Personal data processing policy

1. General provisions

1.1. Purpose of the document

This Policy (hereinafter referred to as the “Policy”) defines the purposes, principles, and rules for processing personal data, as well as the measures to protect it, employed by legion-web.com (hereinafter referred to as the “Operator”). This document has been developed in accordance with the requirements of legislation on the protection and security of personal data and is aimed at ensuring the protection of the rights and freedoms of individuals when processing their personal data. This Policy is a public document and is available for review by any interested party.

1.2. Basic terms

Automated data processing is the processing of personal data using software and hardware.
Data blocking is the temporary cessation of data processing (except when processing is necessary to clarify information).
A personal data information system is the collection of data and technologies used to process it.
Data anonymization is actions that make it impossible to identify the data subject without additional information.
Data processing is any action or set of actions with personal data: collection, recording, systematization, storage, clarification, use, transfer, anonymization, deletion, or destruction.
Operator is the person who determines the purposes, composition, and methods of processing personal data.
Personal data is any information related to an individual, directly or indirectly identifiable.
User is a visitor to the legion-web.com website who has provided their data.
Data distribution is the provision of data to an unspecified group of persons.
Website is an Internet resource at legion-web.com, used to post information and interact with Users. A personal data subject is an individual to whom the personal data pertains.
Cross-border data transfer is the transfer of data to a foreign state or foreign persons.
Data destruction is actions that make data recovery impossible.

1.3. Operator Rights

The Operator has the right to:

• process personal data in accordance with the stated purposes;
• require the subject to provide accurate and up-to-date personal data;
• terminate interaction with the subject upon detection of inaccurate data;
• process publicly available data;
• entrust data processing to third parties based on the subject’s consent.

1.4. Operator’s responsibilities

The operator undertakes to:

• provide the subject or their representative with information about data processing or a reasoned refusal;
• at the subject’s request, clarify, block, or delete personal data if it is inaccurate, outdated, illegally obtained, or excessive;
• notify the subject if the data was not received directly from them;
• terminate processing and destroy data once the purpose for which it was processed has been achieved, or upon withdrawal of consent (unless otherwise provided by law);
• notify the subject of the destruction of their data;
• not transfer or process data without the consent of the subject, unless otherwise provided by law.

1.5. Rights of the subject

The subject of personal data has the right:

• receive information from the Operator regarding the processing of their personal data;
• request clarification, blocking, or deletion of data if there are legal grounds;
• request termination of data processing in cases provided by law.

2. Purposes of personal data processing

The operator may process personal data for the following purposes:

• enabling the User to interact with the legion-web.com website;
• assisting with employment and job searches;
• concluding and executing contracts;
• analyzing User requests;
• improving the functionality of the Website and identifying user preferences;
• analyzing the actions of data subjects on the Website.

3. Legal basis for data processing

Personal data may be processed in the following cases:

• the consent of the personal data subject;
• the need for processing for the conclusion or performance of a contract to which the subject is a party or beneficiary.

4. Categories of subjects and composition of processed data

4.1. Website users

Processing purposes:

• interaction with the Site;
• statistics;
• performance improvement;
• analytics.

Data categories:

• cookies;
• device data;
• website activity information;
• session date and time.

Special and biometric data are not processed.

Number of subjects: up to 100 000.

4.2. Applicants

Purposes of processing:

• assistance with employment;
• conclusion and execution of contracts.

Data categories:

• Full name;
• date of birth;
• contact information;
• education and work experience;
• resume details.

Special and biometric data are not processed.

Number of subjects: up to 100 000.

4.3. Clients

Purposes of processing:

• conclusion and execution of contracts.

Data categories:

• Name;
• contact information;
• company name, if applicable.

Special and biometric data are not processed.

Number of subjects: up to 100 000.

5. Procedure and conditions for data processing

5.1. List of actions with data

The operator carries out:

• collection, recording, systematization, and accumulation;
• storage, clarification, and use;
• transfer and provision;
• deletion and destruction of personal data.

5.2. Processing methods

Processing is carried out in an automated manner using the technical means of the Site.

5.3. Transfer of data to third parties

«Google» Inc.

• purpose: Website traffic analytics.
• data categories: cookies, behavioral data, device data, visit time.
• privacy Policy: https://policies.google.com/privacy
• cross-border transfer: not performed.
• permitted actions: collection, storage, analysis, anonymization, etc.

«Yandex» LLC

• purpose: traffic analytics.
• data categories: cookies, user actions, device data, visit time.
• privacy Policy: https://yandex.ru/legal/confidential/
• cross-border transfer: not performed.
• permitted actions: same as those listed above.

5.4. Personal data protection measures

The operator applies technical and organizational measures, including:

• security threat analysis;
• use of information security tools;
• compliance with data protection legislation.

5.5. Processing times

Personal data is subject to destruction in the following cases:

• achievement of the processing objectives;
• revocation of consent by the subject;
• termination of the Operator’s activities.

5.6. Processing without automation

The operator does not process personal data without the use of automated means.

6. Procedure for considering requests from data subjects

The Operator reviews requests from subjects in accordance with the law.
A response is provided within 30 business days.
If the subject cannot be identified or there are grounds for refusal, the Operator will send a reasoned response with a reference to the relevant regulatory act.

7. Procedure for interaction with requests from authorized bodies

In accordance with the law, the Operator shall, upon request, communicate to the authorized body for the protection of the rights of personal data subjects the information necessary for the implementation of the activities of the said body within thirty days from the date of receipt of such request.

8. Contact information of the responsible person

For questions regarding the processing of personal data, you can contact:

Contacts: legion-web.com/en/contacts/
E-mail: info@legion-web.com

Please contact us if you have any questions or requests regarding the processing of your personal data.