This translation is provided for convenience. The Russian version is legally binding.
1.1. This Personal Data Processing Policy (the “Policy”) has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and defines the procedure for processing personal data and the measures taken to ensure their security when using the website https://drsorvin.ru (the “Website”).
1.2. Personal data operator (the “Operator”):
1.3. The Policy applies to the personal data of Website users obtained through feedback forms, consultation booking forms and the use of the Website.
1.4. The Operator ensures the confidentiality of personal data and respects the rights of personal data subjects.
1.5. The Policy is published on the Website and is freely accessible.
2.1. Depending on the Website functions used, the Operator may process the following personal data provided by the user:
2.2. When the Website is used, technical data may also be processed: IP address, browser and device information, date and time of the visit, addresses of pages visited, cookies and other technical identifiers to the extent necessary for the operation of the Website and the services used on it.
2.3. Information about health belongs to special categories of personal data. This Policy does not replace the legal grounds and special consents required by law for processing such data.
2.4. The Operator does not collect passport data, medical reports or medical documents through the standard initial booking form unless such functionality is separately provided for and formalised in accordance with the law.
3.1. The Operator processes personal data for the following purposes:
3.2. Personal data are not used for marketing mailings without the user’s separate prior consent where such consent is required by law.
3.3. Processing of personal data incompatible with the stated purposes is not permitted.
4.1. Personal data are processed on the grounds provided for by Federal Law No. 152-FZ, including:
4.2. Where processing is based on the user’s consent, such consent is given separately from this Policy.
5.1. Personal data may be processed with or without the use of automated means.
5.2. Processing may include collection, recording, systematisation, accumulation, storage, clarification, extraction, use, transfer (provision, access) in cases provided for by law, depersonalisation, blocking, deletion and destruction of personal data.
5.3. Access to personal data is granted only to persons who need it to perform their duties.
5.4. The Operator may entrust the processing of personal data to third parties that provide the technical operation of the Website, storage of requests and the organisation of feedback, provided that the necessary legal grounds exist and the requirements of the legislation of the Russian Federation are met.
5.5. When entrusting processing to third parties, the Operator ensures that appropriate contractual terms on confidentiality, security and permitted actions with personal data are in place.
5.6. Dissemination of personal data to an indefinite circle of persons without a legal basis is not permitted.
5.7. When collecting personal data of citizens of the Russian Federation, the Operator complies with the legal requirements on the localisation of personal data.
6.1. Personal data are processed and stored no longer than required by the purposes of processing, unless a different period is established by law or contract.
6.2. Data obtained to review a request and organise feedback are processed until the relevant purpose is achieved, the need for processing ceases or consent is withdrawn, provided there are no other legal grounds for continued processing.
6.3. Once the purposes of processing are achieved, or on other grounds provided for by law, personal data are destroyed or depersonalised in the manner prescribed by law.
7.1. The Operator takes the necessary legal, organisational and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, provision, dissemination and other unlawful actions.
7.2. Such measures include, among others, restricting access to data, ensuring confidentiality, using information security tools and monitoring compliance with legal requirements.
7.3. Specific protection measures are determined with regard to the nature of the data processed, the information systems used and current security threats.
8.1. The user has the right to:
8.2. To exercise their rights, the user may send a request to the Operator’s email: dr.sorvin@gmail.com.
8.3. The Operator reviews requests and fulfils lawful demands within the time limits established by the legislation of the Russian Federation.
8.4. Withdrawal of consent does not preclude further processing of personal data where other legal grounds exist.
9.1. The Website may use cookies and similar technologies for correct operation, saving technical settings, protecting the Website and analysing its use.
9.2. Where analytics and other third-party services are used, data are processed in compliance with the legislation of the Russian Federation.
9.3. The user may restrict or delete cookies in the browser settings. Restricting technically necessary cookies may affect certain Website functions.
9.4. Optional analytics and advertising technologies that require consent are used only where an appropriate legal basis exists.
10.1. This Policy takes effect from the date of its publication on the Website.
10.2. The Operator may amend the Policy when the law, the procedure for processing personal data or the functionality of the Website changes.
10.3. The current version of the Policy is permanently available at: https://drsorvin.ru/privacy-policy.
10.4. All matters not regulated by this Policy are governed by the legislation of the Russian Federation.