Privacy Policy
This Privacy Policy for Personal Data has been developed in accordance with the Law of the Republic of Belarus dated 07.05.2021 No. 99-Z "On the Protection of Personal Data" in order to protect personal data, the rights and freedoms of individuals when processing their personal data;
1. OPERATOR
1.1. The Operator is an authorized employee for website management (hereinafter referred to as the "Operator").
1.2. The Operator uses the Website www.luxauto.by.
2. TERMS AND DEFINITIONS
2.1. The following terms are used in this Privacy Policy:
- Website - Website www.luxauto.by.
- User is the person in relation to whom personal data is processed, who has access to and uses the Site via the Internet.
- Personal data is any information related to an identified individual or an individual who can be identified.
- Processing of personal data is any action or set of actions performed with personal data, including collection, systematization, storage, modification, use, anonymization, blocking, distribution, provision, and deletion of personal data.
- Confidentiality of personal data is the requirement that the Operator or another person who has access to personal data not allow their dissemination without the consent of the personal data subject or other legal grounds.
- Cookies are A small piece of data sent by a web server and stored on the User's computer, which the web client or web browser sends to the web server in an HTTP request each time it attempts to open a page on the corresponding website.
- IP address - a unique network address that identifies a device on the internet or a local network.
2.2. Other terms and concepts used in the Privacy Policy have the meanings applicable to the current legislation of the Republic of Belarus.
3. GENERAL PROVISIONS
3.1. This Privacy Policy applies to the Operator's processes that collect, process, and store Users' personal data.
3.2. The processing of the User's personal data is carried out by the Operator.
3.3. This Privacy Policy applies only to the Website. The Site does not control and is not responsible for third-party websites that the User may access via links available on the Site.
3.4. The Operator does not verify the veracity of personal data provided by the User. Therefore, any negative consequences (including any liability) that may arise from providing inaccurate information are the sole responsibility of the User.
4. PURPOSES OF USE OF PERSONAL DATA
4.1. The Operator may use the User's personal data for the following purposes:
- establishing feedback with the User, including sending notifications and requests regarding the use of the Site, provision of services, and processing requests and applications from the User;
- using it in newsletters (mail, email, SMS, other messaging services (e.g., Viber, Telegram, etc.) to communicate to the User information about new products, promotions, bonus programs, special offers, advertising and other similar events, as well as other news from the Operator, to which the Subject has given their consent in a manner not prohibited by law. The Subject may always opt out of receiving such newsletters using their contact information;
- improving the quality of the Operator's goods and services, providing and promoting the Operator's goods and services;
- sending technical notifications (order notifications, etc.);
- confirming the accuracy and completeness of the personal data provided By the User;
- processing statistical information;
- sending notifications, information, and requests related to the collection, storage, and processing of personal data;
- providing the User with other information/notifications on behalf of the Site by email or other available means, with their consent.
4.2. Consent to the processing of personal data may be revoked by the User in the manner provided in paragraph 7.2 of this Privacy Policy.
5. LIST OF PERSONAL DATA THAT ARE PROCESSED AND THEIR STORAGE PERIOD
5.1. Personal data permitted for processing under this Privacy Policy is provided by the User by filling out the feedback form, as well as when placing an order or subscribing on the news and may include the followingInformation:
- User's last name, first name, and patronymic (if any);
- User's contact phone number;
- Email address, other accounts in electronic information exchange services.
5.2. The Operator may also collect technical and other information:
- information from cookies;
- browser information (Mozilla Firefox, Opera, Internet Explorer, etc.);
- operating system used (Mac OS, Windows, etc.);
- access time;
- type of device used;
- name of the website from which the user accessed the Site;
- products that the User compares or selects;
- purchase history.
Disabling statistical cookies prevents the User from determining their preferences, including the most and least popular pages, or from taking measures to improve the Site based on their preferences.
5.3. By providing personal data to the Operator, the User grants the Operator the right to receive, store, process, use, and disclose such personal data in accordance with the terms of the Privacy Policy.
5.4. The User's personal data will be processed until consent is revoked.
6. METHODS OF PROCESSING PERSONAL DATA
6.1. The Operator collects (receives), processes (records, systematizes, accumulates, clarifies, updates, modifies, retrieves, uses), stores, transfers (distributes, provides access), and destroys (depersonalizes, blocks, deletes) personal data for the purposes specified in the Privacy Policy.
6.2. The User's personal data is processed in personal data information systems, with or without the use of automation tools, as well as in a mixed manner, including In information and telecommunications networks, for the purposes specified in the Privacy Policy.
6.3. The Operator takes the necessary measures to delete or clarify incomplete or inaccurate data.
6.4. The User's personal data may be transferred to authorized government bodies of the Republic of Belarus and other persons only on the grounds and in the manner established by the legislation of the Republic of Belarus.
6.7. In the event of loss or disclosure of personal data, the Operator will inform the User of the loss or disclosure of such personal data.
6.8. The Operator takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties.
6.9. Personal data is stored in the Operator's specialized systems that automatically process and store information.
7. USER RIGHTS
7.1. The User exercises their rights to the extent and in the manner established by the legislation of the Republic of Belarus.
7.2. The User has the right to revoke their consent to the processing of their personal data at any time without explanation or request the termination of the processing of their personal data, including its deletion, by sending a request to the email address specified on the Website.
The application must contain:
- the User's last name, first name, patronymic (if any), and address of their place of residence (place of stay);
- the User's identification number, or, if none is available, the User's identification number. The User's identity document number, if this information was provided by the User when giving consent to the Operator or if the personal data is processed without the consent of the personal data subject;
- a statement of the essence of the User's requests;
Within fifteen days of receiving the User's request, the Operator, in accordance with its content, will cease processing the personal data, delete it, and notify the User thereof, unless there are other grounds for such actions with personal data stipulated by the laws of the Republic of Belarus. If it is technically impossible to delete the personal data, the Operator will take measures to prevent further processing of the personal data, including blocking it, and notify the User thereof within the same period.
7.3. The User has the right to submit an application to the Operator in accordance with the procedure specified in Section 7.2. of this Privacy Policy, in order to receive information regarding the processing of your personal data, containing:
the name and location of the operator;
confirmation of the fact of processing of personal data by the operator (authorized person);
the user's personal data and the source of its receipt;
the legal basis and purposes of processing personal data;
the period for whichwho has given his consent;
the name and location of the authorized person, which is a government agency, a legal entity of the Republic of Belarus, or another organization, if the processing of personal data is entrusted to such person;
other information required by law.
The Operator shall, within five business days of receiving the relevant application, provide the User with the requested information or notify them of the reasons for refusing to provide it.
7.4. The User has the right to submit an application to the Operator in the manner specified in Section 7.2 of this Privacy Policy to amend their personal data if such personal data is incomplete, outdated, or inaccurate.
The Operator shall, within fifteen days of receiving the application from the personal data subject, make the appropriate changes to the User's personal data and notify the User thereof or provide the reasons for refusing to make such changes.
7.5. The User has the right to submit an application to the Operator in the manner specified in Section 7.2 of this Privacy Policy, in order to receive information from the Operator regarding the provision of their personal data to third parties free of charge once per calendar year.
The Operator will provide the User with the relevant information within fifteen days of receiving the application or notify the User of the reasons for refusing to provide it.
7.6. The User's right to access their personal data may be limited in accordance with the legislation of the Republic of Belarus.
7.7. The User has the right to obtain from the Operator the composition of the personal data held by the Operator regarding the User and the source of its receipt.
7.8. If the User consents to the processing of their personal data, the Operator will be able to provide the services requested by the User (place an order, send informational and advertising newsletters).
If the User revokes or does not provide consent to the use of their personal data, the Operator will not be able to provide the services requested by the User (place an order, send informational and advertising newsletters, provide technical support, and other services, in accordance with the purposes set out in Section 4 of this Privacy Policy) – in whole or in part.
8. PRINCIPLES OF PERSONAL DATA PROCESSING
8.1. Personal data is processed in accordance with the following principles:
- personal data is processed lawfully;
- the processing of personal data is limited to the achievement of specific, explicit, predetermined, and legitimate purposes. Processing of personal data incompatible with the purposes for which it is collected is prohibited;
- Combining databases containing personal data processed for incompatible purposes is prohibited;
- Only personal data that meets the purposes for which it is processed is subject to processing;
- The content and volume of personal data processed correspond to the stated purposes of processing. The personal data processed are not excessive in relation to the stated purposes of processing;
- When processing personal data, the accuracy, sufficiency, and, where necessary, relevance of the personal data in relation to the stated purposes of processing are ensured;
- Personal data is stored in a form that allows for the identification of the subject of the personal data for no longer than required for the purposes of processing the personal data, unless a different storage period for personal data is established by law or an agreement. Personal data shall be destroyed upon achieving the processing purposes or when there is no longer a need to achieve these purposes, unless otherwise provided by law;
- the personal data provided shall remain in its original form and shall not be modified during the data collection and processing process;
- personal data shall be processed in a manner that ensures adequate security of personal data, including protection from unauthorized or illegal processing, as well as accidental loss, destruction, or damage, using appropriate technical or organizational measures;
- the Operator shall not transfer personal data to non-residents of the Republic of Belarus;
- the Operator shall have the right to process publicly available personal data and to process personal data subject to mandatory disclosure in accordance with the legislation of the Republic of Belarus;
- the Operator shall have the right to entrust the processing of personal data to another authorized person. The Operator shall be responsible to the User for the actions of the authorized person;
- the Operator shall not receive or process the User's personal data concerning their race, nationality, or ethnic origin. and, political views, religious or philosophical beliefs, and intimate life;
- the User's personal data is classified as confidential information.
8.2. The Operator undertakes to comply with the above principles not only when currently processing personal data, but also when implementing new processing methods and systems.
9. LIABILITY OF THE PARTIES
9.1. The Operator and the User shall bear liability for failure to fulfill or improper fulfillment of the terms of this Privacy Policy, as provided for by the legislation of the Republic of Belarus.
9.2. In the event of loss or disclosure of Confidential Information, the Operator shall not be liable if such Confidential Information:
- became publicly known prior to its loss or disclosure;
- was received from a third party prior to its receipt by the Operator;
- was disclosed with the consent of the User.
10. FINAL PROVISIONS
10.1. The current legislation of the Republic of Belarus shall apply to this Privacy Policy and the relationship between the User and the Operator.
10.2. The Operator reserves the right, at its sole discretion, to unilaterally amend and/or supplement the terms of this Privacy Policy without prior notice to the User by posting a new version of the Policy on the Website.
10.3. The new version of the Privacy Policy takes effect from the moment it is posted on the Website, unless otherwise provided in the new version of the Privacy Policy.
