1. General ProvisionsThis Personal Data policy has been developed in compliance with the requirements of Federal Law No. 152-FL of July 27, 2006, "On Personal Data" and defines the processes for handling Personal Data and measures to ensure the safety of Personal Data collected by SDP-INTERIOR (hereafter referred to as the "Operator").
1.1 The primary goal of the Operator is to uphold human and civil rights while processing Personal Data, including protecting the right to privacy and confidentiality of personal and family matters.
1.2 This policy covers all personal information that the operator may collect from visitors to its website https://www.luxmarket.az.
2. Key Terms Used in this Policy2.1 Automatic Processing of Personal Data is Processing of personal information using computer systems
2.2 Blocking Personal Data is Temporary suspension of personal information processing (except for the cases when processing is necessary for Personal Data clarification).
2.3 Website is a collection of graphic and informational materials, as well as computer programs and databases, that ensure their accessibility on the internet at the address https://www.luxmarket.az.
2.4 Personal Data Information System is a database that stores Personal Data, along with the information technologies and technical means used to process it.
2.5. Depersonalization is actions taken to make it impossible to identify a specific individual or other subject of Personal Data without further information.
2.6. Processing of Personal Data is any operation or combination of operations performed on Personal Data, either manually or using automated tools, including collection, recording, organization, storage, updating, extraction, use, transfer, de-identification, blocking, deletion, or destruction of Personal Data.
2.7. Operator is a government agency, municipal body, legal entity, or individual who independently or in collaboration with others organizes and/or processes Personal Data, determines the purpose of the processing, specifies the composition of the data to be processed, and specifies the actions to be taken on the data.
2.8. Personal Data is information that directly or indirectly refers to a user of the website https://www.luxmarket.az.
2.9. Authorized Personal Data is Personal Data made available to an unlimited number of people with the consent of the data subject to distribution by the procedures outlined in the Law on Personal Data.
2.10. User - a person visiting the website https://www.luxmarket.az.
2.11. Providing Personal Data: Taking actions to disclose personal information to a specific person or group of people.
2.12. Dissemination of Personal Information: Any action taken to make Personal Data accessible to an unspecified group of people, such as transferring personal information or making personal information available to an unlimited number of individuals. This includes publishing personal details in media, posting information on information and communication networks, and providing access to Personal Data in other ways.
2.13. Cross-border Transfer of Personal Information is the transfer of Personal Data from one country to another country, to an entity located in the receiving country.
2.14. Destruction of Personal Information refers to any action that permanently removes Personal Data from a Personal Data system or storage medium, making it impossible to recover.
3. Basic Rights and Obligations of the Operator3.1 The Operator has the right to:
- Receive reliable information and/or documents containing Personal Data from the person whose data are being processed.
- In case a person revokes consent for the processing of their data or sends a request to cease processing Personal Data, the Operator can continue processing personal information without the person's consent, if there are reasons specified in the Personal Data Protection Act.
- Independently determine the composition and list of measures necessary and sufficient to fulfil obligations under the Personal Data Act and regulatory legal acts made in accordance with it.
3.2 The Operator is obligated to:
- Provide a person with information about the processing of their personal information upon request.
- Organize the processing of Personal Data in accordance with the procedure established by the current legislation of the Russian Federation.
- Respond to requests and inquiries from Personal Data subjects and their legal representatives according to the requirements of the Personal Data Protection Law.
- Inform the authorized body responsible for protecting the rights of Personal Data subjects upon request from this body about any necessary information within ten days of receiving such a reque.
- Publish or otherwise make this policy regarding the processing of personal information available to all users.
- Take legal, organizational, and technical measures to protect personal information from unauthorised or accidental access, destruction, modification, blocking, copying, provision, dissemination, or other unlawful actions related to Personal Data.
- Stop transferring (distributing, sharing, accessing) Personal Data. Cease processing and destroy Personal Data by procedures and circumstances provided for by the Personal Data Law.
- Perform other duties as required by the Personal Data Act.
4. Basic Rights and Obligations of Personal Data Subjects4.1 Personal Data subjects have the following rights:
- To receive information regarding the processing of their Personal Data. This information is provided by the operator to the Personal Data subject in an accessible format and should not contain Personal Data about other persons unless there are legal reasons for the disclosure of such information. The list of information that must be provided and the procedure for obtaining this information are set out in the Personal Data Protection Act.
- To require the operator to correct, delete, or block any personal information that is incomplete, outdated, inaccurate, obtained illegally, or unnecessary for the stated purpose of processing, as well as to take measures provided for by law to protect their rights;
- To put forward a condition of prior consent when processing Personal Data to promote goods, works, or services on the market.
- To revoke consent for the processing of Personal Data or send a request to terminate the processing of that data.
- To appeal to the relevant authority for the protection of Personal Data rights or to court in the event of illegal actions or omissions by the operator during the processing of their Personal Data.
- To exercise other rights provided for by the legislation of the Russian Federation.
4.2 Personal Data subjects are required to:
- Provide accurate and reliable information to the operator.
- Notify the operator of any changes or updates to personal information. Any person who provides false information to our company or provides information about another person without their permission will be held responsible in accordance with Russian law.
4.3. Persons who have provided the Operator with false information about themselves or information about another Personal Data subject without the latter's consent are liable in accordance with the legislation of the Russian Federation.
5. Principles of Personal Data Processing5.1 Personal Data processing shall be carried out in accordance with the law and a fair manner.
5.2 Personal Data shall only be processed for specific, predefined, and legitimate purposes. It is not allowed to process Personal Data for any purpose other than those for which it was originally collected.
5.3 Combining databases containing Personal Data that have been processed for different purposes is prohibited.
5.4 Only relevant Personal Data will be processed to the extent necessary for the processing.
5.5 The content and scope of the processed Personal Data must correspond to the stated purposes of the processing. It is not allowed to have any excess personal information about its stated purpose of processing.
5.6 When processing Personal Data, the accuracy and completeness of the data are ensured, and if necessary, their relevance to the processing purposes is verified. The operator takes necessary measures to ensure that incomplete or inaccurate data are deleted.
5.7 Personal Data is stored in a way that allows identification of the individual, for no longer than required for data processing, unless federal law specifies a longer period or an agreement between the parties specifies. Processed Personal Data is destroyed or anonymized after the processing goals have been achieved or the need for these goals has ceased unless otherwise specified by federal law.
6. Purposes of Personal Data Processing- Purpose
- Informing the user through email
- Personal Data First name, last name, patronymic
- email address
- phone numbers
- Legal Grounds Federal Law "On Information, Information Technologies, and Information Protection" dated July 27, 2006, No. 149-FL
- Types of Personal Data Processing
- Sending information letters via email
7. Terms of Personal Data processing7.1. The processing of Personal Data is carried out with the consent of the Personal Data subject to the processing of his Personal Data.
7.2. The processing of Personal Data is necessary to achieve the goals provided for by an international agreement of the Russian Federation or by law, to carry out the functions, powers and duties assigned to the operator by the legislation of the Russian Federation.
7.3. The processing of Personal Data is necessary for the administration of justice, the execution of a judicial act, or an act of another body or official to be executed in accordance with the legislation of the Russian Federation on enforcement proceedings.
7.4. The processing of Personal Data is necessary for the performance of an agreement to which the Personal Data subject is a party or beneficiary or guarantor, as well as for the conclusion of an agreement on the initiative of the Personal Data subject or an agreement under which the Personal Data subject will be the beneficiary or guarantor.
7.5. The processing of Personal Data is necessary to exercise the rights and legitimate interests of the operator or third parties or to achieve socially significant goals, provided that the rights and freedoms of the Personal Data subject are not violated.
7.6. Personal Data is processed, access to which is provided to an unlimited number of persons by the subject of Personal Data or at his request (hereinafter referred to as publicly available Personal Data).
7.7. Personal Data subject to publication or mandatory disclosure in accordance with federal law is processed.
8. The process of collecting, storing, transferring, and other types of processing of Personal DataThe security of Personal Data processed by the operator is ensured through the implementation of legal, organizational, and technical measures necessary to fully comply with current data protection legislation.
8.1. The operator ensures that Personal Data is secure and takes all reasonable measures to prevent unauthorized access to personal information.
8.2. Personal Data will never be shared with third parties except in cases where it is necessary to comply with applicable laws or when the individual concerned has consented to the transfer of their information to a third party in order to fulfil contractual obligations.
8.3. In the event of errors in Personal Data, users can correct it independently by sending a request to the operator at info@luxmarket.az.
8.4. The period of processing Personal Data is determined by the achievement of the purpose for which the data was collected, or if another period is specified by the contract or applicable laws and regulations.
The user may withdraw their consent for the processing of their Personal Data by sending a notification to the operator via email at info@luxmarket.az, clearly stating "withdrawal of consent".
8.5 All information collected from third-party service providers, including payment systems and communication means, is stored and processed in accordance with the terms and conditions of these service providers. The operator is not responsible for the actions of third parties, including service providers mentioned in this clause.
8.6 The prohibitions imposed on Personal Data transfer by the subject (except for access) and processing or conditions for processing (except for obtaining access) to Personal Data allowed for distribution do not apply in cases where Personal Data are processed in the public interest, as defined by Russian legislation, or for the state or other public interests.
8.7 The operator guarantees the confidentiality of Personal Data during processing.
8.8. The Operator stores personal information only for as long as necessary to complete the purpose for which it was collected. This means that the operator will delete the information as soon as it is no longer needed. However, there are exceptions to this rule. For example, if a federal law requires the operator to keep personal information for a certain period, or if there is an agreement between the operator and the person whose information is being collected, then the operator must follow these requirements.
The operator may also terminate the processing of personal information if the purpose of the processing has been completed, the consent from the person whose data is being processed has expired, or if the individual has withdrawn their consent. Additionally, if the operator identifies unlawful processing of Personal Data, they must cease processing immediately.
9. List of Actions Taken by the Operator with Respect to Personal Data Received9.1 The Operator collects, records, organizes, stores, updates, extracts, utilizes, transmits (distributes, provides access to), anonymizes, blocks, deletes, and erases Personal Data.
9.2 The Operator automatically processes Personal Data with or without information and/or transmits it through information and communication networks.
10. Cross-border transfer of Personal Data10.1 Before starting the cross-border transfer of personal information, the operator must notify the authority responsible for protecting the rights of individuals about its intention to conduct the transfer. This notification should be sent independently from the notice of the intention to use personal information.
10.2 Before submitting the above notification, the operator is required to obtain relevant information from foreign authorities, foreign individuals, and legal entities to whom a cross-border transfer of Personal Data is planned.
11. Confidentiality of Personal Data The operator and any other person with access to Personal Data must not disclose or distribute it to a third party without the consent of the individual, except as provided for by federal law.
12. Final ProvisionThe user can contact the operator via email at info@luxmarket.az for any clarification on issues related to the processing of their Personal Data.
12.3. This document will be updated to reflect any changes to the operator's privacy policies. The current policy will continue to be in effect until a new one is issued.
12.3. The current version of the privacy policy is available online at
https://www.luxmarket.az/privacy/.