1. TERMS AND DEFINITIONS

1.1. The following terms are used in the Privacy Policy:
1.1.1. Site Administration – persons authorised by the NPCF Driado to administer the Site, who act on behalf of the NPCF Driado, arrange for and (or) process the personal data as well as determine the purposes of personal data processing, the composition of the personal data to be processed, actions (operations) performed with the personal data.
1.1.2. Personal Data – any information relating to an individual (personal data owner) directly or indirectly determined, or defined.
1.1.3. Personal Data Processing – any action (operation) or combination of actions (operations) performed by using automation means or not using such means with the personal data, including collection, recording, systematisation, accumulation, storage, refinement (update, change), retrieval, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion, destruction of personal data.
1.1.4. Operator – a state body, a municipal body, a legal entity or an individual independently or jointly with other persons organising and (or) processing the personal data as well as determining the purposes of personal data processing, the composition of the personal data to be processed, actions (operations) committed with the personal data;
1.1.5. Personal Data Privacy – a provision for the Operator or another person, who has obtained access to personal data, not to disclose to any third parties and not to distribute any personal data without the consent of the personal data owner, unless otherwise provided by federal law and/or this Policy.
1.1.6. User – a person who has access to the Site via the Internet and uses the Site.
1.1.7. Cookies – a small piece of data sent by a web server and stored on the user’s computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open a page of the corresponding site.
1.1.8. IP-address – a unique network address of a node in a computer network built over IP.

2. GENERAL

2.1. Using the Site by the User constitutes acceptance of this Privacy Policy and the terms and conditions of the User’s personal data processing.
2.2. The Privacy Policy applies only to the Site. The NPCF Driado does not control and is not responsible for any third-party sites to which the User can go by the links available on the Site.
2.3. The NPCF Driado does not verify the accuracy of personal information and personal data provided by the User, and does not have the ability to assess its active capacity and legal capacity in relation to the provided personal information and personal data. However, the NPCF Driado assumes that the User provides reliable and sufficient personal information and personal data, and also keeps this information up to date. Responsibility for any consequences of providing inaccurate or insufficient information is borne by the User.

3. PERSONAL INFORMATION

3.1. Personal Information in the Policy means:
Information independently provided by the User including the User’s Personal Data and/or the Personal Data of the persons represented by the User.
Such information may be provided upon registration of the User on the Website; in sending documents and personal data by the User by using the services of the Site; in sending documents and personal data at the email addresses indicated on the Website; at the subsequent (editing the profile, filling in an order, contacting the support service); as well as other available methods.
3.2. The Personal Data allowed for processing under the Policy include all the Personal Data provided by the User including but not limited to:
– surname, name, patronymic, gender, date of birth, address of residence, registration address, contact phone number(s), e-mail address, age;
– details of the passport or any other document proving the identity;
– place of work, position held, employment data;
– marital status, family composition and the details of relatives;
– details of the OHI (VHI) policy, the insurance number of an individual personal account in the Russian Pension Fund;
– data on the state of health, diagnosis of a disease, seeking medical help;
– information received by the staff of the NPCF Driado in the course of providing medical services including any information constituting medical confidentiality (the information about the course of treatment including all medical information obtained during the treatment (rehabilitation), information about the achieved and non-achieved results of treatment (rehabilitation), information about the methods of treatment (rehabilitation), information about the doctors and specialists who participated in the treatment (rehabilitation), information about the completed rehabilitation and/or treatment programme, information about the place and time of the course of treatment (rehabilitation);
– photo and video materials depicting the User and/or the persons represented by it;
– other data provided by the User, which, in accordance with the existing laws of the Russian Federation, are classified as Personal Data.
3.3. The NPCF Driado collects statistics on the IP-addresses of its visitors. This information is used to identify and solve technical problems, control the legality of financial payments made, create the marketing policy of the NPCF Driado, for scientific and statistical research.

4. PURPOSE OF THE USER’S PERSONAL INFORMATION COLLECTION

4.1. The Personal Data of the User and/or persons represented by it can be used by the NPCF Driado:
4.1.1. For User Identification;
4.1.2. For placing an order (request; application) and (or) entering into an Agreement;
4.1.3. To provide the User with access to personalised resources of the Site;
4.1.4. To establish feedback with the User including but not limited to sending notifications, inquiries, letters, applications etc.;
4.1.5. To determine the User’s location to ensure security and prevent fraud;
4.1.6. To confirm the accuracy and completeness of the Personal Data provided by the User;
4.1.7. To create Account, if the User has not refused from creating an account;
4.1.8. To process and receive payments, confirm tax or tax benefits, challenge a payment, determine the right to receive a credit line by the User;
4.1.9. To provide the User with effective customer and technical support in case of problems related to the use of the Site;
4.1.10. To send news and other newsletters to the User on behalf of the NPCF Driado or on behalf of NPCF Driado partners, if the User has not refused from receiving this information;
4.1.11. To provide the User access to the sites or services of partners of the NPCF Driado in order to receive products, updates and services;
4.1.12. To collect charitable donations for treatment and/or rehabilitation and/or material assistance in difficult life situations for the User and/or a person it represents, and also to attract the attention of an indefinite number of people to help the User and/or a person he represents.
4.1.13. To receive by the User and/or a person represented by the User any medical services including remote consultations including medical ones;
4.1.14. For scientific and statistical research;
4.1.15. For other purposes specified by the User when contacting or directly arising from the User’s application.

5. METHODS AND TERMS OF PROCESSING PERSONAL DATA

5.1. The Personal Data provided by the User are processed without any time limit, in any legal way, also in the information systems of personal data by using automation tools or without the use of such tools.
5.2. The User agrees that the NPCF Driado has the right to transfer personal data to third parties, including but not limited to courier services, postal organisations, telecommunication operators, banking and credit organisations as well as distribute/disclose the Personal Data of both the User and the persons represented by him, an indefinite group of persons, a certain person or a certain group of persons, in order to arrange for implementation of the User’s request including but not limited to for collecting charitable donations.
The said actions can be carried out by the NPCF Driado, also by using mass media (Internet, print media, radio, television etc.), through public speeches (seminars, conferences, meetings etc.), by using in any scientific and/or educational activities, in other ways not contradicting the existing laws.
5.3. The Personal Data of the User and/or persons represented by him may be transferred to the authorised state bodies of the Russian Federation only on the grounds and in the manner established by the laws of the Russian Federation.
5.4. In order to receive assistance in the examination and treatment (rehabilitation) of the User and/or a person represented by him, the User grants the right to the NPCF Driado employees to transfer the personal data of the User and/or that of a person represented by it to medical and other organisations, if necessary, attract them to provide health services, advise experts of the NPCF Driado on the treatment (rehabilitation) issues and provide any related services including but not limited to catering services, transportation services, sports services and other types of services. It also gives the right to the staff of the NPCF Driado to transfer the Personal Data to organisations engaged in any medical, scientific, research, statistical, charitable and other activities in order to implement the User’s request, provide health services, collect and analyse the information on diseases, improve the assistance to people with similar diagnoses as well as for use in scientific and educational activities.
5.5. In case of loss or disclosure of the Personal Data, due to the fault of the NGO Happy World charitable foundation, the latter informs the User about the loss or disclosure of the Personal Data.
5.7. The NPCF Driado takes the necessary organisational and technical measures to protect the User’s personal information from any illegal or accidental access, destruction, modification, blocking, copying, distribution as well as any other illegal actions of third parties.
5.8. The NPCF Driado, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s personal data.

6. RESPONSIBILITIES OF THE PARTIES

6.1. The User is obliged:
6.1.1. To provide his Personal Data and/or the Personal Data of the persons presented by him that are necessary to use the Site and provide him with health services.
6.1.2. To update, supplement the provided information about the personal data in case of change in the information.
6.2. The NCCF Driado is obliged:
6.2.1. To use the Personal Data obtained solely for the purposes specified in clause 4 of the Policy.
6.2.2. To ensure the storage of Personal Data, not to disclose without the User’s prior written permission, and not to sell, exchange, publish, or disclose in any other possible way the transferred personal data of the User, except as provided for in paragraphs 5.2. – 5.4. of the Policy.
6.2.3. To take precautions to keep confidential the User’s Personal Data in accordance with the procedure normally used to protect that kind of information in existing business transactions.
6.2.4. To block personal data relating to the respective User from the application or request of the User or its legal representative or authorised body for the protection of the rights of personal data owners during verification, in case of unreliable personal data or illegal actions are identified.

7. LIABILITY OF THE PARTIES

7.1. The NPСF Driado is liable to the User in connection with the unlawful use of personal data, in accordance with the laws of the Russian Federation, except as provided for in clauses 5.2. – 5.4. and 7.2. of the Policy.
7.2. In case of loss or disclosure of the Personal Data, the NPCF Driado is not liable, if the Personal Data:
7.2.1. Became public domain before their loss or disclosure by the NPCF Driado.
7.2.2. Became public property not as a result of the wrongdoing by the NPCF Driado.
7.2.3. Were received from a third party.
7.2.4. Were disclosed with the User’s consent.

8. DISPUTE SETTLEMENT

8.1. Prior to filing a lawsuit in respect of any disputes arising from the relationship between the User of the Site and the NPCF Driado, it is mandatory to file a claim (a written proposal for voluntary dispute settlement).
8.2. The recipient of the claim, within 30 calendar days from the date of receipt of the claim, notifies the claimant in writing of the claim consideration results.
8.3. If no agreement can be reached, the dispute will be submitted to the judicial authority in accordance with the existing laws of the Russian Federation.
8.4. The existing laws of the Russian Federation apply to the Privacy Policy and the relationship between the User and the NPCF Driado.

9. MISCELLANEOUS

9.1. The NPCF Driado has the right to make changes in the Privacy Policy without the User’s consent.
9.2. A new Privacy Policy takes effect from its posting on the Website, unless otherwise provided by the new edition of the Privacy Policy.
9.4. The current Privacy Policy is posted at http://driado.ru/politika-konfidentsialnosti/.
9.5. The User has the right to send any suggestions or questions about the Policy by using the details provided on the Contact Details page of the Site.