3.1 The Operator has the right to:
– obtain reliable information and/or documents containing personal data from the data subject;
– in case the data subject withdraws consent to the processing of personal data, the Operator has the right to continue processing personal data without the consent of the data subject if there are grounds specified in applicable legislation;
– independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided for by applicable legislation;
– transfer personal information of data subjects (including to organizations that carry out recording, systematization, accumulation, clarification, storage, extraction, and directly send special offers, information about new products and promotions to the User, process requests and appeals, as well as carry out the destruction of personal information) to third parties only to provide services to the data subject (fulfilling its obligations under the contract with the data subject), or if the transfer of such information is provided for by applicable legislation in accordance with the established legal procedure.
3.2 The Operator is obliged to:
– provide the data subject, upon request, with information regarding the processing of their personal data;
– organize the processing of personal data strictly in accordance with the requirements of Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006, as well as the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR);
– respond to requests and inquiries from data subjects and their legal representatives in accordance with the requirements of applicable law;
– inform the authorized body for the protection of the rights of data subjects upon request of this body (as well as on its own initiative in cases provided for by Federal Law No. 152 “On Personal Data” and GDPR) of the necessary information within the established time limits;
– ensure unrestricted access to this Policy;
– take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, distribution of personal data, as well as other unlawful actions regarding personal data;
– cease the transmission (distribution, provision, access) of personal data, stop processing, and destroy personal data in the manner and cases provided for by applicable law;
– fulfill other obligations stipulated by applicable legislation, including GDPR.