Privacy Policy (Personal Data Processing Policy)
1. This Policy for working with personal data of subjects in ContactLineService LLC (hereinafter referred to as the Operator/Company).
2. The personal data processing policy (hereinafter referred to as the Policy) is drawn up in accordance with the legislation of the Republic of Belarus and determines the procedure for processing personal data and measures to ensure the security of personal data, Site Users https://iq-test-institute.com.
3. By using the site and its components, including by registering on the site, the User unconditionally accepts the privacy policy and gives his consent to the processing of personal data.
Basic terms and definitions
4. Website - a set of graphic and information materials, texts, design, video materials and other results of the Operator's intellectual activity, as well as computer programs that ensure their availability on the Internet at a network address https://iq-test-institute.com.
5. Processing of personal data - any action or set of actions performed with personal data, including the collection, systematization, storage, modification, use, depersonalization, blocking, distribution, provision, deletion of personal data.
6. Publicly available personal data - personal data disseminated by the personal data subject himself or with his consent or disseminated in accordance with the requirements of legislative acts.
7. Operator/Company - a person who independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.
8. Personal data is any information relating to an identified natural person or an identifiable natural person.
9. User/Subject of personal data - any visitor to the website https://iq-test-institute.com.
10. Parties - User and Operator.
11. Providing personal data - actions aimed at disclosing personal data to a certain person or a certain circle of persons.
12. Dissemination of personal data - actions aimed at familiarizing with personal data of an indefinite circle of persons.
13. Protection of personal data - a set of measures (organizational, administrative, technical, legal) aimed at protecting against the provision of illegal or accidental access to personal data, destruction, modification, blocking, copying, distribution, as well as other illegal actions.
14. Cross-border transfer of personal data is the transfer of personal data to the territory of a foreign state to an authority of a foreign state, a foreign individual or a foreign legal entity.
Purposes of personal data processing
15. The Company processes personal data using automation tools and without the use of such tools, as well as in a mixed way for the following purposes:
- identification of the User registered on the resource;
- establishing feedback with the User;
- determining the location of the User (if necessary);
- confirmation of the accuracy and completeness of personal data provided by the User (if necessary);
- sending information about the products and services of the resource (the Parties confirm that this information is not spam, and the User agrees to receive it);
- providing the User with access to the services, information and/or materials contained on the website https://iq-test-institute.com;
- promoting the services provided by the Company and improving their quality.
16. If the Company entrusts the processing of personal data to another person, the Company shall be liable to the subject of personal data for the actions of the said person. The person who processes personal data on behalf of the Company is liable to the Company.
17. The Company undertakes and obliges other persons who have gained access to personal data not to disclose them to third parties and not to distribute them without the consent of the subject of personal data, unless otherwise provided by the legislation of the Republic of Belarus.
The list of personal data for the processing of which the consent of the subject of personal data is given
18. Data reflecting surnames, first names and patronymics; phone numbers; email; postal address, other information that is required, from the user - an individual.
19. Name of the organization, legal and postal addresses, bank details, UNP, full name of the head or person with the right to sign, phone numbers from the user - legal entity.
20. The site also collects and processes anonymous data about visitors (including cookies) using Internet statistics services (Yandex.Metrika, Google Analytics, etc.).
21. The User agrees to receive newsletters and promotional materials from the Operator or from other persons on behalf of the Operator to the e-mail address specified by the User during registration. The user can always refuse to receive newsletters and promotional materials by clicking on the link in the information letter info@iq-test-institute.com and clicking on the text "unsubscribe".
The period for which the consent of the subject of personal data is given
22. The operator processes personal data during the period of use by the User of the functionality of the site.
23. The processing of personal data is terminated upon the occurrence of one or more of the specified events:
- receipt from the User of withdrawal of consent to the processing of his personal data in the manner prescribed by the Policy (except as otherwise provided by applicable law);
- the goals of their processing have been achieved;
- the consent of the subject has expired or he has withdrawn his consent to the processing of personal data;
- illegal processing of personal data detected;
- the activity of the organization was terminated.
24. The user gives his consent to the collection and analysis of certain types of technical information, incl.:
- type of computer or mobile device;
- platform type (for example, Apple iOS or Android);
- user's operating system version;
- browser type and language;
- links and exit pages, and URLs;
- date and time of the website;
- the number of clicks on an app or web page feature;
- amount of time spent on an app feature or web page;
- the number of pages viewed and the order of those pages.
25. Other information necessary to ensure the transparency of the processing of personal data.
Basic rights and obligations of personal data subjects
| Subjects of personal data | Obligations of the Operator |
|---|---|
| A1. You have the right to withdraw your consent at any time without giving reasons by submitting an application to the Operator | B1. Obliged, within 15 days after receiving the application of the subject of personal data in accordance with its content, to stop processing personal data, delete them and notify the subject of personal data about this |
| A2. They have the right to receive information regarding the processing of their personal data, containing the name and location of the Operator, confirmation of the fact of processing personal data by the Operator, his personal data and the source of their receipt, the legal grounds and purposes of processing personal data, the period for which their consent is given | B2. Obliged within five working days after receiving the relevant application of the subject of personal data to provide him with information in an accessible form or notify him of the reasons for refusing to provide it |
| A3. The right to require the Operator to make changes to their personal data if the personal data is incomplete, outdated or inaccurate | B3. Is obliged, within 15 days after receiving the application of the subject of personal data, to make appropriate changes to his personal data and notify the subject of personal data about this or notify the subject of personal data about the reasons for refusing to make such changes |
| A4. The right to receive information from the Operator about the provision of their personal data to third parties once a calendar year free of charge | B4. It is obliged, within 15 days after receiving the application of the subject of personal data, to provide him with information about what personal data of this subject and to whom were provided during the year preceding the date of filing the application, or to notify the subject of personal data about the reasons for the refusal to provide it |
| A5. The right to demand from the Operator the free termination of the processing of their personal data, including their deletion, in the absence of grounds for the processing of personal data | B5. Obliged within 15 days after receiving the application of the subject of personal data to stop processing personal data, as well as to delete them (ensure the termination of the processing of personal data, as well as their removal by an authorized person) and notify the subject of personal data about this |
| A6. The right to appeal against the actions (inaction) and decisions of the Operator that violate his rights in the processing of personal data to the authorized body for the protection of the rights of subjects of personal data |
Measures applied to protect personal data of subjects
26. The Operator takes the necessary and sufficient legal, organizational and technical measures to protect Users' personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.
27. The legal measures taken by the Operator include:
- development and application of regulatory documents on the processing and protection of personal data in the Company;
- inclusion in agreements concluded by the Company with counterparties of requirements for confidentiality and ensuring the security of personal data of subjects during their processing.
28. The organizational measures taken by the Operator include:
- familiarization of the Company's employees with the requirements of the legislation of the Republic of Belarus and the Company's regulatory documents in the field of work with personal data;
- publication of internal documents that define the Company's policy regarding the processing of personal data, local regulations on the processing of personal data, as well as local regulations that establish procedures aimed at preventing and detecting violations when working with personal data, and eliminating the consequences of such violations;
- application of organizational and technical measures to ensure the security of personal data during their processing, necessary to meet the requirements for the protection of personal data (use of secure and certified data transmission channels);
- accounting of machine carriers of personal data;
- implementation of internal control over compliance by the Company's employees who work with personal data of subjects with the requirements of the legislation of the Republic of Belarus and internal local regulatory legal acts, as well as control over the measures taken to ensure the security of personal data;
- ensuring registration and accounting of all actions performed with personal data processed using computer devices;
- implementation of differentiation / restriction of access of employees to documents, information resources, technical means and information carriers, information systems and work related to their use;
- regular monitoring of the security of personal data, improvement of the system of their protection.
29. The current version of the Policy in the public domain is located on the Internet at https://iq-test-institute.com/privacy_policy.
30. The Company, if necessary, unilaterally makes appropriate changes to the Policy with their subsequent posting on the website. Subjects independently receive information about changes on the website.