1. General provisions
This Personal Data Processing Policy determines the procedure and conditions for the processing of personal data at DS.Med LLC and is published in accordance with Article 18.1(2) of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data". The Policy applies to all personal data received through the website ds-med.info, its forms and other communication channels.
2. Information about the controller
Controller: DS.Med LLC (ООО «ДС.Мед»), INN 5043035712, KPP 504301001, OGRN 1085043003352. Address: 142214, Moscow Region, Serpukhov, Severny proezd, 6, office 1, Russia. Phone: +7 (495) 979-11-55. Email: info@ds-med.info. A person responsible for organising personal data processing is appointed by order of the head of the controller; enquiries are accepted at the contact details above.
3. Definitions
Personal data means any information relating directly or indirectly to an identified or identifiable natural person. Personal data processing means any action or set of actions with personal data, including collection, recording, systematisation, accumulation, storage, clarification, extraction, use, transfer, blocking, deletion and destruction. Data subject means the natural person to whom the data relates. Anonymisation means actions after which it is impossible to determine the belonging of data to a data subject.
4. Categories of data subjects
- website visitors submitting requests through forms;
- representatives of organisations and clinics contacting us about supply and service;
- counterparties and their representatives;
- persons sending enquiries by email or phone.
5. Categories of personal data processed
- name, organisation or clinic name, phone number, email address;
- equipment of interest, message text and other information voluntarily provided by the data subject;
- technical data: IP address, User-Agent, page address, UTM tags - in anonymised form;
- cookies required for the website to operate.
Special categories of personal data and biometric data are not processed.
6. Purposes and legal grounds for processing
- responding to a request and providing feedback - consent of the data subject (Article 6(1)(1) of 152-FZ);
- preparing and sending a commercial proposal - consent of the data subject (Article 6(1)(1) of 152-FZ);
- concluding and performing a contract for supply, installation, training and service - performance of the contract (Article 6(1)(5) of 152-FZ);
- maintaining accounting and tax records - legal requirements;
- advertising and information mailings - separate consent of the data subject (Article 18(1) of 38-FZ).
7. Methods, periods and conditions of processing
Processing is carried out by mixed means: with and without the use of automation. The following actions are performed with the data: collection, recording, systematisation, accumulation, storage, clarification, extraction, use, blocking, deletion and destruction.
Personal data is stored on servers in the territory of the Russian Federation; no cross-border transfer is carried out. The storage period is no more than five years from the last contact by the data subject, unless another period is established by law or by a contract.
8. Transfer of personal data to third parties
Personal data is not sold or transferred to third parties for advertising purposes. Transfer is permitted only in cases provided for by law, or to contractors supporting the operation of the website and communications, to the minimum extent necessary and under confidentiality obligations.
9. Personal data protection measures
- a person responsible for organising personal data processing is appointed;
- access to personal data is granted only to authorised employees;
- the website connection is protected by HTTPS;
- organisational and technical measures protect data against unlawful access, modification, blocking and destruction.
10. Destruction and anonymisation of personal data
When the purposes of processing are achieved, the storage period expires or consent is withdrawn, personal data is destroyed or anonymised within a period not exceeding 30 days, unless otherwise established by law. Destruction is documented by an act.
11. Rights of data subjects
The data subject has the right to receive information about the processing of their data, to demand its clarification, blocking or destruction, to withdraw consent, and to appeal against the actions of the controller to Roskomnadzor or to a court. Requests are sent to info@ds-med.info and reviewed within 10 business days.
12. Final provisions
The Policy comes into force upon its publication on the website and remains in effect until replaced by a new version. The controller may amend the Policy; the new version is published on this page.