PRIVACY POLICY OF DATA PRIVACY OFFICE LLC

Effective June 6, 2019

The policy extends to:

  • our website data-privacy-office.com,
  • our email,
  • our courses, devoted to protection of personal data.

Who are we and how can you contact us?

  • Limited Liability Company “Data Privacy Office”. If you have any questions regarding how we protect your personal data, you can find our contact information on Contacts page.

Our company acts as the controller of your personal data. It means that we decide for what purposes we need them, and choose services and tools for processing.

  • National Research University “Higher School of Economics” (NRU HSE) will process your personal data if you register for the course “GDPR Data Privacy Professional” in Moscow. NRU HSE acts as joint controller of that part of your personal data which is necessary for NRU HSE based training and obtaining a government-issued continuing education certificate.

What data, for what purposes, based on what grounds and how long we process?

PURPOSE

LEGAL GROUND

PROCESSING DATA

STORAGE PERIOD

Provide you with service you request, satisfy your needs or answer your question.

Our contract with you or your company in your interests or your request before entering in contractual relations.

Your name, middle name and surname

6 months after provision of service, and in case of a contract – for a period prescribed by Belarusian legislation

Name of your company

Information about the price of the service and its payments

Your contact information

Aforementioned purpose

Aforementioned legal ground

Data in messages that you sent to us

1 year after provision of service or since last communication

Results of your tests after the course

Offer you services which may be useful to you based on services you purchased before. For example, courses, software, consulting in the area of data protection or information management

Our legitimate interest to develop our business and satisfy our clients’ needs

Your name, middle name and surname

2 years after your last communication with our company, in case you don’t object to such processing

Your contact information

Your position and the name of the company

For better understanding of our audience and their preferences

Legitimate interest to improve our service

Information about visits to our website, provided to us by services like Yandex Metrika and Google Analytics

14 months More.

Messages (sent and not sent) that you type in chat box

To adapt our courses to your preferences

Legitimate interest to improve our service

Your name, middle name and surname

1 day after the end of the course

Your area of expertise or position

To confirm authenticity of your certificate

Legitimate interest to prevent fraud and ensure authenticity of published certificates

Your name, middle name and surname, as well as data about course you passed

25 years since issue

Certificate details

To provide you a facility to check knowledge using online test. To provide with results of your answer and with recommendations

Contract

Your contact information

Results of your online test

2 weeks after the end of the test

 

Personal data that we process with the purpose of entering into a contract is necessary to provide you with a service. For example, you can’t get a certificate or government-issued diploma if you don’t provide us with your name.

Where do we get your data from?

  1. Directly from you (from our communications, including filled forms)
  2. From organization that sent you to take the course
  3. From cookies, set by our website in your browser
  4. From public sources. For example, from information on your company’s website, from your public profile in social networks.

Who gets your personal data from us?

  • Venue (business center, university, etc.), which we use for a course, can ask your surname, name, middle name for access to the building. Provision of a service is impossible without transfer of this data, so we transfer the data on lawful ground of a contract.
  • Services providing contextual advertising and remarketing such as Google Ads and Yandex Direct, Facebook Pixel / Google Tag Manager to show appropriate advertising for you as well as statistical services Google Analytics and Yandex Metrics to improve our website and advertising campaigns, and consequently Yandex, Google Inc. and Facebook are provided with access to information about your visits to our website and your actions on those pages. Please note that we have access only to the data that was anonymized (de-personalized) or combined and mixed with data of other users.

Information about those companies and their data protection practices:

  • Yandex LLC (Russia). Address: Ulitsa Lva Tolstogo 16, Moscow, Russia 119021. For users based in EEC or in Switzerland Yandex represented by the company Yandex Oy with address: Moreenikatu 6, 04600 Mäntsälä, Suomi. Yandex Privacy policy. Unfortunately, Russia doesn’t ensure an adequate level of protection of personal data, so your data is protected by Standard Contractual Clauses, which are a part of Yandex.Metrica Data Processing Agreement (DPA) between us and Yandex Oy Limited Company.
  • “Oblachnyi hoster” LLC (Republic of Belarus). Our website is hosted by hoster.by (“Oblachnyi hoster” LLC). Data that you leave in website forms are accessible to the company. Address: Dzerzhinskogo av., 57, 8 floor. Subway station: Mihalovo. Hoster.by contacts. Unfortunately, Belarus doesn’t ensure an adequate level of protection of your personal data.
  • Facebook, Inc (USA). Address: 1601 Willow Road,  Menlo Park, CA 94025, USA / США (ATTN: Privacy Operations). If you are in EU, to guarantee safe data transfers, Google uses legal mechanism of a Program “Privacy shield” EU-USA. Facebook Privacy policy.

Automated solutions

We don’t use your data for automated assessment of your personality (automated profiling) or for automated decision making concerning you (automated decision making).

Your rights

You have the right to access your personal data and the right to rectification, erasure, restriction of processing, the right to object to processing, as well as the right to data portability.

If we process your data based on your consent, you have the right to withdraw your consent at any time. If you would like to exercise your right to withdraw consent, please contact us.

In accordance with Article 77 of the GDPR, you as a data subject have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or of an alleged infringement of the GDPR.

If you have any questions about the protection of your personal data, you can contact us by using our contact information on Contact page.