Attention! This document establishes the procedure and terms of processing by the Operator of personal information provided by individuals in the process of ordering goods (rendering services, other interaction) using roomook.com website.


1. DEFINITIONS

1.1 The Parties recognize that all terms and concepts used in this document, any annexes and supplements thereto, for the purposes of proper performance of duties, unless otherwise expressly provided, shall be interpreted in accordance with the following meaning.

Operator - “BRS” LLC, which performs the processing of personal data, information about which is specified in the last section of the Policy.

User - a natural person providing personal data, purchasing Services or wishing to purchase them.

Policy - this policy regarding the processing of personal data.

Website - the Operator's website (including its sub-domain names) located in the Internet at the address: https://partner.roomook.com, through which the User acquires Services or performs actions aimed at their acquisition.

Offer - an offer or other similar document (user agreement, rules, etc.) placed on the Website, establishing the terms and features of the Operator's realization of the Services. In the absence of a special document, the offer is understood as a set of rules and conditions contained on the Website regarding the purchase and provision of Services.

Parties - the Operator and the User.

Services - services on search of third parties (tenants/lessees) in relation to the User's real estate, renting of such property to third parties under a lease, rental agreement.


2. GENERAL PROVISIONS


2.1 The Policy defines the procedure of provision, formation, processing and storage of personal data reported by Users for purchasing Services or other purposes provided by the Policy.

2.2 The Policy regulates relations from the moment of its acceptance by the User.

2.3 The Policy may be accepted by the User as a result of one of the following actions:
- By placing a “check mark” (or other marker) against the words “I agree to the terms of the Privacy Policy” and clicking the “further” button (other similar button) or by performing another similar action;
- Ordering Services (by filling out the appropriate form posted on the Site indicating acceptance of the terms of the Policy, or by performing other similar actions);
- Interaction regarding the purchase of Services;
- Ordering a callback/feedback;
- Performing any other actions by the User, which are related to the provision by the User of his/her personal data for the purposes of purchasing the Service or using the Website.2.4. By accepting the terms of the Policy, the User consents to any means of processing his/her personal data, including any action (operation) or set of actions (operations), performed with or without the use of automation means with personal data, including collection, recording, systematization, accumulation, storage, clarification (update, withdrawal) of personal data, including collection, recording, systematization, accumulation, storage, clarification (update, withdrawal) of personal data from the Website.


2.5 The User's personal data shall be processed in compliance with the Federal Law of July 27, 2006, No. 152-FZ “On Personal Data” and other regulations governing the protection of personal data.


2.6. Персональные данные Пользователя, касающиеся расовой принадлежности, политических взглядов, религиозных и философских убеждений, состояния здоровья, интимной жизни не получаются и не обрабатываются.


2.7 Processing is organized by the Operator on the principles of:

- legality and fairness;
- processing only personal data that meet the purposes of their processing;
- compliance of the content and scope of processed personal data with the stated processing purposes.
- inadmissibility of combining databases containing personal data processed for incompatible purposes.
- ensuring the accuracy of personal data, their sufficiency and, where necessary, relevance in relation to the purposes of personal data processing. The Operator shall take the necessary measures or ensure that they are taken to delete or clarify incomplete or inaccurate data;
- 2.8 Personal data within the meaning of the Policy may include: full name, telephone number, e-mail, passport data (series, number, date of issue, place of issue), place of residence, payment details, addresses (country, city, etc.), information on social networks, information on position, administrative and managerial powers, place of work, preferences, area (areas) of activity, means of electronic exchange, etc., information on the subject's personal data, information on the status of the subject of personal data, information on the means of personal data processing, and information on the means of personal data processing.


3. OBTAINING USER DATA


3.1 The Operator strictly follows the principles of confidentiality. The User agrees that the Operator may store several general levels of information about the visit to the Site:


3.1.1 The first level of information includes static and other analytical information collected on the basis of third-party integration tools (for example: IP-address, type of browser used, information about the computer operating system, application version, language settings and displayed pages. Also data identifying the User's mobile device, its specific settings and characteristics, latitude/longitude information).

3.1.2 The second level of information - personal or private information of persons sent to the Operator.

3.2 Personal information will be used by the Operator exclusively for the following purposes:

• Sale of Services;
• Use of the Website;
• Providing technical, informational support in connection with the use of the Site, realization of the Services;
• Elimination of defects detected in goods/Services;
• Improving the quality of sales;
• Interaction between the Parties;
• Provision of supply, sales, legal, financial, information-consulting and marketing services related to the realization of the Services;
• Payment for the Services, fulfillment of obligations arising as a result of ordering the Services;
• Carrying out advertising, news and informational mailings (by e-mail, in the personal cabinet on the Website, in SMS-messages, by phone, or through other communication channels provided by the User).
• Fulfillment of other obligations imposed on the Operator by law or contract (including the Offer).

3.3 The User agrees that the Operator has the right to record telephone conversations with the User (including other persons acting on behalf of the User) in order to improve the quality of service, accelerate the processing of orders, resolve disputes, establish the real will of the Parties. Such record may be used as evidence in court.


3.4 When an Internet user accesses the Site, cookies may be recorded on the device used for access, which will be further used for:


3.4.1. Automatic authorization of the User on the Site, as well as for the collection of statistical data about Users;


3.4.2 Realization of relations on provision by the Operator of data from cookies to third parties for such persons to carry out activities on displaying targeted advertising and informational materials to Users on the Internet and/or for the purposes of rendering other services to the User by such persons.


3.4.3 Realization of other technical actions necessary for the convenience of the Operator and the User.

3.5 By actually using the Site, the User agrees that the Operator may collect and process data from cookies for the purposes provided for in the Policy, as well as transfer such data to third parties in cases listed in the Policy.


4. TRANSFER OF DATA TO THIRD PARTIES


4.1 The Operator may transfer the User's personal data to third parties (including, but not limited to, payment systems, banks, postal organizations, subcontractors, subagents, etc.) for the purpose of selling the Services, if such persons are engaged by the Operator for selling the Services or achieving the purposes set forth in the Policy, as well as to the Operator's employees, without additional consent of the User.


4.2 The involved third parties have no right to use the User's personal data for their own purposes or other purposes not related to the sale of Services.


4.3 The Operator may transfer the User's personal data to third parties in other cases when such transfer is allowed without the User's consent or is mandatory by law.


5. STORAGE OF PERSONAL DATA


5.1 The User's personal data shall be stored electronically for the period necessary to fulfill the Seller's obligations established by law or the offer, as well as for the period necessary to achieve the purposes of personal data processing. If necessary, personal data may be stored on paper or in any other form permitted by the laws of the Russian Federation.


5.2 In case of expiration or termination of the agreement with the User, the User's personal data shall be blocked in accordance with the requirements of the legislation of the Russian Federation.


5.3 In accordance with the requirements of the legislation of the Russian Federation, the destruction of the User's personal data is carried out after the termination of the grounds for their preservation. Destruction of the User's personal data prior to the expiration of the specified period may be made on the basis of a written application of the User.


6. PERSONAL DATA PROTECTION

6.1 The User's personal data shall be protected from unauthorized access and distribution in accordance with the internal rules and regulations.

6.2 The protection of the User's personal data is ensured by:

• prevention of unauthorized access to the processed personal data of the User.
• prevention of unauthorized actions of modification, distortion, distribution, blocking, destruction of the processed personal data of the User.
• ensuring confidentiality of the processed personal data of the User.

Measures to protect personal data may include:

• Appointment of a person responsible for organizing the processing of personal data and a person responsible for ensuring the security of personal data;
• development and approval of local acts on the issues of personal data processing and protection;
• application of legal, organizational and technical measures to ensure personal data security: identification of threats to personal data security during their processing in personal data information systems;
• application of organizational and technical measures to ensure the security of personal data during their processing in personal data information systems, necessary to meet the requirements for personal data protection, the implementation of which ensures the levels of personal data protection established by the Government of the Russian Federation;
• application of information protection means that have passed the conformity assessment procedure in accordance with the established procedure;
• assessment of the effectiveness of the measures taken to ensure personal data security before the personal data information system is put into operation;
• accounting of machine-readable personal data carriers, if personal data are stored on machine-readable carriers;
• detection of facts of unauthorized access to personal data and taking measures to prevent such incidents in the future;
• recovery of personal data modified or destroyed due to unauthorized access to them;
• establishing the rules of access to personal data processed in the personal data information system, as well as ensuring the registration and recording of all actions performed with personal data in the personal data information system.
• control over the measures taken to ensure personal data security and the level of protection of personal data information systems;
• assessment of damage that may be caused to personal data subjects in case of violation of the requirements of the Law, correlation between the said damage and the measures taken by the Operator to ensure fulfillment of the obligations stipulated by the Law;
• observance of conditions preventing unauthorized access to the material carriers of personal data and ensuring the safety of personal data;
• familiarization of the Operator's employees directly involved in personal data processing with the provisions of the Russian Federation legislation on personal data, including requirements to personal data protection, local acts on personal data processing and protection, and training of the Operator's employees.

6.3 Specific measures to protect personal data shall be determined by the Operator independently, taking into account available local regulations and legal requirements.


6.4 In any case, the Operator shall be obliged to take the following measures (guarantee their adoption) to protect the confidentiality of personal data:

• development and approval of local acts on the issues of processing and protection of personal data;
• application of legal, organizational and technical measures to ensure personal data security;
• detection of facts of unauthorized access to personal data and taking measures to prevent such incidents in the future;
• recovery of personal data modified or destroyed due to unauthorized access to them;
• control over the measures taken to ensure personal data security and the level of protection of personal data information systems;
• observance of conditions preventing unauthorized access to the material carriers of personal data and ensuring the safety of personal data.

7. FINAL PROVISIONS

7.1 The Policy may be changed unilaterally without prior notice to the User.

7.2 The new edition of the Policy comes into force from the moment of its posting on the Website.

7.3 The new version of the Policy shall always apply to the rights and obligations of the Parties, unless otherwise follows from the nature of legal relations. The new version of the Policy applies to the legal relations between the Operator and the User arising after its adoption.

7.4 In all other matters not regulated by the Policy, the Parties shall be guided by the provisions of the Federal Law dated 27.07.2006 N 152-FZ “On Personal Data” and the legislation of the Russian Federation.


8. INFORMATION ABOUT THE OPERATOR

BRS LLC
TIN 2301102070, OGRN 1202300044616.
Address within the location: Krasnodar Territory, Anapa, 148 Vladimirskaya St. to 1, premises 1-7, office 1
e-mail: info@roomook.com