1.1. Personal processing policy of the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19.
This Policy defines the procedure and conditions of the Operator regarding the processing of personal data and determines the provisions aimed at preventing and detecting violations of the legislation of Ukraine in the field of personal data.
All issues related to the processing of personal data that are not regulated by this Policy are resolved in accordance with the current legislation of Ukraine.
1.2. The purpose of personal data processing is:
provision of personal data to the subjects on the website https://artymslab.online , which hosts and operates the Artym's Lab. Painting and Drawing Studio project, aimed at teaching fine arts to Internet users.
Ensuring the protection of human rights and freedoms in the processing of his personal data, including the protection of the rights to privacy, personal and family secrets.
1.3. Processing is organized by the Operator on the principles of:
legitimacy of the purposes and methods of processing personal data, good faith and fairness in the activities of the Operator;
the reliability of personal data, their sufficiency for the purposes of processing, the inadmissibility of processing personal data that is excessive in relation to the purposes stated when collecting personal data;
processing only personal data that meet the purposes of their processing;
compliance of the content and scope of the processed personal data with the stated purposes of processing. The processed personal data should not be excessive in relation to the stated purposes of their processing;
the inadmissibility of combining databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other;
ensuring the accuracy of personal data, their sufficiency, and, if necessary, relevance in relation to the purposes of processing personal data. The operator takes the necessary measures or ensures their adoption to remove or clarify incomplete or inaccurate data;
storage of personal data in a form that allows you to determine the subject of personal data, no longer than required by the purposes of processing personal data.
1.4. Personal data is processed using automation tools.
1.5. The operator processes the following personal data:
1.5.1. Mandatory, without which registration on the site
https://artymslab.online is impossible:
— Last name, first name
- E-mail address
1.5.2. Voluntary, that is, data that the user indicates in his account at his own request:
- City
- Country
- Date of Birth
Information about yourself in free form
1.5.2.1. At the same time, some mandatory and / or voluntary personal data, at the personal will of the user on the site
https://artymslab.online, are made public by such a user to any third parties in accordance with the Law of Ukraine dated 01.06.10 No. 2297-VI “On the protection personal data". With. 19
1.6. When processing personal data, the Operator applies all necessary legal, organizational and technical measures to ensure the security of personal data in accordance with the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19.
1.7. The operator does not disclose to third parties and does not distribute personal data without the consent of the subject of personal data, except if it is provided for by the current legislation of Ukraine.
1.8. Assessment of the harm that may be caused to the subjects of personal data in case of violation by the Operator of the requirements of the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19. The ratio of the specified harm and the measures taken by the Operator aimed at preventing, preventing and / or eliminating its consequences is determined by the local acts of the Operator.
1.9. Conditions for processing personal data by the Operator:
personal data is processed by the Operator after the conclusion by the subject of personal data of a user agreement (agreement - offer) to provide such a subject with the right to study fine arts at the Artym's Lab Painting and Drawing Studio. According to the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19, the consent of the subject of personal data is not required, since the subject enters into an agreement on his own initiative and is the beneficiary under the agreement concluded by him.
The operator does not transfer the personal data of the subject to third parties.
1.10. The storage of personal data of subjects who are users of the site
https://artymslab.online, is carried out in a form that allows you to determine the subject of personal data. Personal data is subject to destruction upon reaching the goals of processing. Deletion of personal data is carried out by deleting an account on the site
https://artymslab.online, after which such an account cannot be restored.
1.11. Interaction with executive authorities on the processing and protection of personal data of subjects whose personal data is processed by the Operator is carried out within the framework of the legislation of Ukraine.
1.12. The processing of personal data is carried out automatically, using a special software module of the website https://artymslab.online, which processes sections of data filled in by users, and on the basis of which a personal account (account) is created for the user.
2. RESPONSIBLE FOR PROCESSING PERSONAL DATA
2.1. When processing personal data, the Operator issues an appropriate order to appoint a person responsible for the processing of personal data.
2.2. The person responsible for the processing of personal data is subordinate to the executive body of the Operator - the General Director, controls the process of processing personal data and ensures the implementation of all provisions of this Policy relating to his competence.
2.3. Responsible for the processing of personal data:
2.3.1. exercises internal control over compliance by the Operator and its employees with the legislation of Ukraine on personal data, including the requirements for the protection of personal data.
2.3.2. Controls the acceptance and processing of appeals and requests from personal data subjects or their representatives.
2.3.3. Takes measures to detect facts of unauthorized access to personal data and immediately bring this information to the General Director.
2.3.4. Performs constant monitoring of ensuring the level of security of personal data.
2.3.5. Acquaints, against signature, the Operator's employees who have access to personal data with the provisions of Ukrainian legislation on personal data, including the requirements for the protection of personal data, as well as with the Operator's local acts that determine the procedure for processing Personal data.
2.3.6. Carries out internal control and (or) audit of compliance with the processing of personal data Law of Ukraine dated 01.06.10 No. 2297-VI "On the protection of personal data". With. 19 "On Personal Data" and regulations adopted in accordance with it, requirements for the protection of personal data, the Operator's policy regarding the processing of personal data, local acts of the Operator.
3. PROCEDURE FOR ENFORCING THE RIGHTS OF THE SUBJECT OF PERSONAL DATA
3.1. Subjects of personal data or their representatives have the rights provided for by the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19.
3.2. The operator ensures the rights of subjects of personal data in the manner prescribed by the chapters of the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19.
3.3. The authority of the representative to represent the interests of each subject of personal data is confirmed by an appropriate power of attorney.
3.4. Information specified by the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19 are delivered to the subject of personal data in an accessible form without personal data relating to other subjects of personal data, unless there are legal grounds for disclosing such personal data, in electronic form. At the request of the subject of personal data, they can be duplicated on paper. An accessible form on paper must be certified by the Director General.
3.5. Information specified in the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19 are provided to the subject of personal data or his representative upon personal application or upon receipt of a request from the subject of personal data or his representative. The request must contain the number of the main document proving the identity of the subject of personal data or his representative, information about the date of issue of the specified document and the authority that issued it, information confirming the participation of the subject of personal data in relations with the Operator (contract number, date of conclusion of the contract, conditional verbal designation and (or) other information), or information otherwise confirming the fact of processing personal data by the Operator, the signature of the personal data subject or his representative. If it is technically possible, the request can be sent in the form of an electronic document and signed with an electronic signature in accordance with the legislation of Ukraine.
3.6. The right of the subject of personal data to access his personal data may be limited in accordance with the laws of Ukraine.
3.7. The operator is obliged to immediately stop, at the request of the subject of personal data, the processing of his personal data, specified in the Law of Ukraine dated 01.06.10 No. 2297-VI "On the Protection of Personal Data". With. 19.
3.8. The operator is obliged to provide free of charge to the subject of personal data or his representative the opportunity to get acquainted with the personal data relating to this subject of personal data, at the place of his location during working hours.
3.9. The Operator, at the request of the subject of personal data or his authorized representative, provides for review the local acts of the Operator regarding the processing of personal data.