from the notification of the intention to process personal data) before starting the activity on transborder transfer of personal data.

10.2 The transborder transfer of data is carried out only if the appropriate level of protection of the rights of subjects of personal data is provided in the foreign country, except in cases provided by the Law on Protection of Personal Data.

11 Confidentiality of personal data

The Operator and other persons who have access to personal data are obliged not to disclose to third parties and not to disseminate personal data without the consent of the subject of personal data, unless otherwise provided by law.

12 Final provisions

12.1 The User (the subject of personal data) can receive any clarifications on questions of interest regarding the processing of his/her personal data by contacting the Operator by email at utanol@mail.ru.

12.2 This document will reflect any changes in the personal data processing policy of the Operator. The policy is valid indefinitely until it is replaced by a new version.

12.3 The up-to-date version of the Privacy Policy is freely available on the Internet at https://utanol.by/en/privacy-policy-en.